last executing test programs: 9.609613438s ago: executing program 1 (id=3755): mmap$auto(0x0, 0x2020009, 0x6, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)={0x1, 0x2, 0x0, 0x0, 0xfffeffff, 0xe45, "83a1d0c58c6d1176e1bd47c04505945b91df024d2691d27491bca54f1c6b382101c5349a7edb734350d58832840b86695af29800c27747452c748a906bee3864"}) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/024/001\x00', 0x14b401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x232680, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x80000000003) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xb1c6785367c6374e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) 8.686041776s ago: executing program 1 (id=3760): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) waitid$auto(0xffffff6e, 0xffffffffffffffff, 0x0, 0x66cd8758, 0x0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mmap$auto(0x7, 0x1, 0x7, 0x14, r2, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.current\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/4110, 0x100e) mmap$auto(0x7, 0x2020009, 0x3, 0x90, 0xfffffffffffffffa, 0x69) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto_SG_EMULATED_HOST2(r5, 0x2203, &(0x7f00000005c0)) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r3) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200028bd7000fcdbdf250c00000006000a007009000007000000007b0000"], 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x824) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) io_uring_setup$auto(0x59, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) 7.911794538s ago: executing program 1 (id=3765): mmap$auto(0xa, 0x402020009, 0x3, 0x111, 0xfffffffffffffffa, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) fstatfs$auto(r0, &(0x7f00000000c0)={0x2, 0x2, 0x200, 0x7, 0x8, 0x1ff, 0x8, {[0x7fffffff, 0xc51]}, 0xfffffffffffffffc, 0x2, 0x7, [0x9, 0x0, 0x6, 0xb]}) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, 0x0, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mmap$auto(0xfffffffffffffffe, 0x400008, 0x3, 0x19, r1, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 7.208737709s ago: executing program 3 (id=3770): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) socket(0xa, 0x3, 0x5) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r0, 0x6052) socket(0x10, 0x2, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000300)=""/247, 0xf7) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0585609, r3) 6.196547819s ago: executing program 3 (id=3775): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xea\x12;\xf7{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x660}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c845) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x283) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) read$auto_fops_ulong_ro_(r1, &(0x7f0000000280)=""/185, 0xb9) socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa8) 0s ago: executing program 2 (id=3794): mmap$auto(0x0, 0x400008, 0xa9b, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40, 0x0) ioctl$auto_HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) socket(0x10, 0x6, 0x5) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): p:10240kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:11680kB pagetables:5236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1138.560260][T20442] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1138.762055][T20468] zswap: compressor not available [ 1138.769574][T20442] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.908270][T20442] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1138.941956][T20442] Node 0 DMA32 free:1077400kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33516kB inactive_anon:219256kB active_file:70536kB inactive_file:157868kB unevictable:5356kB writepending:44kB zspages:508kB present:3129332kB managed:2537312kB mlocked:3820kB bounce:0kB free_pcp:56084kB local_pcp:56084kB free_cma:0kB [ 1139.098119][T20442] lowmem_reserve[]: 0 0 1 1 1 [ 1139.118839][T20442] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1139.248065][T20442] lowmem_reserve[]: 0 0 0 0 0 [ 1139.274936][T20442] Node 1 Normal free:3908340kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39904kB local_pcp:39904kB free_cma:0kB [ 1139.418227][T20442] lowmem_reserve[]: 0 0 0 0 0 [ 1139.447771][T20442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1139.533267][T20442] Node 0 DMA32: 12491*4kB (UM) 4824*8kB (UM) 2579*16kB (UME) 264*32kB (UM) 225*64kB (UME) 196*128kB (UME) 217*256kB (UME) 105*512kB (UM) 53*1024kB (UM) 6*2048kB (UME) 176*4096kB (UM) = 1074524kB [ 1139.608279][T20442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1139.658069][T20442] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 13*16kB (UM) 9*32kB (UM) 13*64kB (UM) 7*128kB (UM) 6*256kB (UM) 2*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 950*4096kB (M) = 3908384kB [ 1139.738231][T20442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.779953][T20442] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1139.826493][T20442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.871702][T20442] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1139.918439][T20442] 105066 total pagecache pages [ 1139.940472][T20442] 100 pages in swap cache [ 1139.958067][T20442] Free swap = 117936kB [ 1139.976509][T20442] Total swap = 124996kB [ 1140.005423][T20442] 2097051 pages RAM [ 1140.018568][T20442] 0 pages HighMem/MovableOnly [ 1140.048299][T20442] 430844 pages reserved [ 1140.062740][T20442] 0 pages cma reserved [ 1142.889371][T20522] FAULT_INJECTION: forcing a failure. [ 1142.889371][T20522] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.016703][T20522] CPU: 0 UID: 0 PID: 20522 Comm: syz.2.3344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.016743][T20522] Tainted: [L]=SOFTLOCKUP [ 1143.016753][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.016769][T20522] Call Trace: [ 1143.016778][T20522] [ 1143.016789][T20522] dump_stack_lvl+0x100/0x190 [ 1143.016833][T20522] should_fail_ex.cold+0x5/0xa [ 1143.016864][T20522] ? lsm_blob_alloc+0x68/0x90 [ 1143.016901][T20522] should_failslab+0xc2/0x120 [ 1143.016929][T20522] __kmalloc_noprof+0xe0/0x850 [ 1143.016968][T20522] ? audit_alloc+0xa2/0x7b0 [ 1143.017002][T20522] lsm_blob_alloc+0x68/0x90 [ 1143.017041][T20522] security_task_alloc+0x2a/0x260 [ 1143.017077][T20522] copy_process+0x258f/0x7a40 [ 1143.017107][T20522] ? futex_unqueue+0x133/0x2c0 [ 1143.017153][T20522] ? __pfx_copy_process+0x10/0x10 [ 1143.017201][T20522] ? _copy_from_user+0x59/0xd0 [ 1143.017242][T20522] kernel_clone+0xfc/0x9a0 [ 1143.017283][T20522] ? __pfx_kernel_clone+0x10/0x10 [ 1143.017320][T20522] ? __pfx_futex_wait+0x10/0x10 [ 1143.017368][T20522] __do_sys_clone3+0x214/0x290 [ 1143.017401][T20522] ? __pfx___do_sys_clone3+0x10/0x10 [ 1143.017470][T20522] do_syscall_64+0x106/0xf80 [ 1143.017512][T20522] ? clear_bhb_loop+0x40/0x90 [ 1143.017543][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.017570][T20522] RIP: 0033:0x7fb3ea59c799 [ 1143.017591][T20522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.017622][T20522] RSP: 002b:00007fb3eb4aeef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1143.017649][T20522] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb3ea59c799 [ 1143.017666][T20522] RDX: 00007fb3eb4aef10 RSI: 0000000000000058 RDI: 00007fb3eb4aef10 [ 1143.017683][T20522] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000058 [ 1143.017699][T20522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.017715][T20522] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1143.017750][T20522] [ 1145.086425][T20546] vivid-007: ================= START STATUS ================= [ 1145.193162][T20546] vivid-007: Generate PTS: true [ 1145.266344][T20546] vivid-007: Generate SCR: true [ 1145.314255][T20546] tpg source WxH: 320x240 (Y'CbCr) [ 1145.403464][T20546] tpg field: 1 [ 1145.451069][T20546] tpg crop: (0,0)/320x240 [ 1145.518086][T20546] tpg compose: (0,0)/320x240 [ 1145.553731][T20546] tpg colorspace: 8 [ 1145.607890][T20546] tpg transfer function: 0/0 [ 1145.653782][T20546] tpg Y'CbCr encoding: 0/0 [ 1145.705208][T20546] tpg quantization: 0/0 [ 1145.723196][T20546] tpg RGB range: 0/2 [ 1145.740412][T20546] vivid-007: ================== END STATUS ================== [ 1150.484655][T20610] FAULT_INJECTION: forcing a failure. [ 1150.484655][T20610] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.580547][T20610] CPU: 0 UID: 0 PID: 20610 Comm: syz.2.3363 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.580592][T20610] Tainted: [L]=SOFTLOCKUP [ 1150.580601][T20610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1150.580616][T20610] Call Trace: [ 1150.580624][T20610] [ 1150.580633][T20610] dump_stack_lvl+0x100/0x190 [ 1150.580675][T20610] should_fail_ex.cold+0x5/0xa [ 1150.580704][T20610] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1150.580739][T20610] should_failslab+0xc2/0x120 [ 1150.580768][T20610] __kmalloc_noprof+0xe0/0x850 [ 1150.580812][T20610] tomoyo_realpath_from_path+0xb6/0x690 [ 1150.580852][T20610] tomoyo_check_open_permission+0x2af/0x3c0 [ 1150.580893][T20610] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1150.580950][T20610] ? do_raw_spin_lock+0x128/0x260 [ 1150.580989][T20610] ? path_get+0x61/0x80 [ 1150.581025][T20610] tomoyo_file_open+0x6b/0x90 [ 1150.581066][T20610] security_file_open+0xb5/0x1e0 [ 1150.581099][T20610] do_dentry_open+0x5aa/0x1660 [ 1150.581127][T20610] ? security_inode_permission+0xbf/0x250 [ 1150.581160][T20610] vfs_open+0x82/0x3f0 [ 1150.581196][T20610] path_openat+0x208c/0x31a0 [ 1150.581234][T20610] ? stack_depot_save_flags+0x27/0x9d0 [ 1150.581267][T20610] ? __pfx_path_openat+0x10/0x10 [ 1150.581295][T20610] ? kasan_save_stack+0x3f/0x50 [ 1150.581316][T20610] ? kasan_save_stack+0x30/0x50 [ 1150.581336][T20610] ? kasan_save_track+0x14/0x30 [ 1150.581357][T20610] ? __kasan_slab_alloc+0x89/0x90 [ 1150.581379][T20610] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1150.581415][T20610] ? do_getname+0x35/0x390 [ 1150.581448][T20610] do_file_open+0x20e/0x430 [ 1150.581476][T20610] ? __pfx_do_file_open+0x10/0x10 [ 1150.581531][T20610] ? find_held_lock+0x2b/0x80 [ 1150.581553][T20610] ? __might_fault+0xc5/0x140 [ 1150.581598][T20610] ? __might_fault+0xc5/0x140 [ 1150.581636][T20610] file_open_name+0x198/0x3b0 [ 1150.581670][T20610] ? __pfx_file_open_name+0x10/0x10 [ 1150.581713][T20610] ? do_getname+0x191/0x390 [ 1150.581750][T20610] acct_on+0xa4/0x9e0 [ 1150.581789][T20610] ? __pfx_acct_on+0x10/0x10 [ 1150.581826][T20610] ? bpf_lsm_capable+0x9/0x10 [ 1150.581852][T20610] ? security_capable+0x80/0x260 [ 1150.581899][T20610] __x64_sys_acct+0x81/0x1e0 [ 1150.581935][T20610] ? lockdep_hardirqs_on+0x78/0x100 [ 1150.581974][T20610] do_syscall_64+0x106/0xf80 [ 1150.582012][T20610] ? clear_bhb_loop+0x40/0x90 [ 1150.582042][T20610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.582068][T20610] RIP: 0033:0x7fb3ea59c799 [ 1150.582087][T20610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.582112][T20610] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1150.582136][T20610] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1150.582152][T20610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001580 [ 1150.582168][T20610] RBP: 00007fb3eb4af090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.582184][T20610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.582198][T20610] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1150.582231][T20610] [ 1150.582241][T20610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1151.754838][T20630] random: crng reseeded on system resumption [ 1152.500840][T20640] vivid-007: ================= START STATUS ================= [ 1152.542739][T20640] vivid-007: Generate PTS: true [ 1152.591801][T20640] vivid-007: Generate SCR: true [ 1152.597013][T20640] tpg source WxH: 320x240 (Y'CbCr) [ 1152.661590][T20640] tpg field: 1 [ 1152.667771][T20640] tpg crop: (0,0)/320x240 [ 1152.684972][T20640] tpg compose: (0,0)/320x240 [ 1152.717789][T20640] tpg colorspace: 8 [ 1152.731967][T20644] FAULT_INJECTION: forcing a failure. [ 1152.731967][T20644] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.754016][T20640] tpg transfer function: 0/0 [ 1152.776711][T20640] tpg Y'CbCr encoding: 0/0 [ 1152.788702][T20640] tpg quantization: 0/0 [ 1152.797205][T20644] CPU: 0 UID: 0 PID: 20644 Comm: syz.2.3370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.797246][T20644] Tainted: [L]=SOFTLOCKUP [ 1152.797256][T20644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1152.797271][T20644] Call Trace: [ 1152.797280][T20644] [ 1152.797290][T20644] dump_stack_lvl+0x100/0x190 [ 1152.797340][T20644] should_fail_ex.cold+0x5/0xa [ 1152.797371][T20644] should_failslab+0xc2/0x120 [ 1152.797405][T20644] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1152.797441][T20644] ? ring_buffer_read_start+0x149/0x460 [ 1152.797488][T20644] ring_buffer_read_start+0x149/0x460 [ 1152.797528][T20644] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1152.797567][T20644] ? lockdep_init_map_type+0x5c/0x250 [ 1152.797605][T20644] ? ring_buffer_overruns+0x14e/0x1a0 [ 1152.797641][T20644] tracing_open+0x9cd/0xef0 [ 1152.797678][T20644] do_dentry_open+0x6d8/0x1660 [ 1152.797705][T20644] ? __pfx_tracing_open+0x10/0x10 [ 1152.797744][T20644] vfs_open+0x82/0x3f0 [ 1152.797781][T20644] path_openat+0x208c/0x31a0 [ 1152.797819][T20644] ? __pfx_path_openat+0x10/0x10 [ 1152.797857][T20644] do_file_open+0x20e/0x430 [ 1152.797887][T20644] ? __pfx_do_file_open+0x10/0x10 [ 1152.797940][T20644] ? alloc_fd+0x476/0x790 [ 1152.797971][T20644] ? do_getname+0x191/0x390 [ 1152.798008][T20644] do_sys_openat2+0x10d/0x1e0 [ 1152.798043][T20644] ? __pfx_do_sys_openat2+0x10/0x10 [ 1152.798080][T20644] ? __fget_files+0x21f/0x3d0 [ 1152.798111][T20644] __x64_sys_openat+0x12d/0x210 [ 1152.798148][T20644] ? __pfx___x64_sys_openat+0x10/0x10 [ 1152.798195][T20644] do_syscall_64+0x106/0xf80 [ 1152.798235][T20644] ? clear_bhb_loop+0x40/0x90 [ 1152.798266][T20644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.798293][T20644] RIP: 0033:0x7fb3ea59c799 [ 1152.798313][T20644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.798338][T20644] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1152.798362][T20644] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1152.798379][T20644] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1152.798401][T20644] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1152.798417][T20644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.798432][T20644] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1152.798464][T20644] [ 1153.132735][T20647] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1153.141789][T20647] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1153.170573][T20640] tpg RGB range: 0/2 [ 1153.174742][T20640] vivid-007: ================== END STATUS ================== [ 1153.308140][T20642] vivid-007: kernel_thread() failed [ 1154.969788][T20660] kexec: Could not allocate control_code_buffer [ 1156.965601][T20709] FAULT_INJECTION: forcing a failure. [ 1156.965601][T20709] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.034388][T20709] CPU: 0 UID: 0 PID: 20709 Comm: syz.3.3386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.034429][T20709] Tainted: [L]=SOFTLOCKUP [ 1157.034439][T20709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.034459][T20709] Call Trace: [ 1157.034468][T20709] [ 1157.034479][T20709] dump_stack_lvl+0x100/0x190 [ 1157.034523][T20709] should_fail_ex.cold+0x5/0xa [ 1157.034553][T20709] should_failslab+0xc2/0x120 [ 1157.034582][T20709] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1157.034617][T20709] ? ring_buffer_read_start+0x149/0x460 [ 1157.034663][T20709] ring_buffer_read_start+0x149/0x460 [ 1157.034703][T20709] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1157.034742][T20709] ? lockdep_init_map_type+0x5c/0x250 [ 1157.034779][T20709] ? ring_buffer_overruns+0x14e/0x1a0 [ 1157.034815][T20709] tracing_open+0x9cd/0xef0 [ 1157.034853][T20709] do_dentry_open+0x6d8/0x1660 [ 1157.034879][T20709] ? __pfx_tracing_open+0x10/0x10 [ 1157.034918][T20709] vfs_open+0x82/0x3f0 [ 1157.034956][T20709] path_openat+0x208c/0x31a0 [ 1157.034993][T20709] ? __pfx_path_openat+0x10/0x10 [ 1157.035032][T20709] do_file_open+0x20e/0x430 [ 1157.035061][T20709] ? __pfx_do_file_open+0x10/0x10 [ 1157.035110][T20709] ? alloc_fd+0x476/0x790 [ 1157.035140][T20709] ? do_getname+0x191/0x390 [ 1157.035175][T20709] do_sys_openat2+0x10d/0x1e0 [ 1157.035211][T20709] ? __pfx_do_sys_openat2+0x10/0x10 [ 1157.035248][T20709] ? __fget_files+0x21f/0x3d0 [ 1157.035280][T20709] __x64_sys_openat+0x12d/0x210 [ 1157.035316][T20709] ? __pfx___x64_sys_openat+0x10/0x10 [ 1157.035364][T20709] do_syscall_64+0x106/0xf80 [ 1157.035404][T20709] ? clear_bhb_loop+0x40/0x90 [ 1157.035435][T20709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.035513][T20709] RIP: 0033:0x7fb88eb9c799 [ 1157.035534][T20709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.035560][T20709] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1157.035584][T20709] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1157.035602][T20709] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1157.035620][T20709] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1157.035637][T20709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.035652][T20709] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1157.035685][T20709] [ 1159.783195][T20744] bond0: invalid ARP target specified [ 1159.867499][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1160.467687][T20754] FAULT_INJECTION: forcing a failure. [ 1160.467687][T20754] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.542138][T20754] CPU: 0 UID: 0 PID: 20754 Comm: syz.1.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.542180][T20754] Tainted: [L]=SOFTLOCKUP [ 1160.542190][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.542206][T20754] Call Trace: [ 1160.542215][T20754] [ 1160.542225][T20754] dump_stack_lvl+0x100/0x190 [ 1160.542269][T20754] should_fail_ex.cold+0x5/0xa [ 1160.542299][T20754] ? ring_buffer_read_start+0x1b9/0x460 [ 1160.542339][T20754] should_failslab+0xc2/0x120 [ 1160.542368][T20754] __kmalloc_noprof+0xe0/0x850 [ 1160.542415][T20754] ring_buffer_read_start+0x1b9/0x460 [ 1160.542455][T20754] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1160.542495][T20754] ? lockdep_init_map_type+0x5c/0x250 [ 1160.542533][T20754] ? ring_buffer_overruns+0x14e/0x1a0 [ 1160.542569][T20754] tracing_open+0x9cd/0xef0 [ 1160.542606][T20754] do_dentry_open+0x6d8/0x1660 [ 1160.542633][T20754] ? __pfx_tracing_open+0x10/0x10 [ 1160.542672][T20754] vfs_open+0x82/0x3f0 [ 1160.542717][T20754] path_openat+0x208c/0x31a0 [ 1160.542755][T20754] ? __pfx_path_openat+0x10/0x10 [ 1160.542794][T20754] do_file_open+0x20e/0x430 [ 1160.542824][T20754] ? __pfx_do_file_open+0x10/0x10 [ 1160.542874][T20754] ? alloc_fd+0x476/0x790 [ 1160.542903][T20754] ? do_getname+0x191/0x390 [ 1160.542939][T20754] do_sys_openat2+0x10d/0x1e0 [ 1160.542974][T20754] ? __pfx_do_sys_openat2+0x10/0x10 [ 1160.543012][T20754] ? __fget_files+0x21f/0x3d0 [ 1160.543043][T20754] __x64_sys_openat+0x12d/0x210 [ 1160.543079][T20754] ? __pfx___x64_sys_openat+0x10/0x10 [ 1160.543127][T20754] do_syscall_64+0x106/0xf80 [ 1160.543168][T20754] ? clear_bhb_loop+0x40/0x90 [ 1160.543199][T20754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.543226][T20754] RIP: 0033:0x7f60b4f9c799 [ 1160.543246][T20754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.543272][T20754] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1160.543296][T20754] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1160.543314][T20754] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1160.543331][T20754] RBP: 00007f60b5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1160.543347][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.543362][T20754] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1160.543395][T20754] [ 1163.461384][T20800] FAULT_INJECTION: forcing a failure. [ 1163.461384][T20800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.518122][T20800] CPU: 0 UID: 0 PID: 20800 Comm: syz.3.3412 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.518160][T20800] Tainted: [L]=SOFTLOCKUP [ 1163.518169][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.518183][T20800] Call Trace: [ 1163.518192][T20800] [ 1163.518201][T20800] dump_stack_lvl+0x100/0x190 [ 1163.518244][T20800] should_fail_ex.cold+0x5/0xa [ 1163.518273][T20800] _copy_to_user+0x32/0xd0 [ 1163.518306][T20800] simple_read_from_buffer+0xcb/0x170 [ 1163.518348][T20800] proc_fail_nth_read+0x1af/0x230 [ 1163.518380][T20800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.518413][T20800] ? rw_verify_area+0xce/0x6d0 [ 1163.518450][T20800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.518480][T20800] vfs_read+0x1e4/0xb30 [ 1163.518506][T20800] ? __pfx_vfs_read+0x10/0x10 [ 1163.518530][T20800] ? find_held_lock+0x2b/0x80 [ 1163.518560][T20800] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1163.518585][T20800] ? do_ftruncate+0x22c/0x920 [ 1163.518615][T20800] ksys_read+0x12a/0x250 [ 1163.518638][T20800] ? __pfx_ksys_read+0x10/0x10 [ 1163.518668][T20800] do_syscall_64+0x106/0xf80 [ 1163.518708][T20800] ? clear_bhb_loop+0x40/0x90 [ 1163.518738][T20800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.518762][T20800] RIP: 0033:0x7fb88eb5cfce [ 1163.518782][T20800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.518805][T20800] RSP: 002b:00007fb88fabdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1163.518828][T20800] RAX: ffffffffffffffda RBX: 00007fb88fabe6c0 RCX: 00007fb88eb5cfce [ 1163.518844][T20800] RDX: 000000000000000f RSI: 00007fb88fabe0a0 RDI: 0000000000000001 [ 1163.518859][T20800] RBP: 00007fb88fabe090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.518873][T20800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.518888][T20800] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1163.518918][T20800] [ 1165.471999][T20818] zswap: compressor not available [ 1166.741703][T20847] program syz.2.3423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1167.938607][T20859] FAULT_INJECTION: forcing a failure. [ 1167.938607][T20859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.038063][T20859] CPU: 0 UID: 0 PID: 20859 Comm: syz.3.3426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.038104][T20859] Tainted: [L]=SOFTLOCKUP [ 1168.038114][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.038131][T20859] Call Trace: [ 1168.038140][T20859] [ 1168.038149][T20859] dump_stack_lvl+0x100/0x190 [ 1168.038193][T20859] should_fail_ex.cold+0x5/0xa [ 1168.038219][T20859] ? prepare_alloc_pages+0x16d/0x5f0 [ 1168.038253][T20859] should_fail_alloc_page+0xeb/0x140 [ 1168.038285][T20859] prepare_alloc_pages+0x1f0/0x5f0 [ 1168.038321][T20859] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1168.038369][T20859] ? __lock_acquire+0x4a5/0x2630 [ 1168.038413][T20859] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1168.038457][T20859] ? do_raw_spin_lock+0x128/0x260 [ 1168.038497][T20859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1168.038544][T20859] ? find_held_lock+0x2b/0x80 [ 1168.038578][T20859] ? __lock_acquire+0x4a5/0x2630 [ 1168.038612][T20859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.038641][T20859] ? policy_nodemask+0xed/0x4f0 [ 1168.038672][T20859] alloc_pages_mpol+0x1fb/0x550 [ 1168.038702][T20859] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1168.038732][T20859] ? __lock_acquire+0x4a5/0x2630 [ 1168.038770][T20859] folio_alloc_mpol_noprof+0x36/0x340 [ 1168.038806][T20859] shmem_alloc_folio+0x135/0x160 [ 1168.038841][T20859] shmem_alloc_and_add_folio+0x371/0xd40 [ 1168.038889][T20859] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1168.038933][T20859] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1168.038982][T20859] shmem_get_folio_gfp+0x6ab/0x1900 [ 1168.039029][T20859] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1168.039072][T20859] ? filemap_map_pages+0xe69/0x2020 [ 1168.039117][T20859] shmem_fault+0x1f9/0xa20 [ 1168.039157][T20859] ? __lock_acquire+0x4a5/0x2630 [ 1168.039191][T20859] ? __pfx_shmem_fault+0x10/0x10 [ 1168.039236][T20859] ? __pfx_filemap_map_pages+0x10/0x10 [ 1168.039284][T20859] __do_fault+0x10d/0x550 [ 1168.039312][T20859] do_fault+0xabb/0x1990 [ 1168.039347][T20859] __handle_mm_fault+0x180f/0x2b60 [ 1168.039388][T20859] ? mt_find+0x45e/0x8e0 [ 1168.039415][T20859] ? __pfx___handle_mm_fault+0x10/0x10 [ 1168.039450][T20859] ? __pfx_mt_find+0x10/0x10 [ 1168.039491][T20859] ? find_vma+0xbf/0x140 [ 1168.039516][T20859] ? __pfx_find_vma+0x10/0x10 [ 1168.039551][T20859] handle_mm_fault+0x36d/0xa20 [ 1168.039598][T20859] do_user_addr_fault+0x74c/0x12f0 [ 1168.039633][T20859] exc_page_fault+0x6f/0xd0 [ 1168.039674][T20859] asm_exc_page_fault+0x26/0x30 [ 1168.039699][T20859] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1168.039733][T20859] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1168.039759][T20859] RSP: 0018:ffffc90000ab7a40 EFLAGS: 00050206 [ 1168.039779][T20859] RAX: 0000000000000001 RBX: ffff8880886b4000 RCX: 0000000000001000 [ 1168.039796][T20859] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffff8880886b4000 [ 1168.039813][T20859] RBP: 0000000000004000 R08: 0000000000000001 R09: ffffed10110d69ff [ 1168.039829][T20859] R10: ffff8880886b4fff R11: 0000000000000000 R12: ffffc90000ab7d80 [ 1168.039845][T20859] R13: 0000000000004000 R14: 0000000000001000 R15: 0000000000000000 [ 1168.039875][T20859] _copy_from_iter+0x355/0x1690 [ 1168.039913][T20859] ? policy_nodemask+0xed/0x4f0 [ 1168.039941][T20859] ? __pfx__copy_from_iter+0x10/0x10 [ 1168.039973][T20859] ? alloc_pages_mpol+0x25a/0x550 [ 1168.040003][T20859] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1168.040038][T20859] copy_page_from_iter+0xde/0x180 [ 1168.040074][T20859] anon_pipe_write+0xae4/0x1d40 [ 1168.040112][T20859] ? __pfx_anon_pipe_write+0x10/0x10 [ 1168.040142][T20859] ? apparmor_file_permission+0x13f/0x1c0 [ 1168.040174][T20859] ? bpf_lsm_file_permission+0x9/0x10 [ 1168.040198][T20859] ? security_file_permission+0x76/0x210 [ 1168.040232][T20859] ? rw_verify_area+0xce/0x6d0 [ 1168.040274][T20859] vfs_write+0x6ac/0x1070 [ 1168.040299][T20859] ? __pfx_anon_pipe_write+0x10/0x10 [ 1168.040329][T20859] ? __pfx_vfs_write+0x10/0x10 [ 1168.040352][T20859] ? find_held_lock+0x2b/0x80 [ 1168.040395][T20859] ksys_write+0x1f8/0x250 [ 1168.040420][T20859] ? __pfx_ksys_write+0x10/0x10 [ 1168.040454][T20859] do_syscall_64+0x106/0xf80 [ 1168.040494][T20859] ? clear_bhb_loop+0x40/0x90 [ 1168.040525][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.040583][T20859] RIP: 0033:0x7fb88eb9c799 [ 1168.040605][T20859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.040630][T20859] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1168.040653][T20859] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1168.040670][T20859] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1168.040686][T20859] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1168.040702][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.040718][T20859] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1168.040750][T20859] [ 1168.721054][T20865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1168.730461][T20865] veth1_macvtap: entered allmulticast mode [ 1169.776231][T20877] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1169.974335][T20878] zswap: compressor not available [ 1170.489483][T20905] FAULT_INJECTION: forcing a failure. [ 1170.489483][T20905] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.579873][T20905] CPU: 0 UID: 0 PID: 20905 Comm: syz.1.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.579913][T20905] Tainted: [L]=SOFTLOCKUP [ 1170.579922][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.579936][T20905] Call Trace: [ 1170.579944][T20905] [ 1170.579954][T20905] dump_stack_lvl+0x100/0x190 [ 1170.579996][T20905] should_fail_ex.cold+0x5/0xa [ 1170.580026][T20905] should_failslab+0xc2/0x120 [ 1170.580054][T20905] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1170.580095][T20905] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 1170.580130][T20905] kmemdup_nul+0x49/0xd0 [ 1170.580155][T20905] vfs_parse_fs_qstr+0x112/0x1c0 [ 1170.580184][T20905] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 1170.580212][T20905] ? __kasan_kmalloc+0xaa/0xb0 [ 1170.580265][T20905] ? alloc_fs_context+0x65a/0xf40 [ 1170.580299][T20905] path_mount+0x75a/0x23d0 [ 1170.580332][T20905] ? __pfx_path_mount+0x10/0x10 [ 1170.580359][T20905] ? lockdep_hardirqs_on+0x78/0x100 [ 1170.580402][T20905] ? putname+0xb1/0x110 [ 1170.580427][T20905] ? kmem_cache_free+0x124/0x6a0 [ 1170.580470][T20905] ? __x64_sys_mount+0x293/0x310 [ 1170.580498][T20905] __x64_sys_mount+0x293/0x310 [ 1170.580529][T20905] ? __pfx___x64_sys_mount+0x10/0x10 [ 1170.580567][T20905] do_syscall_64+0x106/0xf80 [ 1170.580604][T20905] ? clear_bhb_loop+0x40/0x90 [ 1170.580634][T20905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.580659][T20905] RIP: 0033:0x7f60b4f9c799 [ 1170.580678][T20905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.580702][T20905] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.580725][T20905] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1170.580742][T20905] RDX: 0000200000000100 RSI: 0000200000000140 RDI: 0000200000000000 [ 1170.580761][T20905] RBP: 00007f60b5e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.580776][T20905] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000002 [ 1170.580791][T20905] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1170.580821][T20905] [ 1171.168484][T20910] netlink: 'syz.1.3441': attribute type 15 has an invalid length. [ 1171.190437][T20910] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1172.602718][T20935] vivid-007: ================= START STATUS ================= [ 1172.635790][T20935] vivid-007: Generate PTS: true [ 1172.654609][T20935] vivid-007: Generate SCR: true [ 1172.683933][T20935] tpg source WxH: 320x240 (Y'CbCr) [ 1172.719281][T20935] tpg field: 1 [ 1172.732027][T20935] tpg crop: (0,0)/320x240 [ 1172.750805][T20935] tpg compose: (0,0)/320x240 [ 1172.765437][T20935] tpg colorspace: 8 [ 1172.787669][T20935] tpg transfer function: 0/0 [ 1172.813489][T20935] tpg Y'CbCr encoding: 0/0 [ 1172.853699][T20935] tpg quantization: 0/0 [ 1172.868099][T20935] tpg RGB range: 0/2 [ 1172.883442][T20935] vivid-007: ================== END STATUS ================== [ 1173.058793][T20943] FAULT_INJECTION: forcing a failure. [ 1173.058793][T20943] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.128135][T20943] CPU: 0 UID: 0 PID: 20943 Comm: syz.2.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.128177][T20943] Tainted: [L]=SOFTLOCKUP [ 1173.128186][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1173.128202][T20943] Call Trace: [ 1173.128214][T20943] [ 1173.128224][T20943] dump_stack_lvl+0x100/0x190 [ 1173.128268][T20943] should_fail_ex.cold+0x5/0xa [ 1173.128300][T20943] should_failslab+0xc2/0x120 [ 1173.128329][T20943] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1173.128365][T20943] ? ring_buffer_read_start+0x149/0x460 [ 1173.128411][T20943] ring_buffer_read_start+0x149/0x460 [ 1173.128452][T20943] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1173.128491][T20943] ? lockdep_init_map_type+0x5c/0x250 [ 1173.128529][T20943] ? ring_buffer_overruns+0x14e/0x1a0 [ 1173.128566][T20943] tracing_open+0x9cd/0xef0 [ 1173.128604][T20943] do_dentry_open+0x6d8/0x1660 [ 1173.128630][T20943] ? __pfx_tracing_open+0x10/0x10 [ 1173.128669][T20943] vfs_open+0x82/0x3f0 [ 1173.128707][T20943] path_openat+0x208c/0x31a0 [ 1173.128745][T20943] ? __pfx_path_openat+0x10/0x10 [ 1173.128784][T20943] do_file_open+0x20e/0x430 [ 1173.128814][T20943] ? __pfx_do_file_open+0x10/0x10 [ 1173.128863][T20943] ? alloc_fd+0x476/0x790 [ 1173.128893][T20943] ? do_getname+0x191/0x390 [ 1173.128929][T20943] do_sys_openat2+0x10d/0x1e0 [ 1173.128965][T20943] ? __pfx_do_sys_openat2+0x10/0x10 [ 1173.129018][T20943] ? __fget_files+0x21f/0x3d0 [ 1173.129057][T20943] __x64_sys_openat+0x12d/0x210 [ 1173.129094][T20943] ? __pfx___x64_sys_openat+0x10/0x10 [ 1173.129142][T20943] do_syscall_64+0x106/0xf80 [ 1173.129184][T20943] ? clear_bhb_loop+0x40/0x90 [ 1173.129215][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.129242][T20943] RIP: 0033:0x7fb3ea59c799 [ 1173.129263][T20943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.129288][T20943] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1173.129312][T20943] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1173.129330][T20943] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1173.129347][T20943] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1173.129364][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.129380][T20943] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1173.129413][T20943] [ 1173.972764][T20954] FAULT_INJECTION: forcing a failure. [ 1173.972764][T20954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.024877][T20954] CPU: 0 UID: 0 PID: 20954 Comm: syz.1.3454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.024915][T20954] Tainted: [L]=SOFTLOCKUP [ 1174.024924][T20954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.024938][T20954] Call Trace: [ 1174.024947][T20954] [ 1174.024956][T20954] dump_stack_lvl+0x100/0x190 [ 1174.025006][T20954] should_fail_ex.cold+0x5/0xa [ 1174.025031][T20954] ? prepare_alloc_pages+0x16d/0x5f0 [ 1174.025063][T20954] should_fail_alloc_page+0xeb/0x140 [ 1174.025092][T20954] prepare_alloc_pages+0x1f0/0x5f0 [ 1174.025125][T20954] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1174.025170][T20954] ? __lock_acquire+0x4a5/0x2630 [ 1174.025211][T20954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1174.025253][T20954] ? do_raw_spin_lock+0x128/0x260 [ 1174.025290][T20954] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1174.025327][T20954] ? find_held_lock+0x2b/0x80 [ 1174.025359][T20954] ? __lock_acquire+0x4a5/0x2630 [ 1174.025391][T20954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.025418][T20954] ? policy_nodemask+0xed/0x4f0 [ 1174.025447][T20954] alloc_pages_mpol+0x1fb/0x550 [ 1174.025475][T20954] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1174.025506][T20954] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1174.025545][T20954] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1174.025590][T20954] folio_alloc_mpol_noprof+0x36/0x340 [ 1174.025623][T20954] shmem_alloc_folio+0x135/0x160 [ 1174.025656][T20954] shmem_alloc_and_add_folio+0x371/0xd40 [ 1174.025701][T20954] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1174.025742][T20954] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1174.025787][T20954] shmem_get_folio_gfp+0x6ab/0x1900 [ 1174.025831][T20954] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1174.025871][T20954] ? filemap_map_pages+0xe69/0x2020 [ 1174.025913][T20954] shmem_fault+0x1f9/0xa20 [ 1174.025950][T20954] ? __lock_acquire+0x4a5/0x2630 [ 1174.025982][T20954] ? __pfx_shmem_fault+0x10/0x10 [ 1174.026030][T20954] ? __pfx_filemap_map_pages+0x10/0x10 [ 1174.026075][T20954] __do_fault+0x10d/0x550 [ 1174.026102][T20954] do_fault+0xabb/0x1990 [ 1174.026135][T20954] __handle_mm_fault+0x180f/0x2b60 [ 1174.026177][T20954] ? __pfx___handle_mm_fault+0x10/0x10 [ 1174.026213][T20954] ? pte_offset_map_lock+0x174/0x320 [ 1174.026239][T20954] ? find_held_lock+0x2b/0x80 [ 1174.026272][T20954] ? follow_page_pte+0x5b3/0x1400 [ 1174.026307][T20954] handle_mm_fault+0x36d/0xa20 [ 1174.026346][T20954] __get_user_pages+0xf9c/0x34d0 [ 1174.026382][T20954] ? down_read_killable+0x30e/0x4c0 [ 1174.026410][T20954] ? __lock_acquire+0x4a5/0x2630 [ 1174.026442][T20954] ? __pfx___get_user_pages+0x10/0x10 [ 1174.026478][T20954] __gup_longterm_locked+0x87d/0x16f0 [ 1174.026516][T20954] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1174.026548][T20954] ? try_get_folio+0x262/0x750 [ 1174.026572][T20954] ? find_held_lock+0x2b/0x80 [ 1174.026603][T20954] gup_fast_fallback+0x18c6/0x2460 [ 1174.026653][T20954] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1174.026683][T20954] ? __lock_acquire+0x4a5/0x2630 [ 1174.026718][T20954] ? find_held_lock+0x2b/0x80 [ 1174.026740][T20954] ? is_bpf_text_address+0x8a/0x1a0 [ 1174.026783][T20954] get_user_pages_fast+0xa7/0xf0 [ 1174.026812][T20954] ? __pfx_get_user_pages_fast+0x10/0x10 [ 1174.026849][T20954] __iov_iter_get_pages_alloc+0x8ec/0x20d0 [ 1174.026886][T20954] ? pipe_lock+0x69/0x80 [ 1174.026910][T20954] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 1174.026942][T20954] ? __pfx___mutex_lock+0x10/0x10 [ 1174.026968][T20954] ? iovec_from_user+0xda/0x140 [ 1174.027021][T20954] iov_iter_get_pages2+0xa3/0x100 [ 1174.027051][T20954] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 1174.027080][T20954] ? wait_for_space+0x2ca/0x3b0 [ 1174.027109][T20954] __do_sys_vmsplice+0x7eb/0x14f0 [ 1174.027149][T20954] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 1174.027179][T20954] ? get_pid_task+0x106/0x250 [ 1174.027213][T20954] ? find_held_lock+0x2b/0x80 [ 1174.027243][T20954] ? find_held_lock+0x2b/0x80 [ 1174.027266][T20954] ? ksys_write+0x190/0x250 [ 1174.027288][T20954] ? ksys_write+0x190/0x250 [ 1174.027326][T20954] ? __fget_files+0x21f/0x3d0 [ 1174.027360][T20954] ? __pfx_ksys_write+0x10/0x10 [ 1174.027382][T20954] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1174.027415][T20954] ? syscall_user_dispatch+0x76/0x130 [ 1174.027454][T20954] ? do_syscall_64+0x106/0xf80 [ 1174.027492][T20954] do_syscall_64+0x106/0xf80 [ 1174.027532][T20954] ? clear_bhb_loop+0x40/0x90 [ 1174.027561][T20954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.027586][T20954] RIP: 0033:0x7f60b4f9c799 [ 1174.027605][T20954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.027629][T20954] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1174.027652][T20954] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1174.027668][T20954] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.027683][T20954] RBP: 00007f60b5e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.027698][T20954] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 1174.027712][T20954] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1174.027743][T20954] [ 1175.012362][T20955] cgroup: fork rejected by pids controller in /syz2 [ 1176.795844][T21112] ubi0: attaching mtd0 [ 1176.815396][T21112] ubi0: scanning is finished [ 1176.834602][T21112] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1177.019074][T21117] FAULT_INJECTION: forcing a failure. [ 1177.019074][T21117] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.057836][T21117] CPU: 0 UID: 0 PID: 21117 Comm: syz.2.3462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.057878][T21117] Tainted: [L]=SOFTLOCKUP [ 1177.057887][T21117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1177.057906][T21117] Call Trace: [ 1177.057915][T21117] [ 1177.057925][T21117] dump_stack_lvl+0x100/0x190 [ 1177.057969][T21117] should_fail_ex.cold+0x5/0xa [ 1177.057999][T21117] ? ring_buffer_read_start+0x1b9/0x460 [ 1177.058039][T21117] should_failslab+0xc2/0x120 [ 1177.058068][T21117] __kmalloc_noprof+0xe0/0x850 [ 1177.058114][T21117] ring_buffer_read_start+0x1b9/0x460 [ 1177.058154][T21117] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1177.058194][T21117] ? lockdep_init_map_type+0x5c/0x250 [ 1177.058231][T21117] ? ring_buffer_overruns+0x14e/0x1a0 [ 1177.058267][T21117] tracing_open+0x9cd/0xef0 [ 1177.058304][T21117] do_dentry_open+0x6d8/0x1660 [ 1177.058330][T21117] ? __pfx_tracing_open+0x10/0x10 [ 1177.058369][T21117] vfs_open+0x82/0x3f0 [ 1177.058407][T21117] path_openat+0x208c/0x31a0 [ 1177.058444][T21117] ? __pfx_path_openat+0x10/0x10 [ 1177.058483][T21117] do_file_open+0x20e/0x430 [ 1177.058513][T21117] ? __pfx_do_file_open+0x10/0x10 [ 1177.058563][T21117] ? alloc_fd+0x476/0x790 [ 1177.058592][T21117] ? do_getname+0x191/0x390 [ 1177.058628][T21117] do_sys_openat2+0x10d/0x1e0 [ 1177.058664][T21117] ? __pfx_do_sys_openat2+0x10/0x10 [ 1177.058702][T21117] ? __fget_files+0x21f/0x3d0 [ 1177.058733][T21117] __x64_sys_openat+0x12d/0x210 [ 1177.058778][T21117] ? __pfx___x64_sys_openat+0x10/0x10 [ 1177.058826][T21117] do_syscall_64+0x106/0xf80 [ 1177.058867][T21117] ? clear_bhb_loop+0x40/0x90 [ 1177.058899][T21117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.058925][T21117] RIP: 0033:0x7fb3ea59c799 [ 1177.058947][T21117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.058973][T21117] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1177.058997][T21117] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1177.059015][T21117] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1177.059032][T21117] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1177.059048][T21117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.059063][T21117] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1177.059095][T21117] [ 1177.712962][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.719754][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.746259][T21112] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1178.615556][T21132] vivid-007: ================= START STATUS ================= [ 1178.659994][T21132] vivid-007: Generate PTS: true [ 1178.693151][T21132] vivid-007: Generate SCR: true [ 1178.732479][T21132] tpg source WxH: 320x240 (Y'CbCr) [ 1178.749482][T21121] futex_wake_op: syz.3.3463 tries to shift op by -2048; fix this program [ 1178.758171][T21132] tpg field: 1 [ 1178.775166][T21132] tpg crop: (0,0)/320x240 [ 1178.809490][T21132] tpg compose: (0,0)/320x240 [ 1178.835838][T21132] tpg colorspace: 8 [ 1178.862395][T21132] tpg transfer function: 0/0 [ 1178.890499][T21132] tpg Y'CbCr encoding: 0/0 [ 1178.912956][T21132] tpg quantization: 0/0 [ 1178.933504][T21132] tpg RGB range: 0/2 [ 1178.955137][T21132] vivid-007: ================== END STATUS ================== [ 1179.128621][T21137] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1179.175330][T21139] FAULT_INJECTION: forcing a failure. [ 1179.175330][T21139] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.220184][T21137] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1179.259246][T21142] FAULT_INJECTION: forcing a failure. [ 1179.259246][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.272632][T21139] CPU: 0 UID: 0 PID: 21139 Comm: syz.1.3467 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.272671][T21139] Tainted: [L]=SOFTLOCKUP [ 1179.272680][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.272695][T21139] Call Trace: [ 1179.272703][T21139] [ 1179.272712][T21139] dump_stack_lvl+0x100/0x190 [ 1179.272755][T21139] should_fail_ex.cold+0x5/0xa [ 1179.272784][T21139] should_failslab+0xc2/0x120 [ 1179.272812][T21139] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1179.272850][T21139] ? alloc_empty_file+0x55/0x1c0 [ 1179.272882][T21139] ? __pfx_stack_trace_save+0x10/0x10 [ 1179.272912][T21139] alloc_empty_file+0x55/0x1c0 [ 1179.272944][T21139] path_openat+0xe8/0x31a0 [ 1179.272969][T21139] ? kasan_save_stack+0x3f/0x50 [ 1179.272989][T21139] ? kasan_save_stack+0x30/0x50 [ 1179.273010][T21139] ? kasan_save_track+0x14/0x30 [ 1179.273030][T21139] ? __kasan_slab_alloc+0x89/0x90 [ 1179.273052][T21139] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1179.273088][T21139] ? do_getname+0x35/0x390 [ 1179.273117][T21139] ? do_sys_openat2+0xc5/0x1e0 [ 1179.273148][T21139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.273177][T21139] ? __pfx_path_openat+0x10/0x10 [ 1179.273213][T21139] do_file_open+0x20e/0x430 [ 1179.273241][T21139] ? __pfx_do_file_open+0x10/0x10 [ 1179.273286][T21139] ? alloc_fd+0x476/0x790 [ 1179.273314][T21139] ? do_getname+0x191/0x390 [ 1179.273347][T21139] do_sys_openat2+0x10d/0x1e0 [ 1179.273379][T21139] ? __pfx_do_sys_openat2+0x10/0x10 [ 1179.273410][T21139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1179.273438][T21139] ? __fget_files+0x21f/0x3d0 [ 1179.273467][T21139] __x64_sys_openat+0x12d/0x210 [ 1179.273500][T21139] ? __pfx___x64_sys_openat+0x10/0x10 [ 1179.273533][T21139] ? ksys_write+0x1ac/0x250 [ 1179.273571][T21139] do_syscall_64+0x106/0xf80 [ 1179.273609][T21139] ? clear_bhb_loop+0x40/0x90 [ 1179.273639][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.273663][T21139] RIP: 0033:0x7f60b4f9c799 [ 1179.273683][T21139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.273707][T21139] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.273730][T21139] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1179.273746][T21139] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1179.273762][T21139] RBP: 00007f60b5e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.273776][T21139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.273791][T21139] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1179.273821][T21139] [ 1179.828757][T21142] CPU: 0 UID: 0 PID: 21142 Comm: syz.2.3468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1179.828796][T21142] Tainted: [L]=SOFTLOCKUP [ 1179.828805][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.828820][T21142] Call Trace: [ 1179.828829][T21142] [ 1179.828838][T21142] dump_stack_lvl+0x100/0x190 [ 1179.828881][T21142] should_fail_ex.cold+0x5/0xa [ 1179.828910][T21142] ? tomoyo_encode2+0xfb/0x3c0 [ 1179.828943][T21142] should_failslab+0xc2/0x120 [ 1179.828970][T21142] __kmalloc_noprof+0xe0/0x850 [ 1179.829007][T21142] ? d_absolute_path+0x136/0x1b0 [ 1179.829047][T21142] tomoyo_encode2+0xfb/0x3c0 [ 1179.829095][T21142] tomoyo_encode+0x29/0x50 [ 1179.829126][T21142] tomoyo_realpath_from_path+0x18c/0x690 [ 1179.829167][T21142] tomoyo_path_number_perm+0x23c/0x580 [ 1179.829195][T21142] ? tomoyo_path_number_perm+0x22e/0x580 [ 1179.829225][T21142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1179.829281][T21142] ? find_held_lock+0x2b/0x80 [ 1179.829305][T21142] ? __fget_files+0x215/0x3d0 [ 1179.829328][T21142] ? hook_file_ioctl_common+0x146/0x410 [ 1179.829364][T21142] ? __fget_files+0x21f/0x3d0 [ 1179.829392][T21142] security_file_ioctl+0xd3/0x230 [ 1179.829430][T21142] __x64_sys_ioctl+0xb7/0x210 [ 1179.829469][T21142] do_syscall_64+0x106/0xf80 [ 1179.829507][T21142] ? clear_bhb_loop+0x40/0x90 [ 1179.829536][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.829561][T21142] RIP: 0033:0x7fb3ea59c799 [ 1179.829580][T21142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.829607][T21142] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.829630][T21142] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1179.829647][T21142] RDX: 0000200000000200 RSI: 00000000c0185502 RDI: 0000000000000003 [ 1179.829662][T21142] RBP: 00007fb3eb4af090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.829677][T21142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.829691][T21142] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1179.829722][T21142] [ 1179.829741][T21142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1180.318387][T21142] usb usb15: usbfs: process 21142 (syz.2.3468) did not claim interface 0 before use [ 1182.689932][T21164] ubi0: attaching mtd0 [ 1182.695755][T21164] ubi0: scanning is finished [ 1182.768517][T21164] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1183.489319][T21164] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1183.786465][T21176] vivid-007: ================= START STATUS ================= [ 1183.806363][T21176] vivid-007: Generate PTS: true [ 1183.850290][T21176] vivid-007: Generate SCR: true [ 1183.872169][T21176] tpg source WxH: 320x240 (Y'CbCr) [ 1183.877345][T21176] tpg field: 1 [ 1183.915250][T21176] tpg crop: (0,0)/320x240 [ 1183.954625][T21176] tpg compose: (0,0)/320x240 [ 1183.980746][T21176] tpg colorspace: 8 [ 1184.003786][T21176] tpg transfer function: 0/0 [ 1184.041274][T21176] tpg Y'CbCr encoding: 0/0 [ 1184.051696][T21176] tpg quantization: 0/0 [ 1184.077571][T21176] tpg RGB range: 0/2 [ 1184.094194][T21176] vivid-007: ================== END STATUS ================== [ 1184.196137][T21182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1185.301871][T21210] FAULT_INJECTION: forcing a failure. [ 1185.301871][T21210] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.388097][T21210] CPU: 0 UID: 0 PID: 21210 Comm: syz.2.3486 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.388140][T21210] Tainted: [L]=SOFTLOCKUP [ 1185.388149][T21210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.388166][T21210] Call Trace: [ 1185.388174][T21210] [ 1185.388184][T21210] dump_stack_lvl+0x100/0x190 [ 1185.388227][T21210] should_fail_ex.cold+0x5/0xa [ 1185.388258][T21210] should_failslab+0xc2/0x120 [ 1185.388287][T21210] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1185.388327][T21210] ? copy_utsname+0x1a8/0x690 [ 1185.388368][T21210] ? copy_mnt_ns+0x106/0xc30 [ 1185.388402][T21210] copy_utsname+0x1a8/0x690 [ 1185.388445][T21210] create_new_namespaces+0x16a/0xac0 [ 1185.388472][T21210] ? bpf_lsm_capable+0x9/0x10 [ 1185.388501][T21210] ? security_capable+0x80/0x260 [ 1185.388546][T21210] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1185.388578][T21210] ksys_unshare+0x473/0xad0 [ 1185.388614][T21210] ? __pfx_ksys_unshare+0x10/0x10 [ 1185.388665][T21210] __x64_sys_unshare+0x31/0x40 [ 1185.388699][T21210] do_syscall_64+0x106/0xf80 [ 1185.388741][T21210] ? clear_bhb_loop+0x40/0x90 [ 1185.388772][T21210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.388799][T21210] RIP: 0033:0x7fb3ea59c799 [ 1185.388820][T21210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.388846][T21210] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1185.388870][T21210] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1185.388888][T21210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1185.388904][T21210] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1185.388920][T21210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.388936][T21210] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1185.388971][T21210] [ 1186.095711][T21217] can: request_module (can-proto-0) failed. [ 1188.896751][T18070] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7 [ 1190.296015][T21278] can: request_module (can-proto-5) failed. [ 1190.761016][ T29] audit: type=1804 audit(4294975676.852:12): pid=21285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3504" name="/newroot/283/file0" dev="tmpfs" ino=1495 res=1 errno=0 [ 1191.597601][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 1191.664685][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3506'. [ 1192.093483][T21314] FAULT_INJECTION: forcing a failure. [ 1192.093483][T21314] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.178231][T21314] CPU: 0 UID: 0 PID: 21314 Comm: syz.3.3513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.178272][T21314] Tainted: [L]=SOFTLOCKUP [ 1192.178281][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.178298][T21314] Call Trace: [ 1192.178306][T21314] [ 1192.178316][T21314] dump_stack_lvl+0x100/0x190 [ 1192.178360][T21314] should_fail_ex.cold+0x5/0xa [ 1192.178391][T21314] ? ring_buffer_read_start+0x1b9/0x460 [ 1192.178437][T21314] should_failslab+0xc2/0x120 [ 1192.178465][T21314] __kmalloc_noprof+0xe0/0x850 [ 1192.178513][T21314] ring_buffer_read_start+0x1b9/0x460 [ 1192.178554][T21314] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1192.178592][T21314] ? lockdep_init_map_type+0x5c/0x250 [ 1192.178630][T21314] ? ring_buffer_overruns+0x14e/0x1a0 [ 1192.178666][T21314] tracing_open+0x9cd/0xef0 [ 1192.178704][T21314] do_dentry_open+0x6d8/0x1660 [ 1192.178731][T21314] ? __pfx_tracing_open+0x10/0x10 [ 1192.178770][T21314] vfs_open+0x82/0x3f0 [ 1192.178807][T21314] path_openat+0x208c/0x31a0 [ 1192.178845][T21314] ? __pfx_path_openat+0x10/0x10 [ 1192.178884][T21314] do_file_open+0x20e/0x430 [ 1192.178914][T21314] ? __pfx_do_file_open+0x10/0x10 [ 1192.178963][T21314] ? alloc_fd+0x476/0x790 [ 1192.178993][T21314] ? do_getname+0x191/0x390 [ 1192.179029][T21314] do_sys_openat2+0x10d/0x1e0 [ 1192.179065][T21314] ? __pfx_do_sys_openat2+0x10/0x10 [ 1192.179103][T21314] ? __fget_files+0x21f/0x3d0 [ 1192.179134][T21314] __x64_sys_openat+0x12d/0x210 [ 1192.179171][T21314] ? __pfx___x64_sys_openat+0x10/0x10 [ 1192.179219][T21314] do_syscall_64+0x106/0xf80 [ 1192.179259][T21314] ? clear_bhb_loop+0x40/0x90 [ 1192.179291][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.179318][T21314] RIP: 0033:0x7fb88eb9c799 [ 1192.179339][T21314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.179365][T21314] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1192.179390][T21314] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1192.179414][T21314] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1192.179431][T21314] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1192.179447][T21314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.179463][T21314] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1192.179495][T21314] [ 1192.441025][T21319] vivid-007: ================= START STATUS ================= [ 1192.448808][T21319] vivid-007: Generate PTS: true [ 1192.453739][T21319] vivid-007: Generate SCR: true [ 1192.460354][T21319] tpg source WxH: 320x240 (Y'CbCr) [ 1192.465495][T21319] tpg field: 1 [ 1192.468958][T21319] tpg crop: (0,0)/320x240 [ 1192.473362][T21319] tpg compose: (0,0)/320x240 [ 1192.478061][T21319] tpg colorspace: 8 [ 1192.481881][T21319] tpg transfer function: 0/0 [ 1192.486533][T21319] tpg Y'CbCr encoding: 0/0 [ 1192.491049][T21319] tpg quantization: 0/0 [ 1192.495213][T21319] tpg RGB range: 0/2 [ 1192.499170][T21319] vivid-007: ================== END STATUS ================== [ 1192.999099][T21328] warning: `syz.0.3516' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1193.485676][T21326] zswap: compressor not available [ 1194.469143][T21359] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1194.498805][T21359] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1197.976838][T21392] FAULT_INJECTION: forcing a failure. [ 1197.976838][T21392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.218054][T21392] CPU: 0 UID: 0 PID: 21392 Comm: syz.2.3532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.218093][T21392] Tainted: [L]=SOFTLOCKUP [ 1198.218102][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1198.218117][T21392] Call Trace: [ 1198.218124][T21392] [ 1198.218135][T21392] dump_stack_lvl+0x100/0x190 [ 1198.218177][T21392] should_fail_ex.cold+0x5/0xa [ 1198.218207][T21392] _copy_from_user+0x2e/0xd0 [ 1198.218239][T21392] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 1198.218286][T21392] snd_rawmidi_write+0x2dc/0xc60 [ 1198.218326][T21392] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1198.218362][T21392] ? __pfx_default_wake_function+0x10/0x10 [ 1198.218390][T21392] ? bpf_lsm_file_permission+0x9/0x10 [ 1198.218414][T21392] ? security_file_permission+0x76/0x210 [ 1198.218447][T21392] ? rw_verify_area+0xce/0x6d0 [ 1198.218487][T21392] vfs_write+0x2aa/0x1070 [ 1198.218514][T21392] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1198.218550][T21392] ? __pfx_vfs_write+0x10/0x10 [ 1198.218571][T21392] ? find_held_lock+0x2b/0x80 [ 1198.218594][T21392] ? __fget_files+0x215/0x3d0 [ 1198.218618][T21392] ? __fget_files+0x215/0x3d0 [ 1198.218646][T21392] ? __fget_files+0x21f/0x3d0 [ 1198.218678][T21392] ksys_write+0x1f8/0x250 [ 1198.218701][T21392] ? __pfx_ksys_write+0x10/0x10 [ 1198.218733][T21392] do_syscall_64+0x106/0xf80 [ 1198.218772][T21392] ? clear_bhb_loop+0x40/0x90 [ 1198.218802][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.218826][T21392] RIP: 0033:0x7fb3ea59c799 [ 1198.218846][T21392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.218876][T21392] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1198.218898][T21392] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1198.218915][T21392] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1198.218930][T21392] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1198.218945][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.218960][T21392] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1198.218990][T21392] [ 1201.694620][T21466] FAULT_INJECTION: forcing a failure. [ 1201.694620][T21466] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.831182][T21466] CPU: 0 UID: 0 PID: 21466 Comm: syz.2.3552 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1201.831239][T21466] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1201.831254][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1201.831270][T21466] Call Trace: [ 1201.831280][T21466] [ 1201.831290][T21466] dump_stack_lvl+0x100/0x190 [ 1201.831336][T21466] should_fail_ex.cold+0x5/0xa [ 1201.831369][T21466] should_failslab+0xc2/0x120 [ 1201.831398][T21466] __kvmalloc_node_noprof+0xfa/0xa00 [ 1201.831441][T21466] ? traverse.part.0.constprop.0+0x397/0x650 [ 1201.831492][T21466] traverse.part.0.constprop.0+0x397/0x650 [ 1201.831552][T21466] seq_read_iter+0x93f/0x1270 [ 1201.831597][T21466] ? __pfx_aa_file_perm+0x10/0x10 [ 1201.831644][T21466] proc_reg_read_iter+0x11b/0x310 [ 1201.831688][T21466] do_iter_readv_writev+0x60d/0x920 [ 1201.831732][T21466] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1201.831781][T21466] ? rw_verify_area+0xce/0x6d0 [ 1201.831822][T21466] vfs_readv+0x4d3/0x8d0 [ 1201.831869][T21466] ? __pfx_vfs_readv+0x10/0x10 [ 1201.831929][T21466] ? __fget_files+0x21f/0x3d0 [ 1201.831961][T21466] ? do_preadv+0x1ac/0x270 [ 1201.831998][T21466] do_preadv+0x1ac/0x270 [ 1201.832040][T21466] ? __pfx_do_preadv+0x10/0x10 [ 1201.832088][T21466] do_syscall_64+0x106/0xf80 [ 1201.832131][T21466] ? clear_bhb_loop+0x40/0x90 [ 1201.832163][T21466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.832191][T21466] RIP: 0033:0x7fb3ea59c799 [ 1201.832217][T21466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.832242][T21466] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1201.832267][T21466] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1201.832284][T21466] RDX: 0000000000000026 RSI: 0000200000009180 RDI: 000000000000000a [ 1201.832300][T21466] RBP: 00007fb3ea632c99 R08: 0000000000000005 R09: 0000000000000000 [ 1201.832316][T21466] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1201.832333][T21466] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1201.832365][T21466] [ 1203.936158][T21489] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1203.975098][T21489] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1204.383779][T21495] FAULT_INJECTION: forcing a failure. [ 1204.383779][T21495] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.451905][T21495] CPU: 0 UID: 0 PID: 21495 Comm: syz.1.3559 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1204.451962][T21495] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1204.451978][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.451994][T21495] Call Trace: [ 1204.452003][T21495] [ 1204.452013][T21495] dump_stack_lvl+0x100/0x190 [ 1204.452057][T21495] should_fail_ex.cold+0x5/0xa [ 1204.452088][T21495] should_failslab+0xc2/0x120 [ 1204.452116][T21495] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1204.452151][T21495] ? ring_buffer_read_start+0x149/0x460 [ 1204.452198][T21495] ring_buffer_read_start+0x149/0x460 [ 1204.452239][T21495] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1204.452287][T21495] ? lockdep_init_map_type+0x5c/0x250 [ 1204.452325][T21495] ? ring_buffer_overruns+0x14e/0x1a0 [ 1204.452362][T21495] tracing_open+0x9cd/0xef0 [ 1204.452399][T21495] do_dentry_open+0x6d8/0x1660 [ 1204.452425][T21495] ? __pfx_tracing_open+0x10/0x10 [ 1204.452464][T21495] vfs_open+0x82/0x3f0 [ 1204.452501][T21495] path_openat+0x208c/0x31a0 [ 1204.452539][T21495] ? __pfx_path_openat+0x10/0x10 [ 1204.452578][T21495] do_file_open+0x20e/0x430 [ 1204.452608][T21495] ? __pfx_do_file_open+0x10/0x10 [ 1204.452658][T21495] ? alloc_fd+0x476/0x790 [ 1204.452687][T21495] ? do_getname+0x191/0x390 [ 1204.452723][T21495] do_sys_openat2+0x10d/0x1e0 [ 1204.452758][T21495] ? __pfx_do_sys_openat2+0x10/0x10 [ 1204.452795][T21495] ? __fget_files+0x21f/0x3d0 [ 1204.452827][T21495] __x64_sys_openat+0x12d/0x210 [ 1204.452863][T21495] ? __pfx___x64_sys_openat+0x10/0x10 [ 1204.452911][T21495] do_syscall_64+0x106/0xf80 [ 1204.452951][T21495] ? clear_bhb_loop+0x40/0x90 [ 1204.452983][T21495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.453010][T21495] RIP: 0033:0x7f60b4f9c799 [ 1204.453031][T21495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.453057][T21495] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1204.453082][T21495] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1204.453099][T21495] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1204.453116][T21495] RBP: 00007f60b5032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1204.453132][T21495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.453148][T21495] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1204.453181][T21495] [ 1205.720857][T21500] FAULT_INJECTION: forcing a failure. [ 1205.720857][T21500] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.772145][T21500] CPU: 0 UID: 0 PID: 21500 Comm: syz.0.3560 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1205.772202][T21500] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1205.772217][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1205.772233][T21500] Call Trace: [ 1205.772241][T21500] [ 1205.772252][T21500] dump_stack_lvl+0x100/0x190 [ 1205.772297][T21500] should_fail_ex.cold+0x5/0xa [ 1205.772329][T21500] should_failslab+0xc2/0x120 [ 1205.772358][T21500] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1205.772394][T21500] ? syslog_print_all+0xed/0x3f0 [ 1205.772436][T21500] syslog_print_all+0xed/0x3f0 [ 1205.772470][T21500] ? futex_wait+0x125/0x380 [ 1205.772512][T21500] ? __pfx_syslog_print_all+0x10/0x10 [ 1205.772561][T21500] ? bpf_lsm_capable+0x9/0x10 [ 1205.772589][T21500] ? security_capable+0x80/0x260 [ 1205.772635][T21500] do_syslog+0x350/0x6d0 [ 1205.772674][T21500] ? __pfx_do_syslog+0x10/0x10 [ 1205.772740][T21500] __x64_sys_syslog+0x74/0xb0 [ 1205.772778][T21500] ? lockdep_hardirqs_on+0x78/0x100 [ 1205.772821][T21500] do_syscall_64+0x106/0xf80 [ 1205.772861][T21500] ? clear_bhb_loop+0x40/0x90 [ 1205.772893][T21500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.772920][T21500] RIP: 0033:0x7f6bc719c799 [ 1205.772941][T21500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.772966][T21500] RSP: 002b:00007f6bc7f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1205.772990][T21500] RAX: ffffffffffffffda RBX: 00007f6bc7415fa0 RCX: 00007f6bc719c799 [ 1205.773007][T21500] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004 [ 1205.773024][T21500] RBP: 00007f6bc7232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1205.773039][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.773055][T21500] R13: 00007f6bc7416038 R14: 00007f6bc7415fa0 R15: 00007fff9374b408 [ 1205.773088][T21500] [ 1206.293394][T21503] FAULT_INJECTION: forcing a failure. [ 1206.293394][T21503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.293459][T21503] CPU: 0 UID: 0 PID: 21503 Comm: syz.3.3562 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1206.293506][T21503] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1206.293520][T21503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1206.293535][T21503] Call Trace: [ 1206.293543][T21503] [ 1206.293552][T21503] dump_stack_lvl+0x100/0x190 [ 1206.293594][T21503] should_fail_ex.cold+0x5/0xa [ 1206.293624][T21503] _copy_to_iter+0x5a4/0x1720 [ 1206.293664][T21503] ? __pfx__copy_to_iter+0x10/0x10 [ 1206.293692][T21503] ? __up_read+0x2c5/0x700 [ 1206.293730][T21503] ? __pfx___up_read+0x10/0x10 [ 1206.293763][T21503] ? seq_read_iter+0xd33/0x1270 [ 1206.293801][T21503] ? seq_read_iter+0xd33/0x1270 [ 1206.293845][T21503] seq_read_iter+0xdab/0x1270 [ 1206.293895][T21503] seq_read+0x33b/0x4c0 [ 1206.293932][T21503] ? __pfx_seq_read+0x10/0x10 [ 1206.293987][T21503] ? __pfx_seq_read+0x10/0x10 [ 1206.294025][T21503] proc_reg_read+0x120/0x330 [ 1206.294063][T21503] ? __pfx_proc_reg_read+0x10/0x10 [ 1206.294101][T21503] vfs_read+0x1e4/0xb30 [ 1206.294135][T21503] ? __pfx_vfs_read+0x10/0x10 [ 1206.294157][T21503] ? __fget_files+0x215/0x3d0 [ 1206.294187][T21503] ? __fget_files+0x21f/0x3d0 [ 1206.294219][T21503] ksys_read+0x12a/0x250 [ 1206.294242][T21503] ? __pfx_ksys_read+0x10/0x10 [ 1206.294273][T21503] do_syscall_64+0x106/0xf80 [ 1206.294312][T21503] ? clear_bhb_loop+0x40/0x90 [ 1206.294342][T21503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.294366][T21503] RIP: 0033:0x7fb88eb9c799 [ 1206.294386][T21503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.294410][T21503] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1206.294432][T21503] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1206.294453][T21503] RDX: 00000000000000bf RSI: 0000200000000100 RDI: 0000000000000003 [ 1206.294467][T21503] RBP: 00007fb88fabe090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.294482][T21503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.294496][T21503] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1206.294527][T21503] [ 1207.874291][T21526] sd 0:0:1:0: PR command failed: 1026 [ 1207.941634][T21526] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1208.086179][T21526] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1208.331378][T21533] random: crng reseeded on system resumption [ 1208.713580][T21525] FAULT_INJECTION: forcing a failure. [ 1208.713580][T21525] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.788318][T21525] CPU: 0 UID: 0 PID: 21525 Comm: syz.0.3567 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1208.788375][T21525] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1208.788392][T21525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.788408][T21525] Call Trace: [ 1208.788417][T21525] [ 1208.788427][T21525] dump_stack_lvl+0x100/0x190 [ 1208.788472][T21525] should_fail_ex.cold+0x5/0xa [ 1208.788503][T21525] should_failslab+0xc2/0x120 [ 1208.788532][T21525] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1208.788572][T21525] ? ep_ptable_queue_proc+0x5b/0x280 [ 1208.788604][T21525] ep_ptable_queue_proc+0x5b/0x280 [ 1208.788630][T21525] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1208.788655][T21525] snd_seq_pool_poll_wait+0x5b/0x190 [ 1208.788785][T21525] snd_seq_kernel_client_write_poll+0xa5/0x110 [ 1208.788816][T21525] snd_seq_oss_poll+0x17d/0x1d0 [ 1208.788851][T21525] ? __pfx_odev_poll+0x10/0x10 [ 1208.788877][T21525] odev_poll+0x4a/0x90 [ 1208.788904][T21525] ep_item_poll+0x141/0x1f0 [ 1208.788939][T21525] do_epoll_ctl+0x1f33/0x36a0 [ 1208.788980][T21525] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1208.789008][T21525] ? find_held_lock+0x2b/0x80 [ 1208.789033][T21525] ? __might_fault+0xc5/0x140 [ 1208.789070][T21525] ? __might_fault+0xc5/0x140 [ 1208.789105][T21525] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1208.789141][T21525] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1208.789169][T21525] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1208.789198][T21525] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1208.789237][T21525] do_syscall_64+0x106/0xf80 [ 1208.789278][T21525] ? clear_bhb_loop+0x40/0x90 [ 1208.789309][T21525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.789336][T21525] RIP: 0033:0x7f6bc719c799 [ 1208.789356][T21525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.789382][T21525] RSP: 002b:00007f6bc7f82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1208.789406][T21525] RAX: ffffffffffffffda RBX: 00007f6bc7415fa0 RCX: 00007f6bc719c799 [ 1208.789423][T21525] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 1208.789438][T21525] RBP: 00007f6bc7232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1208.789454][T21525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.789470][T21525] R13: 00007f6bc7416038 R14: 00007f6bc7415fa0 R15: 00007fff9374b408 [ 1208.789502][T21525] [ 1209.509038][T21547] FAULT_INJECTION: forcing a failure. [ 1209.509038][T21547] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.592261][T21547] CPU: 0 UID: 0 PID: 21547 Comm: syz.3.3573 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1209.592319][T21547] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1209.592337][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.592353][T21547] Call Trace: [ 1209.592363][T21547] [ 1209.592373][T21547] dump_stack_lvl+0x100/0x190 [ 1209.592418][T21547] should_fail_ex.cold+0x5/0xa [ 1209.592449][T21547] ? ring_buffer_read_start+0x1b9/0x460 [ 1209.592488][T21547] should_failslab+0xc2/0x120 [ 1209.592518][T21547] __kmalloc_noprof+0xe0/0x850 [ 1209.592565][T21547] ring_buffer_read_start+0x1b9/0x460 [ 1209.592607][T21547] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1209.592646][T21547] ? lockdep_init_map_type+0x5c/0x250 [ 1209.592684][T21547] ? ring_buffer_overruns+0x14e/0x1a0 [ 1209.592720][T21547] tracing_open+0x9cd/0xef0 [ 1209.592758][T21547] do_dentry_open+0x6d8/0x1660 [ 1209.592784][T21547] ? __pfx_tracing_open+0x10/0x10 [ 1209.592833][T21547] vfs_open+0x82/0x3f0 [ 1209.592871][T21547] path_openat+0x208c/0x31a0 [ 1209.592909][T21547] ? __pfx_path_openat+0x10/0x10 [ 1209.592949][T21547] do_file_open+0x20e/0x430 [ 1209.593057][T21547] ? __pfx_do_file_open+0x10/0x10 [ 1209.593116][T21547] ? alloc_fd+0x476/0x790 [ 1209.593146][T21547] ? do_getname+0x191/0x390 [ 1209.593183][T21547] do_sys_openat2+0x10d/0x1e0 [ 1209.593219][T21547] ? __pfx_do_sys_openat2+0x10/0x10 [ 1209.593258][T21547] ? __fget_files+0x21f/0x3d0 [ 1209.593289][T21547] __x64_sys_openat+0x12d/0x210 [ 1209.593328][T21547] ? __pfx___x64_sys_openat+0x10/0x10 [ 1209.593414][T21547] do_syscall_64+0x106/0xf80 [ 1209.593458][T21547] ? clear_bhb_loop+0x40/0x90 [ 1209.593489][T21547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.593520][T21547] RIP: 0033:0x7fb88eb9c799 [ 1209.593543][T21547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.593569][T21547] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1209.593594][T21547] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1209.593612][T21547] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1209.593630][T21547] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1209.593647][T21547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.593664][T21547] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1209.593698][T21547] [ 1211.850296][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1211.887679][T21564] zswap: compressor not available [ 1212.391645][T21567] zswap: compressor not available [ 1213.255768][T21591] FAULT_INJECTION: forcing a failure. [ 1213.255768][T21591] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.368068][T21591] CPU: 0 UID: 0 PID: 21591 Comm: syz.2.3581 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1213.368149][T21591] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1213.368163][T21591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.368179][T21591] Call Trace: [ 1213.368188][T21591] [ 1213.368198][T21591] dump_stack_lvl+0x100/0x190 [ 1213.368241][T21591] should_fail_ex.cold+0x5/0xa [ 1213.368271][T21591] ? lsm_blob_alloc+0x68/0x90 [ 1213.368308][T21591] should_failslab+0xc2/0x120 [ 1213.368337][T21591] __kmalloc_noprof+0xe0/0x850 [ 1213.368377][T21591] ? down_write_nested+0x14f/0x200 [ 1213.368421][T21591] lsm_blob_alloc+0x68/0x90 [ 1213.368460][T21591] security_sb_alloc+0x25/0x240 [ 1213.368491][T21591] alloc_super+0x24c/0xd20 [ 1213.368536][T21591] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1213.368578][T21591] sget_fc+0x117/0xc70 [ 1213.368618][T21591] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1213.368658][T21591] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1213.368698][T21591] get_tree_nodev+0x28/0x190 [ 1213.368741][T21591] mqueue_get_tree+0xf1/0x130 [ 1213.368781][T21591] vfs_get_tree+0x92/0x320 [ 1213.368819][T21591] fc_mount_longterm+0x1a/0x270 [ 1213.368859][T21591] mq_init_ns+0x482/0x820 [ 1213.368888][T21591] copy_ipcs+0x3dd/0x7e0 [ 1213.368918][T21591] create_new_namespaces+0x20a/0xac0 [ 1213.368946][T21591] ? security_capable+0x80/0x260 [ 1213.368991][T21591] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1213.369022][T21591] ksys_unshare+0x473/0xad0 [ 1213.369059][T21591] ? __pfx_ksys_unshare+0x10/0x10 [ 1213.369103][T21591] __x64_sys_unshare+0x31/0x40 [ 1213.369136][T21591] do_syscall_64+0x106/0xf80 [ 1213.369177][T21591] ? clear_bhb_loop+0x40/0x90 [ 1213.369208][T21591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.369235][T21591] RIP: 0033:0x7fb3ea59c799 [ 1213.369256][T21591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.369282][T21591] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1213.369306][T21591] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1213.369324][T21591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1213.369339][T21591] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1213.369356][T21591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.369371][T21591] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1213.369403][T21591] [ 1214.020587][T21593] futex_wake_op: syz.3.3582 tries to shift op by -2048; fix this program [ 1214.048073][T21594] futex_wake_op: syz.3.3582 tries to shift op by -2048; fix this program [ 1214.125722][T21593] 0x000500000001-0x000513a80b70 : "" [ 1214.158218][T21593] mtd: partition "" is out of reach -- disabled [ 1214.322708][T21593] ftl_cs: FTL header not found. [ 1214.348534][T17459] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 914 with max blocks 4 with error 74 [ 1214.407961][T17459] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1214.407961][T17459] [ 1216.191226][T21618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1216.943438][T21630] FAULT_INJECTION: forcing a failure. [ 1216.943438][T21630] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.012274][T21630] CPU: 0 UID: 0 PID: 21630 Comm: syz.3.3589 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1217.012333][T21630] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1217.012348][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.012365][T21630] Call Trace: [ 1217.012374][T21630] [ 1217.012384][T21630] dump_stack_lvl+0x100/0x190 [ 1217.012428][T21630] should_fail_ex.cold+0x5/0xa [ 1217.012458][T21630] should_failslab+0xc2/0x120 [ 1217.012487][T21630] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1217.012523][T21630] ? mqueue_init_fs_context+0x4b/0x690 [ 1217.012555][T21630] mqueue_init_fs_context+0x4b/0x690 [ 1217.012583][T21630] alloc_fs_context+0x60c/0xf40 [ 1217.012620][T21630] mq_init_ns+0x16e/0x820 [ 1217.012649][T21630] copy_ipcs+0x3dd/0x7e0 [ 1217.012678][T21630] create_new_namespaces+0x20a/0xac0 [ 1217.012716][T21630] ? security_capable+0x80/0x260 [ 1217.012762][T21630] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1217.012793][T21630] ksys_unshare+0x473/0xad0 [ 1217.012829][T21630] ? __pfx_ksys_unshare+0x10/0x10 [ 1217.012874][T21630] __x64_sys_unshare+0x31/0x40 [ 1217.012906][T21630] do_syscall_64+0x106/0xf80 [ 1217.012948][T21630] ? clear_bhb_loop+0x40/0x90 [ 1217.012979][T21630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.013006][T21630] RIP: 0033:0x7fb88eb9c799 [ 1217.013026][T21630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.013052][T21630] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1217.013076][T21630] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1217.013093][T21630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1217.013109][T21630] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1217.013125][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.013141][T21630] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1217.013174][T21630] [ 1218.433080][T17471] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 914 with max blocks 1 with error 117 [ 1218.495986][T17471] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1218.495986][T17471] [ 1219.536281][T21666] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 1219.584695][T21666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1219.659036][T21666] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1219.746620][T21666] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1219.807061][T21666] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 1219.846140][T21666] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1219.884079][T21666] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 1219.928041][T21666] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 1219.972910][T21666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1220.017428][T21666] page dumped because: unmovable page [ 1220.044557][T21666] page_owner tracks the page as allocated [ 1220.074914][T21666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 73929375292, free_ts 64827792491 [ 1220.158970][T21666] post_alloc_hook+0x153/0x170 [ 1220.197964][T21666] get_page_from_freelist+0x111d/0x3140 [ 1220.224156][T21666] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1220.260123][T21666] alloc_pages_mpol+0x1fb/0x550 [ 1220.265050][T21666] alloc_pages_noprof+0x131/0x390 [ 1220.297986][T21666] skb_page_frag_refill+0x365/0x5b0 [ 1220.318098][T21666] try_fill_recv+0x7f1/0x2930 [ 1220.346496][T21666] virtnet_poll+0x154a/0x3a20 [ 1220.364394][T21666] __napi_poll.constprop.0+0xaf/0x450 [ 1220.384993][T21666] net_rx_action+0xa40/0xf20 [ 1220.410267][T21666] handle_softirqs+0x1eb/0x9e0 [ 1220.440208][T21666] __irq_exit_rcu+0xef/0x150 [ 1220.468042][T21666] irq_exit_rcu+0x9/0x30 [ 1220.474604][T21676] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 1220.474604][T21676] program syz.1.3599 not setting count and/or reply_len properly [ 1220.492279][T21666] common_interrupt+0xbe/0xe0 [ 1220.511267][T21666] asm_common_interrupt+0x26/0x40 [ 1220.537529][T21666] page last free pid 5494 tgid 5494 stack trace: [ 1220.568303][T21666] __free_pages_ok+0x762/0xfc0 [ 1220.573159][T21666] proc_sys_call_handler+0x4af/0x5a0 [ 1220.611921][T21666] vfs_read+0x825/0xb30 [ 1220.631541][T21666] ksys_read+0x12a/0x250 [ 1220.654055][T21666] do_syscall_64+0x106/0xf80 [ 1220.672219][T21666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.135525][T21685] FAULT_INJECTION: forcing a failure. [ 1221.135525][T21685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1221.212855][T21685] CPU: 0 UID: 0 PID: 21685 Comm: syz.3.3603 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1221.212908][T21685] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1221.212922][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.212937][T21685] Call Trace: [ 1221.212945][T21685] [ 1221.212955][T21685] dump_stack_lvl+0x100/0x190 [ 1221.212998][T21685] should_fail_ex.cold+0x5/0xa [ 1221.213023][T21685] ? prepare_alloc_pages+0x16d/0x5f0 [ 1221.213056][T21685] should_fail_alloc_page+0xeb/0x140 [ 1221.213085][T21685] prepare_alloc_pages+0x1f0/0x5f0 [ 1221.213113][T21685] ? kernel_text_address+0x8d/0x100 [ 1221.213154][T21685] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1221.213203][T21685] ? copy_splice_read+0x1a3/0xb90 [ 1221.213227][T21685] ? stack_trace_save+0x8e/0xc0 [ 1221.213253][T21685] ? __pfx_stack_trace_save+0x10/0x10 [ 1221.213290][T21685] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1221.213332][T21685] ? copy_splice_read+0x1a3/0xb90 [ 1221.213354][T21685] ? kasan_save_stack+0x3f/0x50 [ 1221.213375][T21685] ? kasan_save_stack+0x30/0x50 [ 1221.213395][T21685] ? kasan_save_track+0x14/0x30 [ 1221.213416][T21685] ? __kasan_kmalloc+0xaa/0xb0 [ 1221.213452][T21685] ? __kmalloc_noprof+0x301/0x850 [ 1221.213489][T21685] ? copy_splice_read+0x1a3/0xb90 [ 1221.213511][T21685] ? do_splice_read+0x2bd/0x370 [ 1221.213537][T21685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.213577][T21685] alloc_pages_bulk_noprof+0x782/0x1490 [ 1221.213627][T21685] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1221.213673][T21685] ? __kmalloc_noprof+0x320/0x850 [ 1221.213716][T21685] copy_splice_read+0x1e1/0xb90 [ 1221.213746][T21685] ? __pfx_copy_splice_read+0x10/0x10 [ 1221.213773][T21685] ? look_up_lock_class+0x55/0x120 [ 1221.213821][T21685] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1221.213846][T21685] ? __pfx_filemap_splice_read+0x10/0x10 [ 1221.213872][T21685] do_splice_read+0x2bd/0x370 [ 1221.213900][T21685] splice_direct_to_actor+0x2a1/0xa30 [ 1221.213927][T21685] ? __pfx_direct_splice_actor+0x10/0x10 [ 1221.213957][T21685] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1221.213991][T21685] do_splice_direct+0x174/0x240 [ 1221.214017][T21685] ? __pfx_do_splice_direct+0x10/0x10 [ 1221.214043][T21685] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1221.214085][T21685] ? bpf_lsm_file_permission+0x9/0x10 [ 1221.214108][T21685] ? security_file_permission+0x76/0x210 [ 1221.214142][T21685] ? rw_verify_area+0xce/0x6d0 [ 1221.214181][T21685] do_sendfile+0xadc/0xe20 [ 1221.214224][T21685] ? __pfx_do_sendfile+0x10/0x10 [ 1221.214263][T21685] ? __fget_files+0x21f/0x3d0 [ 1221.214300][T21685] __x64_sys_sendfile64+0x1d8/0x220 [ 1221.214327][T21685] ? ksys_write+0x1ac/0x250 [ 1221.214350][T21685] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1221.214387][T21685] do_syscall_64+0x106/0xf80 [ 1221.214424][T21685] ? clear_bhb_loop+0x40/0x90 [ 1221.214453][T21685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.214478][T21685] RIP: 0033:0x7fb88eb9c799 [ 1221.214497][T21685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.214522][T21685] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1221.214545][T21685] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1221.214561][T21685] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1221.214576][T21685] RBP: 00007fb88fabe090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.214591][T21685] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000002 [ 1221.214606][T21685] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1221.214636][T21685] [ 1222.139600][T21693] block2mtd: illegal erase size [ 1222.157175][T21693] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 1222.171550][T21691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1223.423972][ T29] audit: type=1800 audit(4294975709.512:13): pid=21711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3610" name="dummy_udc" dev="gadgetfs" ino=6635 res=0 errno=0 [ 1223.712031][T21715] random: crng reseeded on system resumption [ 1224.020442][T21724] FAULT_INJECTION: forcing a failure. [ 1224.020442][T21724] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.081890][T21724] CPU: 0 UID: 0 PID: 21724 Comm: syz.2.3616 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1224.081946][T21724] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1224.081962][T21724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1224.081977][T21724] Call Trace: [ 1224.081986][T21724] [ 1224.081996][T21724] dump_stack_lvl+0x100/0x190 [ 1224.082040][T21724] should_fail_ex.cold+0x5/0xa [ 1224.082071][T21724] should_failslab+0xc2/0x120 [ 1224.082100][T21724] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1224.082136][T21724] ? ring_buffer_read_start+0x149/0x460 [ 1224.082183][T21724] ring_buffer_read_start+0x149/0x460 [ 1224.082226][T21724] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1224.082265][T21724] ? lockdep_init_map_type+0x5c/0x250 [ 1224.082303][T21724] ? ring_buffer_overruns+0x14e/0x1a0 [ 1224.082339][T21724] tracing_open+0x9cd/0xef0 [ 1224.082376][T21724] do_dentry_open+0x6d8/0x1660 [ 1224.082402][T21724] ? __pfx_tracing_open+0x10/0x10 [ 1224.082441][T21724] vfs_open+0x82/0x3f0 [ 1224.082479][T21724] path_openat+0x208c/0x31a0 [ 1224.082517][T21724] ? __pfx_path_openat+0x10/0x10 [ 1224.082555][T21724] do_file_open+0x20e/0x430 [ 1224.082586][T21724] ? __pfx_do_file_open+0x10/0x10 [ 1224.082635][T21724] ? alloc_fd+0x476/0x790 [ 1224.082664][T21724] ? do_getname+0x191/0x390 [ 1224.082700][T21724] do_sys_openat2+0x10d/0x1e0 [ 1224.082745][T21724] ? __pfx_do_sys_openat2+0x10/0x10 [ 1224.082782][T21724] ? __fget_files+0x21f/0x3d0 [ 1224.082814][T21724] __x64_sys_openat+0x12d/0x210 [ 1224.082851][T21724] ? __pfx___x64_sys_openat+0x10/0x10 [ 1224.082899][T21724] do_syscall_64+0x106/0xf80 [ 1224.082939][T21724] ? clear_bhb_loop+0x40/0x90 [ 1224.082970][T21724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.082997][T21724] RIP: 0033:0x7fb3ea59c799 [ 1224.083018][T21724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.083042][T21724] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1224.083066][T21724] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1224.083083][T21724] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1224.083100][T21724] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1224.083116][T21724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.083131][T21724] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1224.083163][T21724] [ 1224.617515][T17459] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 11 with max blocks 6 with error 117 [ 1224.634363][T17459] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1224.634363][T17459] [ 1225.933244][T21764] FAULT_INJECTION: forcing a failure. [ 1225.933244][T21764] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.025556][T21764] CPU: 0 UID: 0 PID: 21764 Comm: syz.2.3629 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1226.025612][T21764] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1226.025627][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.025642][T21764] Call Trace: [ 1226.025650][T21764] [ 1226.025660][T21764] dump_stack_lvl+0x100/0x190 [ 1226.025703][T21764] should_fail_ex.cold+0x5/0xa [ 1226.025734][T21764] should_failslab+0xc2/0x120 [ 1226.025763][T21764] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1226.025799][T21764] ? ring_buffer_read_start+0x149/0x460 [ 1226.025846][T21764] ring_buffer_read_start+0x149/0x460 [ 1226.025886][T21764] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 1226.025925][T21764] ? lockdep_init_map_type+0x5c/0x250 [ 1226.025962][T21764] ? ring_buffer_overruns+0x14e/0x1a0 [ 1226.025998][T21764] tracing_open+0x9cd/0xef0 [ 1226.026035][T21764] do_dentry_open+0x6d8/0x1660 [ 1226.026069][T21764] ? __pfx_tracing_open+0x10/0x10 [ 1226.026111][T21764] vfs_open+0x82/0x3f0 [ 1226.026148][T21764] path_openat+0x208c/0x31a0 [ 1226.026187][T21764] ? __pfx_path_openat+0x10/0x10 [ 1226.026225][T21764] do_file_open+0x20e/0x430 [ 1226.026255][T21764] ? __pfx_do_file_open+0x10/0x10 [ 1226.026304][T21764] ? alloc_fd+0x476/0x790 [ 1226.026334][T21764] ? do_getname+0x191/0x390 [ 1226.026370][T21764] do_sys_openat2+0x10d/0x1e0 [ 1226.026405][T21764] ? __pfx_do_sys_openat2+0x10/0x10 [ 1226.026442][T21764] ? __fget_files+0x21f/0x3d0 [ 1226.026473][T21764] __x64_sys_openat+0x12d/0x210 [ 1226.026510][T21764] ? __pfx___x64_sys_openat+0x10/0x10 [ 1226.026563][T21764] do_syscall_64+0x106/0xf80 [ 1226.026604][T21764] ? clear_bhb_loop+0x40/0x90 [ 1226.026635][T21764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.026662][T21764] RIP: 0033:0x7fb3ea59c799 [ 1226.026683][T21764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.026709][T21764] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1226.026733][T21764] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1226.026751][T21764] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1226.026768][T21764] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1226.026784][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.026799][T21764] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1226.026832][T21764] [ 1226.465129][T21771] random: crng reseeded on system resumption [ 1226.703112][T21775] : Can't lookup blockdev [ 1226.707622][T21775] FAULT_INJECTION: forcing a failure. [ 1226.707622][T21775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.722671][T21773] : Can't lookup blockdev [ 1226.771374][T21775] CPU: 0 UID: 0 PID: 21775 Comm: syz.0.3632 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1226.771438][T21775] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1226.771452][T21775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.771467][T21775] Call Trace: [ 1226.771475][T21775] [ 1226.771484][T21775] dump_stack_lvl+0x100/0x190 [ 1226.771527][T21775] should_fail_ex.cold+0x5/0xa [ 1226.771556][T21775] _copy_to_user+0x32/0xd0 [ 1226.771589][T21775] simple_read_from_buffer+0xcb/0x170 [ 1226.771630][T21775] proc_fail_nth_read+0x1af/0x230 [ 1226.771662][T21775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.771694][T21775] ? rw_verify_area+0xce/0x6d0 [ 1226.771730][T21775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.771760][T21775] vfs_read+0x1e4/0xb30 [ 1226.771786][T21775] ? __pfx_vfs_read+0x10/0x10 [ 1226.771808][T21775] ? __fget_files+0x215/0x3d0 [ 1226.771839][T21775] ? __fget_files+0x21f/0x3d0 [ 1226.771870][T21775] ksys_read+0x12a/0x250 [ 1226.771893][T21775] ? __pfx_ksys_read+0x10/0x10 [ 1226.771924][T21775] do_syscall_64+0x106/0xf80 [ 1226.771963][T21775] ? clear_bhb_loop+0x40/0x90 [ 1226.771993][T21775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.772017][T21775] RIP: 0033:0x7f6bc715cfce [ 1226.772037][T21775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1226.772060][T21775] RSP: 002b:00007f6bc7f81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1226.772084][T21775] RAX: ffffffffffffffda RBX: 00007f6bc7f826c0 RCX: 00007f6bc715cfce [ 1226.772100][T21775] RDX: 000000000000000f RSI: 00007f6bc7f820a0 RDI: 0000000000000004 [ 1226.772115][T21775] RBP: 00007f6bc7f82090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.772129][T21775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1226.772144][T21775] R13: 00007f6bc7416038 R14: 00007f6bc7415fa0 R15: 00007fff9374b408 [ 1226.772175][T21775] [ 1228.498397][T21799] blktrace: Concurrent blktraces are not allowed on sda1 [ 1229.558973][T21811] block2mtd: illegal erase size [ 1230.127677][T21816] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 1230.277414][T21813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1230.312196][T21813] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1230.359841][T21813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1230.383722][T21813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1230.422410][T21813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1231.598411][T18070] Bluetooth: hci3: command 0x0c1a tx timeout [ 1232.398058][T18070] Bluetooth: hci2: command 0x0c1a tx timeout [ 1232.404234][T17468] Bluetooth: hci4: command 0x0c1a tx timeout [ 1232.478354][T18070] Bluetooth: hci1: command 0x0c1a tx timeout [ 1232.981556][T21848] futex_wake_op: syz.2.3652 tries to shift op by -2048; fix this program [ 1233.678823][T18070] Bluetooth: hci3: command 0x0c1a tx timeout [ 1233.932309][T21883] usb usb15: usbfs: process 21883 (syz.3.3660) did not claim interface 0 before use [ 1235.876866][T21911] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1235.925166][T21911] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1237.129137][T21926] FAULT_INJECTION: forcing a failure. [ 1237.129137][T21926] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.178156][T21926] CPU: 0 UID: 0 PID: 21926 Comm: syz.0.3671 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1237.178216][T21926] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1237.178232][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.178248][T21926] Call Trace: [ 1237.178257][T21926] [ 1237.178266][T21926] dump_stack_lvl+0x100/0x190 [ 1237.178311][T21926] should_fail_ex.cold+0x5/0xa [ 1237.178342][T21926] should_failslab+0xc2/0x120 [ 1237.178371][T21926] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1237.178411][T21926] ? __kernfs_new_node+0xd2/0x960 [ 1237.178455][T21926] __kernfs_new_node+0xd2/0x960 [ 1237.178497][T21926] ? __pfx___kernfs_new_node+0x10/0x10 [ 1237.178542][T21926] ? find_held_lock+0x2b/0x80 [ 1237.178568][T21926] ? kernfs_root+0xee/0x2a0 [ 1237.178604][T21926] ? kernfs_root+0xee/0x2a0 [ 1237.178648][T21926] kernfs_new_node+0x11b/0x1a0 [ 1237.178677][T21926] __kernfs_create_file+0x53/0x350 [ 1237.178711][T21926] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1237.178754][T21926] sysfs_create_file_ns+0x145/0x1e0 [ 1237.178790][T21926] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1237.178830][T21926] ? mark_held_locks+0x40/0x70 [ 1237.178868][T21926] device_create_file+0xf2/0x1d0 [ 1237.178910][T21926] device_add+0xa74/0x1950 [ 1237.178945][T21926] ? __pfx_device_add+0x10/0x10 [ 1237.178975][T21926] ? __pfx___might_resched+0x10/0x10 [ 1237.179022][T21926] ? lockdep_hardirqs_on+0x78/0x100 [ 1237.179074][T21926] __add_disk+0x518/0xe40 [ 1237.179107][T21926] add_disk_fwnode+0x118/0x5c0 [ 1237.179137][T21926] loop_add+0x90b/0xb60 [ 1237.179175][T21926] ? __pfx_loop_add+0x10/0x10 [ 1237.179230][T21926] ? find_held_lock+0x2b/0x80 [ 1237.179254][T21926] ? __fget_files+0x215/0x3d0 [ 1237.179283][T21926] loop_control_ioctl+0xae/0x620 [ 1237.179322][T21926] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1237.179365][T21926] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1237.179406][T21926] __x64_sys_ioctl+0x18e/0x210 [ 1237.179447][T21926] do_syscall_64+0x106/0xf80 [ 1237.179487][T21926] ? clear_bhb_loop+0x40/0x90 [ 1237.179518][T21926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.179544][T21926] RIP: 0033:0x7f6bc719c799 [ 1237.179566][T21926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.179592][T21926] RSP: 002b:00007f6bc7f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.179626][T21926] RAX: ffffffffffffffda RBX: 00007f6bc7415fa0 RCX: 00007f6bc719c799 [ 1237.179643][T21926] RDX: 0000000000000339 RSI: 0000000000004c80 RDI: 0000000000000006 [ 1237.179660][T21926] RBP: 00007f6bc7232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1237.179676][T21926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.179692][T21926] R13: 00007f6bc7416038 R14: 00007f6bc7415fa0 R15: 00007fff9374b408 [ 1237.179725][T21926] [ 1238.580419][T21942] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1238.884717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.891885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.393551][T21951] FAULT_INJECTION: forcing a failure. [ 1239.393551][T21951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.470284][T21951] CPU: 0 UID: 0 PID: 21951 Comm: syz.0.3678 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1239.470337][T21951] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1239.470351][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.470366][T21951] Call Trace: [ 1239.470374][T21951] [ 1239.470383][T21951] dump_stack_lvl+0x100/0x190 [ 1239.470426][T21951] should_fail_ex.cold+0x5/0xa [ 1239.470456][T21951] _copy_from_user+0x2e/0xd0 [ 1239.470488][T21951] core_sys_select+0x472/0xbb0 [ 1239.470518][T21951] ? __pfx_core_sys_select+0x10/0x10 [ 1239.470541][T21951] ? get_pid_task+0xfc/0x250 [ 1239.470578][T21951] ? get_pid_task+0x106/0x250 [ 1239.470627][T21951] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1239.470654][T21951] ? __fget_files+0x215/0x3d0 [ 1239.470679][T21951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1239.470708][T21951] kern_select+0x20c/0x270 [ 1239.470747][T21951] ? __pfx_kern_select+0x10/0x10 [ 1239.470774][T21951] ? __pfx_ksys_write+0x10/0x10 [ 1239.470802][T21951] __x64_sys_select+0xbd/0x160 [ 1239.470824][T21951] ? do_syscall_64+0x95/0xf80 [ 1239.470862][T21951] ? lockdep_hardirqs_on+0x78/0x100 [ 1239.470899][T21951] do_syscall_64+0x106/0xf80 [ 1239.470937][T21951] ? clear_bhb_loop+0x40/0x90 [ 1239.470966][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.470991][T21951] RIP: 0033:0x7f6bc719c799 [ 1239.471010][T21951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.471033][T21951] RSP: 002b:00007f6bc7f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1239.471056][T21951] RAX: ffffffffffffffda RBX: 00007f6bc7415fa0 RCX: 00007f6bc719c799 [ 1239.471072][T21951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d [ 1239.471087][T21951] RBP: 00007f6bc7f82090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.471101][T21951] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1239.471116][T21951] R13: 00007f6bc7416038 R14: 00007f6bc7415fa0 R15: 00007fff9374b408 [ 1239.471146][T21951] [ 1241.303844][T21963] KVM: debugfs: duplicate directory 21963-4 [ 1242.693103][T22000] netlink: 5176 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1243.606351][T22011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.704463][T22011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.851017][T22041] ucma_write: process 1601 (syz.1.3703) changed security contexts after opening file descriptor, this is not allowed. [ 1246.724534][T22056] FAULT_INJECTION: forcing a failure. [ 1246.724534][T22056] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.812931][T22056] CPU: 0 UID: 0 PID: 22056 Comm: syz.2.3707 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1246.812984][T22056] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1246.812998][T22056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1246.813013][T22056] Call Trace: [ 1246.813021][T22056] [ 1246.813030][T22056] dump_stack_lvl+0x100/0x190 [ 1246.813072][T22056] should_fail_ex.cold+0x5/0xa [ 1246.813102][T22056] should_failslab+0xc2/0x120 [ 1246.813135][T22056] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1246.813172][T22056] ? ptlock_alloc+0x1f/0x70 [ 1246.813211][T22056] ? __pfx_filemap_map_pages+0x10/0x10 [ 1246.813249][T22056] ptlock_alloc+0x1f/0x70 [ 1246.813285][T22056] pte_alloc_one+0x82/0x3d0 [ 1246.813314][T22056] __do_fault+0x359/0x550 [ 1246.813340][T22056] ? __pfx_filemap_map_pages+0x10/0x10 [ 1246.813376][T22056] do_fault+0x2db/0x1990 [ 1246.813403][T22056] ? __pmd_alloc+0x3fb/0x950 [ 1246.813435][T22056] __handle_mm_fault+0x180f/0x2b60 [ 1246.813473][T22056] ? mt_find+0x45e/0x8e0 [ 1246.813500][T22056] ? __pfx___handle_mm_fault+0x10/0x10 [ 1246.813533][T22056] ? __pfx_mt_find+0x10/0x10 [ 1246.813572][T22056] ? find_vma+0xbf/0x140 [ 1246.813596][T22056] ? __pfx_find_vma+0x10/0x10 [ 1246.813623][T22056] handle_mm_fault+0x36d/0xa20 [ 1246.813663][T22056] do_user_addr_fault+0x74c/0x12f0 [ 1246.813696][T22056] exc_page_fault+0x6f/0xd0 [ 1246.813735][T22056] asm_exc_page_fault+0x26/0x30 [ 1246.813758][T22056] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1246.813790][T22056] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1246.813815][T22056] RSP: 0018:ffffc9000527fcc0 EFLAGS: 00050202 [ 1246.813835][T22056] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 1246.813851][T22056] RDX: 0000000000000001 RSI: ffffc9000527fd38 RDI: 0000000000000000 [ 1246.813867][T22056] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000a4ffab [ 1246.813882][T22056] R10: ffffc9000527fd5f R11: 0000000000000000 R12: ffffc9000527fd38 [ 1246.813898][T22056] R13: 0000000000000028 R14: 00007ffffffff000 R15: 0000000000000000 [ 1246.813928][T22056] _copy_to_user+0xa4/0xd0 [ 1246.813961][T22056] semctl_info.isra.0+0x331/0x440 [ 1246.813987][T22056] ? __pfx_semctl_info.isra.0+0x10/0x10 [ 1246.814016][T22056] ? do_futex+0x192/0x350 [ 1246.814049][T22056] ? __pfx_do_futex+0x10/0x10 [ 1246.814083][T22056] ksys_semctl.constprop.0+0x1df/0x2e0 [ 1246.814117][T22056] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 1246.814144][T22056] ? __x64_sys_futex+0x34f/0x4d0 [ 1246.814194][T22056] do_syscall_64+0x106/0xf80 [ 1246.814230][T22056] ? clear_bhb_loop+0x40/0x90 [ 1246.814260][T22056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.814283][T22056] RIP: 0033:0x7fb3ea59c799 [ 1246.814302][T22056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.814325][T22056] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1246.814346][T22056] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1246.814362][T22056] RDX: 0000000000000003 RSI: fffffffffffffffa RDI: 0000000000000201 [ 1246.814377][T22056] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1246.814392][T22056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1246.814406][T22056] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1246.814436][T22056] [ 1249.166773][T22076] FAULT_INJECTION: forcing a failure. [ 1249.166773][T22076] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.234055][T22076] CPU: 0 UID: 0 PID: 22076 Comm: syz.2.3712 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1249.234107][T22076] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1249.234120][T22076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1249.234135][T22076] Call Trace: [ 1249.234143][T22076] [ 1249.234152][T22076] dump_stack_lvl+0x100/0x190 [ 1249.234194][T22076] should_fail_ex.cold+0x5/0xa [ 1249.234223][T22076] should_failslab+0xc2/0x120 [ 1249.234250][T22076] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1249.234287][T22076] ? taskstats_exit+0x650/0xbd0 [ 1249.234316][T22076] taskstats_exit+0x650/0xbd0 [ 1249.234338][T22076] ? __pfx_acct_update_integrals+0x10/0x10 [ 1249.234390][T22076] ? __pfx_taskstats_exit+0x10/0x10 [ 1249.234416][T22076] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1249.234441][T22076] ? exit_signals+0x395/0xaf0 [ 1249.234470][T22076] do_exit+0x659/0x2b60 [ 1249.234507][T22076] ? __pfx_do_exit+0x10/0x10 [ 1249.234539][T22076] ? do_raw_spin_lock+0x128/0x260 [ 1249.234575][T22076] ? find_held_lock+0x2b/0x80 [ 1249.234598][T22076] ? get_signal+0x7e0/0x21e0 [ 1249.234627][T22076] do_group_exit+0xd5/0x2a0 [ 1249.234662][T22076] get_signal+0x1ec7/0x21e0 [ 1249.234694][T22076] ? ksys_write+0x190/0x250 [ 1249.234719][T22076] ? __pfx_get_signal+0x10/0x10 [ 1249.234747][T22076] ? do_futex+0x192/0x350 [ 1249.234782][T22076] arch_do_signal_or_restart+0x91/0x770 [ 1249.234819][T22076] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1249.234858][T22076] ? __pfx___x64_sys_futex+0x10/0x10 [ 1249.234897][T22076] exit_to_user_mode_loop+0x86/0x4a0 [ 1249.234932][T22076] do_syscall_64+0x668/0xf80 [ 1249.234970][T22076] ? clear_bhb_loop+0x40/0x90 [ 1249.235000][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.235025][T22076] RIP: 0033:0x7fb3ea59c799 [ 1249.235044][T22076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.235067][T22076] RSP: 002b:00007fb3eb48e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1249.235090][T22076] RAX: fffffffffffffe00 RBX: 00007fb3ea816098 RCX: 00007fb3ea59c799 [ 1249.235106][T22076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3ea816098 [ 1249.235121][T22076] RBP: 00007fb3ea816090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.235136][T22076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.235151][T22076] R13: 00007fb3ea816128 R14: 00007ffde8c64890 R15: 00007ffde8c64978 [ 1249.235181][T22076] [ 1249.736642][T22096] FAULT_INJECTION: forcing a failure. [ 1249.736642][T22096] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.749675][T22096] CPU: 0 UID: 0 PID: 22096 Comm: syz.1.3718 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1249.749726][T22096] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1249.749741][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1249.749756][T22096] Call Trace: [ 1249.749765][T22096] [ 1249.749774][T22096] dump_stack_lvl+0x100/0x190 [ 1249.749815][T22096] should_fail_ex.cold+0x5/0xa [ 1249.749844][T22096] ? tomoyo_encode2+0xfb/0x3c0 [ 1249.749878][T22096] should_failslab+0xc2/0x120 [ 1249.749914][T22096] __kmalloc_noprof+0xe0/0x850 [ 1249.749952][T22096] ? d_absolute_path+0x136/0x1b0 [ 1249.749990][T22096] tomoyo_encode2+0xfb/0x3c0 [ 1249.750027][T22096] tomoyo_encode+0x29/0x50 [ 1249.750058][T22096] tomoyo_realpath_from_path+0x18c/0x690 [ 1249.750098][T22096] tomoyo_path_number_perm+0x23c/0x580 [ 1249.750126][T22096] ? tomoyo_path_number_perm+0x22e/0x580 [ 1249.750156][T22096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1249.750213][T22096] ? find_held_lock+0x2b/0x80 [ 1249.750237][T22096] ? __fget_files+0x215/0x3d0 [ 1249.750260][T22096] ? hook_file_ioctl_common+0x146/0x410 [ 1249.750295][T22096] ? __fget_files+0x21f/0x3d0 [ 1249.750324][T22096] security_file_ioctl+0xd3/0x230 [ 1249.750354][T22096] __x64_sys_ioctl+0xb7/0x210 [ 1249.750393][T22096] do_syscall_64+0x106/0xf80 [ 1249.750437][T22096] ? clear_bhb_loop+0x40/0x90 [ 1249.750468][T22096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.750493][T22096] RIP: 0033:0x7f60b4f9c799 [ 1249.750514][T22096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.750537][T22096] RSP: 002b:00007f60b5e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.750560][T22096] RAX: ffffffffffffffda RBX: 00007f60b5215fa0 RCX: 00007f60b4f9c799 [ 1249.750575][T22096] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000003 [ 1249.750590][T22096] RBP: 00007f60b5e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.750605][T22096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.750619][T22096] R13: 00007f60b5216038 R14: 00007f60b5215fa0 R15: 00007ffcb09936c8 [ 1249.750649][T22096] [ 1249.750673][T22096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1250.888557][T22118] FAULT_INJECTION: forcing a failure. [ 1250.888557][T22118] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.950509][T22118] CPU: 0 UID: 0 PID: 22118 Comm: syz.2.3724 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1250.950560][T22118] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1250.950575][T22118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1250.950590][T22118] Call Trace: [ 1250.950597][T22118] [ 1250.950607][T22118] dump_stack_lvl+0x100/0x190 [ 1250.950649][T22118] should_fail_ex.cold+0x5/0xa [ 1250.950677][T22118] should_failslab+0xc2/0x120 [ 1250.950705][T22118] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1250.950743][T22118] ? vm_area_dup+0x27/0x8e0 [ 1250.950782][T22118] vm_area_dup+0x27/0x8e0 [ 1250.950817][T22118] __split_vma+0x18c/0xd90 [ 1250.950856][T22118] ? __pfx___split_vma+0x10/0x10 [ 1250.950896][T22118] ? __pfx___vma_start_write+0x10/0x10 [ 1250.950928][T22118] ? __pfx_mas_prev+0x10/0x10 [ 1250.950961][T22118] vms_gather_munmap_vmas+0x39f/0x1500 [ 1250.951004][T22118] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1250.951044][T22118] ? mas_walk+0x6ef/0x9b0 [ 1250.951089][T22118] __mmap_region+0x492/0x29e0 [ 1250.951129][T22118] ? __pfx___mmap_region+0x10/0x10 [ 1250.951163][T22118] ? process_measurement+0x1f4/0x2350 [ 1250.951287][T22118] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1250.951316][T22118] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1250.951359][T22118] ? __lock_acquire+0x4a5/0x2630 [ 1250.951415][T22118] ? is_bpf_text_address+0x94/0x1a0 [ 1250.951455][T22118] ? kernel_text_address+0x8d/0x100 [ 1250.951492][T22118] ? __kernel_text_address+0xd/0x30 [ 1250.951563][T22118] ? rcu_is_watching+0x12/0xc0 [ 1250.951602][T22118] ? cap_capable+0x107/0x460 [ 1250.951646][T22118] mmap_region+0x30a/0x3e0 [ 1250.951689][T22118] do_mmap+0xc63/0x12f0 [ 1250.951722][T22118] ? __pfx_do_mmap+0x10/0x10 [ 1250.951749][T22118] ? __pfx_down_write_killable+0x10/0x10 [ 1250.951782][T22118] vm_mmap_pgoff+0x29e/0x470 [ 1250.951816][T22118] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1250.951842][T22118] ? __fget_files+0x215/0x3d0 [ 1250.951872][T22118] ? __fget_files+0x21f/0x3d0 [ 1250.951901][T22118] ksys_mmap_pgoff+0x3c8/0x650 [ 1250.951931][T22118] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1250.951959][T22118] ? ksys_write+0x1ac/0x250 [ 1250.951982][T22118] ? __pfx_ksys_write+0x10/0x10 [ 1250.952009][T22118] __x64_sys_mmap+0x125/0x190 [ 1250.952050][T22118] do_syscall_64+0x106/0xf80 [ 1250.952088][T22118] ? clear_bhb_loop+0x40/0x90 [ 1250.952118][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.952143][T22118] RIP: 0033:0x7fb3ea59c799 [ 1250.952163][T22118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.952187][T22118] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1250.952209][T22118] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1250.952230][T22118] RDX: 0000000000000ffa RSI: 0000000000810004 RDI: 0000000000000000 [ 1250.952245][T22118] RBP: 00007fb3eb4af090 R08: 0000000000000003 R09: 0000000000008000 [ 1250.952260][T22118] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1250.952275][T22118] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1250.952305][T22118] [ 1255.914400][T22178] openvswitch: netlink: IP tunnel dst address not specified [ 1256.909403][T22189] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1257.116161][T22163] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1257.252263][T22163] pci 0000:00:01.3: PCI INT A: no GSI [ 1257.410485][T22199] FAULT_INJECTION: forcing a failure. [ 1257.410485][T22199] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.468802][T22199] CPU: 0 UID: 0 PID: 22199 Comm: syz.3.3745 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1257.468859][T22199] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1257.468874][T22199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.468889][T22199] Call Trace: [ 1257.468898][T22199] [ 1257.468908][T22199] dump_stack_lvl+0x100/0x190 [ 1257.468951][T22199] should_fail_ex.cold+0x5/0xa [ 1257.468980][T22199] ? lsm_blob_alloc+0x68/0x90 [ 1257.469016][T22199] should_failslab+0xc2/0x120 [ 1257.469046][T22199] __kmalloc_noprof+0xe0/0x850 [ 1257.469085][T22199] ? audit_alloc+0xa2/0x7b0 [ 1257.469123][T22199] lsm_blob_alloc+0x68/0x90 [ 1257.469161][T22199] security_task_alloc+0x2a/0x260 [ 1257.469197][T22199] copy_process+0x258f/0x7a40 [ 1257.469228][T22199] ? futex_unqueue+0x133/0x2c0 [ 1257.469275][T22199] ? __pfx_copy_process+0x10/0x10 [ 1257.469313][T22199] ? _copy_from_user+0x59/0xd0 [ 1257.469347][T22199] kernel_clone+0xfc/0x9a0 [ 1257.469381][T22199] ? __pfx_kernel_clone+0x10/0x10 [ 1257.469418][T22199] ? __pfx_futex_wait+0x10/0x10 [ 1257.469466][T22199] __do_sys_clone3+0x214/0x290 [ 1257.469498][T22199] ? __pfx___do_sys_clone3+0x10/0x10 [ 1257.469566][T22199] do_syscall_64+0x106/0xf80 [ 1257.469607][T22199] ? clear_bhb_loop+0x40/0x90 [ 1257.469651][T22199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.469678][T22199] RIP: 0033:0x7fb88eb9c799 [ 1257.469700][T22199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.469726][T22199] RSP: 002b:00007fb88fabdef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1257.469752][T22199] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fb88eb9c799 [ 1257.469769][T22199] RDX: 00007fb88fabdf10 RSI: 0000000000000058 RDI: 00007fb88fabdf10 [ 1257.469785][T22199] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000058 [ 1257.469801][T22199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.469816][T22199] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1257.469847][T22199] [ 1257.821071][T18070] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 1257.821103][T18070] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 1257.836324][T18070] Bluetooth: hci3: Dropping invalid advertising data [ 1257.843610][T18070] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1257.843654][T18070] Bluetooth: hci3: Dropping invalid advertising data [ 1257.857722][T18070] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1258.845548][T22220] vivid-007: ================= START STATUS ================= [ 1258.888176][T22220] vivid-007: Generate PTS: true [ 1258.930324][T22220] vivid-007: Generate SCR: true [ 1258.935299][T22220] tpg source WxH: 320x240 (Y'CbCr) [ 1259.009863][T22220] tpg field: 1 [ 1259.013290][T22220] tpg crop: (0,0)/320x240 [ 1259.032130][T22218] FAULT_INJECTION: forcing a failure. [ 1259.032130][T22218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.058001][T22220] tpg compose: (0,0)/320x240 [ 1259.083290][T22220] tpg colorspace: 8 [ 1259.093383][T22220] tpg transfer function: 0/0 [ 1259.154043][T22220] tpg Y'CbCr encoding: 0/0 [ 1259.174689][T22220] tpg quantization: 0/0 [ 1259.212268][T22220] tpg RGB range: 0/2 [ 1259.236996][T22220] vivid-007: ================== END STATUS ================== [ 1259.299202][T22218] CPU: 0 UID: 0 PID: 22218 Comm: syz.1.3751 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1259.299253][T22218] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1259.299267][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1259.299281][T22218] Call Trace: [ 1259.299289][T22218] [ 1259.299299][T22218] dump_stack_lvl+0x100/0x190 [ 1259.299340][T22218] should_fail_ex.cold+0x5/0xa [ 1259.299369][T22218] _copy_from_user+0x2e/0xd0 [ 1259.299400][T22218] kstrtouint_from_user+0xd6/0x1d0 [ 1259.299438][T22218] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1259.299474][T22218] ? __lock_acquire+0x4a5/0x2630 [ 1259.299510][T22218] ? lock_acquire+0x1cf/0x380 [ 1259.299548][T22218] proc_fail_nth_write+0x83/0x220 [ 1259.299579][T22218] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1259.299619][T22218] vfs_write+0x2aa/0x1070 [ 1259.299646][T22218] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1259.299680][T22218] ? __pfx_vfs_write+0x10/0x10 [ 1259.299703][T22218] ? __fget_files+0x215/0x3d0 [ 1259.299733][T22218] ? __fget_files+0x21f/0x3d0 [ 1259.299764][T22218] ksys_write+0x12a/0x250 [ 1259.299788][T22218] ? __pfx_ksys_write+0x10/0x10 [ 1259.299819][T22218] do_syscall_64+0x106/0xf80 [ 1259.299859][T22218] ? clear_bhb_loop+0x40/0x90 [ 1259.299889][T22218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.299914][T22218] RIP: 0033:0x7f60b4f5cfce [ 1259.299934][T22218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1259.299966][T22218] RSP: 002b:00007f60b5e13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1259.299989][T22218] RAX: ffffffffffffffda RBX: 00007f60b5e146c0 RCX: 00007f60b4f5cfce [ 1259.300006][T22218] RDX: 0000000000000001 RSI: 00007f60b5e140a0 RDI: 0000000000000003 [ 1259.300021][T22218] RBP: 00007f60b5e14090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.300036][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.300053][T22218] R13: 00007f60b5216128 R14: 00007f60b5216090 R15: 00007ffcb09936c8 [ 1259.300083][T22218] [ 1261.660689][T22265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3764'. [ 1262.615174][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'. [ 1263.263311][T22298] Invalid ELF header magic: != ELF [ 1267.338894][T22365] FAULT_INJECTION: forcing a failure. [ 1267.338894][T22365] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.382883][T22360] FAULT_INJECTION: forcing a failure. [ 1267.382883][T22360] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.414949][T22365] CPU: 0 UID: 0 PID: 22365 Comm: syz.2.3789 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1267.415005][T22365] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1267.415020][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1267.415036][T22365] Call Trace: [ 1267.415044][T22365] [ 1267.415055][T22365] dump_stack_lvl+0x100/0x190 [ 1267.415098][T22365] should_fail_ex.cold+0x5/0xa [ 1267.415129][T22365] should_failslab+0xc2/0x120 [ 1267.415157][T22365] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1267.415197][T22365] ? security_file_alloc+0x34/0x2c0 [ 1267.415231][T22365] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1267.415264][T22365] security_file_alloc+0x34/0x2c0 [ 1267.415298][T22365] init_file+0x95/0x480 [ 1267.415330][T22365] alloc_empty_file+0x73/0x1c0 [ 1267.415364][T22365] dentry_open+0x46/0xd0 [ 1267.415398][T22365] pidfs_alloc_file+0x18f/0x290 [ 1267.415423][T22365] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1267.415456][T22365] pidfd_prepare+0x123/0x200 [ 1267.415489][T22365] __x64_sys_pidfd_open+0x105/0x1a0 [ 1267.415527][T22365] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1267.415573][T22365] do_syscall_64+0x106/0xf80 [ 1267.415614][T22365] ? clear_bhb_loop+0x40/0x90 [ 1267.415646][T22365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.415680][T22365] RIP: 0033:0x7fb3ea59c799 [ 1267.415702][T22365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.415728][T22365] RSP: 002b:00007fb3eb4af028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1267.415753][T22365] RAX: ffffffffffffffda RBX: 00007fb3ea815fa0 RCX: 00007fb3ea59c799 [ 1267.415770][T22365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1267.415786][T22365] RBP: 00007fb3ea632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1267.415802][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.415818][T22365] R13: 00007fb3ea816038 R14: 00007fb3ea815fa0 R15: 00007ffde8c64978 [ 1267.415851][T22365] [ 1267.892847][T22360] CPU: 0 UID: 0 PID: 22360 Comm: syz.3.3788 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1267.892905][T22360] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1267.892920][T22360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1267.892936][T22360] Call Trace: [ 1267.892944][T22360] [ 1267.892955][T22360] dump_stack_lvl+0x100/0x190 [ 1267.892999][T22360] should_fail_ex.cold+0x5/0xa [ 1267.893030][T22360] should_failslab+0xc2/0x120 [ 1267.893060][T22360] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1267.893100][T22360] ? skb_clone+0x190/0x400 [ 1267.893162][T22360] skb_clone+0x190/0x400 [ 1267.893208][T22360] netlink_deliver_tap+0xaed/0xcc0 [ 1267.893266][T22360] netlink_unicast+0x650/0x870 [ 1267.893295][T22360] ? __pfx_netlink_unicast+0x10/0x10 [ 1267.893330][T22360] netlink_sendmsg+0x8b0/0xda0 [ 1267.893360][T22360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.893388][T22360] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1267.893438][T22360] __sys_sendto+0x468/0x4b0 [ 1267.893472][T22360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.893498][T22360] ? __pfx___sys_sendto+0x10/0x10 [ 1267.893544][T22360] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1267.893572][T22360] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1267.893620][T22360] __x64_sys_sendto+0xe0/0x1c0 [ 1267.893655][T22360] ? do_syscall_64+0x95/0xf80 [ 1267.893696][T22360] ? lockdep_hardirqs_on+0x78/0x100 [ 1267.893737][T22360] do_syscall_64+0x106/0xf80 [ 1267.893777][T22360] ? clear_bhb_loop+0x40/0x90 [ 1267.893809][T22360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.893835][T22360] RIP: 0033:0x7fb88eb5cfce [ 1267.893856][T22360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1267.893883][T22360] RSP: 002b:00007fb88fa9be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1267.893908][T22360] RAX: ffffffffffffffda RBX: 00007fb88fa9d6c0 RCX: 00007fb88eb5cfce [ 1267.893925][T22360] RDX: 0000000000000024 RSI: 00007fb88fa9c000 RDI: 0000000000000002 [ 1267.893942][T22360] RBP: 0000000000000000 R08: 00007fb88fa9bf04 R09: 000000000000000c [ 1267.893958][T22360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1267.893973][T22360] R13: 00007fb88fa9bf58 R14: 00007fb88fa9c000 R15: 0000000000000000 [ 1267.894005][T22360] [ 1269.242342][T22365] ptrace attach of "./syz-executor exec"[16405] was attempted by ""[22365] [ 1269.508033][T22377] random: crng reseeded on system resumption [ 1269.615448][T22377] ================================================================== [ 1269.615497][T22377] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1269.615599][T22377] Write of size 8 at addr ffffc90004099000 by task syz.3.3793/22377 [ 1269.615621][T22377] [ 1269.615636][T22377] CPU: 0 UID: 0 PID: 22377 Comm: syz.3.3793 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1269.615686][T22377] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1269.615702][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.615718][T22377] Call Trace: [ 1269.615727][T22377] [ 1269.615737][T22377] dump_stack_lvl+0x100/0x190 [ 1269.615776][T22377] print_report+0x156/0x4c9 [ 1269.615812][T22377] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1269.615849][T22377] ? __virt_addr_valid+0x81/0x620 [ 1269.615886][T22377] ? sys_imageblit+0x19fb/0x1d60 [ 1269.615923][T22377] kasan_report+0xdf/0x1e0 [ 1269.615951][T22377] ? sys_imageblit+0x19fb/0x1d60 [ 1269.615992][T22377] sys_imageblit+0x19fb/0x1d60 [ 1269.616034][T22377] ? __pfx_sys_imageblit+0x10/0x10 [ 1269.616074][T22377] ? prb_read_valid+0x78/0xa0 [ 1269.616109][T22377] ? __pfx_prb_read_valid+0x10/0x10 [ 1269.616147][T22377] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1269.616202][T22377] soft_cursor+0x524/0xa10 [ 1269.616236][T22377] ? fb_get_color_depth+0x120/0x250 [ 1269.616284][T22377] bit_cursor+0xe58/0x16f0 [ 1269.616319][T22377] ? __pfx_bit_cursor+0x10/0x10 [ 1269.616350][T22377] ? __lock_acquire+0x4a5/0x2630 [ 1269.616387][T22377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1269.616415][T22377] ? get_color+0x1da/0x450 [ 1269.616440][T22377] ? __pfx_bit_cursor+0x10/0x10 [ 1269.616480][T22377] fbcon_cursor+0x43c/0x5e0 [ 1269.616513][T22377] ? add_softcursor+0x200/0x290 [ 1269.616575][T22377] set_cursor+0x1db/0x250 [ 1269.616609][T22377] con_write+0x89/0xb0 [ 1269.616648][T22377] do_output_char+0x63b/0x850 [ 1269.616675][T22377] n_tty_write+0x528/0x12d0 [ 1269.616709][T22377] ? __pfx_n_tty_write+0x10/0x10 [ 1269.616738][T22377] ? __pfx_woken_wake_function+0x10/0x10 [ 1269.616781][T22377] ? __pfx___might_resched+0x10/0x10 [ 1269.616821][T22377] ? __pfx_n_tty_write+0x10/0x10 [ 1269.616850][T22377] file_tty_write.isra.0+0x4d2/0x890 [ 1269.616893][T22377] redirected_tty_write+0xd4/0x120 [ 1269.616933][T22377] vfs_write+0x6ac/0x1070 [ 1269.616958][T22377] ? __pfx_redirected_tty_write+0x10/0x10 [ 1269.616999][T22377] ? __pfx_vfs_write+0x10/0x10 [ 1269.617022][T22377] ? find_held_lock+0x2b/0x80 [ 1269.617056][T22377] ksys_write+0x12a/0x250 [ 1269.617080][T22377] ? __pfx_ksys_write+0x10/0x10 [ 1269.617108][T22377] do_syscall_64+0x106/0xf80 [ 1269.617152][T22377] ? clear_bhb_loop+0x40/0x90 [ 1269.617182][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.617209][T22377] RIP: 0033:0x7fb88eb9c799 [ 1269.617229][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.617256][T22377] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1269.617280][T22377] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1269.617299][T22377] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000f [ 1269.617316][T22377] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1269.617332][T22377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.617348][T22377] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1269.617373][T22377] [ 1269.617382][T22377] [ 1269.617390][T22377] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003d99000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 1269.617434][T22377] Memory state around the buggy address: [ 1269.617448][T22377] ffffc90004098f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1269.617466][T22377] ffffc90004098f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1269.617490][T22377] >ffffc90004099000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1269.617505][T22377] ^ [ 1269.617518][T22377] ffffc90004099080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1269.617537][T22377] ffffc90004099100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1269.617552][T22377] ================================================================== [ 1269.654610][T22377] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1269.654637][T22377] CPU: 0 UID: 0 PID: 22377 Comm: syz.3.3793 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1269.654689][T22377] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1269.654705][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.654722][T22377] Call Trace: [ 1269.654731][T22377] [ 1269.654741][T22377] dump_stack_lvl+0x100/0x190 [ 1269.654783][T22377] vpanic+0x552/0x970 [ 1269.654808][T22377] ? __pfx_vpanic+0x10/0x10 [ 1269.654836][T22377] ? sys_imageblit+0x19fb/0x1d60 [ 1269.654875][T22377] panic+0xd1/0xe0 [ 1269.654898][T22377] ? __pfx_panic+0x10/0x10 [ 1269.654924][T22377] ? sys_imageblit+0x19fb/0x1d60 [ 1269.654961][T22377] ? preempt_schedule_common+0x42/0xc0 [ 1269.655009][T22377] check_panic_on_warn.cold+0x19/0x34 [ 1269.655037][T22377] end_report.part.0+0x3a/0x90 [ 1269.655074][T22377] kasan_report.cold+0xe/0x18 [ 1269.655112][T22377] ? sys_imageblit+0x19fb/0x1d60 [ 1269.655153][T22377] sys_imageblit+0x19fb/0x1d60 [ 1269.655195][T22377] ? __pfx_sys_imageblit+0x10/0x10 [ 1269.655234][T22377] ? prb_read_valid+0x78/0xa0 [ 1269.655269][T22377] ? __pfx_prb_read_valid+0x10/0x10 [ 1269.655307][T22377] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1269.655338][T22377] soft_cursor+0x524/0xa10 [ 1269.655371][T22377] ? fb_get_color_depth+0x120/0x250 [ 1269.655402][T22377] bit_cursor+0xe58/0x16f0 [ 1269.655437][T22377] ? __pfx_bit_cursor+0x10/0x10 [ 1269.655468][T22377] ? __lock_acquire+0x4a5/0x2630 [ 1269.655511][T22377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1269.655539][T22377] ? get_color+0x1da/0x450 [ 1269.655565][T22377] ? __pfx_bit_cursor+0x10/0x10 [ 1269.655595][T22377] fbcon_cursor+0x43c/0x5e0 [ 1269.655622][T22377] ? add_softcursor+0x200/0x290 [ 1269.655657][T22377] set_cursor+0x1db/0x250 [ 1269.655690][T22377] con_write+0x89/0xb0 [ 1269.655729][T22377] do_output_char+0x63b/0x850 [ 1269.655755][T22377] n_tty_write+0x528/0x12d0 [ 1269.655789][T22377] ? __pfx_n_tty_write+0x10/0x10 [ 1269.655817][T22377] ? __pfx_woken_wake_function+0x10/0x10 [ 1269.655859][T22377] ? __pfx___might_resched+0x10/0x10 [ 1269.655899][T22377] ? __pfx_n_tty_write+0x10/0x10 [ 1269.655928][T22377] file_tty_write.isra.0+0x4d2/0x890 [ 1269.655971][T22377] redirected_tty_write+0xd4/0x120 [ 1269.656013][T22377] vfs_write+0x6ac/0x1070 [ 1269.656038][T22377] ? __pfx_redirected_tty_write+0x10/0x10 [ 1269.656080][T22377] ? __pfx_vfs_write+0x10/0x10 [ 1269.656103][T22377] ? find_held_lock+0x2b/0x80 [ 1269.656137][T22377] ksys_write+0x12a/0x250 [ 1269.656161][T22377] ? __pfx_ksys_write+0x10/0x10 [ 1269.656190][T22377] do_syscall_64+0x106/0xf80 [ 1269.656231][T22377] ? clear_bhb_loop+0x40/0x90 [ 1269.656260][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.656287][T22377] RIP: 0033:0x7fb88eb9c799 [ 1269.656307][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.656334][T22377] RSP: 002b:00007fb88fabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1269.656359][T22377] RAX: ffffffffffffffda RBX: 00007fb88ee15fa0 RCX: 00007fb88eb9c799 [ 1269.656377][T22377] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000f [ 1269.656394][T22377] RBP: 00007fb88ec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1269.656411][T22377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.656428][T22377] R13: 00007fb88ee16038 R14: 00007fb88ee15fa0 R15: 00007ffed62cab08 [ 1269.656454][T22377] [ 1269.656541][T22377] Kernel Offset: disabled