last executing test programs: 3.095271974s ago: executing program 2 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000400000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a050200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.636668885s ago: executing program 2 (id=1615): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) 2.323217463s ago: executing program 0 (id=1619): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f0000000300)) 2.188663146s ago: executing program 0 (id=1621): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0xf000}], 0x18}], 0x1, 0x40800) 2.0464279s ago: executing program 0 (id=1623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002200)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x16, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001e00)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000001e40)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000001f40), 0x36c}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a00)={{r5, &(0x7f0000000300)='veth1\x00', 0x200003, &(0x7f0000000340)={@align, {0x5, 0x3622, 0xe, 0xf2}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)}, 0x6, &(0x7f0000001900)=[{0x1, 0x4, &(0x7f0000000400)='syzkaller1\x00', &(0x7f0000000440)="cdaf601ccc8596cddf198a5fb05ae6cdf2e8857fee8bc0d3401735dc410c053befefec7f5c8289473e2944ba432181176c4cb467d842cf02baae103b4a504f4d66040b61468dfbcda46beaa3caed6d25eb698ac0d99a6f76ed6679120addb0be9e4f3c11804c453624a92ecc6ba74ab5bd6cb29c3d92c7351e76ebc4796bc583253a8a7393c440a74890f06c", 0x8c, 0x52}, {0x2, 0x9, &(0x7f0000001540)='\x00', &(0x7f0000001580)="c039df34446aba780179c6cf6c44543356163a842cccb16c12c4f3be287324091b9cebb0ff389fc4413b09c0e01ce1f9b36227079fab9051bd0f8f2f51c8008d5188e60022eaf6666d89b327e52d85ef9be19f6c4e9573d2cc8ed6f416574762ea3c3e5a6d10d0a442acb330222d9c37222f0844bdccdac51de811d01154acccc84bef093bd716cbfc8d41f836900f1d3a56905f910829bb7e332233761ae3fde9383880d72e051d8682d51b40a50b36c4491cfe3ba3", 0xb6, 0x8}, {0x2, 0x8000, &(0x7f0000001640)='rose0\x00', &(0x7f0000001680)="aa9685b9983abc4ba073e4e0a80c8e6223a4c2d5c47de9618034561b808a331c0b5705c0bcef27bb13c0d37dc3b0b94ba916be4e6ea7d0d457cb06c021", 0x3d, 0x22}, {0x3, 0x7f, &(0x7f00000016c0)='veth1\x00', &(0x7f0000001700)="742915bbb2319c5c6326b997b5b53145131c921db9bc7d6cd9369546e08c4a888f3fec8c83d14f8fd8b62e270c8bc6a5911a989fca8cad3560f68d15482b3f5aac9f1c7de6ec77cc59e248eef7276a67d9bbe1d8f42def0e8bc75fb8b8284d", 0x5f, 0x8}, {0x3, 0xf60, &(0x7f0000001780)=')\'\\+\'\x00', &(0x7f00000017c0)="b377f2b1", 0x4}, {0x2, 0x40, &(0x7f0000001800)='syzkaller1\x00', &(0x7f0000001840)="5dec64ae9aac3f221ac4058789cd84134ef9c5c80ee16b78a01afc1267c022fe9c6cd32b08c1ec83c29b0d2b7ae5b8bff47905f7fe4e50f8146118ad72958550c3aa4f77fd82267103b708fa2090b2d8bef92f1038520785c90a72f1fe75f9f3ffd7bbebe992f593a6a8becb203448dc08e58f9593a76d6074293827419c93bac5fb6950446a1b4b06", 0x89, 0x8}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000001a80)={0x0, 0x9}, &(0x7f0000001ac0)=0x8) setsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r6, 0x84, 0x85, &(0x7f0000001b00)={r7, @in6={{0xa, 0x4e22, 0x5, @empty, 0x4}}, 0x400}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x4000820) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x44) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) 1.912084383s ago: executing program 2 (id=1626): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.711779478s ago: executing program 2 (id=1630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x7fd}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x8, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x10, 0x6}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000640)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="4875273487e73af4696534f5bf08064f8afec1c5b86d3ef8801369f9ca4ab178e2a154c7fc632539a3ed38d14b6bdc6e3a512ccf04b74562928153243db243d46a4ef47ee4fac0ec", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1], 0xffffffffffffff54) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x5, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1100, 0x9}, 0x50) socket$netlink(0x10, 0x3, 0x0) unshare(0x2020400) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000980)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$bt_rfcomm(r3, &(0x7f00000009c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0x2c) 1.653788609s ago: executing program 0 (id=1631): unshare(0x20020600) socket$inet(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00'}, 0x48) close(0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x330, 0x40000, 0x198, 0x330, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r0}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) 1.554127492s ago: executing program 4 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4c010) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f0000002a40)=""/4145, 0x1031}, {&(0x7f0000001700)=""/153, 0x99}, {&(0x7f00000017c0)=""/80, 0x50}, {&(0x7f0000003a80)=""/4119, 0x1017}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000000)=""/259, 0x103}, {&(0x7f0000002a00)=""/59, 0x3b}], 0x8}, 0x401}], 0x3, 0x40000102, 0x0) 1.529571432s ago: executing program 3 (id=1635): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340)=0x1, 0x4) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/47, 0x2f}], 0x10000000000001c9}, 0x6}], 0x2, 0x0, 0x0) poll(&(0x7f0000000b40)=[{r0, 0x4}], 0x1, 0x9) 1.517777812s ago: executing program 1 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x20) 1.467693904s ago: executing program 0 (id=1637): r0 = syz_open_dev$dri(&(0x7f0000000500), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10008, &(0x7f0000000140)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000880)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000d40)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000e00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000fc0)="140000001a004f7f", 0x8) syncfs(0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000540)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000640)=[0x0], 0x1}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x405c0d0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 1.367863236s ago: executing program 3 (id=1638): socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000400), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x1d, r2}, 0x10, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.367643216s ago: executing program 4 (id=1639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1.255236939s ago: executing program 1 (id=1640): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) 1.248927129s ago: executing program 3 (id=1641): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 853.454979ms ago: executing program 1 (id=1642): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x48c5}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write(r0, &(0x7f00000000c0)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r0, &(0x7f0000000140)="4c0000002c00010402000000000000000000000001000000000000000000ffff000301000c000100666c6f77657200001c000280180054801400048005000100010000000500020002000000", 0x4c) 639.228464ms ago: executing program 4 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="000600000000000000af5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 533.556797ms ago: executing program 3 (id=1644): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000c40)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/158, 0x9e}, 0x5}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000d00)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 457.882398ms ago: executing program 0 (id=1645): close(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 429.049619ms ago: executing program 2 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x0, 0x2, 0x7, 0x4, 0x25]}, &(0x7f0000000200)=0x54) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfef}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}]}, 0x34}}, 0x20044800) 374.800911ms ago: executing program 1 (id=1647): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001c40)={'veth0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x30, "5c76276f6cf36fb6b8f1583de73186622447091e9940a5f2781ad01612b415e66ee2f69b4b5061f3ca96d00100418e9d"}}) 303.029892ms ago: executing program 4 (id=1648): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340)=0x1, 0x4) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/53, 0x35}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000b00)=""/47, 0x2f}], 0x10000000000001c9}, 0x6}], 0x2, 0x0, 0x0) poll(&(0x7f0000000b40)=[{r0, 0x4}], 0x1, 0x9) 279.996603ms ago: executing program 2 (id=1649): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8003}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000640), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r3, &(0x7f0000001700)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r3, &(0x7f0000001740)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x24, r6, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r3, &(0x7f0000001840)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r7, 0x5, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="f9f8aace24587126a4270b337551040018d9678ab2e1c82cb6998a0a41dc53c5d108d08a8552dcff386dd95690f4c8c3986674df8f25a37640abe107a7bf7fc16cf684948e383b79c5447ac01909fee63aa6a3cb04fcc3b6a642006500814a1552f7d932143e3490d11f23756a56b1a0a7dd8f6ba02479f57009035dfa", 0x7d}, {&(0x7f0000000140)="0d765c9ad0ed6a012a8d95a3d2017327c812bdf91dffbe161ab15f7e8c2ba0b4bc1e077349a409f6", 0x28}, {&(0x7f0000000640)="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", 0xf5b}], 0x3, 0x3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000015c0)=0x0, &(0x7f0000001600)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001640)={r0, 0x9, 0x9, 0xf}) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1e00000000000089ac11289788d58cef0efaf15a", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0400000000000000000000000d00"/28], 0x50) 256.326663ms ago: executing program 3 (id=1650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x20) 155.834006ms ago: executing program 4 (id=1651): socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000400), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x1d, r2}, 0x10, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 155.650536ms ago: executing program 1 (id=1652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000580)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000010a00)=0x1, 0x4) connect$inet(r0, &(0x7f0000010a80)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000010ac0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000010b00)=[{{0x0, 0x0, &(0x7f0000010b80)=[{&(0x7f0000010bc0)="c4ca", 0x2}], 0x1, &(0x7f0000010c00)=ANY=[], 0x9}}, {{0x0, 0x0, &(0x7f0000010c40)=[{&(0x7f0000010c80)="9d", 0x1}], 0x1, &(0x7f0000010c00)=ANY=[], 0x10}}], 0x2, 0x4040084) 93.025397ms ago: executing program 1 (id=1653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 61.573658ms ago: executing program 3 (id=1654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) 0s ago: executing program 4 (id=1655): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 135.136631][ T5559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 135.151914][ T5559] System zones: 1-12 [ 135.170374][ T5565] ip_tables: iptables: counters copy to user failed while replacing table [ 135.211539][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.411: missing EA_INODE flag [ 135.291478][ T5559] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.411: error while reading EA inode 12 err=-117 [ 135.376742][ T5559] EXT4-fs (loop0): 1 orphan inode deleted [ 135.401845][ T5559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.702119][ T5565] nvme_fabrics: missing parameter 'transport=%s' [ 135.708846][ T5565] nvme_fabrics: missing parameter 'nqn=%s' [ 136.212173][ T5591] 9pnet_fd: Insufficient options for proto=fd [ 136.862576][ T4284] Bluetooth: hci4: link tx timeout [ 136.868020][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.942051][ T4284] Bluetooth: hci4: link tx timeout [ 136.947213][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.973142][ T4284] Bluetooth: hci4: link tx timeout [ 136.978287][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.162988][ T4284] Bluetooth: hci4: link tx timeout [ 137.168190][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.544224][ T5610] random: crng reseeded on system resumption [ 137.619849][ T5614] ip_tables: iptables: counters copy to user failed while replacing table [ 137.977079][ T4284] Bluetooth: hci4: link tx timeout [ 137.982376][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.098743][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 138.207691][ T4284] Bluetooth: hci4: link tx timeout [ 138.212940][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.925254][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 138.934462][ T4284] Bluetooth: hci4: link tx timeout [ 138.939968][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.007952][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 139.603476][ T4284] Bluetooth: hci4: link tx timeout [ 139.608644][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.379928][ T4284] Bluetooth: hci4: link tx timeout [ 140.385155][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.568304][ T5674] ip_tables: iptables: counters copy to user failed while replacing table [ 140.775983][ T5681] loop4: detected capacity change from 0 to 512 [ 140.829056][ T5681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 140.858610][ T5674] nvme_fabrics: missing parameter 'transport=%s' [ 140.861953][ T5681] System zones: 1-12 [ 140.869586][ T5674] nvme_fabrics: missing parameter 'nqn=%s' [ 140.891132][ T5681] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.445: missing EA_INODE flag [ 140.927384][ T5681] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.445: error while reading EA inode 12 err=-117 [ 140.963190][ T5681] EXT4-fs (loop4): 1 orphan inode deleted [ 140.981354][ T5681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.728409][ T4284] Bluetooth: hci4: link tx timeout [ 142.733813][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.836084][ T5714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 143.910845][ T5725] ip_tables: iptables: counters copy to user failed while replacing table [ 144.226162][ T5725] nvme_fabrics: missing parameter 'transport=%s' [ 144.233673][ T5725] nvme_fabrics: missing parameter 'nqn=%s' [ 144.521865][ T4284] Bluetooth: hci4: link tx timeout [ 144.527250][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.020628][ T4284] Bluetooth: hci4: link tx timeout [ 145.025912][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.056052][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 146.068596][ T4284] Bluetooth: hci4: link tx timeout [ 146.073958][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.341359][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 146.544285][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 146.615214][ T5762] Bluetooth: MGMT ver 1.22 [ 146.830877][ T5770] ip_tables: iptables: counters copy to user failed while replacing table [ 147.413039][ T4284] Bluetooth: hci4: link tx timeout [ 147.418251][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.479242][ T5770] nvme_fabrics: missing parameter 'transport=%s' [ 147.485688][ T5770] nvme_fabrics: missing parameter 'nqn=%s' [ 147.581794][ T5776] loop4: detected capacity change from 0 to 512 [ 147.613993][ T5776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 147.634288][ T5776] System zones: 1-12 [ 147.664009][ T5776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.474: missing EA_INODE flag [ 147.686152][ T5776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.474: error while reading EA inode 12 err=-117 [ 147.704319][ T5776] EXT4-fs (loop4): 1 orphan inode deleted [ 147.710106][ T5776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.531783][ T4284] Bluetooth: hci4: link tx timeout [ 148.537200][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.416149][ T4284] Bluetooth: hci4: link tx timeout [ 149.416275][ T5809] ip_tables: iptables: counters copy to user failed while replacing table [ 149.421295][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.898225][ T5809] nvme_fabrics: missing parameter 'transport=%s' [ 149.920676][ T5809] nvme_fabrics: missing parameter 'nqn=%s' [ 150.879368][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 151.760835][ T4284] Bluetooth: hci4: link tx timeout [ 151.766442][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.864823][ T5862] ip_tables: iptables: counters copy to user failed while replacing table [ 151.995661][ T5862] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 153.870095][ T5899] ip_tables: iptables: counters copy to user failed while replacing table [ 154.179550][ T5899] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 154.370468][ T5917] netlink: 964 bytes leftover after parsing attributes in process `syz.0.518'. [ 154.420121][ T5917] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 154.580532][ T4284] Bluetooth: hci4: link tx timeout [ 154.585962][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.593714][ T4284] Bluetooth: hci4: link tx timeout [ 154.598867][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.294949][ T5942] 9pnet_fd: Insufficient options for proto=fd [ 155.972777][ T5945] ip_tables: iptables: counters copy to user failed while replacing table [ 156.153379][ T5945] nvme_tcp: malformed address passed: 127.0.0.:8009 [ 157.440911][ T5974] loop2: detected capacity change from 0 to 512 [ 157.569249][ T5979] loop1: detected capacity change from 0 to 512 [ 157.605390][ T5974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 157.637648][ T5974] System zones: 1-12 [ 157.648352][ T5979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 157.660725][ T5979] System zones: 1-12 [ 157.685683][ T5974] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.539: missing EA_INODE flag [ 157.730997][ T5984] 9pnet_fd: Insufficient options for proto=fd [ 157.766971][ T5974] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.539: error while reading EA inode 12 err=-117 [ 157.825805][ T5979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.541: missing EA_INODE flag [ 158.339991][ T5974] EXT4-fs (loop2): 1 orphan inode deleted [ 158.347943][ T5979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.541: error while reading EA inode 12 err=-117 [ 158.402340][ T5974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.425544][ T5979] EXT4-fs (loop1): 1 orphan inode deleted [ 158.431326][ T5979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.159203][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 159.310203][ T5995] random: crng reseeded on system resumption [ 159.323483][ T6000] ip_tables: iptables: counters copy to user failed while replacing table [ 159.997223][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 161.127007][ T6034] 9pnet_fd: Insufficient options for proto=fd [ 162.090424][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 162.186774][ T6045] loop4: detected capacity change from 0 to 512 [ 162.271490][ T6045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.330195][ T6045] System zones: 1-12 [ 162.392011][ T6045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.561: missing EA_INODE flag [ 162.450295][ T6045] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.561: error while reading EA inode 12 err=-117 [ 162.501391][ T6056] loop2: detected capacity change from 0 to 512 [ 162.520802][ T6045] EXT4-fs (loop4): 1 orphan inode deleted [ 162.537391][ T6045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.585110][ T6056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.604057][ T6056] System zones: 1-12 [ 162.616756][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.564: missing EA_INODE flag [ 162.647619][ T6056] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.564: error while reading EA inode 12 err=-117 [ 162.742767][ T6056] EXT4-fs (loop2): 1 orphan inode deleted [ 162.771829][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 162.985918][ T6064] ip_tables: iptables: counters copy to user failed while replacing table [ 163.042659][ T6064] nvme_fabrics: unknown parameter or missing value 'hdr_' in ctrl creation request [ 163.917206][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 164.035875][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 164.103017][ T6070] random: crng reseeded on system resumption [ 164.679721][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 165.267838][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 165.720989][ T6103] device syzkaller1 entered promiscuous mode [ 165.864635][ T6105] loop4: detected capacity change from 0 to 512 [ 165.877639][ T6105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 165.886038][ T6105] System zones: 1-12 [ 165.891970][ T6105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.579: missing EA_INODE flag [ 165.904805][ T6105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.579: error while reading EA inode 12 err=-117 [ 165.929296][ T6105] EXT4-fs (loop4): 1 orphan inode deleted [ 165.937253][ T6105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.992728][ T6108] loop2: detected capacity change from 0 to 512 [ 166.129371][ T6108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 166.151813][ T6108] System zones: 1-12 [ 166.224247][ T6108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.581: missing EA_INODE flag [ 166.621744][ T6108] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.581: error while reading EA inode 12 err=-117 [ 166.838085][ T6108] EXT4-fs (loop2): 1 orphan inode deleted [ 166.901808][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.118732][ T4284] Bluetooth: hci4: link tx timeout [ 167.124001][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.135525][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 168.280145][ T6133] random: crng reseeded on system resumption [ 169.996391][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 170.581456][ T6161] loop1: detected capacity change from 0 to 512 [ 170.716936][ T6161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 170.744792][ T6161] System zones: 1-12 [ 170.750639][ T6161] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.595: missing EA_INODE flag [ 170.763227][ T6161] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.595: error while reading EA inode 12 err=-117 [ 170.778020][ T6161] EXT4-fs (loop1): 1 orphan inode deleted [ 170.784360][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.885551][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 173.164898][ T6200] random: crng reseeded on system resumption [ 173.175579][ T6200] FAULT_INJECTION: forcing a failure. [ 173.175579][ T6200] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 173.201741][ T6200] CPU: 1 PID: 6200 Comm: syz.0.604 Not tainted syzkaller #0 [ 173.209067][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.219147][ T6200] Call Trace: [ 173.222437][ T6200] [ 173.225390][ T6200] dump_stack_lvl+0x188/0x24e [ 173.230100][ T6200] ? show_regs_print_info+0x12/0x12 [ 173.235328][ T6200] ? load_image+0x410/0x410 [ 173.239859][ T6200] ? __lock_acquire+0x7ea0/0x7ea0 [ 173.244915][ T6200] should_fail_ex+0x390/0x4c0 [ 173.249626][ T6200] prepare_alloc_pages+0x1e1/0x5b0 [ 173.254775][ T6200] __alloc_pages+0x130/0x4f0 [ 173.259399][ T6200] ? zone_statistics+0x170/0x170 [ 173.264361][ T6200] ? __alloc_pages+0x290/0x4f0 [ 173.269161][ T6200] ? zone_statistics+0x170/0x170 [ 173.274129][ T6200] ? alloc_pages+0x4dd/0x740 [ 173.278756][ T6200] get_zeroed_page+0x13/0x30 [ 173.283374][ T6200] get_image_page+0x41/0x310 [ 173.287996][ T6200] alloc_rtree_node+0xde/0x150 [ 173.292791][ T6200] memory_bm_create+0x4f1/0x950 [ 173.297677][ T6200] create_basic_memory_bitmaps+0x95/0x370 [ 173.303439][ T6200] snapshot_open+0x1a9/0x280 [ 173.308065][ T6200] ? snapshot_compat_ioctl+0x90/0x90 [ 173.313379][ T6200] misc_open+0x31f/0x390 [ 173.317655][ T6200] chrdev_open+0x585/0x5f0 [ 173.322099][ T6200] ? cd_forget+0x160/0x160 [ 173.326543][ T6200] ? fsnotify_perm+0x39b/0x550 [ 173.331333][ T6200] ? cd_forget+0x160/0x160 [ 173.335779][ T6200] do_dentry_open+0x7dd/0x10b0 [ 173.340583][ T6200] path_openat+0x2674/0x2f10 [ 173.345216][ T6200] ? kasan_set_track+0x60/0x70 [ 173.350018][ T6200] ? verify_lock_unused+0x140/0x140 [ 173.355246][ T6200] ? do_sys_openat2+0xdd/0x4f0 [ 173.360046][ T6200] ? do_filp_open+0x420/0x420 [ 173.364762][ T6200] do_filp_open+0x1ee/0x420 [ 173.369298][ T6200] ? vfs_tmpfile+0x470/0x470 [ 173.373944][ T6200] ? _raw_spin_unlock+0x24/0x40 [ 173.378817][ T6200] ? alloc_fd+0x590/0x640 [ 173.383183][ T6200] do_sys_openat2+0x14b/0x4f0 [ 173.387891][ T6200] ? do_sys_open+0xe0/0xe0 [ 173.392331][ T6200] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.398339][ T6200] ? lock_chain_count+0x20/0x20 [ 173.403218][ T6200] __x64_sys_openat+0x135/0x160 [ 173.408112][ T6200] do_syscall_64+0x4c/0xa0 [ 173.412635][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 173.417339][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 173.422042][ T6200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.427971][ T6200] RIP: 0033:0x7f325539e1d9 [ 173.432410][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.452045][ T6200] RSP: 002b:00007f32562af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.460485][ T6200] RAX: ffffffffffffffda RBX: 00007f3255625fa0 RCX: 00007f325539e1d9 [ 173.468473][ T6200] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 173.476465][ T6200] RBP: 00007f3255435888 R08: 0000000000000000 R09: 0000000000000000 [ 173.484457][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.492443][ T6200] R13: 00007f3255626038 R14: 00007f3255625fa0 R15: 00007ffdd355ccb8 [ 173.500445][ T6200] [ 174.194541][ T6223] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 174.559686][ T6230] loop3: detected capacity change from 0 to 512 [ 174.898582][ T6230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.046214][ T6230] System zones: 1-12 [ 175.213293][ T6230] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.613: missing EA_INODE flag [ 175.255201][ T6230] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.613: error while reading EA inode 12 err=-117 [ 175.297457][ T6230] EXT4-fs (loop3): 1 orphan inode deleted [ 175.311783][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.490228][ T6246] random: crng reseeded on system resumption [ 175.501189][ T6246] FAULT_INJECTION: forcing a failure. [ 175.501189][ T6246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.528808][ T6246] CPU: 0 PID: 6246 Comm: syz.1.620 Not tainted syzkaller #0 [ 175.536137][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.546211][ T6246] Call Trace: [ 175.550291][ T6246] [ 175.553236][ T6246] dump_stack_lvl+0x188/0x24e [ 175.557937][ T6246] ? show_regs_print_info+0x12/0x12 [ 175.563157][ T6246] ? load_image+0x410/0x410 [ 175.567681][ T6246] ? __lock_acquire+0x7ea0/0x7ea0 [ 175.572743][ T6246] should_fail_ex+0x390/0x4c0 [ 175.577451][ T6246] prepare_alloc_pages+0x1e1/0x5b0 [ 175.582608][ T6246] __alloc_pages+0x130/0x4f0 [ 175.587227][ T6246] ? zone_statistics+0x170/0x170 [ 175.592189][ T6246] ? __alloc_pages+0x290/0x4f0 [ 175.596978][ T6246] ? zone_statistics+0x170/0x170 [ 175.601946][ T6246] ? alloc_pages+0x4dd/0x740 [ 175.606561][ T6246] get_zeroed_page+0x13/0x30 [ 175.611175][ T6246] get_image_page+0x41/0x310 [ 175.615793][ T6246] alloc_rtree_node+0xde/0x150 [ 175.620581][ T6246] memory_bm_create+0x4f1/0x950 [ 175.625470][ T6246] create_basic_memory_bitmaps+0x95/0x370 [ 175.631219][ T6246] snapshot_open+0x1a9/0x280 [ 175.635829][ T6246] ? snapshot_compat_ioctl+0x90/0x90 [ 175.641123][ T6246] misc_open+0x31f/0x390 [ 175.645374][ T6246] chrdev_open+0x585/0x5f0 [ 175.649792][ T6246] ? cd_forget+0x160/0x160 [ 175.654207][ T6246] ? fsnotify_perm+0x39b/0x550 [ 175.658971][ T6246] ? cd_forget+0x160/0x160 [ 175.663394][ T6246] do_dentry_open+0x7dd/0x10b0 [ 175.668194][ T6246] path_openat+0x2674/0x2f10 [ 175.672796][ T6246] ? kasan_set_track+0x60/0x70 [ 175.677579][ T6246] ? verify_lock_unused+0x140/0x140 [ 175.682776][ T6246] ? do_sys_openat2+0xdd/0x4f0 [ 175.687545][ T6246] ? do_filp_open+0x420/0x420 [ 175.692244][ T6246] do_filp_open+0x1ee/0x420 [ 175.696758][ T6246] ? vfs_tmpfile+0x470/0x470 [ 175.701365][ T6246] ? _raw_spin_unlock+0x24/0x40 [ 175.706219][ T6246] ? alloc_fd+0x590/0x640 [ 175.710560][ T6246] do_sys_openat2+0x14b/0x4f0 [ 175.715249][ T6246] ? do_sys_open+0xe0/0xe0 [ 175.719679][ T6246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.725666][ T6246] ? lock_chain_count+0x20/0x20 [ 175.730525][ T6246] __x64_sys_openat+0x135/0x160 [ 175.735382][ T6246] do_syscall_64+0x4c/0xa0 [ 175.739808][ T6246] ? clear_bhb_loop+0x60/0xb0 [ 175.744489][ T6246] ? clear_bhb_loop+0x60/0xb0 [ 175.749168][ T6246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.755062][ T6246] RIP: 0033:0x7f785b19e1d9 [ 175.759475][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.779085][ T6246] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.787501][ T6246] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 175.795470][ T6246] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 175.803435][ T6246] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 175.811398][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.819363][ T6246] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 175.827341][ T6246] [ 177.241719][ T4284] Bluetooth: hci4: command 0x0405 tx timeout [ 177.789396][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 177.840030][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 178.294567][ T6303] loop0: detected capacity change from 0 to 512 [ 178.395609][ T6303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 178.530106][ T6303] System zones: 1-12 [ 178.723035][ T6303] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.641: missing EA_INODE flag [ 178.768187][ T6303] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.641: error while reading EA inode 12 err=-117 [ 178.826024][ T6303] EXT4-fs (loop0): 1 orphan inode deleted [ 178.864444][ T6303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.819957][ T6326] random: crng reseeded on system resumption [ 179.846010][ T6326] FAULT_INJECTION: forcing a failure. [ 179.846010][ T6326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.882738][ T6326] CPU: 1 PID: 6326 Comm: syz.1.648 Not tainted syzkaller #0 [ 179.890075][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.900145][ T6326] Call Trace: [ 179.903442][ T6326] [ 179.906386][ T6326] dump_stack_lvl+0x188/0x24e [ 179.911095][ T6326] ? show_regs_print_info+0x12/0x12 [ 179.916319][ T6326] ? load_image+0x410/0x410 [ 179.920846][ T6326] ? __lock_acquire+0x7ea0/0x7ea0 [ 179.925911][ T6326] should_fail_ex+0x390/0x4c0 [ 179.930627][ T6326] prepare_alloc_pages+0x1e1/0x5b0 [ 179.935775][ T6326] __alloc_pages+0x130/0x4f0 [ 179.940393][ T6326] ? zone_statistics+0x170/0x170 [ 179.945352][ T6326] ? __alloc_pages+0x290/0x4f0 [ 179.950143][ T6326] ? zone_statistics+0x170/0x170 [ 179.955108][ T6326] ? alloc_pages+0x4dd/0x740 [ 179.959731][ T6326] get_zeroed_page+0x13/0x30 [ 179.964345][ T6326] get_image_page+0x41/0x310 [ 179.968964][ T6326] alloc_rtree_node+0xde/0x150 [ 179.973756][ T6326] memory_bm_create+0x4f1/0x950 [ 179.978650][ T6326] create_basic_memory_bitmaps+0x95/0x370 [ 179.984401][ T6326] snapshot_open+0x1a9/0x280 [ 179.989018][ T6326] ? snapshot_compat_ioctl+0x90/0x90 [ 179.994329][ T6326] misc_open+0x31f/0x390 [ 179.998599][ T6326] chrdev_open+0x585/0x5f0 [ 180.003048][ T6326] ? cd_forget+0x160/0x160 [ 180.007507][ T6326] ? fsnotify_perm+0x39b/0x550 [ 180.012377][ T6326] ? cd_forget+0x160/0x160 [ 180.016809][ T6326] do_dentry_open+0x7dd/0x10b0 [ 180.021614][ T6326] path_openat+0x2674/0x2f10 [ 180.026244][ T6326] ? kasan_set_track+0x60/0x70 [ 180.031038][ T6326] ? verify_lock_unused+0x140/0x140 [ 180.036263][ T6326] ? do_sys_openat2+0xdd/0x4f0 [ 180.041060][ T6326] ? do_filp_open+0x420/0x420 [ 180.045777][ T6326] do_filp_open+0x1ee/0x420 [ 180.050306][ T6326] ? vfs_tmpfile+0x470/0x470 [ 180.054946][ T6326] ? _raw_spin_unlock+0x24/0x40 [ 180.059816][ T6326] ? alloc_fd+0x590/0x640 [ 180.064176][ T6326] do_sys_openat2+0x14b/0x4f0 [ 180.068876][ T6326] ? do_sys_open+0xe0/0xe0 [ 180.073314][ T6326] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.079321][ T6326] ? lock_chain_count+0x20/0x20 [ 180.084200][ T6326] __x64_sys_openat+0x135/0x160 [ 180.089082][ T6326] do_syscall_64+0x4c/0xa0 [ 180.093517][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 180.098209][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 180.102909][ T6326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.108823][ T6326] RIP: 0033:0x7f785b19e1d9 [ 180.113256][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.132880][ T6326] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.141315][ T6326] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 180.149307][ T6326] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 180.157298][ T6326] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 180.165288][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.173277][ T6326] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 180.181284][ T6326] [ 180.184327][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.988652][ T6375] random: crng reseeded on system resumption [ 181.999318][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'. [ 182.030742][ T6375] FAULT_INJECTION: forcing a failure. [ 182.030742][ T6375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.066741][ T6375] CPU: 1 PID: 6375 Comm: syz.4.663 Not tainted syzkaller #0 [ 182.074072][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.084141][ T6375] Call Trace: [ 182.087525][ T6375] [ 182.090478][ T6375] dump_stack_lvl+0x188/0x24e [ 182.095184][ T6375] ? show_regs_print_info+0x12/0x12 [ 182.100419][ T6375] ? load_image+0x410/0x410 [ 182.104947][ T6375] ? __lock_acquire+0x7ea0/0x7ea0 [ 182.110010][ T6375] should_fail_ex+0x390/0x4c0 [ 182.114724][ T6375] prepare_alloc_pages+0x1e1/0x5b0 [ 182.119876][ T6375] __alloc_pages+0x130/0x4f0 [ 182.124501][ T6375] ? zone_statistics+0x170/0x170 [ 182.129465][ T6375] ? __alloc_pages+0x290/0x4f0 [ 182.134254][ T6375] ? zone_statistics+0x170/0x170 [ 182.139220][ T6375] ? alloc_pages+0x4dd/0x740 [ 182.143843][ T6375] get_zeroed_page+0x13/0x30 [ 182.148456][ T6375] get_image_page+0x41/0x310 [ 182.153075][ T6375] alloc_rtree_node+0xde/0x150 [ 182.157866][ T6375] memory_bm_create+0x4f1/0x950 [ 182.162746][ T6375] create_basic_memory_bitmaps+0x95/0x370 [ 182.168473][ T6375] snapshot_open+0x1a9/0x280 [ 182.173061][ T6375] ? snapshot_compat_ioctl+0x90/0x90 [ 182.178349][ T6375] misc_open+0x31f/0x390 [ 182.182601][ T6375] chrdev_open+0x585/0x5f0 [ 182.187022][ T6375] ? cd_forget+0x160/0x160 [ 182.191463][ T6375] ? fsnotify_perm+0x39b/0x550 [ 182.196230][ T6375] ? cd_forget+0x160/0x160 [ 182.200646][ T6375] do_dentry_open+0x7dd/0x10b0 [ 182.205425][ T6375] path_openat+0x2674/0x2f10 [ 182.210026][ T6375] ? kasan_set_track+0x60/0x70 [ 182.214789][ T6375] ? verify_lock_unused+0x140/0x140 [ 182.219985][ T6375] ? do_sys_openat2+0xdd/0x4f0 [ 182.224753][ T6375] ? do_filp_open+0x420/0x420 [ 182.229443][ T6375] do_filp_open+0x1ee/0x420 [ 182.233946][ T6375] ? vfs_tmpfile+0x470/0x470 [ 182.238553][ T6375] ? _raw_spin_unlock+0x24/0x40 [ 182.243417][ T6375] ? alloc_fd+0x590/0x640 [ 182.247772][ T6375] do_sys_openat2+0x14b/0x4f0 [ 182.252470][ T6375] ? do_sys_open+0xe0/0xe0 [ 182.256907][ T6375] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.262902][ T6375] ? lock_chain_count+0x20/0x20 [ 182.267767][ T6375] __x64_sys_openat+0x135/0x160 [ 182.272634][ T6375] do_syscall_64+0x4c/0xa0 [ 182.277046][ T6375] ? clear_bhb_loop+0x60/0xb0 [ 182.281727][ T6375] ? clear_bhb_loop+0x60/0xb0 [ 182.286403][ T6375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.292292][ T6375] RIP: 0033:0x7fd21cb9e1d9 [ 182.296704][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.316326][ T6375] RSP: 002b:00007fd21da40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.324736][ T6375] RAX: ffffffffffffffda RBX: 00007fd21ce25fa0 RCX: 00007fd21cb9e1d9 [ 182.332698][ T6375] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 182.340664][ T6375] RBP: 00007fd21cc35888 R08: 0000000000000000 R09: 0000000000000000 [ 182.348646][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.356607][ T6375] R13: 00007fd21ce26038 R14: 00007fd21ce25fa0 R15: 00007fff130f9598 [ 182.364587][ T6375] [ 182.367683][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.404530][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 182.552465][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 185.520856][ T6456] random: crng reseeded on system resumption [ 185.561168][ T6456] FAULT_INJECTION: forcing a failure. [ 185.561168][ T6456] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.618250][ T6456] CPU: 1 PID: 6456 Comm: syz.2.677 Not tainted syzkaller #0 [ 185.625608][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.635682][ T6456] Call Trace: [ 185.638972][ T6456] [ 185.641911][ T6456] dump_stack_lvl+0x188/0x24e [ 185.646612][ T6456] ? show_regs_print_info+0x12/0x12 [ 185.651828][ T6456] ? load_image+0x410/0x410 [ 185.656347][ T6456] ? __lock_acquire+0x7ea0/0x7ea0 [ 185.661409][ T6456] should_fail_ex+0x390/0x4c0 [ 185.666122][ T6456] prepare_alloc_pages+0x1e1/0x5b0 [ 185.671280][ T6456] __alloc_pages+0x130/0x4f0 [ 185.675911][ T6456] ? zone_statistics+0x170/0x170 [ 185.680886][ T6456] ? __alloc_pages+0x290/0x4f0 [ 185.685682][ T6456] ? zone_statistics+0x170/0x170 [ 185.690649][ T6456] ? alloc_pages+0x4dd/0x740 [ 185.695267][ T6456] get_zeroed_page+0x13/0x30 [ 185.699890][ T6456] get_image_page+0x41/0x310 [ 185.704521][ T6456] alloc_rtree_node+0xde/0x150 [ 185.709317][ T6456] memory_bm_create+0x4f1/0x950 [ 185.714208][ T6456] create_basic_memory_bitmaps+0x95/0x370 [ 185.719952][ T6456] snapshot_open+0x1a9/0x280 [ 185.724573][ T6456] ? snapshot_compat_ioctl+0x90/0x90 [ 185.729895][ T6456] misc_open+0x31f/0x390 [ 185.734169][ T6456] chrdev_open+0x585/0x5f0 [ 185.738624][ T6456] ? cd_forget+0x160/0x160 [ 185.743075][ T6456] ? fsnotify_perm+0x39b/0x550 [ 185.747869][ T6456] ? cd_forget+0x160/0x160 [ 185.752310][ T6456] do_dentry_open+0x7dd/0x10b0 [ 185.757118][ T6456] path_openat+0x2674/0x2f10 [ 185.761751][ T6456] ? kasan_set_track+0x60/0x70 [ 185.766548][ T6456] ? verify_lock_unused+0x140/0x140 [ 185.771768][ T6456] ? do_sys_openat2+0xdd/0x4f0 [ 185.776579][ T6456] ? do_filp_open+0x420/0x420 [ 185.781297][ T6456] do_filp_open+0x1ee/0x420 [ 185.785824][ T6456] ? vfs_tmpfile+0x470/0x470 [ 185.790462][ T6456] ? _raw_spin_unlock+0x24/0x40 [ 185.795330][ T6456] ? alloc_fd+0x590/0x640 [ 185.799689][ T6456] do_sys_openat2+0x14b/0x4f0 [ 185.804391][ T6456] ? do_sys_open+0xe0/0xe0 [ 185.808831][ T6456] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 185.814841][ T6456] ? lock_chain_count+0x20/0x20 [ 185.819719][ T6456] __x64_sys_openat+0x135/0x160 [ 185.824599][ T6456] do_syscall_64+0x4c/0xa0 [ 185.829031][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 185.833723][ T6456] ? clear_bhb_loop+0x60/0xb0 [ 185.838418][ T6456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.844329][ T6456] RIP: 0033:0x7fef8fd9e1d9 [ 185.848756][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.868380][ T6456] RSP: 002b:00007fef90c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.876810][ T6456] RAX: ffffffffffffffda RBX: 00007fef90025fa0 RCX: 00007fef8fd9e1d9 [ 185.884794][ T6456] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 185.892779][ T6456] RBP: 00007fef8fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 185.900776][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.908765][ T6456] R13: 00007fef90026038 R14: 00007fef90025fa0 R15: 00007fff27284bb8 [ 185.916775][ T6456] [ 186.036425][ T6467] 9pnet_fd: Insufficient options for proto=fd [ 186.760901][ T6476] loop3: detected capacity change from 0 to 512 [ 186.780106][ T6476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 186.789341][ T6476] System zones: 1-12 [ 186.799260][ T6476] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.685: missing EA_INODE flag [ 186.817376][ T6476] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.685: error while reading EA inode 12 err=-117 [ 186.830132][ T6476] EXT4-fs (loop3): 1 orphan inode deleted [ 186.836086][ T6476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.146737][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 188.112735][ T6502] random: crng reseeded on system resumption [ 188.131151][ T6502] FAULT_INJECTION: forcing a failure. [ 188.131151][ T6502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.190055][ T6502] CPU: 1 PID: 6502 Comm: syz.3.695 Not tainted syzkaller #0 [ 188.197393][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.207470][ T6502] Call Trace: [ 188.210761][ T6502] [ 188.213703][ T6502] dump_stack_lvl+0x188/0x24e [ 188.218406][ T6502] ? show_regs_print_info+0x12/0x12 [ 188.223631][ T6502] ? load_image+0x410/0x410 [ 188.228162][ T6502] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.233220][ T6502] should_fail_ex+0x390/0x4c0 [ 188.237926][ T6502] prepare_alloc_pages+0x1e1/0x5b0 [ 188.243071][ T6502] __alloc_pages+0x130/0x4f0 [ 188.247688][ T6502] ? zone_statistics+0x170/0x170 [ 188.252646][ T6502] ? __alloc_pages+0x290/0x4f0 [ 188.257438][ T6502] ? zone_statistics+0x170/0x170 [ 188.262407][ T6502] ? alloc_pages+0x4dd/0x740 [ 188.267033][ T6502] get_zeroed_page+0x13/0x30 [ 188.271649][ T6502] get_image_page+0x41/0x310 [ 188.276264][ T6502] alloc_rtree_node+0xde/0x150 [ 188.281069][ T6502] memory_bm_create+0x4f1/0x950 [ 188.285960][ T6502] create_basic_memory_bitmaps+0x95/0x370 [ 188.291706][ T6502] snapshot_open+0x1a9/0x280 [ 188.296331][ T6502] ? snapshot_compat_ioctl+0x90/0x90 [ 188.301640][ T6502] misc_open+0x31f/0x390 [ 188.305908][ T6502] chrdev_open+0x585/0x5f0 [ 188.310351][ T6502] ? cd_forget+0x160/0x160 [ 188.314794][ T6502] ? fsnotify_perm+0x39b/0x550 [ 188.319581][ T6502] ? cd_forget+0x160/0x160 [ 188.324015][ T6502] do_dentry_open+0x7dd/0x10b0 [ 188.328814][ T6502] path_openat+0x2674/0x2f10 [ 188.333441][ T6502] ? kasan_set_track+0x60/0x70 [ 188.338233][ T6502] ? verify_lock_unused+0x140/0x140 [ 188.343451][ T6502] ? do_sys_openat2+0xdd/0x4f0 [ 188.348242][ T6502] ? do_filp_open+0x420/0x420 [ 188.352960][ T6502] do_filp_open+0x1ee/0x420 [ 188.357574][ T6502] ? vfs_tmpfile+0x470/0x470 [ 188.362203][ T6502] ? _raw_spin_unlock+0x24/0x40 [ 188.367068][ T6502] ? alloc_fd+0x590/0x640 [ 188.371426][ T6502] do_sys_openat2+0x14b/0x4f0 [ 188.376134][ T6502] ? do_sys_open+0xe0/0xe0 [ 188.380586][ T6502] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 188.386592][ T6502] ? lock_chain_count+0x20/0x20 [ 188.391473][ T6502] __x64_sys_openat+0x135/0x160 [ 188.396339][ T6502] do_syscall_64+0x4c/0xa0 [ 188.400761][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 188.405431][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 188.410092][ T6502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.415978][ T6502] RIP: 0033:0x7fd6eed9e1d9 [ 188.420392][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.440014][ T6502] RSP: 002b:00007fd6efcf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.448449][ T6502] RAX: ffffffffffffffda RBX: 00007fd6ef025fa0 RCX: 00007fd6eed9e1d9 [ 188.456439][ T6502] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 188.464425][ T6502] RBP: 00007fd6eee35888 R08: 0000000000000000 R09: 0000000000000000 [ 188.472406][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.480386][ T6502] R13: 00007fd6ef026038 R14: 00007fd6ef025fa0 R15: 00007ffd786cf1c8 [ 188.488389][ T6502] [ 188.491469][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.567989][ T6512] 9pnet_fd: Insufficient options for proto=fd [ 189.115700][ T6519] loop0: detected capacity change from 0 to 512 [ 189.205438][ T6519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 189.248497][ T6519] System zones: 1-12 [ 189.277178][ T6519] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.699: missing EA_INODE flag [ 189.412358][ T6519] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.699: error while reading EA inode 12 err=-117 [ 189.432688][ T6519] EXT4-fs (loop0): 1 orphan inode deleted [ 189.442021][ T6519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.975407][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 190.347588][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 190.504270][ T6552] random: crng reseeded on system resumption [ 190.549121][ T6552] FAULT_INJECTION: forcing a failure. [ 190.549121][ T6552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.581800][ T6552] CPU: 0 PID: 6552 Comm: syz.2.711 Not tainted syzkaller #0 [ 190.589128][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.599185][ T6552] Call Trace: [ 190.602471][ T6552] [ 190.605424][ T6552] dump_stack_lvl+0x188/0x24e [ 190.610104][ T6552] ? show_regs_print_info+0x12/0x12 [ 190.615301][ T6552] ? load_image+0x410/0x410 [ 190.619801][ T6552] ? __lock_acquire+0x7ea0/0x7ea0 [ 190.624833][ T6552] should_fail_ex+0x390/0x4c0 [ 190.629520][ T6552] prepare_alloc_pages+0x1e1/0x5b0 [ 190.634646][ T6552] __alloc_pages+0x130/0x4f0 [ 190.639244][ T6552] ? zone_statistics+0x170/0x170 [ 190.644190][ T6552] ? __alloc_pages+0x290/0x4f0 [ 190.648974][ T6552] ? zone_statistics+0x170/0x170 [ 190.653915][ T6552] ? alloc_pages+0x4dd/0x740 [ 190.658511][ T6552] get_zeroed_page+0x13/0x30 [ 190.663110][ T6552] get_image_page+0x41/0x310 [ 190.667707][ T6552] alloc_rtree_node+0xde/0x150 [ 190.672474][ T6552] memory_bm_create+0x4f1/0x950 [ 190.677335][ T6552] create_basic_memory_bitmaps+0x95/0x370 [ 190.683056][ T6552] snapshot_open+0x1a9/0x280 [ 190.687648][ T6552] ? snapshot_compat_ioctl+0x90/0x90 [ 190.692933][ T6552] misc_open+0x31f/0x390 [ 190.697180][ T6552] chrdev_open+0x585/0x5f0 [ 190.701599][ T6552] ? cd_forget+0x160/0x160 [ 190.706017][ T6552] ? fsnotify_perm+0x39b/0x550 [ 190.710780][ T6552] ? cd_forget+0x160/0x160 [ 190.715191][ T6552] do_dentry_open+0x7dd/0x10b0 [ 190.719966][ T6552] path_openat+0x2674/0x2f10 [ 190.724581][ T6552] ? kasan_set_track+0x60/0x70 [ 190.729347][ T6552] ? verify_lock_unused+0x140/0x140 [ 190.734544][ T6552] ? do_sys_openat2+0xdd/0x4f0 [ 190.739320][ T6552] ? do_filp_open+0x420/0x420 [ 190.744613][ T6552] do_filp_open+0x1ee/0x420 [ 190.749119][ T6552] ? vfs_tmpfile+0x470/0x470 [ 190.753720][ T6552] ? _raw_spin_unlock+0x24/0x40 [ 190.758566][ T6552] ? alloc_fd+0x590/0x640 [ 190.762902][ T6552] do_sys_openat2+0x14b/0x4f0 [ 190.767579][ T6552] ? do_sys_open+0xe0/0xe0 [ 190.771995][ T6552] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 190.777977][ T6552] ? lock_chain_count+0x20/0x20 [ 190.782832][ T6552] __x64_sys_openat+0x135/0x160 [ 190.787708][ T6552] do_syscall_64+0x4c/0xa0 [ 190.792139][ T6552] ? clear_bhb_loop+0x60/0xb0 [ 190.796821][ T6552] ? clear_bhb_loop+0x60/0xb0 [ 190.801510][ T6552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.807417][ T6552] RIP: 0033:0x7fef8fd9e1d9 [ 190.811829][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.831427][ T6552] RSP: 002b:00007fef90c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.839856][ T6552] RAX: ffffffffffffffda RBX: 00007fef90025fa0 RCX: 00007fef8fd9e1d9 [ 190.847820][ T6552] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 190.855786][ T6552] RBP: 00007fef8fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 190.863752][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.871715][ T6552] R13: 00007fef90026038 R14: 00007fef90025fa0 R15: 00007fff27284bb8 [ 190.879699][ T6552] [ 190.975816][ T6560] loop2: detected capacity change from 0 to 512 [ 191.012973][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 191.019017][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 191.025105][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 191.129599][ T6560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 191.139721][ T6560] System zones: 1-12 [ 191.151365][ T6560] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.715: missing EA_INODE flag [ 191.217655][ T6567] 9pnet_fd: Insufficient options for proto=fd [ 191.297062][ T6560] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.715: error while reading EA inode 12 err=-117 [ 191.338412][ T6564] loop4: detected capacity change from 0 to 512 [ 191.915395][ T6560] EXT4-fs (loop2): 1 orphan inode deleted [ 191.933051][ T6560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.952983][ T6564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 191.976822][ T6564] System zones: 1-12 [ 192.005235][ T6564] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.716: missing EA_INODE flag [ 192.107621][ T6564] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.716: error while reading EA inode 12 err=-117 [ 192.161180][ T6564] EXT4-fs (loop4): 1 orphan inode deleted [ 192.179895][ T6564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.017859][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 193.861921][ T6599] random: crng reseeded on system resumption [ 193.889674][ T6599] FAULT_INJECTION: forcing a failure. [ 193.889674][ T6599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.947831][ T6599] CPU: 1 PID: 6599 Comm: syz.1.725 Not tainted syzkaller #0 [ 193.955168][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.965243][ T6599] Call Trace: [ 193.968532][ T6599] [ 193.971468][ T6599] dump_stack_lvl+0x188/0x24e [ 193.976169][ T6599] ? show_regs_print_info+0x12/0x12 [ 193.981385][ T6599] ? load_image+0x410/0x410 [ 193.985906][ T6599] ? __lock_acquire+0x7ea0/0x7ea0 [ 193.990957][ T6599] should_fail_ex+0x390/0x4c0 [ 193.995659][ T6599] prepare_alloc_pages+0x1e1/0x5b0 [ 194.000811][ T6599] __alloc_pages+0x130/0x4f0 [ 194.005428][ T6599] ? zone_statistics+0x170/0x170 [ 194.010382][ T6599] ? __alloc_pages+0x290/0x4f0 [ 194.015169][ T6599] ? zone_statistics+0x170/0x170 [ 194.020134][ T6599] ? alloc_pages+0x4dd/0x740 [ 194.024756][ T6599] get_zeroed_page+0x13/0x30 [ 194.029372][ T6599] get_image_page+0x41/0x310 [ 194.033991][ T6599] alloc_rtree_node+0xde/0x150 [ 194.038780][ T6599] memory_bm_create+0x4f1/0x950 [ 194.043673][ T6599] create_basic_memory_bitmaps+0x95/0x370 [ 194.049429][ T6599] snapshot_open+0x1a9/0x280 [ 194.054042][ T6599] ? snapshot_compat_ioctl+0x90/0x90 [ 194.059349][ T6599] misc_open+0x31f/0x390 [ 194.063617][ T6599] chrdev_open+0x585/0x5f0 [ 194.068054][ T6599] ? cd_forget+0x160/0x160 [ 194.072487][ T6599] ? fsnotify_perm+0x39b/0x550 [ 194.077266][ T6599] ? cd_forget+0x160/0x160 [ 194.081693][ T6599] do_dentry_open+0x7dd/0x10b0 [ 194.086494][ T6599] path_openat+0x2674/0x2f10 [ 194.091120][ T6599] ? kasan_set_track+0x60/0x70 [ 194.095904][ T6599] ? verify_lock_unused+0x140/0x140 [ 194.101124][ T6599] ? do_sys_openat2+0xdd/0x4f0 [ 194.105922][ T6599] ? do_filp_open+0x420/0x420 [ 194.110636][ T6599] do_filp_open+0x1ee/0x420 [ 194.115166][ T6599] ? vfs_tmpfile+0x470/0x470 [ 194.119805][ T6599] ? _raw_spin_unlock+0x24/0x40 [ 194.124674][ T6599] ? alloc_fd+0x590/0x640 [ 194.129034][ T6599] do_sys_openat2+0x14b/0x4f0 [ 194.133736][ T6599] ? do_sys_open+0xe0/0xe0 [ 194.138183][ T6599] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.144190][ T6599] ? lock_chain_count+0x20/0x20 [ 194.149066][ T6599] __x64_sys_openat+0x135/0x160 [ 194.153943][ T6599] do_syscall_64+0x4c/0xa0 [ 194.158380][ T6599] ? clear_bhb_loop+0x60/0xb0 [ 194.163073][ T6599] ? clear_bhb_loop+0x60/0xb0 [ 194.167773][ T6599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.173690][ T6599] RIP: 0033:0x7f785b19e1d9 [ 194.178119][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.197730][ T6599] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.206134][ T6599] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 194.214101][ T6599] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 194.222059][ T6599] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 194.230015][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.237977][ T6599] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 194.245964][ T6599] [ 194.249052][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.260852][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.267287][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.283858][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 194.386269][ T6608] 9pnet_fd: Insufficient options for proto=fd [ 194.847336][ T6613] FAULT_INJECTION: forcing a failure. [ 194.847336][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 194.872752][ T6613] CPU: 1 PID: 6613 Comm: syz.1.731 Not tainted syzkaller #0 [ 194.880098][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.890167][ T6613] Call Trace: [ 194.893456][ T6613] [ 194.896396][ T6613] dump_stack_lvl+0x188/0x24e [ 194.901094][ T6613] ? show_regs_print_info+0x12/0x12 [ 194.906309][ T6613] ? load_image+0x410/0x410 [ 194.910829][ T6613] ? __might_sleep+0xd0/0xd0 [ 194.915434][ T6613] ? __lock_acquire+0x7ea0/0x7ea0 [ 194.920488][ T6613] should_fail_ex+0x390/0x4c0 [ 194.925195][ T6613] should_failslab+0x5/0x20 [ 194.929725][ T6613] slab_pre_alloc_hook+0x59/0x300 [ 194.934767][ T6613] ? tomoyo_encode+0x28a/0x550 [ 194.939567][ T6613] __kmem_cache_alloc_node+0x4f/0x270 [ 194.944970][ T6613] ? tomoyo_encode+0x28a/0x550 [ 194.945780][ T6616] netlink: 'syz.2.729': attribute type 12 has an invalid length. [ 194.949744][ T6613] __kmalloc+0xa3/0x240 [ 194.961623][ T6613] tomoyo_encode+0x28a/0x550 [ 194.966260][ T6613] tomoyo_realpath_from_path+0x578/0x5c0 [ 194.971922][ T6613] tomoyo_check_open_permission+0x212/0x440 [ 194.977816][ T6613] ? tomoyo_check_open_permission+0x1bf/0x440 [ 194.983883][ T6613] ? tomoyo_check_path_number_acl+0x280/0x280 [ 194.989945][ T6613] ? from_kgid+0x14f/0x6a0 [ 194.994356][ T6613] ? make_kgid+0x650/0x650 [ 194.998788][ T6613] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.003812][ T6613] ? __rwlock_init+0x140/0x140 [ 195.008568][ T6613] ? ovl_permission+0x17f/0x2c0 [ 195.013413][ T6613] ? tomoyo_file_open+0xe9/0x170 [ 195.018351][ T6613] security_file_open+0x5e/0xa0 [ 195.023198][ T6613] do_dentry_open+0x2fd/0x10b0 [ 195.027959][ T6613] ? ovl_getattr+0x1000/0x1000 [ 195.032720][ T6613] ? memcpy+0x3c/0x60 [ 195.036701][ T6613] path_openat+0x2674/0x2f10 [ 195.041307][ T6613] ? do_filp_open+0x420/0x420 [ 195.046011][ T6613] do_filp_open+0x1ee/0x420 [ 195.050534][ T6613] ? vfs_tmpfile+0x470/0x470 [ 195.055155][ T6613] ? _raw_spin_unlock+0x24/0x40 [ 195.060011][ T6613] ? alloc_fd+0x590/0x640 [ 195.064348][ T6613] do_sys_openat2+0x14b/0x4f0 [ 195.069031][ T6613] ? do_sys_open+0xe0/0xe0 [ 195.073449][ T6613] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 195.079432][ T6613] ? lock_chain_count+0x20/0x20 [ 195.084289][ T6613] __x64_sys_openat+0x135/0x160 [ 195.089144][ T6613] do_syscall_64+0x4c/0xa0 [ 195.093558][ T6613] ? clear_bhb_loop+0x60/0xb0 [ 195.098238][ T6613] ? clear_bhb_loop+0x60/0xb0 [ 195.102910][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.108799][ T6613] RIP: 0033:0x7f785b19e1d9 [ 195.113219][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.132825][ T6613] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.141238][ T6613] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 195.149206][ T6613] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 195.157187][ T6613] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 195.165158][ T6613] R10: 000000000000025c R11: 0000000000000246 R12: 0000000000000000 [ 195.173124][ T6613] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 195.181107][ T6613] [ 195.184177][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.198210][ T6617] loop3: detected capacity change from 0 to 512 [ 195.251970][ T6613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.266987][ T6617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 195.272604][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 195.280936][ T6617] System zones: 1-12 [ 195.289532][ T6617] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.732: missing EA_INODE flag [ 195.310512][ T6617] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.732: error while reading EA inode 12 err=-117 [ 195.332435][ T6617] EXT4-fs (loop3): 1 orphan inode deleted [ 195.338234][ T6617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.571174][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 196.826381][ T6645] loop3: detected capacity change from 0 to 512 [ 197.086314][ T6645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 197.200681][ T6645] System zones: 1-12 [ 197.350155][ T6645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.739: missing EA_INODE flag [ 197.438553][ T6645] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.739: error while reading EA inode 12 err=-117 [ 197.457747][ T6645] EXT4-fs (loop3): 1 orphan inode deleted [ 197.464034][ T6645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.286191][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 198.398587][ T6655] random: crng reseeded on system resumption [ 198.410380][ T6655] FAULT_INJECTION: forcing a failure. [ 198.410380][ T6655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.423983][ T6655] CPU: 1 PID: 6655 Comm: syz.3.742 Not tainted syzkaller #0 [ 198.431289][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.441332][ T6655] Call Trace: [ 198.444603][ T6655] [ 198.447526][ T6655] dump_stack_lvl+0x188/0x24e [ 198.452207][ T6655] ? show_regs_print_info+0x12/0x12 [ 198.457421][ T6655] ? load_image+0x410/0x410 [ 198.461911][ T6655] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.466929][ T6655] should_fail_ex+0x390/0x4c0 [ 198.471596][ T6655] prepare_alloc_pages+0x1e1/0x5b0 [ 198.476702][ T6655] __alloc_pages+0x130/0x4f0 [ 198.481281][ T6655] ? zone_statistics+0x170/0x170 [ 198.486226][ T6655] ? __alloc_pages+0x290/0x4f0 [ 198.490978][ T6655] ? zone_statistics+0x170/0x170 [ 198.495918][ T6655] ? alloc_pages+0x4dd/0x740 [ 198.500520][ T6655] get_zeroed_page+0x13/0x30 [ 198.505099][ T6655] get_image_page+0x41/0x310 [ 198.509680][ T6655] alloc_rtree_node+0xde/0x150 [ 198.514446][ T6655] memory_bm_create+0x4f1/0x950 [ 198.519313][ T6655] create_basic_memory_bitmaps+0x95/0x370 [ 198.525042][ T6655] snapshot_open+0x1a9/0x280 [ 198.529677][ T6655] ? snapshot_compat_ioctl+0x90/0x90 [ 198.534969][ T6655] misc_open+0x31f/0x390 [ 198.539244][ T6655] chrdev_open+0x585/0x5f0 [ 198.543650][ T6655] ? cd_forget+0x160/0x160 [ 198.548066][ T6655] ? fsnotify_perm+0x39b/0x550 [ 198.552843][ T6655] ? cd_forget+0x160/0x160 [ 198.557265][ T6655] do_dentry_open+0x7dd/0x10b0 [ 198.562045][ T6655] path_openat+0x2674/0x2f10 [ 198.566630][ T6655] ? kasan_set_track+0x60/0x70 [ 198.571406][ T6655] ? verify_lock_unused+0x140/0x140 [ 198.576603][ T6655] ? do_sys_openat2+0xdd/0x4f0 [ 198.581381][ T6655] ? do_filp_open+0x420/0x420 [ 198.586058][ T6655] do_filp_open+0x1ee/0x420 [ 198.590554][ T6655] ? vfs_tmpfile+0x470/0x470 [ 198.595166][ T6655] ? _raw_spin_unlock+0x24/0x40 [ 198.600018][ T6655] ? alloc_fd+0x590/0x640 [ 198.604360][ T6655] do_sys_openat2+0x14b/0x4f0 [ 198.609053][ T6655] ? do_sys_open+0xe0/0xe0 [ 198.613470][ T6655] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.619458][ T6655] ? lock_chain_count+0x20/0x20 [ 198.624310][ T6655] __x64_sys_openat+0x135/0x160 [ 198.629153][ T6655] do_syscall_64+0x4c/0xa0 [ 198.633565][ T6655] ? clear_bhb_loop+0x60/0xb0 [ 198.638246][ T6655] ? clear_bhb_loop+0x60/0xb0 [ 198.642911][ T6655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.648812][ T6655] RIP: 0033:0x7fd6eed9e1d9 [ 198.653223][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.672846][ T6655] RSP: 002b:00007fd6efcf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.681264][ T6655] RAX: ffffffffffffffda RBX: 00007fd6ef025fa0 RCX: 00007fd6eed9e1d9 [ 198.689228][ T6655] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 198.697209][ T6655] RBP: 00007fd6eee35888 R08: 0000000000000000 R09: 0000000000000000 [ 198.705178][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.713148][ T6655] R13: 00007fd6ef026038 R14: 00007fd6ef025fa0 R15: 00007ffd786cf1c8 [ 198.721152][ T6655] [ 198.724175][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.232350][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 199.501315][ T6669] 9pnet_fd: Insufficient options for proto=fd [ 199.791873][ T4284] Bluetooth: hci4: link tx timeout [ 199.797617][ T4284] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 199.807824][ T4284] Bluetooth: hci4: link tx timeout [ 199.817071][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.300644][ T6677] loop4: detected capacity change from 0 to 512 [ 200.393090][ T6677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 200.426250][ T6677] System zones: 1-12 [ 200.723899][ T6677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.750: missing EA_INODE flag [ 200.752085][ T6677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.750: error while reading EA inode 12 err=-117 [ 200.772544][ T6677] EXT4-fs (loop4): 1 orphan inode deleted [ 200.778421][ T6677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.521726][ T6701] random: crng reseeded on system resumption [ 201.530059][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 201.567057][ T6701] FAULT_INJECTION: forcing a failure. [ 201.567057][ T6701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.587701][ T6701] CPU: 1 PID: 6701 Comm: syz.2.758 Not tainted syzkaller #0 [ 201.595043][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.605113][ T6701] Call Trace: [ 201.608388][ T6701] [ 201.611343][ T6701] dump_stack_lvl+0x188/0x24e [ 201.616024][ T6701] ? show_regs_print_info+0x12/0x12 [ 201.621222][ T6701] ? load_image+0x410/0x410 [ 201.625718][ T6701] ? __lock_acquire+0x7ea0/0x7ea0 [ 201.630749][ T6701] should_fail_ex+0x390/0x4c0 [ 201.635447][ T6701] prepare_alloc_pages+0x1e1/0x5b0 [ 201.640581][ T6701] __alloc_pages+0x130/0x4f0 [ 201.645176][ T6701] ? zone_statistics+0x170/0x170 [ 201.650111][ T6701] ? __alloc_pages+0x290/0x4f0 [ 201.654874][ T6701] ? zone_statistics+0x170/0x170 [ 201.659810][ T6701] ? alloc_pages+0x4dd/0x740 [ 201.664402][ T6701] get_zeroed_page+0x13/0x30 [ 201.668988][ T6701] get_image_page+0x41/0x310 [ 201.673578][ T6701] alloc_rtree_node+0xde/0x150 [ 201.678340][ T6701] memory_bm_create+0x4f1/0x950 [ 201.683195][ T6701] create_basic_memory_bitmaps+0x95/0x370 [ 201.688915][ T6701] snapshot_open+0x1a9/0x280 [ 201.693510][ T6701] ? snapshot_compat_ioctl+0x90/0x90 [ 201.698799][ T6701] misc_open+0x31f/0x390 [ 201.703048][ T6701] chrdev_open+0x585/0x5f0 [ 201.707465][ T6701] ? cd_forget+0x160/0x160 [ 201.711898][ T6701] ? fsnotify_perm+0x39b/0x550 [ 201.716660][ T6701] ? cd_forget+0x160/0x160 [ 201.721073][ T6701] do_dentry_open+0x7dd/0x10b0 [ 201.725861][ T6701] path_openat+0x2674/0x2f10 [ 201.730459][ T6701] ? kasan_set_track+0x60/0x70 [ 201.735312][ T6701] ? verify_lock_unused+0x140/0x140 [ 201.740505][ T6701] ? do_sys_openat2+0xdd/0x4f0 [ 201.745277][ T6701] ? do_filp_open+0x420/0x420 [ 201.749962][ T6701] do_filp_open+0x1ee/0x420 [ 201.754463][ T6701] ? vfs_tmpfile+0x470/0x470 [ 201.759064][ T6701] ? _raw_spin_unlock+0x24/0x40 [ 201.763908][ T6701] ? alloc_fd+0x590/0x640 [ 201.768256][ T6701] do_sys_openat2+0x14b/0x4f0 [ 201.772945][ T6701] ? do_sys_open+0xe0/0xe0 [ 201.777365][ T6701] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.783345][ T6701] ? lock_chain_count+0x20/0x20 [ 201.788204][ T6701] __x64_sys_openat+0x135/0x160 [ 201.793063][ T6701] do_syscall_64+0x4c/0xa0 [ 201.797484][ T6701] ? clear_bhb_loop+0x60/0xb0 [ 201.802163][ T6701] ? clear_bhb_loop+0x60/0xb0 [ 201.806841][ T6701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.812727][ T6701] RIP: 0033:0x7fef8fd9e1d9 [ 201.817140][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.836743][ T6701] RSP: 002b:00007fef90c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.845151][ T6701] RAX: ffffffffffffffda RBX: 00007fef90025fa0 RCX: 00007fef8fd9e1d9 [ 201.853116][ T6701] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 201.861095][ T6701] RBP: 00007fef8fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 201.869067][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.877036][ T6701] R13: 00007fef90026038 R14: 00007fef90025fa0 R15: 00007fff27284bb8 [ 201.885021][ T6701] [ 201.888096][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 201.888114][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.252582][ T6734] 9pnet_fd: Insufficient options for proto=fd [ 203.432734][ T6741] netlink: 'syz.1.771': attribute type 46 has an invalid length. [ 203.538941][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 204.819139][ T6756] random: crng reseeded on system resumption [ 204.893476][ T6759] FAULT_INJECTION: forcing a failure. [ 204.893476][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.419602][ T6759] CPU: 0 PID: 6759 Comm: syz.0.775 Not tainted syzkaller #0 [ 205.426929][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.436998][ T6759] Call Trace: [ 205.440273][ T6759] [ 205.440283][ T6759] dump_stack_lvl+0x188/0x24e [ 205.447907][ T6759] ? show_regs_print_info+0x12/0x12 [ 205.453126][ T6759] ? load_image+0x410/0x410 [ 205.457645][ T6759] ? __lock_acquire+0x7ea0/0x7ea0 [ 205.462701][ T6759] ? finish_task_switch+0x262/0x8e0 [ 205.467930][ T6759] should_fail_ex+0x390/0x4c0 [ 205.472639][ T6759] _copy_from_user+0x2c/0x170 [ 205.477353][ T6759] __sys_bpf+0x2ea/0x780 [ 205.481621][ T6759] ? bpf_link_show_fdinfo+0x380/0x380 [ 205.487013][ T6759] ? lock_chain_count+0x20/0x20 [ 205.491892][ T6759] __x64_sys_bpf+0x78/0x90 [ 205.496326][ T6759] do_syscall_64+0x4c/0xa0 [ 205.500761][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 205.505451][ T6759] ? clear_bhb_loop+0x60/0xb0 [ 205.510146][ T6759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.516054][ T6759] RIP: 0033:0x7f325539e1d9 [ 205.520462][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.520479][ T6759] RSP: 002b:00007f325628e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.520500][ T6759] RAX: ffffffffffffffda RBX: 00007f3255626090 RCX: 00007f325539e1d9 [ 205.556461][ T6759] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 205.564428][ T6759] RBP: 00007f3255435888 R08: 0000000000000000 R09: 0000000000000000 [ 205.572390][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.580354][ T6759] R13: 00007f3255626128 R14: 00007f3255626090 R15: 00007ffdd355ccb8 [ 205.588331][ T6759] [ 205.833481][ T6773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'. [ 205.861784][ T6773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'. [ 205.893551][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'. [ 207.208434][ T6795] 9pnet_fd: Insufficient options for proto=fd [ 209.189366][ T6826] loop1: detected capacity change from 0 to 512 [ 209.237508][ T6826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 209.246881][ T6826] System zones: 1-12 [ 209.302667][ T6826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.801: missing EA_INODE flag [ 209.327452][ T6826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.801: error while reading EA inode 12 err=-117 [ 209.533331][ T6826] EXT4-fs (loop1): 1 orphan inode deleted [ 209.565752][ T6826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.722210][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 211.558064][ T6860] tipc: Failed to remove unknown binding: 66,0,0/0:2185590575/2185590577 [ 211.567227][ T6860] tipc: Failed to remove unknown binding: 66,0,0/0:2185590575/2185590576 [ 211.621486][ T6860] tipc: Failed to remove unknown binding: 66,0,0/0:2185590575/2185590577 [ 211.932878][ T6860] tipc: Failed to remove unknown binding: 66,0,0/0:2185590575/2185590576 [ 211.986653][ T6870] loop3: detected capacity change from 0 to 512 [ 212.278057][ T6870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 212.298056][ T6870] System zones: 1-12 [ 212.303394][ T6870] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.816: missing EA_INODE flag [ 212.321782][ T6870] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.816: error while reading EA inode 12 err=-117 [ 212.341826][ T6870] EXT4-fs (loop3): 1 orphan inode deleted [ 212.352647][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.426502][ T6873] loop2: detected capacity change from 0 to 512 [ 212.578550][ T6873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 212.627023][ T6873] System zones: 1-12 [ 212.665292][ T6873] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.817: missing EA_INODE flag [ 212.718917][ T6873] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.817: error while reading EA inode 12 err=-117 [ 212.766198][ T6873] EXT4-fs (loop2): 1 orphan inode deleted [ 212.817010][ T6873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.885188][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 213.365778][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 214.712252][ T6918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.831'. [ 214.725078][ T6918] netlink: 50 bytes leftover after parsing attributes in process `syz.3.831'. [ 214.951366][ T6927] loop2: detected capacity change from 0 to 512 [ 214.988402][ T6927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 215.001865][ T6927] System zones: 1-12 [ 215.018429][ T6927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.836: missing EA_INODE flag [ 215.030326][ T6927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.836: error while reading EA inode 12 err=-117 [ 215.044205][ T6927] EXT4-fs (loop2): 1 orphan inode deleted [ 215.049964][ T6927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.120118][ T6935] loop1: detected capacity change from 0 to 512 [ 215.253389][ T6935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 215.261924][ T6935] System zones: 1-12 [ 215.272123][ T6935] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.839: missing EA_INODE flag [ 215.466088][ T6935] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.839: error while reading EA inode 12 err=-117 [ 215.937052][ T6935] EXT4-fs (loop1): 1 orphan inode deleted [ 215.948496][ T6935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.042288][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 216.610378][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 217.427735][ T6971] loop4: detected capacity change from 0 to 512 [ 217.466130][ T6973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.849'. [ 217.504306][ T6971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 217.522081][ T6971] System zones: 1-12 [ 217.532924][ T6971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.848: missing EA_INODE flag [ 217.552362][ T6971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.848: error while reading EA inode 12 err=-117 [ 217.597975][ T6971] EXT4-fs (loop4): 1 orphan inode deleted [ 217.614890][ T6971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.954879][ T6988] 9pnet_fd: Insufficient options for proto=fd [ 218.548898][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 218.634604][ T6994] ip_tables: iptables: counters copy to user failed while replacing table [ 220.159562][ T7012] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 220.221200][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.262701][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 220.282200][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.291007][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.424696][ T7012] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 220.441914][ T7016] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 220.451878][ T4451] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.461614][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.860'. [ 220.501541][ T7016] device dummy0 entered promiscuous mode [ 220.537033][ T7016] bond1: (slave dummy0): Removing an active aggregator [ 220.565272][ T7016] bond1: (slave dummy0): Releasing backup interface [ 221.381204][ T7033] netlink: 292 bytes leftover after parsing attributes in process `syz.4.867'. [ 221.490869][ T7037] ip_tables: iptables: counters copy to user failed while replacing table [ 222.815777][ T7059] tipc: Started in network mode [ 222.853964][ T7059] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 222.922743][ T7059] tipc: Enabling of bearer rejected, failed to enable media [ 223.065607][ T7069] loop4: detected capacity change from 0 to 512 [ 223.140560][ T7072] 9pnet_fd: Insufficient options for proto=fd [ 223.317128][ T7069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 223.430011][ T7069] System zones: 1-12 [ 223.614527][ T7069] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.881: missing EA_INODE flag [ 223.707352][ T7069] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.881: error while reading EA inode 12 err=-117 [ 223.785618][ T7069] EXT4-fs (loop4): 1 orphan inode deleted [ 223.791406][ T7069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.217809][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 225.574408][ T7112] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000 [ 226.210018][ T7117] 9pnet_fd: Insufficient options for proto=fd [ 226.370809][ T7125] loop3: detected capacity change from 0 to 512 [ 226.572672][ T7125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 226.611181][ T7125] System zones: 1-12 [ 226.643470][ T7125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.898: missing EA_INODE flag [ 226.687644][ T7125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.898: error while reading EA inode 12 err=-117 [ 226.728266][ T7125] EXT4-fs (loop3): 1 orphan inode deleted [ 226.737591][ T7125] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.474531][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 227.877228][ T7153] loop3: detected capacity change from 0 to 512 [ 228.042198][ T7153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 228.050216][ T7153] System zones: 1-12 [ 228.111401][ T7153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.905: missing EA_INODE flag [ 228.194452][ T7153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.905: error while reading EA inode 12 err=-117 [ 228.217559][ T7153] EXT4-fs (loop3): 1 orphan inode deleted [ 228.223712][ T7153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.310121][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 229.213556][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 229.340388][ T7173] loop0: detected capacity change from 0 to 512 [ 229.535067][ T7173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 229.555370][ T7173] System zones: 1-12 [ 229.561070][ T7173] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.914: missing EA_INODE flag [ 229.639343][ T7182] 9pnet_fd: Insufficient options for proto=fd [ 229.731949][ T7173] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.914: error while reading EA inode 12 err=-117 [ 229.886957][ T7173] EXT4-fs (loop0): 1 orphan inode deleted [ 229.931604][ T7173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.190788][ T7186] loop2: detected capacity change from 0 to 512 [ 230.504909][ T7186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 230.546489][ T7186] System zones: 1-12 [ 230.586172][ T7186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.916: missing EA_INODE flag [ 230.653263][ T7186] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.916: error while reading EA inode 12 err=-117 [ 230.672877][ T7186] EXT4-fs (loop2): 1 orphan inode deleted [ 230.678843][ T7186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.751528][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 231.878428][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 232.382032][ T7216] loop4: detected capacity change from 0 to 512 [ 232.407346][ T7216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 232.424493][ T7216] System zones: 1-12 [ 232.475738][ T7216] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.924: missing EA_INODE flag [ 232.547656][ T7216] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.924: error while reading EA inode 12 err=-117 [ 232.592030][ T7216] EXT4-fs (loop4): 1 orphan inode deleted [ 232.597845][ T7216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.293541][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 233.415814][ T7232] 9pnet_fd: Insufficient options for proto=fd [ 234.014723][ T7240] loop4: detected capacity change from 0 to 512 [ 234.046037][ T7240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 234.060367][ T7240] System zones: 1-12 [ 234.072078][ T7240] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.931: missing EA_INODE flag [ 234.115386][ T7240] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.931: error while reading EA inode 12 err=-117 [ 234.553716][ T7240] EXT4-fs (loop4): 1 orphan inode deleted [ 234.686235][ T7240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.476669][ T7268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.940'. [ 235.609411][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 236.183091][ T7276] 9pnet_fd: Insufficient options for proto=fd [ 237.316689][ T7291] loop2: detected capacity change from 0 to 512 [ 237.344770][ T7292] tipc: Failed to remove unknown binding: 66,0,0/0:3058786351/3058786353 [ 237.371933][ T7292] tipc: Failed to remove unknown binding: 66,0,0/0:3058786351/3058786352 [ 237.404142][ T7291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 237.431343][ T7291] System zones: 1-12 [ 237.461512][ T7291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.947: missing EA_INODE flag [ 237.493283][ T7291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.947: error while reading EA inode 12 err=-117 [ 237.528872][ T7291] EXT4-fs (loop2): 1 orphan inode deleted [ 237.538817][ T7291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.074835][ T7316] 9pnet_fd: Insufficient options for proto=fd [ 238.206763][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 239.221382][ T7339] tipc: Started in network mode [ 239.243593][ T7339] tipc: Node identity 1, cluster identity 1025 [ 239.269992][ T7339] tipc: Node number set to 1 [ 239.671018][ T7349] loop0: detected capacity change from 0 to 512 [ 239.714701][ T7349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 239.777533][ T7349] System zones: 1-12 [ 239.804881][ T7349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.970: missing EA_INODE flag [ 239.860145][ T7349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.970: error while reading EA inode 12 err=-117 [ 240.056290][ T7349] EXT4-fs (loop0): 1 orphan inode deleted [ 240.071792][ T7349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 240.732075][ T7363] 9pnet_fd: Insufficient options for proto=fd [ 241.063734][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 241.192882][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 241.402400][ T7372] xt_CT: No such helper "snmp" [ 241.802704][ T7386] loop1: detected capacity change from 0 to 512 [ 242.127102][ T7394] 9pnet_fd: Insufficient options for proto=fd [ 242.678699][ T7386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 242.701798][ T7386] System zones: 1-12 [ 242.729273][ T7386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.986: missing EA_INODE flag [ 242.765420][ T7404] loop2: detected capacity change from 0 to 512 [ 242.779425][ T7386] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.986: error while reading EA inode 12 err=-117 [ 242.811827][ T7386] EXT4-fs (loop1): 1 orphan inode deleted [ 242.817785][ T7386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.703779][ T7404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 243.738287][ T7404] System zones: 1-12 [ 243.771533][ T7404] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.987: missing EA_INODE flag [ 243.834785][ T7404] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.987: error while reading EA inode 12 err=-117 [ 243.895783][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 243.908716][ T7404] EXT4-fs (loop2): 1 orphan inode deleted [ 243.916378][ T7404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.013982][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 247.661487][ T4435] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 248.912159][ T7522] bridge_slave_0: default FDB implementation only supports local addresses [ 250.479334][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 250.488382][ T7486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.937032][ T7561] tipc: Started in network mode [ 250.988863][ T7561] tipc: Node identity 1, cluster identity 1025 [ 251.076095][ T7561] tipc: Node number set to 1 [ 251.859281][ T7583] sctp: [Deprecated]: syz.0.1052 (pid 7583) Use of int in max_burst socket option. [ 251.859281][ T7583] Use struct sctp_assoc_value instead [ 252.097070][ T4479] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 252.165939][ T7602] loop3: detected capacity change from 0 to 512 [ 252.211849][ T7602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 252.219869][ T7602] System zones: 1-12 [ 252.255262][ T7602] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1057: missing EA_INODE flag [ 252.267763][ T7602] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1057: error while reading EA inode 12 err=-117 [ 252.281348][ T7602] EXT4-fs (loop3): 1 orphan inode deleted [ 252.288067][ T7602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 253.189502][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 253.304300][ T7613] device syzkaller0 entered promiscuous mode [ 254.933619][ T7587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.103868][ T7633] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1066'. [ 255.277796][ T7643] loop4: detected capacity change from 0 to 512 [ 255.329974][ T7643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 255.352900][ T7645] device syzkaller0 entered promiscuous mode [ 255.376240][ T7643] System zones: 1-12 [ 255.386745][ T7643] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1071: missing EA_INODE flag [ 255.441652][ T7645] simple: /dev/video#_0 [ 255.446078][ T7645] simple: /dev/video#_0 [ 255.450290][ T7645] simple: /dev/video#_0 [ 255.454511][ T7645] simple: /dev/video#_0 [ 255.458672][ T7645] simple: /dev/video#_0 [ 255.462869][ T7645] simple: /dev/video#_0 [ 255.467026][ T7645] simple: /dev/video#_0 [ 255.471184][ T7645] simple: /dev/video#_0 [ 255.475378][ T7645] simple: /dev/video#_0 [ 255.479547][ T7645] simple: /dev/video#_0 [ 255.483739][ T7645] simple: /dev/video#_0 [ 255.487898][ T7645] simple: /dev/video#_0 [ 255.492107][ T7645] simple: /dev/video#_0 [ 255.496259][ T7645] simple: /dev/video#_0 [ 255.500395][ T7645] simple: /dev/video#_0 [ 255.504558][ T7645] simple: /dev/video#_0 [ 255.508704][ T7645] simple: /dev/video#_0 [ 255.512887][ T7645] simple: /dev/video#_0 [ 255.517055][ T7645] simple: /dev/video#_0 [ 255.521220][ T7645] simple: /dev/video#_0 [ 255.525426][ T7645] simple: /dev/video#_0 [ 255.529593][ T7645] simple: /dev/video#_0 [ 255.533800][ T7645] simple: /dev/video#_0 [ 255.537965][ T7645] simple: /dev/video#_0 [ 255.542160][ T7645] simple: /dev/video#_0 [ 255.542996][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.546304][ T7645] simple: /dev/video#_0 [ 255.546336][ T7645] simple: /dev/video#_0 [ 255.546346][ T7645] simple: /dev/video#_0 [ 255.562075][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.565067][ T7645] simple: /dev/video#_0 [ 255.565079][ T7645] simple: /dev/video#_0 [ 255.565089][ T7645] simple: /dev/video#_0 [ 255.565098][ T7645] simple: /dev/video#_0 [ 255.588028][ T7645] TC_ACT_REPEAT abuse ? [ 255.590701][ T7656] tipc: Cannot configure node identity twice [ 255.610531][ T7643] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1071: error while reading EA inode 12 err=-117 [ 255.652201][ T7643] EXT4-fs (loop4): 1 orphan inode deleted [ 255.801801][ T7643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.651522][ T4463] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 256.741791][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 256.966242][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 259.476445][ T7664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.694610][ T7700] tipc: Failed to remove unknown binding: 66,0,0/1:4332662/4332664 [ 259.720554][ T7706] loop2: detected capacity change from 0 to 512 [ 259.731745][ T7700] tipc: Failed to remove unknown binding: 66,0,0/1:4332662/4332663 [ 259.742619][ T7700] tipc: Failed to remove unknown binding: 66,0,0/1:4332662/4332664 [ 259.750572][ T7700] tipc: Failed to remove unknown binding: 66,0,0/1:4332662/4332663 [ 259.822833][ T7706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 259.830853][ T7706] System zones: 1-12 [ 259.873681][ T7706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1093: missing EA_INODE flag [ 259.895991][ T7706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1093: error while reading EA inode 12 err=-117 [ 259.911858][ T7706] EXT4-fs (loop2): 1 orphan inode deleted [ 259.917942][ T7706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 260.045855][ T7719] tipc: Started in network mode [ 260.084546][ T7719] tipc: Node identity 1, cluster identity 1025 [ 260.091189][ T7719] tipc: Node number set to 1 [ 260.775918][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 261.036993][ T7745] random: crng reseeded on system resumption [ 261.055835][ T7745] FAULT_INJECTION: forcing a failure. [ 261.055835][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 261.147304][ T7745] CPU: 1 PID: 7745 Comm: syz.1.1106 Not tainted syzkaller #0 [ 261.154739][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.164828][ T7745] Call Trace: [ 261.168126][ T7745] [ 261.171064][ T7745] dump_stack_lvl+0x188/0x24e [ 261.175767][ T7745] ? show_regs_print_info+0x12/0x12 [ 261.180994][ T7745] ? load_image+0x410/0x410 [ 261.185522][ T7745] ? __might_sleep+0xd0/0xd0 [ 261.190134][ T7745] ? __lock_acquire+0x7ea0/0x7ea0 [ 261.195191][ T7745] should_fail_ex+0x390/0x4c0 [ 261.199902][ T7745] should_failslab+0x5/0x20 [ 261.204432][ T7745] slab_pre_alloc_hook+0x59/0x300 [ 261.209483][ T7745] ? __up_read+0x2b4/0x6b0 [ 261.213922][ T7745] ? create_basic_memory_bitmaps+0x7e/0x370 [ 261.219844][ T7745] __kmem_cache_alloc_node+0x4f/0x270 [ 261.225246][ T7745] ? create_basic_memory_bitmaps+0x7e/0x370 [ 261.231164][ T7745] kmalloc_trace+0x26/0xe0 [ 261.235602][ T7745] create_basic_memory_bitmaps+0x7e/0x370 [ 261.241356][ T7745] snapshot_open+0x1a9/0x280 [ 261.245969][ T7745] ? snapshot_compat_ioctl+0x90/0x90 [ 261.251283][ T7745] misc_open+0x31f/0x390 [ 261.255562][ T7745] chrdev_open+0x585/0x5f0 [ 261.260003][ T7745] ? cd_forget+0x160/0x160 [ 261.264444][ T7745] ? fsnotify_perm+0x39b/0x550 [ 261.269230][ T7745] ? cd_forget+0x160/0x160 [ 261.273679][ T7745] do_dentry_open+0x7dd/0x10b0 [ 261.278480][ T7745] path_openat+0x2674/0x2f10 [ 261.283107][ T7745] ? kasan_set_track+0x60/0x70 [ 261.287897][ T7745] ? verify_lock_unused+0x140/0x140 [ 261.293115][ T7745] ? do_sys_openat2+0xdd/0x4f0 [ 261.297888][ T7745] ? do_filp_open+0x420/0x420 [ 261.302578][ T7745] do_filp_open+0x1ee/0x420 [ 261.307085][ T7745] ? vfs_tmpfile+0x470/0x470 [ 261.311691][ T7745] ? _raw_spin_unlock+0x24/0x40 [ 261.316625][ T7745] ? alloc_fd+0x590/0x640 [ 261.320965][ T7745] do_sys_openat2+0x14b/0x4f0 [ 261.325646][ T7745] ? do_sys_open+0xe0/0xe0 [ 261.330059][ T7745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 261.336042][ T7745] ? lock_chain_count+0x20/0x20 [ 261.340896][ T7745] __x64_sys_openat+0x135/0x160 [ 261.345751][ T7745] do_syscall_64+0x4c/0xa0 [ 261.350189][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 261.354861][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 261.359532][ T7745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.365421][ T7745] RIP: 0033:0x7f785b19e1d9 [ 261.369832][ T7745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.389453][ T7745] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.397859][ T7745] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 261.405829][ T7745] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 261.413796][ T7745] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 261.421759][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.429723][ T7745] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 261.437709][ T7745] [ 261.440818][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.467423][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 262.113468][ T7771] 9pnet_fd: Insufficient options for proto=fd [ 262.676166][ T7775] loop2: detected capacity change from 0 to 512 [ 262.756958][ T7775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 262.801816][ T7775] System zones: 1-12 [ 262.826714][ T7775] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1116: missing EA_INODE flag [ 262.844020][ T7775] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1116: error while reading EA inode 12 err=-117 [ 262.857293][ T7775] EXT4-fs (loop2): 1 orphan inode deleted [ 262.863848][ T7775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.101742][ T4284] Bluetooth: hci4: link tx timeout [ 263.107050][ T4284] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 263.115612][ T4284] Bluetooth: hci4: link tx timeout [ 263.121069][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 263.738239][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 264.226504][ T7823] 9pnet_fd: Insufficient options for proto=fd [ 265.071194][ T7832] loop2: detected capacity change from 0 to 512 [ 265.094658][ T7833] device syzkaller0 entered promiscuous mode [ 265.111426][ T7832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 265.121471][ T7832] System zones: 1-12 [ 265.126761][ T7832] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1136: missing EA_INODE flag [ 265.139897][ T7832] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1136: error while reading EA inode 12 err=-117 [ 265.153834][ T7832] EXT4-fs (loop2): 1 orphan inode deleted [ 265.159603][ T7832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.101093][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 266.435311][ T7851] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499 [ 266.921061][ T7867] loop1: detected capacity change from 0 to 512 [ 266.976482][ T7865] device syzkaller1 entered promiscuous mode [ 266.977439][ T7867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 267.061973][ T7867] System zones: 1-12 [ 267.083183][ T7873] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1155'. [ 267.121209][ T7867] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1152: missing EA_INODE flag [ 267.159057][ T7867] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1152: error while reading EA inode 12 err=-117 [ 267.197665][ T7867] EXT4-fs (loop1): 1 orphan inode deleted [ 267.206926][ T7867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 268.156595][ T7886] 9pnet_fd: Insufficient options for proto=fd [ 268.230213][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 268.292113][ T7882] device syzkaller0 entered promiscuous mode [ 268.608419][ T7902] loop0: detected capacity change from 0 to 512 [ 268.646972][ T7902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 268.716134][ T7902] System zones: 1-12 [ 268.729587][ T7902] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1163: missing EA_INODE flag [ 268.752971][ T7902] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1163: error while reading EA inode 12 err=-117 [ 268.765899][ T7902] EXT4-fs (loop0): 1 orphan inode deleted [ 268.773246][ T7902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 268.848521][ T7911] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1167'. [ 269.669085][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 269.673998][ T7925] FAULT_INJECTION: forcing a failure. [ 269.673998][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 269.687562][ T7925] CPU: 0 PID: 7925 Comm: syz.1.1170 Not tainted syzkaller #0 [ 269.694960][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.705043][ T7925] Call Trace: [ 269.708316][ T7925] [ 269.711240][ T7925] dump_stack_lvl+0x188/0x24e [ 269.715924][ T7925] ? show_regs_print_info+0x12/0x12 [ 269.721122][ T7925] ? load_image+0x410/0x410 [ 269.725624][ T7925] ? __might_sleep+0xd0/0xd0 [ 269.730209][ T7925] ? __lock_acquire+0x7ea0/0x7ea0 [ 269.735237][ T7925] should_fail_ex+0x390/0x4c0 [ 269.739917][ T7925] should_failslab+0x5/0x20 [ 269.744418][ T7925] slab_pre_alloc_hook+0x59/0x300 [ 269.749442][ T7925] ? tomoyo_encode+0x28a/0x550 [ 269.754204][ T7925] __kmem_cache_alloc_node+0x4f/0x270 [ 269.759576][ T7925] ? tomoyo_encode+0x28a/0x550 [ 269.764335][ T7925] __kmalloc+0xa3/0x240 [ 269.768492][ T7925] tomoyo_encode+0x28a/0x550 [ 269.773086][ T7925] tomoyo_realpath_from_path+0x578/0x5c0 [ 269.778723][ T7925] tomoyo_check_open_permission+0x212/0x440 [ 269.784613][ T7925] ? tomoyo_check_open_permission+0x1bf/0x440 [ 269.790678][ T7925] ? tomoyo_check_path_number_acl+0x280/0x280 [ 269.796740][ T7925] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 269.802719][ T7925] ? __lock_acquire+0x7ea0/0x7ea0 [ 269.807758][ T7925] ? __lock_acquire+0x7ea0/0x7ea0 [ 269.812781][ T7925] ? __rwlock_init+0x140/0x140 [ 269.817566][ T7925] ? tomoyo_file_open+0xe9/0x170 [ 269.822504][ T7925] security_file_open+0x5e/0xa0 [ 269.827351][ T7925] do_dentry_open+0x2fd/0x10b0 [ 269.832118][ T7925] ? memcpy+0x3c/0x60 [ 269.836095][ T7925] path_openat+0x2674/0x2f10 [ 269.840689][ T7925] ? kasan_set_track+0x60/0x70 [ 269.845449][ T7925] ? verify_lock_unused+0x140/0x140 [ 269.850645][ T7925] ? do_sys_openat2+0xdd/0x4f0 [ 269.855409][ T7925] ? do_filp_open+0x420/0x420 [ 269.860095][ T7925] do_filp_open+0x1ee/0x420 [ 269.864597][ T7925] ? vfs_tmpfile+0x470/0x470 [ 269.869196][ T7925] ? _raw_spin_unlock+0x24/0x40 [ 269.874040][ T7925] ? alloc_fd+0x590/0x640 [ 269.878375][ T7925] do_sys_openat2+0x14b/0x4f0 [ 269.883056][ T7925] ? do_sys_open+0xe0/0xe0 [ 269.887470][ T7925] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 269.893453][ T7925] ? lock_chain_count+0x20/0x20 [ 269.898307][ T7925] __x64_sys_openat+0x135/0x160 [ 269.903161][ T7925] do_syscall_64+0x4c/0xa0 [ 269.907574][ T7925] ? clear_bhb_loop+0x60/0xb0 [ 269.912247][ T7925] ? clear_bhb_loop+0x60/0xb0 [ 269.916920][ T7925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.922809][ T7925] RIP: 0033:0x7f785b19e1d9 [ 269.927219][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.946821][ T7925] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.955232][ T7925] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 269.963199][ T7925] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 269.971165][ T7925] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 269.979131][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.987103][ T7925] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 269.995085][ T7925] [ 270.013109][ T7925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.024957][ T7926] loop4: detected capacity change from 0 to 512 [ 270.031725][ T7925] random: crng reseeded on system resumption [ 270.082761][ T7926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 270.159852][ T7926] System zones: 1-12 [ 270.175722][ T7926] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1171: missing EA_INODE flag [ 270.239666][ T7926] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1171: error while reading EA inode 12 err=-117 [ 270.277779][ T7926] EXT4-fs (loop4): 1 orphan inode deleted [ 270.287146][ T7926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.887268][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 6 < 9 [ 271.040078][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 271.504796][ T7966] device syzkaller0 entered promiscuous mode [ 271.526353][ T7972] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1182'. [ 271.650845][ T7975] tipc: Cannot configure node identity twice [ 271.913341][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 6 < 9 [ 272.059609][ T7994] random: crng reseeded on system resumption [ 272.109113][ T7994] FAULT_INJECTION: forcing a failure. [ 272.109113][ T7994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.142940][ T7994] CPU: 1 PID: 7994 Comm: syz.2.1192 Not tainted syzkaller #0 [ 272.150365][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.160431][ T7994] Call Trace: [ 272.163708][ T7994] [ 272.166634][ T7994] dump_stack_lvl+0x188/0x24e [ 272.171316][ T7994] ? show_regs_print_info+0x12/0x12 [ 272.176509][ T7994] ? load_image+0x410/0x410 [ 272.181011][ T7994] ? __lock_acquire+0x7ea0/0x7ea0 [ 272.186041][ T7994] should_fail_ex+0x390/0x4c0 [ 272.190724][ T7994] prepare_alloc_pages+0x1e1/0x5b0 [ 272.195849][ T7994] __alloc_pages+0x130/0x4f0 [ 272.200475][ T7994] ? zone_statistics+0x170/0x170 [ 272.205421][ T7994] ? __alloc_pages+0x290/0x4f0 [ 272.210201][ T7994] ? zone_statistics+0x170/0x170 [ 272.215151][ T7994] ? alloc_pages+0x4dd/0x740 [ 272.219750][ T7994] get_zeroed_page+0x13/0x30 [ 272.224358][ T7994] get_image_page+0x41/0x310 [ 272.228973][ T7994] alloc_rtree_node+0xde/0x150 [ 272.233748][ T7994] memory_bm_create+0x4f1/0x950 [ 272.238607][ T7994] create_basic_memory_bitmaps+0x95/0x370 [ 272.244331][ T7994] snapshot_open+0x1a9/0x280 [ 272.248925][ T7994] ? snapshot_compat_ioctl+0x90/0x90 [ 272.254209][ T7994] misc_open+0x31f/0x390 [ 272.258472][ T7994] chrdev_open+0x585/0x5f0 [ 272.262893][ T7994] ? cd_forget+0x160/0x160 [ 272.267308][ T7994] ? fsnotify_perm+0x39b/0x550 [ 272.272069][ T7994] ? cd_forget+0x160/0x160 [ 272.276486][ T7994] do_dentry_open+0x7dd/0x10b0 [ 272.281261][ T7994] path_openat+0x2674/0x2f10 [ 272.285856][ T7994] ? kasan_set_track+0x60/0x70 [ 272.290621][ T7994] ? verify_lock_unused+0x140/0x140 [ 272.295818][ T7994] ? do_sys_openat2+0xdd/0x4f0 [ 272.300583][ T7994] ? do_filp_open+0x420/0x420 [ 272.305268][ T7994] do_filp_open+0x1ee/0x420 [ 272.309772][ T7994] ? vfs_tmpfile+0x470/0x470 [ 272.314373][ T7994] ? _raw_spin_unlock+0x24/0x40 [ 272.319214][ T7994] ? alloc_fd+0x590/0x640 [ 272.323551][ T7994] do_sys_openat2+0x14b/0x4f0 [ 272.328239][ T7994] ? do_sys_open+0xe0/0xe0 [ 272.332657][ T7994] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 272.338637][ T7994] ? lock_chain_count+0x20/0x20 [ 272.343485][ T7994] __x64_sys_openat+0x135/0x160 [ 272.348336][ T7994] do_syscall_64+0x4c/0xa0 [ 272.352750][ T7994] ? clear_bhb_loop+0x60/0xb0 [ 272.357422][ T7994] ? clear_bhb_loop+0x60/0xb0 [ 272.362094][ T7994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.367981][ T7994] RIP: 0033:0x7fef8fd9e1d9 [ 272.372389][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.391993][ T7994] RSP: 002b:00007fef90c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.400400][ T7994] RAX: ffffffffffffffda RBX: 00007fef90025fa0 RCX: 00007fef8fd9e1d9 [ 272.408368][ T7994] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 272.416335][ T7994] RBP: 00007fef8fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 272.424296][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.432260][ T7994] R13: 00007fef90026038 R14: 00007fef90025fa0 R15: 00007fff27284bb8 [ 272.440248][ T7994] [ 272.443296][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.754826][ T8009] device syzkaller0 entered promiscuous mode [ 272.859610][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.872433][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.890403][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.944647][ T8013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 273.234941][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 6 < 9 [ 273.280879][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 273.340091][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 273.399340][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 273.419081][ T8039] random: crng reseeded on system resumption [ 273.449150][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 274.148108][ T8059] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1214'. [ 274.176282][ T8054] IPVS: Scheduler module ip_vs_sip not found [ 274.234299][ T8064] loop2: detected capacity change from 0 to 512 [ 274.254571][ T8064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 274.271238][ T8064] System zones: 1-12 [ 274.300378][ T8064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1217: missing EA_INODE flag [ 274.319615][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 6 < 9 [ 274.334093][ T8064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1217: error while reading EA inode 12 err=-117 [ 274.349830][ T8064] EXT4-fs (loop2): 1 orphan inode deleted [ 274.362295][ T8064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.182633][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 275.234817][ T8085] netlink: 'syz.1.1223': attribute type 4 has an invalid length. [ 275.277501][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 275.615472][ T8099] 9pnet_fd: Insufficient options for proto=fd [ 276.377334][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 6 < 9 [ 277.998389][ T8154] 9pnet_fd: Insufficient options for proto=fd [ 278.614241][ T8157] device syzkaller0 entered promiscuous mode [ 278.740023][ T8167] loop0: detected capacity change from 0 to 512 [ 278.832519][ T8167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 278.851813][ T8167] System zones: 1-12 [ 278.925739][ T8167] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1248: missing EA_INODE flag [ 278.998292][ T8167] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1248: error while reading EA inode 12 err=-117 [ 279.064178][ T8167] EXT4-fs (loop0): 1 orphan inode deleted [ 279.072247][ T8167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.808248][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 280.030589][ T8197] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1254'. [ 280.068988][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 6 < 9 [ 280.107830][ T8202] sctp: [Deprecated]: syz.4.1255 (pid 8202) Use of int in max_burst socket option. [ 280.107830][ T8202] Use struct sctp_assoc_value instead [ 280.408789][ T8212] loop3: detected capacity change from 0 to 512 [ 280.500489][ T8215] 9pnet_fd: Insufficient options for proto=fd [ 280.599638][ T8212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 280.671441][ T8212] System zones: 1-12 [ 280.888330][ T8212] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1261: missing EA_INODE flag [ 281.112046][ T8212] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1261: error while reading EA inode 12 err=-117 [ 281.154827][ T8212] EXT4-fs (loop3): 1 orphan inode deleted [ 281.186161][ T8212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.412561][ T8223] random: crng reseeded on system resumption [ 281.422838][ T8223] FAULT_INJECTION: forcing a failure. [ 281.422838][ T8223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.436281][ T8223] CPU: 0 PID: 8223 Comm: syz.1.1264 Not tainted syzkaller #0 [ 281.443676][ T8223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.453745][ T8223] Call Trace: [ 281.457040][ T8223] [ 281.459989][ T8223] dump_stack_lvl+0x188/0x24e [ 281.464692][ T8223] ? show_regs_print_info+0x12/0x12 [ 281.469923][ T8223] ? load_image+0x410/0x410 [ 281.474447][ T8223] ? __lock_acquire+0x7ea0/0x7ea0 [ 281.479504][ T8223] should_fail_ex+0x390/0x4c0 [ 281.484214][ T8223] prepare_alloc_pages+0x1e1/0x5b0 [ 281.489371][ T8223] __alloc_pages+0x130/0x4f0 [ 281.493993][ T8223] ? zone_statistics+0x170/0x170 [ 281.498950][ T8223] ? __alloc_pages+0x290/0x4f0 [ 281.503738][ T8223] ? zone_statistics+0x170/0x170 [ 281.508708][ T8223] ? alloc_pages+0x4dd/0x740 [ 281.513346][ T8223] get_zeroed_page+0x13/0x30 [ 281.517962][ T8223] get_image_page+0x41/0x310 [ 281.522582][ T8223] alloc_rtree_node+0xde/0x150 [ 281.527387][ T8223] memory_bm_create+0x4f1/0x950 [ 281.531868][ T8229] loop0: detected capacity change from 0 to 512 [ 281.532267][ T8223] create_basic_memory_bitmaps+0x95/0x370 [ 281.544256][ T8223] snapshot_open+0x1a9/0x280 [ 281.548863][ T8223] ? snapshot_compat_ioctl+0x90/0x90 [ 281.554158][ T8223] misc_open+0x31f/0x390 [ 281.558409][ T8223] chrdev_open+0x585/0x5f0 [ 281.562824][ T8223] ? cd_forget+0x160/0x160 [ 281.567236][ T8223] ? fsnotify_perm+0x39b/0x550 [ 281.571994][ T8223] ? cd_forget+0x160/0x160 [ 281.576403][ T8223] do_dentry_open+0x7dd/0x10b0 [ 281.581175][ T8223] path_openat+0x2674/0x2f10 [ 281.585774][ T8223] ? kasan_set_track+0x60/0x70 [ 281.590538][ T8223] ? verify_lock_unused+0x140/0x140 [ 281.595739][ T8223] ? do_sys_openat2+0xdd/0x4f0 [ 281.600508][ T8223] ? do_filp_open+0x420/0x420 [ 281.605196][ T8223] do_filp_open+0x1ee/0x420 [ 281.609697][ T8223] ? vfs_tmpfile+0x470/0x470 [ 281.614301][ T8223] ? _raw_spin_unlock+0x24/0x40 [ 281.619148][ T8223] ? alloc_fd+0x590/0x640 [ 281.623487][ T8223] do_sys_openat2+0x14b/0x4f0 [ 281.628166][ T8223] ? do_sys_open+0xe0/0xe0 [ 281.632596][ T8223] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 281.638591][ T8223] ? lock_chain_count+0x20/0x20 [ 281.643455][ T8223] __x64_sys_openat+0x135/0x160 [ 281.648318][ T8223] do_syscall_64+0x4c/0xa0 [ 281.652758][ T8223] ? clear_bhb_loop+0x60/0xb0 [ 281.657430][ T8223] ? clear_bhb_loop+0x60/0xb0 [ 281.662100][ T8223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.667988][ T8223] RIP: 0033:0x7f785b19e1d9 [ 281.672409][ T8223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.692013][ T8223] RSP: 002b:00007f785c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.700425][ T8223] RAX: ffffffffffffffda RBX: 00007f785b425fa0 RCX: 00007f785b19e1d9 [ 281.708388][ T8223] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 281.716356][ T8223] RBP: 00007f785b235888 R08: 0000000000000000 R09: 0000000000000000 [ 281.724317][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.732288][ T8223] R13: 00007f785b426038 R14: 00007f785b425fa0 R15: 00007ffed4376818 [ 281.740268][ T8223] [ 281.823030][ T8229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 281.846140][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 281.865014][ T8229] System zones: 1-12 [ 281.908583][ T8229] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1265: missing EA_INODE flag [ 281.987172][ T8229] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1265: error while reading EA inode 12 err=-117 [ 282.021401][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 6 < 9 [ 282.032147][ T8229] EXT4-fs (loop0): 1 orphan inode deleted [ 282.058368][ T8229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 282.623285][ T8254] sctp: [Deprecated]: syz.1.1273 (pid 8254) Use of int in max_burst socket option. [ 282.623285][ T8254] Use struct sctp_assoc_value instead [ 282.710454][ T8256] 9pnet_fd: Insufficient options for proto=fd [ 282.837285][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 283.386059][ T8265] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 283.419642][ T8268] loop1: detected capacity change from 0 to 512 [ 283.468549][ T8268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 283.480399][ T8268] System zones: 1-12 [ 283.493172][ T8268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1277: missing EA_INODE flag [ 283.547258][ T8268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1277: error while reading EA inode 12 err=-117 [ 283.560891][ T8268] EXT4-fs (loop1): 1 orphan inode deleted [ 283.566891][ T8268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.399319][ T8285] loop2: detected capacity change from 0 to 512 [ 284.446703][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 284.520068][ T8285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 284.570741][ T8285] System zones: 1-12 [ 284.602586][ T8285] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1284: missing EA_INODE flag [ 284.667013][ T8285] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1284: error while reading EA inode 12 err=-117 [ 284.699197][ T8285] EXT4-fs (loop2): 1 orphan inode deleted [ 284.710238][ T8285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.774606][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 285.452692][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 285.566651][ T8304] IPVS: stopping backup sync thread 8305 ... [ 285.573882][ T8305] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 285.584903][ T8306] sctp: [Deprecated]: syz.1.1288 (pid 8306) Use of int in max_burst socket option. [ 285.584903][ T8306] Use struct sctp_assoc_value instead [ 285.625333][ T8308] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 285.981007][ T8325] loop0: detected capacity change from 0 to 512 [ 286.160041][ T8325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 286.171591][ T8325] System zones: 1-12 [ 286.189568][ T8325] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1295: missing EA_INODE flag [ 286.234943][ T8325] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1295: error while reading EA inode 12 err=-117 [ 286.280781][ T8325] EXT4-fs (loop0): 1 orphan inode deleted [ 286.318517][ T8325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.576378][ T8348] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 287.126003][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 287.764232][ T8376] tipc: Failed to remove unknown binding: 66,0,0/1:3245875569/3245875570 [ 287.813000][ T8376] tipc: Failed to remove unknown binding: 66,0,0/1:3245875569/3245875570 [ 287.935609][ T8379] 9pnet_fd: Insufficient options for proto=fd [ 288.707734][ T8385] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1315'. [ 288.719217][ T8388] sctp: [Deprecated]: syz.0.1313 (pid 8388) Use of int in max_burst socket option. [ 288.719217][ T8388] Use struct sctp_assoc_value instead [ 289.099622][ T8397] sctp: [Deprecated]: syz.4.1319 (pid 8397) Use of int in max_burst socket option. [ 289.099622][ T8397] Use struct sctp_assoc_value instead [ 289.129494][ T8399] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.205536][ T8402] netlink: 4596 bytes leftover after parsing attributes in process `syz.1.1321'. [ 289.787155][ T8432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.034231][ T8446] sctp: [Deprecated]: syz.2.1341 (pid 8446) Use of int in max_burst socket option. [ 290.034231][ T8446] Use struct sctp_assoc_value instead [ 290.206137][ T8451] device syzkaller0 entered promiscuous mode [ 291.954556][ T8458] netlink: 'syz.1.1346': attribute type 6 has an invalid length. [ 292.305638][ T8490] device bridge0 entered promiscuous mode [ 292.329192][ T8490] bridge0: port 3(macsec1) entered blocking state [ 292.329490][ T8489] ip_tables: iptables: counters copy to user failed while replacing table [ 292.346095][ T8490] bridge0: port 3(macsec1) entered disabled state [ 292.448484][ T8490] device bridge0 left promiscuous mode [ 292.526409][ T8495] IPVS: Error joining to the multicast group [ 292.628622][ T8505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 292.686367][ T8505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 292.729934][ T8505] device bond0 entered promiscuous mode [ 292.750667][ T8505] device bond_slave_0 entered promiscuous mode [ 292.770969][ T8505] device bond_slave_1 entered promiscuous mode [ 292.810556][ T8505] device ip6gretap0 entered promiscuous mode [ 292.838823][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 293.298269][ T8538] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 293.325780][ T8538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.381456][ T8538] bond2: (slave veth3): Enslaving as an active interface with a down link [ 293.406857][ T8538] device wlan1 entered promiscuous mode [ 293.425968][ T8538] bond2: (slave wlan1): Opening slave failed [ 294.049591][ T8577] loop4: detected capacity change from 0 to 512 [ 294.073511][ T8579] netlink: 'syz.0.1393': attribute type 16 has an invalid length. [ 294.081369][ T8579] netlink: 'syz.0.1393': attribute type 17 has an invalid length. [ 294.106408][ T8577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 294.121797][ T8577] System zones: 1-12 [ 294.142781][ T8577] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1392: missing EA_INODE flag [ 294.166090][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.174184][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.188350][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.196101][ T8577] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1392: error while reading EA inode 12 err=-117 [ 294.212065][ T8577] EXT4-fs (loop4): 1 orphan inode deleted [ 294.217924][ T8577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.257542][ T8579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.118476][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 295.358721][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 295.381857][ T8615] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.390877][ T8615] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.400085][ T8615] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.408850][ T8615] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.629407][ T8632] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 296.203063][ T8650] netlink: 'syz.2.1413': attribute type 2 has an invalid length. [ 296.226980][ T8650] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 296.235816][ T8650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1413'. [ 297.517128][ T8676] device syzkaller0 entered promiscuous mode [ 300.833301][ T8771] tipc: Failed to remove unknown binding: 66,0,0/1:4271202491/4271202492 [ 300.860192][ T8771] tipc: Failed to remove unknown binding: 66,0,0/1:4271202491/4271202492 [ 300.917926][ T8779] macsec0: mtu greater than device maximum [ 301.693696][ T8817] 9pnet_fd: Insufficient options for proto=fd [ 303.398043][ T8843] xt_hl: Unknown Hop Limit match mode: 4 [ 303.530860][ T8855] loop4: detected capacity change from 0 to 512 [ 303.734940][ T8855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 303.806543][ T8855] System zones: 1-12 [ 303.826419][ T8867] 9pnet_fd: Insufficient options for proto=fd [ 304.024672][ T8855] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1469: missing EA_INODE flag [ 304.401298][ T8855] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1469: error while reading EA inode 12 err=-117 [ 304.500986][ T8855] EXT4-fs (loop4): 1 orphan inode deleted [ 304.514097][ T8855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 305.138086][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 306.409253][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 306.441162][ T8925] loop0: detected capacity change from 0 to 512 [ 306.504570][ T8925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 306.531742][ T8925] System zones: 1-12 [ 306.536924][ T8925] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1491: missing EA_INODE flag [ 306.572155][ T8925] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1491: error while reading EA inode 12 err=-117 [ 306.593526][ T8925] EXT4-fs (loop0): 1 orphan inode deleted [ 306.599948][ T8925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 307.978742][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 308.027088][ T8949] device syzkaller1 entered promiscuous mode [ 309.148420][ T8976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.218844][ T8979] ip_tables: iptables: counters copy to user failed while replacing table [ 309.326801][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1510'. [ 309.369034][ T8984] device vlan2 entered promiscuous mode [ 310.518310][ T9011] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1514'. [ 310.631010][ T9011] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1514'. [ 310.708474][ T9020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.739296][ T9022] loop1: detected capacity change from 0 to 512 [ 310.845946][ T9022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 310.860815][ T9022] System zones: 1-12 [ 310.911156][ T9022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1522: missing EA_INODE flag [ 310.925210][ T9029] device syzkaller0 entered promiscuous mode [ 310.931973][ T9022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1522: error while reading EA inode 12 err=-117 [ 310.952221][ T9022] EXT4-fs (loop1): 1 orphan inode deleted [ 310.963515][ T9022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.023504][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 312.083179][ T9041] loop3: detected capacity change from 0 to 512 [ 312.179618][ T9041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 312.226472][ T9041] System zones: 1-12 [ 312.288776][ T9041] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1528: missing EA_INODE flag [ 312.376493][ T9041] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1528: error while reading EA inode 12 err=-117 [ 312.411052][ T9041] EXT4-fs (loop3): 1 orphan inode deleted [ 312.446191][ T9041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.523254][ T9055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1532'. [ 312.613081][ T9058] device syzkaller1 entered promiscuous mode [ 313.421024][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 313.798742][ T9095] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 314.565070][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 314.582173][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 314.866036][ T9122] device bridge0 entered promiscuous mode [ 314.878552][ T9122] device syz_tun entered promiscuous mode [ 314.892356][ T9122] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 314.912853][ T9122] Cannot create hsr debugfs directory [ 314.929671][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 314.952040][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 315.055088][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 315.068470][ T9139] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1561'. [ 315.077740][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1561'. [ 315.149584][ T9137] device syzkaller0 entered promiscuous mode [ 315.419901][ T9158] netlink: 'syz.3.1566': attribute type 16 has an invalid length. [ 315.451733][ T9158] netlink: 'syz.3.1566': attribute type 17 has an invalid length. [ 315.810895][ T9158] device dummy0 left promiscuous mode [ 316.189337][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.230050][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.497531][ T9175] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1572'. [ 316.687140][ T9158] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.696796][ T9158] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.705795][ T9158] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.714960][ T9158] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.862985][ T9158] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.871992][ T9158] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.880934][ T9158] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.890140][ T9158] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.901011][ T9158] device syzkaller0 left promiscuous mode [ 316.953919][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960305][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.992437][ T9175] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1572'. [ 317.144411][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1577'. [ 317.184595][ T9185] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.193571][ T9185] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.202403][ T9185] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.211143][ T9185] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.272908][ T9185] device syzkaller0 entered promiscuous mode [ 317.928267][ T9207] loop0: detected capacity change from 0 to 512 [ 317.990830][ T9207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 317.993044][ T9212] __nla_validate_parse: 3 callbacks suppressed [ 317.993059][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 318.001654][ T9207] System zones: 1-12 [ 318.054362][ T9207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1583: missing EA_INODE flag [ 318.066689][ T9207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1583: error while reading EA inode 12 err=-117 [ 318.079608][ T9207] EXT4-fs (loop0): 1 orphan inode deleted [ 318.085648][ T9207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 318.126963][ T9212] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1587'. [ 318.143778][ T9223] device syzkaller1 entered promiscuous mode [ 318.463501][ T9225] loop4: detected capacity change from 0 to 512 [ 318.756041][ T9225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 318.800304][ T9225] System zones: 1-12 [ 318.826423][ T9225] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1591: missing EA_INODE flag [ 318.858214][ T9225] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1591: error while reading EA inode 12 err=-117 [ 318.876604][ T9225] EXT4-fs (loop4): 1 orphan inode deleted [ 318.882494][ T9225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 318.919995][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 319.665234][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 319.796208][ T9252] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1601'. [ 319.913493][ T9257] sctp: [Deprecated]: syz.2.1603 (pid 9257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.913493][ T9257] Use struct sctp_sack_info instead [ 320.175394][ T9269] FAULT_INJECTION: forcing a failure. [ 320.175394][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 320.219295][ T9269] CPU: 1 PID: 9269 Comm: syz.4.1608 Not tainted syzkaller #0 [ 320.226726][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 320.236814][ T9269] Call Trace: [ 320.240201][ T9269] [ 320.243162][ T9269] dump_stack_lvl+0x188/0x24e [ 320.247878][ T9269] ? show_regs_print_info+0x12/0x12 [ 320.253156][ T9269] ? load_image+0x410/0x410 [ 320.257693][ T9269] ? __might_sleep+0xd0/0xd0 [ 320.262305][ T9269] ? __lock_acquire+0x7ea0/0x7ea0 [ 320.267538][ T9269] should_fail_ex+0x390/0x4c0 [ 320.272249][ T9269] should_failslab+0x5/0x20 [ 320.276771][ T9269] slab_pre_alloc_hook+0x59/0x300 [ 320.281821][ T9269] ? tomoyo_encode+0x28a/0x550 [ 320.286613][ T9269] __kmem_cache_alloc_node+0x4f/0x270 [ 320.292014][ T9269] ? tomoyo_encode+0x28a/0x550 [ 320.296809][ T9269] __kmalloc+0xa3/0x240 [ 320.300987][ T9269] tomoyo_encode+0x28a/0x550 [ 320.305608][ T9269] tomoyo_realpath_from_path+0x578/0x5c0 [ 320.311278][ T9269] tomoyo_check_open_permission+0x212/0x440 [ 320.317204][ T9269] ? tomoyo_check_open_permission+0x1bf/0x440 [ 320.323291][ T9269] ? tomoyo_check_path_number_acl+0x280/0x280 [ 320.329364][ T9269] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.335349][ T9269] ? __lock_acquire+0x7ea0/0x7ea0 [ 320.340396][ T9269] ? __lock_acquire+0x7ea0/0x7ea0 [ 320.345426][ T9269] ? __rwlock_init+0x140/0x140 [ 320.350198][ T9269] ? tomoyo_file_open+0xe9/0x170 [ 320.355140][ T9269] security_file_open+0x5e/0xa0 [ 320.359998][ T9269] do_dentry_open+0x2fd/0x10b0 [ 320.364775][ T9269] ? memcpy+0x3c/0x60 [ 320.368762][ T9269] path_openat+0x2674/0x2f10 [ 320.373368][ T9269] ? kasan_set_track+0x60/0x70 [ 320.378138][ T9269] ? verify_lock_unused+0x140/0x140 [ 320.383340][ T9269] ? do_sys_openat2+0xdd/0x4f0 [ 320.388112][ T9269] ? do_filp_open+0x420/0x420 [ 320.392805][ T9269] do_filp_open+0x1ee/0x420 [ 320.397312][ T9269] ? vfs_tmpfile+0x470/0x470 [ 320.401922][ T9269] ? _raw_spin_unlock+0x24/0x40 [ 320.406771][ T9269] ? alloc_fd+0x590/0x640 [ 320.411109][ T9269] do_sys_openat2+0x14b/0x4f0 [ 320.415792][ T9269] ? do_sys_open+0xe0/0xe0 [ 320.420214][ T9269] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.426200][ T9269] ? lock_chain_count+0x20/0x20 [ 320.431055][ T9269] __x64_sys_openat+0x135/0x160 [ 320.435912][ T9269] do_syscall_64+0x4c/0xa0 [ 320.440361][ T9269] ? clear_bhb_loop+0x60/0xb0 [ 320.445043][ T9269] ? clear_bhb_loop+0x60/0xb0 [ 320.449722][ T9269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.455612][ T9269] RIP: 0033:0x7fd21cb9e1d9 [ 320.460028][ T9269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.479634][ T9269] RSP: 002b:00007fd21da40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.488051][ T9269] RAX: ffffffffffffffda RBX: 00007fd21ce25fa0 RCX: 00007fd21cb9e1d9 [ 320.496020][ T9269] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 320.503991][ T9269] RBP: 00007fd21cc35888 R08: 0000000000000000 R09: 0000000000000000 [ 320.511969][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.519958][ T9269] R13: 00007fd21ce26038 R14: 00007fd21ce25fa0 R15: 00007fff130f9598 [ 320.527941][ T9269] [ 320.586582][ T9286] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1614'. [ 320.597334][ T9269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.613222][ T9269] random: crng reseeded on system resumption [ 320.773724][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1616'. [ 320.808441][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1616'. [ 320.839137][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1616'. [ 321.519983][ T9325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.531110][ T9325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.540635][ T9325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.859767][ T9343] loop0: detected capacity change from 0 to 512 [ 321.893331][ T9343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 321.908374][ T9343] System zones: 1-12 [ 321.925704][ T9343] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1637: missing EA_INODE flag [ 321.944120][ T9343] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1637: error while reading EA inode 12 err=-117 [ 321.960418][ T9343] EXT4-fs (loop0): 1 orphan inode deleted [ 321.967282][ T9343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 322.808404][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 322.901188][ T9362] tipc: Cannot configure node identity twice [ 323.077474][ T9372] device syzkaller0 left promiscuous mode [ 323.213780][ T9382] [ 323.216158][ T9382] ====================================================== [ 323.223184][ T9382] WARNING: possible circular locking dependency detected [ 323.230216][ T9382] syzkaller #0 Not tainted [ 323.234652][ T9382] ------------------------------------------------------ [ 323.241677][ T9382] syz.2.1649/9382 is trying to acquire lock: [ 323.247654][ T9382] ffff888054196350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8de/0xd10 [ 323.256776][ T9382] [ 323.256776][ T9382] but task is already holding lock: [ 323.264147][ T9382] ffff88802a62c510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 323.274778][ T9382] [ 323.274778][ T9382] which lock already depends on the new lock. [ 323.274778][ T9382] [ 323.285189][ T9382] [ 323.285189][ T9382] the existing dependency chain (in reverse order) is: [ 323.294217][ T9382] [ 323.294217][ T9382] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 323.302922][ T9382] __mutex_lock+0x12d/0xae0 [ 323.307969][ T9382] nfc_urelease_event_work+0x120/0x310 [ 323.313963][ T9382] process_one_work+0x8ab/0x1160 [ 323.319422][ T9382] worker_thread+0xaf5/0x12a0 [ 323.324615][ T9382] kthread+0x29d/0x330 [ 323.329207][ T9382] ret_from_fork+0x1f/0x30 [ 323.334132][ T9382] [ 323.334132][ T9382] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 323.341930][ T9382] __mutex_lock+0x12d/0xae0 [ 323.346946][ T9382] nfc_register_device+0x38/0x300 [ 323.352484][ T9382] nci_register_device+0x89f/0x9f0 [ 323.358113][ T9382] virtual_ncidev_open+0x55/0xc0 [ 323.363921][ T9382] misc_open+0x31f/0x390 [ 323.368675][ T9382] chrdev_open+0x585/0x5f0 [ 323.373603][ T9382] do_dentry_open+0x7dd/0x10b0 [ 323.378880][ T9382] path_openat+0x2674/0x2f10 [ 323.383981][ T9382] do_filp_open+0x1ee/0x420 [ 323.388994][ T9382] do_sys_openat2+0x14b/0x4f0 [ 323.394182][ T9382] __x64_sys_openat+0x135/0x160 [ 323.399548][ T9382] do_syscall_64+0x4c/0xa0 [ 323.404478][ T9382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.410878][ T9382] [ 323.410878][ T9382] -> #1 (nci_mutex){+.+.}-{3:3}: [ 323.417990][ T9382] __mutex_lock+0x12d/0xae0 [ 323.423036][ T9382] virtual_nci_close+0x13/0x40 [ 323.428331][ T9382] nci_dev_up+0x976/0xd90 [ 323.433175][ T9382] nfc_dev_up+0x15d/0x310 [ 323.438013][ T9382] nfc_genl_dev_up+0x85/0xd0 [ 323.443116][ T9382] genl_family_rcv_msg_doit+0x22f/0x350 [ 323.449181][ T9382] genl_rcv_msg+0x601/0x790 [ 323.454207][ T9382] netlink_rcv_skb+0x1ef/0x440 [ 323.459479][ T9382] genl_rcv+0x24/0x40 [ 323.463970][ T9382] netlink_unicast+0x7ad/0x920 [ 323.469243][ T9382] netlink_sendmsg+0x8ad/0xbd0 [ 323.474516][ T9382] ____sys_sendmsg+0x5ed/0x9a0 [ 323.479789][ T9382] ___sys_sendmsg+0x2a2/0x360 [ 323.484977][ T9382] __se_sys_sendmsg+0x1c3/0x2b0 [ 323.490342][ T9382] do_syscall_64+0x4c/0xa0 [ 323.495268][ T9382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.501672][ T9382] [ 323.501672][ T9382] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 323.509320][ T9382] __lock_acquire+0x3a03/0x7ea0 [ 323.514689][ T9382] lock_acquire+0x1bc/0x4a0 [ 323.519704][ T9382] __mutex_lock+0x12d/0xae0 [ 323.524720][ T9382] nci_start_poll+0x8de/0xd10 [ 323.529908][ T9382] nfc_start_poll+0x141/0x2c0 [ 323.535104][ T9382] nfc_genl_start_poll+0x1d7/0x340 [ 323.540731][ T9382] genl_family_rcv_msg_doit+0x22f/0x350 [ 323.546793][ T9382] genl_rcv_msg+0x601/0x790 [ 323.551807][ T9382] netlink_rcv_skb+0x1ef/0x440 [ 323.557085][ T9382] genl_rcv+0x24/0x40 [ 323.561574][ T9382] netlink_unicast+0x7ad/0x920 [ 323.566859][ T9382] netlink_sendmsg+0x8ad/0xbd0 [ 323.572151][ T9382] ____sys_sendmsg+0x5ed/0x9a0 [ 323.577442][ T9382] ___sys_sendmsg+0x2a2/0x360 [ 323.582627][ T9382] __se_sys_sendmsg+0x1c3/0x2b0 [ 323.587994][ T9382] do_syscall_64+0x4c/0xa0 [ 323.592945][ T9382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.599349][ T9382] [ 323.599349][ T9382] other info that might help us debug this: [ 323.599349][ T9382] [ 323.609565][ T9382] Chain exists of: [ 323.609565][ T9382] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 323.609565][ T9382] [ 323.623796][ T9382] Possible unsafe locking scenario: [ 323.623796][ T9382] [ 323.631232][ T9382] CPU0 CPU1 [ 323.636586][ T9382] ---- ---- [ 323.641943][ T9382] lock(&genl_data->genl_data_mutex); [ 323.647408][ T9382] lock(nfc_devlist_mutex); [ 323.654538][ T9382] lock(&genl_data->genl_data_mutex); [ 323.662523][ T9382] lock(&ndev->req_lock); [ 323.666928][ T9382] [ 323.666928][ T9382] *** DEADLOCK *** [ 323.666928][ T9382] [ 323.675055][ T9382] 4 locks held by syz.2.1649/9382: [ 323.680145][ T9382] #0: ffffffff8ebb71d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 323.688310][ T9382] #1: ffffffff8ebb6fe8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 323.697257][ T9382] #2: ffff88802a62c510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 323.708281][ T9382] #3: ffff88802a62c100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 323.717407][ T9382] [ 323.717407][ T9382] stack backtrace: [ 323.723288][ T9382] CPU: 0 PID: 9382 Comm: syz.2.1649 Not tainted syzkaller #0 [ 323.730690][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.740737][ T9382] Call Trace: [ 323.744026][ T9382] [ 323.746962][ T9382] dump_stack_lvl+0x188/0x24e [ 323.751637][ T9382] ? load_image+0x410/0x410 [ 323.756135][ T9382] ? show_regs_print_info+0x12/0x12 [ 323.761343][ T9382] ? print_circular_bug+0x12b/0x1a0 [ 323.766535][ T9382] check_noncircular+0x2f8/0x400 [ 323.771466][ T9382] ? print_deadlock_bug+0x5d0/0x5d0 [ 323.776657][ T9382] ? lockdep_lock+0xf1/0x1f0 [ 323.781245][ T9382] ? _find_first_zero_bit+0xd2/0x100 [ 323.786518][ T9382] __lock_acquire+0x3a03/0x7ea0 [ 323.791378][ T9382] ? __lock_acquire+0x142d/0x7ea0 [ 323.796398][ T9382] ? verify_lock_unused+0x140/0x140 [ 323.801584][ T9382] ? mark_lock+0x94/0x320 [ 323.805927][ T9382] ? __lock_acquire+0x142d/0x7ea0 [ 323.810940][ T9382] ? look_up_lock_class+0x75/0x140 [ 323.816041][ T9382] ? register_lock_class+0xc0/0x870 [ 323.821236][ T9382] ? mark_lock+0x94/0x320 [ 323.825562][ T9382] lock_acquire+0x1bc/0x4a0 [ 323.830063][ T9382] ? nci_start_poll+0x8de/0xd10 [ 323.834915][ T9382] ? __might_sleep+0xd0/0xd0 [ 323.839488][ T9382] ? read_lock_is_recursive+0x10/0x10 [ 323.844851][ T9382] __mutex_lock+0x12d/0xae0 [ 323.849348][ T9382] ? nci_start_poll+0x8de/0xd10 [ 323.854187][ T9382] ? verify_lock_unused+0x140/0x140 [ 323.859380][ T9382] ? nci_start_poll+0x8de/0xd10 [ 323.864570][ T9382] ? mutex_lock_nested+0x10/0x10 [ 323.869503][ T9382] nci_start_poll+0x8de/0xd10 [ 323.874275][ T9382] ? nci_dev_down+0x40/0x40 [ 323.878792][ T9382] ? trace_raw_output_contention_end+0xd0/0xd0 [ 323.884949][ T9382] ? __mutex_trylock_common+0x15c/0x260 [ 323.890513][ T9382] ? rcu_is_watching+0x11/0xa0 [ 323.895278][ T9382] ? trace_contention_end+0x5f/0x170 [ 323.900591][ T9382] ? __mutex_lock+0x1ab/0xae0 [ 323.905284][ T9382] ? trace_contention_end+0x5f/0x170 [ 323.910582][ T9382] ? __mutex_lock+0x1ab/0xae0 [ 323.915248][ T9382] ? nfc_start_poll+0x4f/0x2c0 [ 323.920002][ T9382] ? mutex_lock_nested+0x10/0x10 [ 323.924929][ T9382] ? nfc_genl_start_poll+0x1c9/0x340 [ 323.930203][ T9382] ? nfc_get_device+0x82/0xd0 [ 323.934874][ T9382] ? nfc_release+0x2e0/0x2e0 [ 323.939456][ T9382] nfc_start_poll+0x141/0x2c0 [ 323.944124][ T9382] nfc_genl_start_poll+0x1d7/0x340 [ 323.949223][ T9382] genl_family_rcv_msg_doit+0x22f/0x350 [ 323.954758][ T9382] ? end_current_label_crit_section+0x170/0x170 [ 323.961004][ T9382] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 323.966930][ T9382] ? bpf_lsm_capable+0x5/0x10 [ 323.971612][ T9382] ? security_capable+0x85/0xb0 [ 323.976509][ T9382] genl_rcv_msg+0x601/0x790 [ 323.981024][ T9382] ? genl_bind+0x360/0x360 [ 323.985454][ T9382] ? nfc_genl_dev_down+0xd0/0xd0 [ 323.990410][ T9382] netlink_rcv_skb+0x1ef/0x440 [ 323.995167][ T9382] ? genl_bind+0x360/0x360 [ 323.999577][ T9382] ? netlink_ack+0x1160/0x1160 [ 324.004351][ T9382] ? down_read+0x1a8/0x2d0 [ 324.008771][ T9382] genl_rcv+0x24/0x40 [ 324.012745][ T9382] netlink_unicast+0x7ad/0x920 [ 324.017509][ T9382] netlink_sendmsg+0x8ad/0xbd0 [ 324.022300][ T9382] ? netlink_getsockopt+0x550/0x550 [ 324.027521][ T9382] ? apparmor_socket_sendmsg+0x8a/0x330 [ 324.033065][ T9382] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 324.038344][ T9382] ? security_socket_sendmsg+0x7c/0xa0 [ 324.043794][ T9382] ? netlink_getsockopt+0x550/0x550 [ 324.048987][ T9382] ____sys_sendmsg+0x5ed/0x9a0 [ 324.053744][ T9382] ? __sys_sendmsg_sock+0x30/0x30 [ 324.058765][ T9382] ? __import_iovec+0x306/0x510 [ 324.063617][ T9382] ? import_iovec+0x6f/0xa0 [ 324.068121][ T9382] ___sys_sendmsg+0x2a2/0x360 [ 324.072802][ T9382] ? __sys_sendmsg+0x2a0/0x2a0 [ 324.077579][ T9382] ? virtual_ncidev_read+0x3e0/0x3e0 [ 324.082888][ T9382] __se_sys_sendmsg+0x1c3/0x2b0 [ 324.087730][ T9382] ? __x64_sys_sendmsg+0x80/0x80 [ 324.092670][ T9382] ? lockdep_hardirqs_on+0x94/0x140 [ 324.097880][ T9382] do_syscall_64+0x4c/0xa0 [ 324.102290][ T9382] ? clear_bhb_loop+0x60/0xb0 [ 324.106984][ T9382] ? clear_bhb_loop+0x60/0xb0 [ 324.111657][ T9382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.117538][ T9382] RIP: 0033:0x7fef8fd9e1d9 [ 324.121952][ T9382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.141563][ T9382] RSP: 002b:00007fef90c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.149967][ T9382] RAX: ffffffffffffffda RBX: 00007fef90026090 RCX: 00007fef8fd9e1d9 [ 324.157929][ T9382] RDX: 0000000004000000 RSI: 0000200000001780 RDI: 0000000000000009 [ 324.165889][ T9382] RBP: 00007fef8fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 324.173860][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.181836][ T9382] R13: 00007fef90026128 R14: 00007fef90026090 R15: 00007fff27284bb8 [ 324.189804][ T9382] [ 324.192823][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.055019][ T9382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.065441][ T9373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.192243][ T4284] Bluetooth: hci4: link tx timeout [ 326.197391][ T4284] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 326.205091][ T4284] Bluetooth: hci4: link tx timeout [ 326.210205][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa