last executing test programs: 1m26.780340014s ago: executing program 0 (id=2781): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) r1 = getsockopt$auto_SO_RCVBUF(r0, 0x1, 0x8, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0x1) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x65}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x30, 0xfc, "cc1d06bb699de82793bdb9952d368346060814e3057852042897f3678c7482d8bc3d27a2128cec83e30ffc00"}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048c0}, 0x40080) read$auto(0xffffffffffffffff, 0x0, 0x6) 1m26.581589179s ago: executing program 0 (id=2783): mlockall$auto(0x7) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) rt_tgsigqueueinfo$auto(0x3, 0x7, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x401, 0x1, 0xfffff5a4, @_sigchld={0x0, 0x0, 0x8001, 0x1ff, 0x1}}}) ioctl$auto_FS_IOC_ZERO_RANGE(r0, 0x40305839, r0) fcntl$auto_F_SETLK(r0, 0x6, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x28180, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) 1m25.52098911s ago: executing program 0 (id=2792): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0xfffffffffffffffd, 0x0, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000280)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x0, 0x9, 0x40, 0x32d4, 0x10000, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/netdev_group\x00', 0xc0080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/88, 0x58) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xf22437c730143eb6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/006/001\x00', 0x200000, 0x0) write$auto_tracing_mark_raw_fops_trace(r2, &(0x7f0000000040)='%/', 0x2) sigaltstack$auto(0x0, 0x0) 1m22.692008083s ago: executing program 0 (id=2791): mmap$auto(0x101, 0xe, 0xe1, 0x59, 0xffffffffffffffff, 0x200) r0 = io_uring_setup$auto(0x6, 0x0) prctl$auto(0x4c, 0x17, 0x0, 0x0, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) timer_create$auto(0xffffff01, &(0x7f00000000c0)={@sival_int=0x38e72b4d, @raw=0x3, 0x9, @_sigev_thread={&(0x7f0000000080)=&(0x7f0000000000)=0x3, &(0x7f0000000180)="93acb0b0a98d8e2ba49352eded7c6dd57e8e5b1d02801e5766b1040e1f6e8c1f9ed036f535b04b8473a29ce8b7070867d48a66876040bb92ecb9ecd3eb6cff490108dcf62a42431d1259b2204e48e6347a65f506a95a662a7fbf0cc6f1df69c9b043549d4528356dc3d840c924714ee21b6a572ce99d36d101af"}}, &(0x7f0000000200)=0x3ff) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) (async) ioctl$auto(0x3, 0x40a0ae49, 0x38) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x101002, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x101002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fb07ee0000000000000000c1c4dc8f2e11c575662f179a00000800010005000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fb07ee0000000000000000c1c4dc8f2e11c575662f179a00000800010005000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0xb5d1af1605322c72) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) 1m21.722851549s ago: executing program 0 (id=2798): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (rerun: 64) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async, rerun: 32) r1 = socket(0x29, 0x2, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x891d, 0x24) 1m20.555819433s ago: executing program 0 (id=2801): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0xfffffffffffffffd, 0x0, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000280)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x0, 0x9, 0x40, 0x32d4, 0x10000, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/netdev_group\x00', 0xc0080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/88, 0x58) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xf22437c730143eb6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/006/001\x00', 0x200000, 0x0) sigaltstack$auto(0x0, 0x0) 1m5.362608859s ago: executing program 32 (id=2801): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0xfffffffffffffffd, 0x0, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000280)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x0, 0x9, 0x40, 0x32d4, 0x10000, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/netdev_group\x00', 0xc0080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/88, 0x58) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xf22437c730143eb6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/006/001\x00', 0x200000, 0x0) sigaltstack$auto(0x0, 0x0) 6.071266381s ago: executing program 4 (id=3114): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) madvise$auto(0x1, 0x1000, 0x10000) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) (async) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x5, 0x2, 0x63, 0xce, 0x6c35, 0x3}) (async) ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x5, 0x2, 0x63, 0xce, 0x6c35, 0x3}) personality$auto(0xfffffffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) (async) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) (async) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC2\x00', 0x600200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r2, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0x9, 0x6, 0x8001}, 0x101) (async, rerun: 64) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (rerun: 64) ioctl$auto(r3, 0x5393, 0xffffffffffffffff) (async) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) (async) mmap$auto(0xb, 0x202000a, 0x0, 0xeb1, r2, 0x8000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(r1, &(0x7f0000000280)=@llc={0x1a, 0x338, 0x64, 0x8, 0x4, 0x3, @multicast}, 0x53) (async, rerun: 64) mmap$auto(0x7, 0x400008, 0xff, 0x9b72, r0, 0x8000) (async, rerun: 64) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="c1f532261915a76de37f3a8fe2d90fda72f8de4d0c4b7e2573"], 0x1c}}, 0x4000004) (async) connect$auto(r0, &(0x7f0000001040)=@nl=@unspec, 0x8) (async, rerun: 64) shmdt$auto(&(0x7f0000001080)='\x00') (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x80001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/sound/ctl-led/speaker/card0/list\x00', 0x80400, 0x0) 3.487198403s ago: executing program 2 (id=3125): pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb0x0, 0x78d, 0xffffffff, 0x3, 0xfffb}, 0x4, 0x9, 0x0, 0xff, @inferred=0xffffffffffffffff, @raw=0x8, 0x6, 0x0, &(0x7f0000000000)="08bc232da9a327a40a3583c2d49a637caef76211b6ffd22331cc9ea7ab6651045de84901fbfc74427583023180ab3b93e41f239e51f129a73c31b9ea578b413a5942d2ffec45831deaece69dedfa1ce18d3378aee0f0da86b8d9f0e942be4dc5ec9eb62e8ead14929ef84d684ae5d104b2fae9ed5870d0419f68250dcdd070db64ee72818169c1ceed41de5716f879048b0fa4d26a4d81e4fe12", &(0x7f00000000c0)="c057afbb224f1656940118a1e8bcdaa37c229fbaf8200add601d063d402dead583d05dc981b0664c702ef17f5a9109dd8424a536e2c263c74282125896c9b6e27942cab2aa759c89f6542183711f40e4165458d7f175a635a2388a0531c49d003e35845eb609884c0ebfccaa2ba885ce52f7d33ad85a5249b70e966760183ebdd932ffdd9beee0cf95360e8af165cc6009d8386b235e0c6782b53301b2a1c8c051ac1fa9ad870d653528d8b4e413a222851e74edbdf761a30f6211709def3a038b5acc9004b597c7fc37e576d7d0326ae4a731d4fb609b"}) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x121000, 0x0) ioctl$auto_UI_SET_RELBIT(r1, 0x40045566, &(0x7f0000000500)=0x8) inotify_rm_watch$auto(r1, 0x6) setresgid$auto(0x81, r0, r0) setgroups$auto(0x7, &(0x7f0000000540)=0xffff5687) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$auto(0x3, 0x4008550c, 0x1) r2 = socket(0xa, 0x2, 0x3a) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40100, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x80) fchmod$auto(r3, 0x0) 3.391593944s ago: executing program 2 (id=3126): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, &(0x7f00000001c0)) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x6, 0x1f, 0x0, 0x3d) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0xd00}, 0x4044820) readv$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r1, 0x0, 0x594c, 0x7) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) 2.934731221s ago: executing program 4 (id=3127): mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRaM\x99\x86\xdde\x1cJ\x99\x00@\x00\x00\x00\x00\xfd}\xd3\xd3\x1d\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t\x00\x00\x00\x00\x00\x00\x00\x04\x84\xf4\x89\v\xea\x1b\x95;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83RO\xb2\xbe\xdbv{\x93\xdc\x8e\x1f\xaf\xe4\xee\xea\xa4A\fJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\b\x81\xa3t\x00\x00\x00\x00', 0xfdf0, 0x8000039) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x4, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) move_mount$auto(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) 2.696784082s ago: executing program 2 (id=3128): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0xff, 0x20ffff, 0x13, 0x210) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) getdents$auto(r0, &(0x7f0000000000)={0x6, 0x0, 0x8}, 0xfdf) 2.670146183s ago: executing program 1 (id=3129): write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) getresuid$auto(&(0x7f0000000080)=0x7, 0x0, 0xfffffffffffffffc) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) semctl$auto(0x1, 0x5, 0x5, 0x6) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(r2, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, 0x0, 0x8004) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r0, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="02022cbd7000fcdbdf256700000074000e8012000200996455d7de5f50a647ce5f4f18227bc031b80467ce3e1653ae43673df98e4ea31e9a9dfcc6aae9e1800dcbeb8c9db083f7f721f4d75b02e5a0fc8cf0bbc1daf8d5fd13748af057ee5fce8525ac9a85a7d19abf7b70ad9779ab8675b79db9000000000000000000000000000008020a01a80a000008001f01020000000500530005000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) 2.614383424s ago: executing program 3 (id=3130): close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x2, 0x1, 0x0) (async) socket(0x3, 0x2, 0x3fffffd) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0xa, 0x2, 0x88) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, r0, @relative_id=0x13, 0xe600}, 0xf) (async) r3 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) (async) r4 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x103402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r4, &(0x7f0000000240)=""/194, 0xc2) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) (async) ftruncate$auto(0x3, 0x400180200000) 2.437511118s ago: executing program 2 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b964e87cfce41d8b86d8574badcc9a0191d85605665e0fa950b247f4667f57ca338d45bd2f88e5dd3dfe6600774e6503521259e0c7c3ddd5099d8b948915c1d3f49efad80b766f2a9") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop8\x00', 0x60742, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000240)="e25a43a65c6cca6c9411c2746b41e9359a2d8bb15d8a3e5581af2300e0e4d52dab848a5e99dd3fb47ef1848ca5105bfd0c8db60ef1fef0e9bebc947cd9f6f1ca5ee8ebf43d91905392610ada852e3312f6cb3e874aa0eb47f59245386744ef1087c9dd1ca2d1f1cd3c844c1199b1dbaccbc09f1638f2f27352ee732b3daa6560b50e0a797394f17d0530dd316d542e58a843") sendmsg$auto_ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20040}, 0x400c850) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) mmap$auto(0x0, 0x6, 0x400, 0x40eb1, 0x401, 0x5) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) geteuid() read$auto(r5, 0x0, 0x40000000b4d3) write$auto(0x3, 0x0, 0x2) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r0) getresgid$auto(&(0x7f0000000300)=0xff, &(0x7f0000000140)=0x107dd1, &(0x7f0000000100)=0x40) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x90) 1.914541814s ago: executing program 3 (id=3132): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) set_mempolicy$auto(0x2, 0x0, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x880, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.429167117s ago: executing program 4 (id=3133): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0) write$auto(r0, 0x0, 0x0) mmap$auto(0xfdfffffffffffffe, 0x4, 0x4000000000dd, 0x40eb1, 0x401, 0x300000000000) r1 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0xffffffff, 0x4, 0x8, 0x1a, r1, 0x4) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r3 = socket(0x12, 0x4, 0x440a) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x2000000000000, 0x2, 0x10000000009, 0x9b71, r2, 0x2) io_setup$auto(0x80002, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r4, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(r3, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000b005340aebe5fa82cc2cfe070efe7393c78775a7fbd06451a308b2d75dbbc9314b37f854d5b05ee476d92d1c76c634d55ec71ff7edaeb9bf870880443128469ecac1b937af2434186513ea1de2def6266f268232ae88a517c5deaaa2de423a78b504169c1bebb902000000604ce722008ad319166a88d492ae3a921f7fc0d05390e545cdac589a1717", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf250700000005000a0006000000060011000600000005000f00ff00000008000d000900000005001000bd0000000800150000004005"], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x10, 0x2, 0xc) getpeername$auto(0x3, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) getpriority$auto(0x2, 0x7ff) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 1.425279239s ago: executing program 1 (id=3134): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x7, 0x8000) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x40, 0xffffffffffffffff}) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x11, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb082) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYBLOB="edd2cb1af6b69aed5f16093845"], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x0) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) socket(0xa, 0x2, 0x73) socketpair$auto(0x100005, 0x4, 0x1000, 0x0) (async) socket(0x1, 0x3, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) (async) connect$auto(0x3, 0x0, 0x6b) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x11, 0x3, 0x6) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48c80, 0x0) read$auto(r4, 0x0, 0x1f40) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x9) (async, rerun: 64) semctl$auto_SEM_INFO(0x4, 0xbdb, 0x13, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) (async, rerun: 64) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) (rerun: 64) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) (async) read$auto(0x3, 0x0, 0x80) 1.275426753s ago: executing program 2 (id=3135): mmap$auto(0x5, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syslog$auto(0x9, 0x0, 0xce) ioperm$auto(0xa, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x1, 0x20073) (async, rerun: 64) socket(0xa, 0x1, 0x84) (rerun: 64) mmap$auto(0x100000000000, 0xffa, 0xdf, 0x9b72, 0x402, 0x28000) (async) mmap$auto(0x100000000000, 0x4000d, 0xe3, 0x9b72, r0, 0x40000000028000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x3, 0x6, 0xeb1, 0x3ff, 0x2) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x101) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/drm/card1/card1-Writeback-1/dpms\x00', 0x0, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/167, 0xa7) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) (async) msgget$auto(0x0, 0x5) (async, rerun: 64) msgsnd$auto(0x2, &(0x7f0000000040)={0x6}, 0x1000, 0x4) (async, rerun: 64) msgctl$auto(0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa38\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2r\xd8\xbcK\xa36\x00\x00', 0x0, 0x0, 0x1, 0x8010) ioperm$auto(0x3, 0x5, 0x149) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) write$auto_event_trigger_fops_trace(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20000084) (rerun: 32) 1.082771448s ago: executing program 1 (id=3136): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/192, 0xc0) r3 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x10000, &(0x7f0000000000)="427c2a0786b76bc58b5303bd940850b326550a64d84dbe03e2ccd46333bce61cbe7a343b8d30cb585d0350ff1c1a418a8b70acc93d1b996adf6e574942cb81ca07e02ac3d0715dd60a865d36ac3b6189b418c4870216b5122d06e40eaf846a521db4c0b3799f1211415b2c25f5e419b98ab34d93f971cc0ad15c4c4ac8") io_uring_setup$auto(0x957, &(0x7f0000000080)={0x1, 0x3, 0x8, 0x7, 0x6, 0xd, r3, [0xa, 0x1, 0x6], {0xfffffff9, 0x2, 0xc9f, 0x0, 0x7, 0x7f, 0x2, 0xffffff1d, 0xfffffffffffffff2}, {0x10001, 0xfffffffe, 0x0, 0x6, 0xffffff01, 0x7, 0x2, 0x4, 0xfff}}) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c800) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pcmcia/drivers/sl811_cs/new_id\x00', 0x149b01, 0x0) write$auto_fops_init_pkru_pkeys(r4, &(0x7f0000000080)='4', 0x1) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x81, 0x0, 0x0) epoll_ctl$auto(r4, 0x10000, r5, &(0x7f0000000100)={0x80000000, 0x1d36}) madvise$auto(0x0, 0x200007, 0x19) 1.041109222s ago: executing program 3 (id=3137): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) r0 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x6a, 0xfffffffe, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy13/short_retry_limit\x00', 0x20400, 0x0) vmsplice$auto(r1, &(0x7f0000000140)={&(0x7f0000000040)="307e16a0a6109f4d5f341354d47fccf0dd0d31d22993cc4fc9ee642a4f62a16ac94505747eb4237c3407089ad0e934e2fb8752cfbe7be915780a43e64276a2dd639a957406dfa9f1c349e50336a8e3f0d061567b2ccdf3a02a7e728f512114e9429e87827622b2a9877571d2e9c97f558ec2842a5de6a8e1ba97c84ecae4efa06fca31256098d74fb4bb4b4d9e30bea52fc7bfeef19587fddac1471099f874e935cc9b0d500e3ce56d07a070495a95687b1dbda8a498bb60959159b0709e241bbf189ad4c26fb6d971d7d8805f70ed632b667e0c2cb3d14be755e246e93dfb6a7973d965673af4190a", 0x6}, 0x8e, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x806, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto(r0, 0x6a, 0xfffffffe, 0x0, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy13/short_retry_limit\x00', 0x20400, 0x0) (async) vmsplice$auto(r1, &(0x7f0000000140)={&(0x7f0000000040)="307e16a0a6109f4d5f341354d47fccf0dd0d31d22993cc4fc9ee642a4f62a16ac94505747eb4237c3407089ad0e934e2fb8752cfbe7be915780a43e64276a2dd639a957406dfa9f1c349e50336a8e3f0d061567b2ccdf3a02a7e728f512114e9429e87827622b2a9877571d2e9c97f558ec2842a5de6a8e1ba97c84ecae4efa06fca31256098d74fb4bb4b4d9e30bea52fc7bfeef19587fddac1471099f874e935cc9b0d500e3ce56d07a070495a95687b1dbda8a498bb60959159b0709e241bbf189ad4c26fb6d971d7d8805f70ed632b667e0c2cb3d14be755e246e93dfb6a7973d965673af4190a", 0x6}, 0x8e, 0x9) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x801, 0x106) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) 198.632998ms ago: executing program 3 (id=3138): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, &(0x7f00000001c0)) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x6, 0x1f, 0x0, 0x3d) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0xe00}, 0x4044820) readv$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x22, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x6, 0x800, 0x4000ffff, 0x3c09, 0xffffffff}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r1, 0x0, 0x594c, 0x7) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) 18.803705ms ago: executing program 2 (id=3139): mmap$auto(0xfffffffffffffffd, 0x0, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) read$auto_ptdump_curusr_fops_(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=3140): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xffffffffffffffff, 0x10, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000300)=0xc9e, 0x400, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) iopl$auto(0x3) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2400a841}, 0x8000) seccomp$auto(0x968, 0x8001, &(0x7f0000000400)) iopl$auto(0x5) get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1) get_mempolicy$auto(&(0x7f0000000000)=0x6, &(0x7f0000000040)=0x3, 0x1000, 0x6, 0x2) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x1, 0x1) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x3, 0x41, 0x0, 0x10088) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port7/power/control\x00', 0x252101, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x28180, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) kernel console output (not intermixed with test programs): xt4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 728.968388][T18009] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 729.202512][T18006] FAULT_INJECTION: forcing a failure. [ 729.202512][T18006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.218408][T18006] CPU: 1 UID: 0 PID: 18006 Comm: syz.0.2783 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 729.218440][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.218455][T18006] Call Trace: [ 729.218463][T18006] [ 729.218473][T18006] dump_stack_lvl+0x16c/0x1f0 [ 729.218512][T18006] should_fail_ex+0x50a/0x650 [ 729.218550][T18006] ? page_copy_sane+0xcd/0x2d0 [ 729.218577][T18006] copy_page_from_iter_atomic+0x39f/0x1920 [ 729.218616][T18006] ? fault_in_readable+0x15d/0x200 [ 729.218648][T18006] ? fault_in_readable+0x160/0x200 [ 729.218679][T18006] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 729.218708][T18006] ? fault_in_readable+0x1a7/0x200 [ 729.218740][T18006] ? __pfx_fault_in_readable+0x10/0x10 [ 729.218772][T18006] ? I_BDEV+0xd/0x20 can't run '/sbi[ 729.218794][T18006] ? inode_to_bdi+0x9e/0x160 [ 729.218831][T18006] iomap_file_buffered_write+0x633/0xc70 [ 729.218874][T18006] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 729.218903][T18006] ? find_held_lock+0x2d/0x110 [ 729.218930][T18006] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 729.218981][T18006] ? preempt_count_add+0x76/0x150 [ 729.219011][T18006] ? mnt_put_write_access_file+0xc1/0xf0 [ 729.219055][T18006] blkdev_write_iter+0x574/0xdd0 [ 729.219094][T18006] vfs_write+0x5ae/0x1150 [ 729.219128][T18006] ? __pfx_blkdev_write_iter+0x10/0x10 [ 729.219166][T18006] ? __pfx_vfs_write+0x10/0x10 [ 729.219198][T18006] ? do_futex+0x123/0x350 [ 729.219229][T18006] ? __fget_files+0x40/0x3a0 [ 729.219279][T18006] ksys_write+0x12b/0x250 [ 729.219310][T18006] ? __pfx_ksys_write+0x10/0x10 [ 729.219353][T18006] do_syscall_64+0xcd/0x250 [ 729.219388][T18006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.219423][T18006] RIP: 0033:0x7f5e8178d169 [ 729.219444][T18006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.219468][T18006] RSP: 002b:00007f5e82647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.219493][T18006] RAX: ffffffffffffffda RBX: 00007f5e819a5fa0 RCX: 00007f5e8178d169 [ 729.219512][T18006] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 729.219528][T18006] RBP: 00007f5e8180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 729.219544][T18006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.219560][T18006] R13: 0000000000000000 R14: 00007f5e819a5fa0 R15: 00007ffef38ed2d8 [ 729.219593][T18006] [ 729.958922][T18014] netlink: 4516 bytes leftover after parsing attributes in process `syz.3.2785'. [ 730.092312][T18019] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 730.128080][T18023] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 730.131845][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 731.120560][T18029] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 731.336686][T18033] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 731.433294][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 731.749331][T18043] EXT4-fs error: 3 callbacks suppressed [ 731.749350][T18043] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 732.169184][T18046] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 732.923113][T18057] FAULT_INJECTION: forcing a failure. [ 732.923113][T18057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.939487][T18057] CPU: 0 UID: 0 PID: 18057 Comm: syz.3.2793 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 732.939520][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 732.939535][T18057] Call Trace: [ 732.939544][T18057] [ 732.939554][T18057] dump_stack_lvl+0x16c/0x1f0 [ 732.939591][T18057] should_fail_ex+0x50a/0x650 [ 732.939630][T18057] ? page_copy_sane+0xcd/0x2d0 [ 732.939657][T18057] copy_page_from_iter_atomic+0x39f/0x1920 [ 732.939695][T18057] ? fault_in_readable+0x15d/0x200 [ 732.939727][T18057] ? fault_in_readable+0x160/0x200 [ 732.939757][T18057] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 732.939785][T18057] ? fault_in_readable+0x1a7/0x200 [ 732.939816][T18057] ? __pfx_fault_in_readable+0x10/0x10 [ 732.939847][T18057] ? I_BDEV+0xd/0x20 [ 732.939869][T18057] ? inode_to_bdi+0x9e/0x160 [ 732.939907][T18057] iomap_file_buffered_write+0x633/0xc70 [ 732.939947][T18057] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 732.939975][T18057] ? find_held_lock+0x2d/0x110 [ 732.940000][T18057] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 732.940051][T18057] ? preempt_count_add+0x76/0x150 [ 732.940081][T18057] ? mnt_put_write_access_file+0xc1/0xf0 [ 732.940118][T18057] blkdev_write_iter+0x574/0xdd0 [ 732.940156][T18057] vfs_write+0x5ae/0x1150 [ 732.940190][T18057] ? __pfx_blkdev_write_iter+0x10/0x10 [ 732.940226][T18057] ? __pfx_vfs_write+0x10/0x10 [ 732.940255][T18057] ? do_futex+0x123/0x350 [ 732.940286][T18057] ? __fget_files+0x40/0x3a0 [ 732.940334][T18057] ksys_write+0x12b/0x250 [ 732.940365][T18057] ? __pfx_ksys_write+0x10/0x10 [ 732.940415][T18057] do_syscall_64+0xcd/0x250 [ 732.940451][T18057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.940484][T18057] RIP: 0033:0x7f9b6418d169 [ 732.940504][T18057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.940527][T18057] RSP: 002b:00007f9b65056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.940550][T18057] RAX: ffffffffffffffda RBX: 00007f9b643a5fa0 RCX: 00007f9b6418d169 [ 732.940568][T18057] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 732.940583][T18057] RBP: 00007f9b6420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 732.940599][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.940614][T18057] R13: 0000000000000000 R14: 00007f9b643a5fa0 R15: 00007ffc43961968 [ 732.940646][T18057] [ 733.311720][T18063] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 733.917661][T18097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2796'. [ 734.074564][T18112] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 734.111477][T18084] cgroup: fork rejected by pids controller in /syz0 [ 734.169210][T18115] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 734.236564][T18116] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 734.383313][T18121] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 734.420934][T18122] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 735.443134][T18136] FAULT_INJECTION: forcing a failure. [ 735.443134][T18136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.458995][T18136] CPU: 0 UID: 0 PID: 18136 Comm: syz.2.2804 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 735.459028][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 735.459056][T18136] Call Trace: [ 735.459064][T18136] [ 735.459074][T18136] dump_stack_lvl+0x16c/0x1f0 [ 735.459119][T18136] should_fail_ex+0x50a/0x650 [ 735.459158][T18136] ? page_copy_sane+0xcd/0x2d0 [ 735.459186][T18136] copy_page_from_iter_atomic+0x39f/0x1920 [ 735.459225][T18136] ? fault_in_readable+0x15d/0x200 [ 735.459257][T18136] ? fault_in_readable+0x160/0x200 [ 735.459288][T18136] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 735.459316][T18136] ? fault_in_readable+0x1a7/0x200 [ 735.459346][T18136] ? __pfx_fault_in_readable+0x10/0x10 [ 735.459377][T18136] ? I_BDEV+0xd/0x20 [ 735.459399][T18136] ? inode_to_bdi+0x9e/0x160 [ 735.459438][T18136] iomap_file_buffered_write+0x633/0xc70 [ 735.459479][T18136] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 735.459509][T18136] ? __pfx_timestamp_truncate+0x10/0x10 [ 735.459568][T18136] ? inode_needs_update_time.part.0+0x191/0x270 [ 735.459614][T18136] blkdev_write_iter+0x574/0xdd0 [ 735.459652][T18136] vfs_write+0x5ae/0x1150 [ 735.459685][T18136] ? __pfx_blkdev_write_iter+0x10/0x10 [ 735.459720][T18136] ? __pfx_vfs_write+0x10/0x10 [ 735.459749][T18136] ? do_futex+0x123/0x350 [ 735.459780][T18136] ? __fget_files+0x40/0x3a0 [ 735.459828][T18136] ksys_write+0x12b/0x250 [ 735.459860][T18136] ? __pfx_ksys_write+0x10/0x10 [ 735.459901][T18136] do_syscall_64+0xcd/0x250 [ 735.459935][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.459969][T18136] RIP: 0033:0x7f92d718d169 [ 735.459989][T18136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.460012][T18136] RSP: 002b:00007f92d4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 735.460036][T18136] RAX: ffffffffffffffda RBX: 00007f92d73a6080 RCX: 00007f92d718d169 [ 735.460054][T18136] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 735.460069][T18136] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 735.460084][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.460106][T18136] R13: 0000000000000000 R14: 00007f92d73a6080 R15: 00007ffdbe1313f8 [ 735.460138][T18136] [ 735.517546][T18137] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 736.920860][T18149] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 736.951433][T18150] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 736.963737][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. can't run '/sbi[ 737.776137][T18166] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.039542][T18169] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 738.402432][T18175] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.455494][T18177] Device name cannot be null; rc = [-22] [ 738.669201][T18180] FAULT_INJECTION: forcing a failure. [ 738.669201][T18180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.685161][T18180] CPU: 0 UID: 0 PID: 18180 Comm: syz.1.2814 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 738.685194][T18180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 738.685209][T18180] Call Trace: [ 738.685217][T18180] [ 738.685227][T18180] dump_stack_lvl+0x16c/0x1f0 [ 738.685267][T18180] should_fail_ex+0x50a/0x650 [ 738.685304][T18180] ? page_copy_sane+0xcd/0x2d0 [ 738.685330][T18180] copy_page_from_iter_atomic+0x39f/0x1920 [ 738.685368][T18180] ? fault_in_readable+0x15d/0x200 [ 738.685400][T18180] ? fault_in_readable+0x160/0x200 [ 738.685431][T18180] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 738.685459][T18180] ? fault_in_readable+0x1a7/0x200 [ 738.685490][T18180] ? __pfx_fault_in_readable+0x10/0x10 [ 738.685518][T18180] ? I_BDEV+0xd/0x20 [ 738.685538][T18180] ? inode_to_bdi+0x9e/0x160 [ 738.685569][T18180] iomap_file_buffered_write+0x633/0xc70 [ 738.685607][T18180] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 738.685633][T18180] ? find_held_lock+0x2d/0x110 [ 738.685659][T18180] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 738.685719][T18180] ? preempt_count_add+0x76/0x150 [ 738.685749][T18180] ? mnt_put_write_access_file+0xc1/0xf0 [ 738.685786][T18180] blkdev_write_iter+0x574/0xdd0 [ 738.685819][T18180] vfs_write+0x5ae/0x1150 [ 738.685848][T18180] ? __pfx_blkdev_write_iter+0x10/0x10 [ 738.685880][T18180] ? __pfx_vfs_write+0x10/0x10 [ 738.685907][T18180] ? do_futex+0x123/0x350 [ 738.685935][T18180] ? __fget_files+0x40/0x3a0 [ 738.685978][T18180] ksys_write+0x12b/0x250 [ 738.686006][T18180] ? __pfx_ksys_write+0x10/0x10 [ 738.686044][T18180] do_syscall_64+0xcd/0x250 [ 738.686078][T18180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.686111][T18180] RIP: 0033:0x7fe44b78d169 [ 738.686132][T18180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.686156][T18180] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 738.686181][T18180] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 738.686198][T18180] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 738.686214][T18180] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 738.686230][T18180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.686246][T18180] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 738.686273][T18180] [ 739.140185][T18185] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 739.177531][T18186] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 739.485912][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 739.725846][T18201] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 739.752598][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'. [ 739.930471][T18171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 739.945596][T18171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 740.311626][T18207] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 740.587800][T18171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 740.596496][T18171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 740.931552][T18171] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 740.945434][T18171] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 741.321454][T18171] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 741.393671][T18211] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 741.486993][T18171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 741.508667][T18171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 741.667534][T18171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 741.973204][T14771] Bluetooth: hci1: command 0x0406 tx timeout [ 742.151460][T18225] FAULT_INJECTION: forcing a failure. [ 742.151460][T18225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 742.169057][T18230] openvswitch: netlink: Key 3 has unexpected len 10380 expected 4 [ 742.185124][T18230] openvswitch: netlink: Key 3 has unexpected len 10380 expected 4 [ 742.235853][T18225] CPU: 0 UID: 0 PID: 18225 Comm: syz.1.2826 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 742.235889][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.235904][T18225] Call Trace: [ 742.235912][T18225] [ 742.235922][T18225] dump_stack_lvl+0x16c/0x1f0 [ 742.235961][T18225] should_fail_ex+0x50a/0x650 [ 742.235997][T18225] ? __pfx___might_resched+0x10/0x10 [ 742.236038][T18225] should_fail_alloc_page+0xe7/0x130 [ 742.236065][T18225] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 742.236097][T18225] ? find_held_lock+0x2d/0x110 [ 742.236126][T18225] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 742.236165][T18225] ? __pfx_lock_release+0x10/0x10 [ 742.236205][T18225] ? hlock_class+0x4e/0x130 [ 742.236229][T18225] ? __lock_acquire+0xcc5/0x3c40 [ 742.236262][T18225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 742.236320][T18225] ? __pfx___lock_acquire+0x10/0x10 [ 742.236353][T18225] ? mark_lock+0xb5/0xc60 [ 742.236385][T18225] ? __pfx___lock_acquire+0x10/0x10 [ 742.236423][T18225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 742.236465][T18225] ? policy_nodemask+0xea/0x4e0 [ 742.236492][T18225] alloc_pages_mpol+0x1fc/0x540 [ 742.236517][T18225] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 742.236543][T18225] ? xas_load+0x49/0x5b0 [ 742.236572][T18225] ? filemap_get_entry+0xd0/0x3c0 [ 742.236608][T18225] folio_alloc_noprof+0x20/0x2d0 [ 742.236636][T18225] filemap_alloc_folio_noprof+0x39b/0x470 [ 742.236660][T18225] ? __pfx___up_read+0x10/0x10 [ 742.236696][T18225] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 742.236731][T18225] __filemap_get_folio+0x5e9/0xbd0 [ 742.236772][T18225] iomap_write_begin+0x693/0x1660 [ 742.236806][T18225] ? fault_in_readable+0x15d/0x200 [ 742.236838][T18225] ? fault_in_readable+0x160/0x200 [ 742.236869][T18225] ? __pfx_iomap_write_begin+0x10/0x10 [ 742.236898][T18225] ? fault_in_readable+0x1a7/0x200 [ 742.236929][T18225] ? __pfx_fault_in_readable+0x10/0x10 [ 742.236960][T18225] ? I_BDEV+0xd/0x20 [ 742.236982][T18225] ? inode_to_bdi+0x9e/0x160 [ 742.237023][T18225] iomap_file_buffered_write+0x419/0xc70 [ 742.237065][T18225] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 742.237093][T18225] ? find_held_lock+0x2d/0x110 [ 742.237118][T18225] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 742.237169][T18225] ? preempt_count_add+0x76/0x150 [ 742.237198][T18225] ? mnt_put_write_access_file+0xc1/0xf0 [ 742.237235][T18225] blkdev_write_iter+0x574/0xdd0 [ 742.237278][T18225] vfs_write+0x5ae/0x1150 [ 742.237313][T18225] ? __pfx_blkdev_write_iter+0x10/0x10 [ 742.237350][T18225] ? __pfx_vfs_write+0x10/0x10 [ 742.237381][T18225] ? do_futex+0x123/0x350 [ 742.237414][T18225] ? __fget_files+0x40/0x3a0 [ 742.237463][T18225] ksys_write+0x12b/0x250 [ 742.237495][T18225] ? __pfx_ksys_write+0x10/0x10 [ 742.237536][T18225] do_syscall_64+0xcd/0x250 [ 742.237571][T18225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.237603][T18225] RIP: 0033:0x7fe44b78d169 [ 742.237624][T18225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.237646][T18225] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 742.237670][T18225] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 742.237686][T18225] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 742.237702][T18225] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 742.237717][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.237732][T18225] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 742.237765][T18225] [ 742.246838][T18237] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 742.608370][T18241] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 742.685810][T14771] Bluetooth: hci2: command 0x0406 tx timeout can't run '/sbi[ 742.824308][T18239] FAULT_INJECTION: forcing a failure. [ 742.824308][T18239] name failslab, interval 1, probability 0, space 0, times 0 [ 742.945810][T18239] CPU: 1 UID: 0 PID: 18239 Comm: syz.2.2829 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 742.945846][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.945861][T18239] Call Trace: [ 742.945868][T18239] [ 742.945879][T18239] dump_stack_lvl+0x16c/0x1f0 [ 742.945918][T18239] should_fail_ex+0x50a/0x650 [ 742.945955][T18239] ? fs_reclaim_acquire+0xae/0x150 [ 742.945990][T18239] should_failslab+0xc2/0x120 [ 742.946016][T18239] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 742.946054][T18239] ? __kernfs_new_node+0xd3/0x890 [ 742.946092][T18239] __kernfs_new_node+0xd3/0x890 [ 742.946129][T18239] ? __pfx___kernfs_new_node+0x10/0x10 [ 742.946160][T18239] ? __pfx_lock_release+0x10/0x10 [ 742.946202][T18239] ? kernfs_add_one+0x39d/0x520 [ 742.946252][T18239] ? up_write+0x1b2/0x520 [ 742.946294][T18239] kernfs_new_node+0x186/0x240 [ 742.946338][T18239] __kernfs_create_file+0x53/0x350 [ 742.946371][T18239] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 742.946411][T18239] internal_create_group+0x56c/0xf10 [ 742.946453][T18239] ? __pfx_internal_create_group+0x10/0x10 [ 742.946492][T18239] ? kernfs_create_link+0x1bd/0x240 [ 742.946525][T18239] internal_create_groups+0x9d/0x150 [ 742.946562][T18239] device_add+0x6d3/0x1a70 [ 742.946599][T18239] ? __pfx_device_add+0x10/0x10 [ 742.946634][T18239] ? __init_waitqueue_head+0xca/0x150 [ 742.946670][T18239] netdev_register_kobject+0x183/0x3a0 [ 742.946711][T18239] register_netdevice+0x147b/0x1eb0 [ 742.946755][T18239] ? __pfx_register_netdevice+0x10/0x10 [ 742.946800][T18239] ? __pfx_loopback_net_init+0x10/0x10 [ 742.946832][T18239] register_netdev+0x34/0x50 [ 742.946870][T18239] loopback_net_init+0x7a/0x170 [ 742.946902][T18239] ? __pfx_loopback_net_init+0x10/0x10 [ 742.946930][T18239] ops_init+0x1df/0x5f0 [ 742.946971][T18239] setup_net+0x21f/0x860 [ 742.947009][T18239] ? __pfx_setup_net+0x10/0x10 [ 742.947041][T18239] ? down_read_killable+0xcc/0x380 [ 742.947076][T18239] ? __pfx_down_read_killable+0x10/0x10 [ 742.947110][T18239] ? __raw_spin_lock_init+0x3a/0x110 [ 742.947136][T18239] ? debug_mutex_init+0x37/0x70 [ 742.947167][T18239] copy_net_ns+0x2a6/0x5f0 [ 742.947204][T18239] create_new_namespaces+0x3ea/0xad0 [ 742.947253][T18239] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 742.947297][T18239] ksys_unshare+0x45d/0xa40 [ 742.947324][T18239] ? __pfx_ksys_unshare+0x10/0x10 [ 742.947349][T18239] ? xfd_validate_state+0x5d/0x180 [ 742.947396][T18239] __x64_sys_unshare+0x31/0x40 [ 742.947421][T18239] do_syscall_64+0xcd/0x250 [ 742.947456][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.947489][T18239] RIP: 0033:0x7f92d718d169 [ 742.947510][T18239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.947533][T18239] RSP: 002b:00007f92d7f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 742.947557][T18239] RAX: ffffffffffffffda RBX: 00007f92d73a5fa0 RCX: 00007f92d718d169 [ 742.947575][T18239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 742.947587][T18239] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 742.947601][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.947615][T18239] R13: 0000000000000000 R14: 00007f92d73a5fa0 R15: 00007ffdbe1313f8 [ 742.947650][T18239] [ 743.465653][T14771] Bluetooth: hci4: command 0x0c1a tx timeout [ 743.567005][T14771] Bluetooth: hci3: command 0x0c1a tx timeout [ 743.739194][T18249] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 744.045960][T14771] Bluetooth: hci1: command 0x0406 tx timeout [ 744.765890][T14771] Bluetooth: hci2: command 0x0406 tx timeout [ 744.774917][T18257] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 745.006703][T18262] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 745.096823][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 745.485894][T14771] Bluetooth: hci4: command 0x0c1a tx timeout [ 745.645922][T14771] Bluetooth: hci3: command 0x0c1a tx timeout [ 745.867990][T18269] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 746.789810][T18278] FAULT_INJECTION: forcing a failure. [ 746.789810][T18278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.805535][T18278] CPU: 0 UID: 0 PID: 18278 Comm: syz.1.2839 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 746.805566][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 746.805580][T18278] Call Trace: [ 746.805588][T18278] [ 746.805598][T18278] dump_stack_lvl+0x16c/0x1f0 [ 746.805634][T18278] should_fail_ex+0x50a/0x650 [ 746.805683][T18278] ? page_copy_sane+0xcd/0x2d0 [ 746.805710][T18278] copy_page_from_iter_atomic+0x39f/0x1920 [ 746.805746][T18278] ? fault_in_readable+0x15d/0x200 [ 746.805777][T18278] ? fault_in_readable+0x160/0x200 [ 746.805807][T18278] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 746.805833][T18278] ? fault_in_readable+0x1a7/0x200 [ 746.805862][T18278] ? __pfx_fault_in_readable+0x10/0x10 [ 746.805892][T18278] ? I_BDEV+0xd/0x20 [ 746.805915][T18278] ? inode_to_bdi+0x9e/0x160 [ 746.805952][T18278] iomap_file_buffered_write+0x633/0xc70 [ 746.805988][T18278] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 746.806015][T18278] ? find_held_lock+0x2d/0x110 [ 746.806042][T18278] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 746.806088][T18278] ? preempt_count_add+0x76/0x150 [ 746.806117][T18278] ? mnt_put_write_access_file+0xc1/0xf0 [ 746.806148][T18278] blkdev_write_iter+0x574/0xdd0 [ 746.806180][T18278] vfs_write+0x5ae/0x1150 [ 746.806211][T18278] ? __pfx_blkdev_write_iter+0x10/0x10 [ 746.806242][T18278] ? __pfx_vfs_write+0x10/0x10 [ 746.806270][T18278] ? do_futex+0x123/0x350 [ 746.806297][T18278] ? __fget_files+0x40/0x3a0 [ 746.806340][T18278] ksys_write+0x12b/0x250 [ 746.806369][T18278] ? __pfx_ksys_write+0x10/0x10 [ 746.806405][T18278] do_syscall_64+0xcd/0x250 [ 746.806439][T18278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.806470][T18278] RIP: 0033:0x7fe44b78d169 [ 746.806489][T18278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.806511][T18278] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 746.806534][T18278] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 746.806550][T18278] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 746.806565][T18278] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 746.806578][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.806592][T18278] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 746.806620][T18278] [ 747.167429][T18284] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 747.216319][T18285] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 747.565971][T14771] Bluetooth: hci4: command 0x0c1a tx timeout [ 747.661181][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.668872][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.735804][T14771] Bluetooth: hci3: command 0x0c1a tx timeout [ 748.394387][T18295] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 749.448692][T18303] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 749.556867][T18251] Process accounting paused [ 750.541305][T18323] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 750.626597][T18324] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 750.806566][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 750.821114][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 750.830734][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 750.842586][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 750.851772][ T5145] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 750.861951][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 750.866090][T18331] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 750.910783][T18332] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.015213][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 751.169286][T18337] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.364205][T18325] chnl_net:caif_netlink_parms(): no params data found [ 751.733346][T18346] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 752.837344][T18351] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 753.025812][ T5145] Bluetooth: hci5: command tx timeout [ 753.927480][T18356] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 754.376005][T18352] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2853'. [ 754.433730][T18353] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2853'. [ 754.499492][T18325] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.516493][T18325] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.525106][T18325] bridge_slave_0: entered allmulticast mode [ 754.549148][T18090] syz.0.2798 (18090) used greatest stack depth: 19728 bytes left [ 754.591377][T18325] bridge_slave_0: entered promiscuous mode [ 754.631603][T18325] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.660940][T18362] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 754.683971][T18325] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.805904][T18325] bridge_slave_1: entered allmulticast mode [ 754.814242][T18325] bridge_slave_1: entered promiscuous mode [ 755.077479][T18366] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 755.094027][ T5145] Bluetooth: hci5: command tx timeout can't run '/sbi[ 755.879642][T18376] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 756.117739][T18379] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 756.428453][T18085] syz.0.2798 (18085) used greatest stack depth: 19120 bytes left [ 757.002657][T18325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.027564][T18325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.178203][ T5145] Bluetooth: hci5: command tx timeout [ 757.407837][T18385] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 758.310752][T18325] team0: Port device team_slave_0 added [ 758.349009][T18325] team0: Port device team_slave_1 added [ 758.445427][T18390] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 759.112360][T18325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.135829][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.211713][T18325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.236971][T18325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.245339][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.285863][ T5145] Bluetooth: hci5: command tx timeout [ 759.294291][T18325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.527860][T18391] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 759.688741][T18087] syz.0.2798 (18087) used greatest stack depth: 19088 bytes left [ 759.721156][T18325] hsr_slave_0: entered promiscuous mode [ 759.734441][T18325] hsr_slave_1: entered promiscuous mode [ 759.747724][T18325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.766007][T18325] Cannot create hsr debugfs directory [ 759.833946][T18107] syz.0.2798 (18107) used greatest stack depth: 18928 bytes left [ 760.272070][T18325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 760.312894][T18404] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 760.343613][T18325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 760.354946][T18325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 760.374636][T18407] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 760.398221][T18110] syz.0.2798 (18110) used greatest stack depth: 18512 bytes left [ 760.441211][T18325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 760.551188][T18412] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 760.587914][T18415] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 760.682656][T18325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.754640][T18325] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.904479][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.913057][ T7342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.943299][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.951874][ T7342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.012452][T18431] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 761.067796][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 761.097664][ T8749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.238122][T18325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.317445][ T8749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.393485][T18438] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 761.456727][T18439] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 761.496601][ T8749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.533501][T18442] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 761.583131][T18444] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 761.700495][ T8749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.756110][T18325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.908085][ T8749] bridge_slave_1: left allmulticast mode [ 761.931130][ T8749] bridge_slave_1: left promiscuous mode [ 761.946579][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.984578][ T8749] bridge_slave_0: left allmulticast mode [ 762.011580][ T8749] bridge_slave_0: left promiscuous mode [ 762.045967][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.282844][T18464] FAULT_INJECTION: forcing a failure. [ 762.282844][T18464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.298856][T18464] CPU: 0 UID: 0 PID: 18464 Comm: syz.2.2878 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 762.298888][T18464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 762.298905][T18464] Call Trace: [ 762.298914][T18464] [ 762.298924][T18464] dump_stack_lvl+0x16c/0x1f0 [ 762.298962][T18464] should_fail_ex+0x50a/0x650 [ 762.298999][T18464] ? page_copy_sane+0xcd/0x2d0 [ 762.299026][T18464] copy_page_from_iter_atomic+0x39f/0x1920 [ 762.299064][T18464] ? mark_buffer_dirty+0x397/0x420 [ 762.299101][T18464] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 762.299130][T18464] ? fault_in_readable+0x1a7/0x200 [ 762.299162][T18464] ? __pfx_fault_in_readable+0x10/0x10 [ 762.299194][T18464] ? I_BDEV+0xd/0x20 [ 762.299216][T18464] ? inode_to_bdi+0x9e/0x160 [ 762.299254][T18464] iomap_file_buffered_write+0x633/0xc70 [ 762.299295][T18464] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 762.299323][T18464] ? find_held_lock+0x2d/0x110 [ 762.299349][T18464] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 762.299400][T18464] ? preempt_count_add+0x76/0x150 [ 762.299430][T18464] ? mnt_put_write_access_file+0xc1/0xf0 [ 762.299468][T18464] blkdev_write_iter+0x574/0xdd0 [ 762.299505][T18464] vfs_write+0x5ae/0x1150 [ 762.299538][T18464] ? __pfx_blkdev_write_iter+0x10/0x10 [ 762.299574][T18464] ? __pfx_vfs_write+0x10/0x10 [ 762.299604][T18464] ? do_futex+0x123/0x350 [ 762.299634][T18464] ? __fget_files+0x40/0x3a0 [ 762.299682][T18464] ksys_write+0x12b/0x250 [ 762.299714][T18464] ? __pfx_ksys_write+0x10/0x10 [ 762.299755][T18464] do_syscall_64+0xcd/0x250 [ 762.299789][T18464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.299823][T18464] RIP: 0033:0x7f92d718d169 [ 762.299850][T18464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.299875][T18464] RSP: 002b:00007f92d7f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.299899][T18464] RAX: ffffffffffffffda RBX: 00007f92d73a5fa0 RCX: 00007f92d718d169 [ 762.299916][T18464] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 762.299931][T18464] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 762.299947][T18464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.299962][T18464] R13: 0000000000000000 R14: 00007f92d73a5fa0 R15: 00007ffdbe1313f8 [ 762.299994][T18464] [ 763.330594][ T8749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.365890][ T8749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.396284][ T8749] bond0 (unregistering): Released all slaves [ 763.617984][T18325] veth0_vlan: entered promiscuous mode [ 763.676756][T18325] veth1_vlan: entered promiscuous mode can't run '/sbi[ 763.768569][T18476] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2881'. [ 763.894844][T18325] veth0_macvtap: entered promiscuous mode [ 763.938177][T18325] veth1_macvtap: entered promiscuous mode [ 764.038131][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.070178][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.109578][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.155839][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.171385][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.184452][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.224429][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.255884][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.290566][T18325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.330837][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.349814][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.364148][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.401548][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.413960][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.436074][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.489329][T18325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.515757][T18325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.540805][T18325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.707721][T18502] EXT4-fs error: 12 callbacks suppressed [ 764.707740][T18502] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 764.763547][T18325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.784646][T18325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.818121][T18325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.833886][T18325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.108882][T18508] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 765.134679][ T8749] hsr_slave_0: left promiscuous mode [ 765.155448][ T8749] hsr_slave_1: left promiscuous mode [ 765.163566][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.186499][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.214003][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.223204][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.305220][ T8749] veth1_macvtap: left promiscuous mode [ 765.332636][ T8749] veth0_macvtap: left promiscuous mode [ 765.352985][ T8749] veth1_vlan: left promiscuous mode [ 765.363106][ T8749] veth0_vlan: left promiscuous mode [ 765.777678][T18518] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 766.604700][ T8749] team0 (unregistering): Port device team_slave_1 removed [ 766.826485][ T8749] team0 (unregistering): Port device team_slave_0 removed [ 766.839883][T18532] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 767.955093][ T8723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.969137][T18541] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.013714][ T8723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 can't run '/sbi[ 768.170038][T11475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.196808][T11475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.252474][T18552] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.316974][T18551] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2896'. [ 768.657916][T18567] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.692667][T18568] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.725022][T18570] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.821496][T18576] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.834577][T18574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 768.898128][T18574] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 769.013199][T18579] Invalid ELF header magic: != ELF can't run '/sbi[ 769.475186][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2900'. [ 769.519801][T18581] geneve1: entered promiscuous mode [ 769.537011][T18581] geneve1: entered allmulticast mode [ 769.804384][T18611] EXT4-fs error: 2 callbacks suppressed [ 769.804404][T18611] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 769.951066][T18617] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 770.092931][T18625] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 770.145098][T18627] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 770.166229][T18630] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 770.200491][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 771.172589][T18644] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 771.661548][T18658] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 771.694657][T18659] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 771.761766][T18661] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 771.972644][T18667] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2912'. [ 771.994257][T18670] netlink: 9884 bytes leftover after parsing attributes in process `syz.1.2913'. [ 772.029585][T18670] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 772.029585][T18667] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2912'. [ 772.099353][T18674] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2912'. [ 772.230490][T18676] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 772.302383][T18668] program syz.2.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO can't run '/sbi[ 772.608800][T18691] FAULT_INJECTION: forcing a failure. [ 772.608800][T18691] name failslab, interval 1, probability 0, space 0, times 0 [ 772.657996][T18691] CPU: 1 UID: 0 PID: 18691 Comm: syz.4.2920 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 772.658030][T18691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 772.658044][T18691] Call Trace: [ 772.658051][T18691] [ 772.658061][T18691] dump_stack_lvl+0x16c/0x1f0 [ 772.658097][T18691] should_fail_ex+0x50a/0x650 [ 772.658131][T18691] ? fs_reclaim_acquire+0xae/0x150 [ 772.658165][T18691] should_failslab+0xc2/0x120 [ 772.658188][T18691] __kmalloc_node_noprof+0xd1/0x510 [ 772.658224][T18691] ? __pfx_aa_file_perm+0x10/0x10 [ 772.658253][T18691] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 772.658289][T18691] __kvmalloc_node_noprof+0xad/0x1a0 [ 772.658321][T18691] seq_read_iter+0x82a/0x12b0 [ 772.658358][T18691] ? __mutex_trylock_common+0xea/0x250 [ 772.658400][T18691] kernfs_fop_read_iter+0x414/0x580 [ 772.658426][T18691] ? rw_verify_area+0xcf/0x680 [ 772.658458][T18691] vfs_read+0x886/0xbf0 [ 772.658495][T18691] ? __pfx_vfs_read+0x10/0x10 [ 772.658555][T18691] ksys_read+0x12b/0x250 [ 772.658583][T18691] ? __pfx_ksys_read+0x10/0x10 [ 772.658624][T18691] do_syscall_64+0xcd/0x250 [ 772.658658][T18691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.658690][T18691] RIP: 0033:0x7fc436f8d169 [ 772.658709][T18691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.658730][T18691] RSP: 002b:00007fc437ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.658752][T18691] RAX: ffffffffffffffda RBX: 00007fc4371a5fa0 RCX: 00007fc436f8d169 [ 772.658768][T18691] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 772.658782][T18691] RBP: 00007fc437ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 772.658796][T18691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.658810][T18691] R13: 0000000000000000 R14: 00007fc4371a5fa0 R15: 00007fff7e11de98 [ 772.658843][T18691] can't run '/sbi[ 773.885465][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. can't run '/sbi[ 774.742986][T18762] udevd[18762]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 775.409025][T18780] EXT4-fs error: 11 callbacks suppressed [ 775.409044][T18780] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 775.460971][T18784] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 775.527062][T18786] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 775.559574][T18785] FAULT_INJECTION: forcing a failure. [ 775.559574][T18785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.638379][T18785] CPU: 0 UID: 0 PID: 18785 Comm: syz.4.2933 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 775.638410][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 775.638421][T18785] Call Trace: [ 775.638427][T18785] [ 775.638437][T18785] dump_stack_lvl+0x16c/0x1f0 [ 775.638470][T18785] should_fail_ex+0x50a/0x650 [ 775.638508][T18785] _copy_to_iter+0x2a1/0x1560 [ 775.638534][T18785] ? trace_lock_acquire+0x14e/0x1f0 [ 775.638560][T18785] ? __pfx_lock_release+0x10/0x10 [ 775.638590][T18785] ? __pfx__copy_to_iter+0x10/0x10 [ 775.638612][T18785] ? __virt_addr_valid+0x1a4/0x590 [ 775.638641][T18785] ? __virt_addr_valid+0x5e/0x590 [ 775.638665][T18785] ? __phys_addr_symbol+0x30/0x80 [ 775.638686][T18785] ? __check_object_size+0x488/0x710 [ 775.638713][T18785] seq_read_iter+0xd00/0x12b0 [ 775.638755][T18785] kernfs_fop_read_iter+0x414/0x580 [ 775.638779][T18785] ? rw_verify_area+0xcf/0x680 [ 775.638810][T18785] vfs_read+0x886/0xbf0 [ 775.638846][T18785] ? __pfx_vfs_read+0x10/0x10 [ 775.638898][T18785] ksys_read+0x12b/0x250 [ 775.638927][T18785] ? __pfx_ksys_read+0x10/0x10 [ 775.638967][T18785] do_syscall_64+0xcd/0x250 [ 775.638997][T18785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.639027][T18785] RIP: 0033:0x7fc436f8d169 [ 775.639045][T18785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.639065][T18785] RSP: 002b:00007fc437ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 775.639084][T18785] RAX: ffffffffffffffda RBX: 00007fc4371a5fa0 RCX: 00007fc436f8d169 [ 775.639099][T18785] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 775.639113][T18785] RBP: 00007fc437ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 775.639127][T18785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.639141][T18785] R13: 0000000000000000 R14: 00007fc4371a5fa0 R15: 00007fff7e11de98 [ 775.639183][T18785] [ 776.035735][T18796] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.088661][T18798] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.135170][T18802] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.182151][T18806] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.210476][T18807] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.395636][T18818] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 776.468461][T18821] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 777.410307][T18834] svc: failed to register nfsdv3 RPC service (errno 111). [ 777.453965][T18834] svc: failed to register nfsaclv3 RPC service (errno 111). can't run '/sbi[ 777.659132][T18859] FAULT_INJECTION: forcing a failure. [ 777.659132][T18859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.703194][T18859] CPU: 0 UID: 0 PID: 18859 Comm: syz.3.2947 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 777.703228][T18859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 777.703242][T18859] Call Trace: [ 777.703250][T18859] [ 777.703260][T18859] dump_stack_lvl+0x16c/0x1f0 [ 777.703297][T18859] should_fail_ex+0x50a/0x650 [ 777.703340][T18859] _copy_to_user+0x32/0xd0 [ 777.703370][T18859] simple_read_from_buffer+0xd0/0x160 [ 777.703406][T18859] proc_fail_nth_read+0x198/0x270 [ 777.703437][T18859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.703469][T18859] ? rw_verify_area+0xcf/0x680 [ 777.703499][T18859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 777.703529][T18859] vfs_read+0x1df/0xbf0 [ 777.703561][T18859] ? __fget_files+0x1fc/0x3a0 [ 777.703594][T18859] ? __pfx___mutex_lock+0x10/0x10 [ 777.703625][T18859] ? __pfx_vfs_read+0x10/0x10 [ 777.703666][T18859] ? __fget_files+0x206/0x3a0 [ 777.703709][T18859] ksys_read+0x12b/0x250 [ 777.703739][T18859] ? __pfx_ksys_read+0x10/0x10 [ 777.703780][T18859] do_syscall_64+0xcd/0x250 [ 777.703814][T18859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.703846][T18859] RIP: 0033:0x7f9b6418bb7c [ 777.703867][T18859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 777.703889][T18859] RSP: 002b:00007f9b65035030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.703912][T18859] RAX: ffffffffffffffda RBX: 00007f9b643a6080 RCX: 00007f9b6418bb7c [ 777.703928][T18859] RDX: 000000000000000f RSI: 00007f9b650350a0 RDI: 0000000000000004 [ 777.703944][T18859] RBP: 00007f9b65035090 R08: 0000000000000000 R09: 0000000000000000 [ 777.703959][T18859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.703974][T18859] R13: 0000000000000000 R14: 00007f9b643a6080 R15: 00007ffc43961968 [ 777.704008][T18859] can't run '/sbi[ 778.831211][T18904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 778.856013][T18904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 778.886413][T18904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 778.899344][T18904] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 778.914220][T18904] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 778.948540][T18904] Bluetooth: hci5: Opcode 0x0406 failed: -4 can't run '/sbi[ 779.626301][T18955] FAULT_INJECTION: forcing a failure. [ 779.626301][T18955] name failslab, interval 1, probability 0, space 0, times 0 [ 779.649792][T18955] CPU: 0 UID: 0 PID: 18955 Comm: syz.2.2961 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 779.649827][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 779.649842][T18955] Call Trace: [ 779.649850][T18955] [ 779.649859][T18955] dump_stack_lvl+0x16c/0x1f0 [ 779.649898][T18955] should_fail_ex+0x50a/0x650 [ 779.649944][T18955] ? fs_reclaim_acquire+0xae/0x150 [ 779.649980][T18955] should_failslab+0xc2/0x120 [ 779.650005][T18955] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 779.650047][T18955] ? fib_rules_register+0x30/0x500 [ 779.650084][T18955] kmemdup_noprof+0x29/0x60 [ 779.650114][T18955] fib_rules_register+0x30/0x500 [ 779.650150][T18955] fib4_rules_init+0x1f/0x1c0 [ 779.650188][T18955] fib_net_init+0x1de/0x3d0 [ 779.650218][T18955] ? __pfx_fib_net_init+0x10/0x10 [ 779.650251][T18955] ? do_init_timer+0xc9/0x110 [ 779.650281][T18955] ? devinet_init_net+0x5c1/0x900 [ 779.650317][T18955] ? __pfx_fib_net_init+0x10/0x10 [ 779.650345][T18955] ops_init+0x1df/0x5f0 [ 779.650384][T18955] setup_net+0x21f/0x860 [ 779.650422][T18955] ? __pfx_setup_net+0x10/0x10 [ 779.650456][T18955] ? down_read_killable+0xcc/0x380 [ 779.650490][T18955] ? __pfx_down_read_killable+0x10/0x10 [ 779.650522][T18955] ? __raw_spin_lock_init+0x3a/0x110 [ 779.650548][T18955] ? debug_mutex_init+0x37/0x70 [ 779.650579][T18955] copy_net_ns+0x2a6/0x5f0 [ 779.650607][T18955] create_new_namespaces+0x3ea/0xad0 [ 779.650652][T18955] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 779.650691][T18955] ksys_unshare+0x45d/0xa40 [ 779.650718][T18955] ? __pfx_ksys_unshare+0x10/0x10 [ 779.650742][T18955] ? xfd_validate_state+0x5d/0x180 [ 779.650786][T18955] __x64_sys_unshare+0x31/0x40 [ 779.650811][T18955] do_syscall_64+0xcd/0x250 [ 779.650845][T18955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.650878][T18955] RIP: 0033:0x7f92d718d169 [ 779.650897][T18955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.650928][T18955] RSP: 002b:00007f92d4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 779.650953][T18955] RAX: ffffffffffffffda RBX: 00007f92d73a6080 RCX: 00007f92d718d169 [ 779.650971][T18955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 779.650986][T18955] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 779.651002][T18955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.651017][T18955] R13: 0000000000000000 R14: 00007f92d73a6080 R15: 00007ffdbe1313f8 [ 779.651049][T18955] [ 780.261779][T18959] Process accounting resumed [ 780.492510][T18983] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2969'. [ 780.584388][T18983] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2969'. [ 780.614210][T18988] EXT4-fs error: 22 callbacks suppressed [ 780.614228][T18988] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 780.650373][T18990] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2969'. can't run '/sbi[ 780.743813][T18991] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2969'. [ 780.856348][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 780.928565][T14771] Bluetooth: hci3: command 0x0c1a tx timeout [ 780.936134][T14770] Bluetooth: hci2: command 0x0406 tx timeout [ 780.943482][ T5145] Bluetooth: hci5: command 0x0c1a tx timeout [ 781.161886][T19006] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 781.273586][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 781.667328][T19017] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 782.053858][T19028] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 782.087414][T19028] ep_00: uevent: failed to send synthetic uevent: -22 [ 782.713162][T19055] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 783.018777][ T5145] Bluetooth: hci5: command 0x0c1a tx timeout [ 783.217973][T19066] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 783.235077][T19067] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 783.737102][T19082] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 783.766279][T19083] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 783.826024][T19085] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 784.056033][T19093] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 784.114416][T19097] Invalid ELF header magic: != ELF [ 784.807558][T19112] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 785.088800][ T5145] Bluetooth: hci5: command 0x0c1a tx timeout [ 785.842975][T19131] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 785.953418][T19134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3003'. [ 786.069403][T19138] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 786.081398][T19139] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 786.881265][T19162] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 786.913828][T19157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3008'. can't run '/sbi[ 786.970913][T19157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.998836][T19157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.033570][T19157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.079966][T19157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.588426][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 787.947271][T19186] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 788.091247][T19191] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 788.173874][T19194] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 788.290205][T19198] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 788.589763][T19208] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 788.944146][T19215] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:35: corrupted in-inode xattr: bad magic number in in-inode xattr [ 788.962441][ C0] vkms_vblank_simulate: vblank timer overrun can't run '/sbi[ 789.923389][T19280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3023'. [ 790.012806][T19280] mac80211_hwsim hwsim156 wlan1: entered allmulticast mode can't run '/sbi[ 790.372426][T19317] FAULT_INJECTION: forcing a failure. [ 790.372426][T19317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.388305][T19317] CPU: 0 UID: 0 PID: 19317 Comm: syz.4.3026 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 790.388335][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.388349][T19317] Call Trace: [ 790.388358][T19317] [ 790.388367][T19317] dump_stack_lvl+0x16c/0x1f0 [ 790.388406][T19317] should_fail_ex+0x50a/0x650 [ 790.388443][T19317] ? page_copy_sane+0xcd/0x2d0 [ 790.388472][T19317] copy_page_from_iter_atomic+0x39f/0x1920 [ 790.388510][T19317] ? mark_buffer_dirty+0x397/0x420 [ 790.388547][T19317] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 790.388582][T19317] ? fault_in_readable+0x1a7/0x200 [ 790.388616][T19317] ? __pfx_fault_in_readable+0x10/0x10 [ 790.388652][T19317] ? I_BDEV+0xd/0x20 [ 790.388675][T19317] ? inode_to_bdi+0x9e/0x160 [ 790.388714][T19317] iomap_file_buffered_write+0x633/0xc70 [ 790.388756][T19317] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 790.388785][T19317] ? find_held_lock+0x2d/0x110 [ 790.388812][T19317] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 790.388864][T19317] ? preempt_count_add+0x76/0x150 [ 790.388893][T19317] ? mnt_put_write_access_file+0xc1/0xf0 [ 790.388931][T19317] blkdev_write_iter+0x574/0xdd0 [ 790.388970][T19317] vfs_write+0x5ae/0x1150 [ 790.389000][T19317] ? __pfx_blkdev_write_iter+0x10/0x10 [ 790.389033][T19317] ? __pfx_vfs_write+0x10/0x10 [ 790.389063][T19317] ? do_futex+0x123/0x350 [ 790.389092][T19317] ? __fget_files+0x40/0x3a0 [ 790.389136][T19317] ksys_write+0x12b/0x250 [ 790.389166][T19317] ? __pfx_ksys_write+0x10/0x10 [ 790.389208][T19317] do_syscall_64+0xcd/0x250 [ 790.389243][T19317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.389278][T19317] RIP: 0033:0x7fc436f8d169 [ 790.389299][T19317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.389322][T19317] RSP: 002b:00007fc437ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.389345][T19317] RAX: ffffffffffffffda RBX: 00007fc4371a5fa0 RCX: 00007fc436f8d169 [ 790.389362][T19317] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 790.389377][T19317] RBP: 00007fc43700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 790.389391][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.389404][T19317] R13: 0000000000000000 R14: 00007fc4371a5fa0 R15: 00007fff7e11de98 [ 790.389435][T19317] [ 791.071221][T19330] EXT4-fs error: 71 callbacks suppressed [ 791.071240][T19330] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 791.498481][T19341] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 791.595459][T19342] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 791.698938][T19352] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 791.890457][T19373] FAULT_INJECTION: forcing a failure. [ 791.890457][T19373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 791.996113][T19381] FAULT_INJECTION: forcing a failure. [ 791.996113][T19381] name failslab, interval 1, probability 0, space 0, times 0 [ 792.022072][T19373] CPU: 0 UID: 0 PID: 19373 Comm: syz.4.3028 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 792.022105][T19373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 792.022119][T19373] Call Trace: [ 792.022126][T19373] [ 792.022135][T19373] dump_stack_lvl+0x16c/0x1f0 [ 792.022171][T19373] should_fail_ex+0x50a/0x650 [ 792.022205][T19373] ? __pfx___might_resched+0x10/0x10 [ 792.022244][T19373] should_fail_alloc_page+0xe7/0x130 [ 792.022267][T19373] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 792.022301][T19373] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 792.022347][T19373] ? hlock_class+0x4e/0x130 [ 792.022377][T19373] ? __lock_acquire+0xcc5/0x3c40 [ 792.022408][T19373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 792.022452][T19373] ? __pfx___lock_acquire+0x10/0x10 [ 792.022481][T19373] ? process_measurement+0x39c/0x2370 [ 792.022520][T19373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 792.022557][T19373] ? policy_nodemask+0xea/0x4e0 [ 792.022583][T19373] alloc_pages_mpol+0x1fc/0x540 [ 792.022607][T19373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 792.022632][T19373] ? xas_load+0x49/0x5b0 [ 792.022660][T19373] ? filemap_get_entry+0xd0/0x3c0 [ 792.022693][T19373] folio_alloc_noprof+0x20/0x2d0 [ 792.022719][T19373] filemap_alloc_folio_noprof+0x39b/0x470 [ 792.022747][T19373] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 792.022770][T19373] ? __pfx_mark_lock+0x10/0x10 [ 792.022807][T19373] __filemap_get_folio+0x5e9/0xbd0 [ 792.022845][T19373] iomap_write_begin+0x693/0x1660 [ 792.022883][T19373] ? __pfx_iomap_write_begin+0x10/0x10 [ 792.022907][T19373] ? fault_in_readable+0x1a7/0x200 [ 792.022937][T19373] ? __pfx_fault_in_readable+0x10/0x10 [ 792.022967][T19373] ? I_BDEV+0xd/0x20 [ 792.022988][T19373] ? inode_to_bdi+0x9e/0x160 [ 792.023024][T19373] iomap_file_buffered_write+0x419/0xc70 [ 792.023063][T19373] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 792.023090][T19373] ? find_held_lock+0x2d/0x110 [ 792.023117][T19373] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 792.023165][T19373] ? preempt_count_add+0x76/0x150 [ 792.023193][T19373] ? mnt_put_write_access_file+0xc1/0xf0 [ 792.023229][T19373] blkdev_write_iter+0x574/0xdd0 [ 792.023266][T19373] vfs_write+0x5ae/0x1150 [ 792.023298][T19373] ? __pfx_blkdev_write_iter+0x10/0x10 [ 792.023332][T19373] ? __pfx_vfs_write+0x10/0x10 [ 792.023364][T19373] ? __fget_files+0x40/0x3a0 [ 792.023416][T19373] ksys_write+0x12b/0x250 [ 792.023447][T19373] ? __pfx_ksys_write+0x10/0x10 [ 792.023485][T19373] do_syscall_64+0xcd/0x250 [ 792.023518][T19373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.023550][T19373] RIP: 0033:0x7fc436f8d169 [ 792.023569][T19373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.023591][T19373] RSP: 002b:00007fc437ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.023614][T19373] RAX: ffffffffffffffda RBX: 00007fc4371a5fa0 RCX: 00007fc436f8d169 [ 792.023630][T19373] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 792.023644][T19373] RBP: 00007fc437ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 792.023659][T19373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.023673][T19373] R13: 0000000000000000 R14: 00007fc4371a5fa0 R15: 00007fff7e11de98 [ 792.023703][T19373] [ 792.023982][T19381] CPU: 0 UID: 0 PID: 19381 Comm: syz.1.3029 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 792.024014][T19381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 792.024030][T19381] Call Trace: [ 792.024038][T19381] [ 792.024047][T19381] dump_stack_lvl+0x16c/0x1f0 [ 792.024083][T19381] should_fail_ex+0x50a/0x650 [ 792.024120][T19381] ? fs_reclaim_acquire+0xae/0x150 [ 792.024153][T19381] should_failslab+0xc2/0x120 [ 792.024177][T19381] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 792.024215][T19381] ? __d_alloc+0x31/0xaa0 [ 792.024242][T19381] __d_alloc+0x31/0xaa0 [ 792.024271][T19381] d_alloc+0x4a/0x1e0 [ 792.024297][T19381] d_alloc_parallel+0xe7/0x12b0 [ 792.024341][T19381] ? __pfx_d_alloc_parallel+0x10/0x10 [ 792.024378][T19381] ? lockdep_init_map_type+0x16d/0x7d0 [ 792.024417][T19381] ? lockdep_init_map_type+0x16d/0x7d0 [ 792.024462][T19381] __lookup_slow+0x194/0x470 [ 792.024492][T19381] ? __pfx___lookup_slow+0x10/0x10 [ 792.024527][T19381] ? walk_component+0x342/0x5b0 [ 792.024570][T19381] ? lookup_fast+0x153/0x5f0 [ 792.024605][T19381] walk_component+0x350/0x5b0 [ 792.024637][T19381] path_lookupat+0x17f/0x770 [ 792.024677][T19381] path_openat+0x1754/0x2d80 [ 792.024709][T19381] ? hlock_class+0x4e/0x130 [ 792.024733][T19381] ? __lock_acquire+0x15a9/0x3c40 [ 792.024777][T19381] ? __pfx_path_openat+0x10/0x10 [ 792.024812][T19381] ? __pfx___lock_acquire+0x10/0x10 [ 792.024842][T19381] ? lock_acquire.part.0+0x11b/0x380 [ 792.024875][T19381] ? find_held_lock+0x2d/0x110 [ 792.024910][T19381] do_filp_open+0x20c/0x470 [ 792.024945][T19381] ? __pfx_do_filp_open+0x10/0x10 [ 792.024978][T19381] ? find_held_lock+0x2d/0x110 [ 792.025016][T19381] ? __pfx_kfree_link+0x10/0x10 [ 792.025055][T19381] ? alloc_fd+0x41f/0x760 [ 792.025099][T19381] do_sys_openat2+0x17a/0x1e0 [ 792.025124][T19381] ? __pfx_do_sys_openat2+0x10/0x10 [ 792.025162][T19381] __x64_sys_openat+0x175/0x210 [ 792.025188][T19381] ? __pfx___x64_sys_openat+0x10/0x10 [ 792.025229][T19381] do_syscall_64+0xcd/0x250 [ 792.025265][T19381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.025298][T19381] RIP: 0033:0x7fe44b78d169 [ 792.025318][T19381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.025343][T19381] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 792.025366][T19381] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 792.025510][T19381] RDX: 0000000000228a40 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 792.025526][T19381] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 792.025540][T19381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.025555][T19381] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 792.025591][T19381] [ 792.164403][T19386] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 792.781949][T19394] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:28: corrupted in-inode xattr: bad magic number in in-inode xattr [ 792.909137][T19399] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1426: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 792.964735][T19400] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #17: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 793.068353][T19407] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:28: corrupted in-inode xattr: bad magic number in in-inode xattr [ 793.129648][T19409] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 793.492779][T19416] nbd1: detected capacity change from 0 to 68719476736 [ 793.526868][T18369] block nbd1: Send control failed (result -22) [ 793.549571][T18369] block nbd1: Request send failed, requeueing [ 793.590995][ T5145] block nbd1: Receive control failed (result -32) [ 793.613838][T17654] block nbd1: Dead connection, failed to find a fallback [ 793.623422][T17654] block nbd1: shutting down sockets [ 793.630188][T17654] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.643086][T17654] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.653229][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.675902][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.686691][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.687980][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'. [ 793.697849][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.718886][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.729997][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.746337][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.772860][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.794020][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.843304][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.856835][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.870398][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.885666][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 793.936457][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 793.996081][T18369] ldm_validate_partition_table(): Disk read failed. [ 794.007300][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 794.055663][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 794.071094][T18369] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 can't run '/sbi[ 794.114698][T18369] Buffer I/O error on dev nbd1, logical block 0, async page read [ 794.139450][T18369] Dev nbd1: unable to read RDB block 0 [ 794.152547][T18369] nbd1: unable to read partition table [ 794.206212][T19439] FAULT_INJECTION: forcing a failure. [ 794.206212][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.222134][T19439] CPU: 0 UID: 0 PID: 19439 Comm: syz.3.3038 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 794.222164][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.222178][T19439] Call Trace: [ 794.222186][T19439] [ 794.222195][T19439] dump_stack_lvl+0x16c/0x1f0 [ 794.222231][T19439] should_fail_ex+0x50a/0x650 [ 794.222267][T19439] ? page_copy_sane+0xcd/0x2d0 [ 794.222292][T19439] copy_page_from_iter_atomic+0x39f/0x1920 [ 794.222333][T19439] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 794.222361][T19439] ? fault_in_readable+0x1a7/0x200 [ 794.222391][T19439] ? __pfx_fault_in_readable+0x10/0x10 [ 794.222421][T19439] ? I_BDEV+0xd/0x20 [ 794.222443][T19439] ? inode_to_bdi+0x9e/0x160 [ 794.222480][T19439] iomap_file_buffered_write+0x633/0xc70 [ 794.222519][T19439] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 794.222546][T19439] ? find_held_lock+0x2d/0x110 [ 794.222572][T19439] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 794.222621][T19439] ? preempt_count_add+0x76/0x150 [ 794.222651][T19439] ? mnt_put_write_access_file+0xc1/0xf0 [ 794.222686][T19439] blkdev_write_iter+0x574/0xdd0 [ 794.222721][T19439] vfs_write+0x5ae/0x1150 [ 794.222752][T19439] ? __pfx_blkdev_write_iter+0x10/0x10 [ 794.222785][T19439] ? __pfx_vfs_write+0x10/0x10 [ 794.222816][T19439] ? __fget_files+0x40/0x3a0 [ 794.222862][T19439] ksys_write+0x12b/0x250 [ 794.222892][T19439] ? __pfx_ksys_write+0x10/0x10 [ 794.222930][T19439] do_syscall_64+0xcd/0x250 [ 794.222963][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.222992][T19439] RIP: 0033:0x7f9b6418d169 [ 794.223011][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.223033][T19439] RSP: 002b:00007f9b65056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.223052][T19439] RAX: ffffffffffffffda RBX: 00007f9b643a5fa0 RCX: 00007f9b6418d169 [ 794.223066][T19439] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 794.223079][T19439] RBP: 00007f9b65056090 R08: 0000000000000000 R09: 0000000000000000 [ 794.223091][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.223111][T19439] R13: 0000000000000000 R14: 00007f9b643a5fa0 R15: 00007ffc43961968 [ 794.223141][T19439] [ 794.546707][T18369] ldm_validate_partition_table(): Disk read failed. [ 794.561341][T18369] Dev nbd1: unable to read RDB block 0 [ 794.568951][T18369] nbd1: unable to read partition table [ 794.654595][T19441] FAULT_INJECTION: forcing a failure. [ 794.654595][T19441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.670428][T19441] CPU: 1 UID: 0 PID: 19441 Comm: syz.1.3037 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 794.670464][T19441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 794.670478][T19441] Call Trace: [ 794.670485][T19441] [ 794.670495][T19441] dump_stack_lvl+0x16c/0x1f0 [ 794.670533][T19441] should_fail_ex+0x50a/0x650 [ 794.670571][T19441] ? page_copy_sane+0xcd/0x2d0 [ 794.670598][T19441] copy_page_from_iter_atomic+0x39f/0x1920 [ 794.670636][T19441] ? mark_buffer_dirty+0x131/0x420 [ 794.670673][T19441] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 794.670702][T19441] ? fault_in_readable+0x1a7/0x200 [ 794.670735][T19441] ? __pfx_fault_in_readable+0x10/0x10 [ 794.670767][T19441] ? I_BDEV+0xd/0x20 [ 794.670789][T19441] ? inode_to_bdi+0x9e/0x160 [ 794.670828][T19441] iomap_file_buffered_write+0x633/0xc70 [ 794.670871][T19441] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 794.670899][T19441] ? find_held_lock+0x2d/0x110 [ 794.670986][T19441] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 794.671036][T19441] ? preempt_count_add+0x76/0x150 [ 794.671077][T19441] ? mnt_put_write_access_file+0xc1/0xf0 [ 794.671115][T19441] blkdev_write_iter+0x574/0xdd0 [ 794.671154][T19441] vfs_write+0x5ae/0x1150 [ 794.671188][T19441] ? __pfx_blkdev_write_iter+0x10/0x10 [ 794.671224][T19441] ? __pfx_vfs_write+0x10/0x10 [ 794.671255][T19441] ? do_futex+0x123/0x350 [ 794.671284][T19441] ? __fget_files+0x40/0x3a0 [ 794.671334][T19441] ksys_write+0x12b/0x250 [ 794.671364][T19441] ? __pfx_ksys_write+0x10/0x10 [ 794.671396][T19441] do_syscall_64+0xcd/0x250 [ 794.671435][T19441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.671470][T19441] RIP: 0033:0x7fe44b78d169 [ 794.671491][T19441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.671515][T19441] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.671539][T19441] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 794.671557][T19441] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 794.671572][T19441] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 794.671588][T19441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.671604][T19441] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 794.671636][T19441] can't run '/sbi[ 795.253942][T19476] udevd[19476]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 795.290105][T19478] could not allocate digest TFM handle binfmt_misc [ 795.321009][T19467] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 795.373445][T19467] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 795.447736][T19467] memcg:ffff8880274e3681 [ 795.478728][T19467] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 795.507028][T19467] page_type: f5(slab) [ 795.516437][T19467] raw: 00fff00000000040 ffff88814040ba00 0000000000000000 dead000000000001 [ 795.557379][T19467] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880274e3681 [ 795.615368][T19467] head: 00fff00000000040 ffff88814040ba00 0000000000000000 dead000000000001 [ 795.738320][T19467] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff8880274e3681 [ 795.824905][T19467] head: 00fff00000000002 ffffea0001e00201 ffffffffffffffff 0000000000000000 [ 795.926031][T19467] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 796.000451][T19467] page dumped because: unmovable page [ 796.023940][T19467] page_owner tracks the page as allocated [ 796.044071][T19467] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5756, tgid 5756 (dhcpcd-run-hook), ts 57395952733, free_ts 22917002174 [ 796.084474][T19467] post_alloc_hook+0x181/0x1b0 [ 796.170411][T19514] EXT4-fs error: 20 callbacks suppressed [ 796.170429][T19514] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 796.208428][T19467] get_page_from_freelist+0xfce/0x2f80 can't run '/sbi[ 796.230117][T19467] __alloc_frozen_pages_noprof+0x221/0x2470 [ 796.257902][T19467] alloc_pages_mpol+0x1fc/0x540 [ 796.272536][T19467] new_slab+0x23d/0x330 [ 796.293510][T19467] ___slab_alloc+0xc5d/0x1720 [ 796.316676][T19467] __slab_alloc.constprop.0+0x56/0xb0 [ 796.326122][T19520] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #20: comm dhcpcd-run-hook: corrupted in-inode xattr: bad magic number in in-inode xattr [ 796.335459][T19467] kmem_cache_alloc_lru_noprof+0xff/0x3d0 [ 796.369910][T19467] alloc_inode+0xbf/0x230 [ 796.381268][T19467] create_pipe_files+0x4c/0x930 [ 796.393076][T19467] do_pipe2+0xb0/0x1d0 [ 796.402587][T19467] __x64_sys_pipe2+0x54/0x80 [ 796.415588][T19467] do_syscall_64+0xcd/0x250 [ 796.426836][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.448176][T19467] page last free pid 1 tgid 1 stack trace: [ 796.463125][T19467] free_frozen_pages+0x6db/0xfb0 [ 796.475953][T19467] free_contig_range+0x133/0x3f0 [ 796.490915][T19467] destroy_args+0x66f/0x830 [ 796.502258][T19467] debug_vm_pgtable+0x130f/0x2d60 [ 796.511864][T19467] do_one_initcall+0x128/0x700 [ 796.519185][T19467] kernel_init_freeable+0x5c7/0x900 [ 796.528543][T19467] kernel_init+0x1c/0x2b0 [ 796.533786][T19467] ret_from_fork+0x45/0x80 [ 796.542747][T19467] ret_from_fork_asm+0x1a/0x30 [ 796.769858][T19530] FAULT_INJECTION: forcing a failure. [ 796.769858][T19530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.804482][T19530] CPU: 0 UID: 0 PID: 19530 Comm: syz.1.3048 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 796.804516][T19530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 796.804529][T19530] Call Trace: [ 796.804536][T19530] [ 796.804546][T19530] dump_stack_lvl+0x16c/0x1f0 [ 796.804579][T19530] should_fail_ex+0x50a/0x650 [ 796.804611][T19530] ? __pfx___might_resched+0x10/0x10 [ 796.804649][T19530] should_fail_alloc_page+0xe7/0x130 [ 796.804674][T19530] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 796.804709][T19530] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 796.804747][T19530] ? hlock_class+0x4e/0x130 [ 796.804772][T19530] ? hlock_class+0x4e/0x130 [ 796.804800][T19530] ? hlock_class+0x4e/0x130 [ 796.804823][T19530] ? __lock_acquire+0xcc5/0x3c40 [ 796.804854][T19530] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 796.804907][T19530] ? __pfx___lock_acquire+0x10/0x10 [ 796.804944][T19530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 796.804981][T19530] ? policy_nodemask+0xea/0x4e0 [ 796.805007][T19530] alloc_pages_mpol+0x1fc/0x540 [ 796.805031][T19530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 796.805057][T19530] ? xas_load+0x49/0x5b0 [ 796.805084][T19530] ? filemap_get_entry+0xd0/0x3c0 [ 796.805118][T19530] folio_alloc_noprof+0x20/0x2d0 [ 796.805143][T19530] filemap_alloc_folio_noprof+0x39b/0x470 [ 796.805170][T19530] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 796.805197][T19530] ? __mark_inode_dirty+0x622/0xe50 [ 796.805225][T19530] __filemap_get_folio+0x5e9/0xbd0 [ 796.805261][T19530] iomap_write_begin+0x693/0x1660 [ 796.805286][T19530] ? __mark_inode_dirty+0x622/0xe50 [ 796.805315][T19530] ? mark_buffer_dirty+0x397/0x420 [ 796.805349][T19530] ? __pfx_iomap_write_begin+0x10/0x10 [ 796.805373][T19530] ? fault_in_readable+0x1a7/0x200 [ 796.805403][T19530] ? __pfx_fault_in_readable+0x10/0x10 [ 796.805433][T19530] ? I_BDEV+0xd/0x20 [ 796.805454][T19530] ? inode_to_bdi+0x9e/0x160 [ 796.805491][T19530] iomap_file_buffered_write+0x419/0xc70 [ 796.805531][T19530] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 796.805558][T19530] ? find_held_lock+0x2d/0x110 [ 796.805582][T19530] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 796.805632][T19530] ? preempt_count_add+0x76/0x150 [ 796.805660][T19530] ? mnt_put_write_access_file+0xc1/0xf0 [ 796.805695][T19530] blkdev_write_iter+0x574/0xdd0 [ 796.805731][T19530] vfs_write+0x5ae/0x1150 [ 796.805762][T19530] ? __pfx_blkdev_write_iter+0x10/0x10 [ 796.805796][T19530] ? __pfx_vfs_write+0x10/0x10 [ 796.805828][T19530] ? __fget_files+0x40/0x3a0 [ 796.805876][T19530] ksys_write+0x12b/0x250 [ 796.805912][T19530] ? __pfx_ksys_write+0x10/0x10 [ 796.805951][T19530] do_syscall_64+0xcd/0x250 [ 796.805984][T19530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.806017][T19530] RIP: 0033:0x7fe44b78d169 [ 796.806036][T19530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.806058][T19530] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.806080][T19530] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 796.806097][T19530] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 796.806112][T19530] RBP: 00007fe44c50b090 R08: 0000000000000000 R09: 0000000000000000 [ 796.806126][T19530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.806140][T19530] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 796.806171][T19530] [ 796.877923][T19532] FAULT_INJECTION: forcing a failure. [ 796.877923][T19532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.243313][T19532] CPU: 1 UID: 0 PID: 19532 Comm: syz.3.3050 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 797.243340][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 797.243354][T19532] Call Trace: [ 797.243362][T19532] [ 797.243371][T19532] dump_stack_lvl+0x16c/0x1f0 [ 797.243404][T19532] should_fail_ex+0x50a/0x650 [ 797.243437][T19532] ? page_copy_sane+0xcd/0x2d0 [ 797.243460][T19532] copy_page_from_iter_atomic+0x39f/0x1920 [ 797.243491][T19532] ? mark_buffer_dirty+0x131/0x420 [ 797.243522][T19532] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 797.243544][T19532] ? fault_in_readable+0x1a7/0x200 [ 797.243572][T19532] ? __pfx_fault_in_readable+0x10/0x10 [ 797.243608][T19532] ? I_BDEV+0xd/0x20 [ 797.243629][T19532] ? inode_to_bdi+0x9e/0x160 [ 797.243665][T19532] iomap_file_buffered_write+0x633/0xc70 [ 797.243705][T19532] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 797.243732][T19532] ? find_held_lock+0x2d/0x110 [ 797.243757][T19532] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 797.243804][T19532] ? preempt_count_add+0x76/0x150 [ 797.243831][T19532] ? mnt_put_write_access_file+0xc1/0xf0 [ 797.243863][T19532] blkdev_write_iter+0x574/0xdd0 [ 797.243895][T19532] vfs_write+0x5ae/0x1150 [ 797.243927][T19532] ? __pfx_blkdev_write_iter+0x10/0x10 [ 797.243961][T19532] ? __pfx_vfs_write+0x10/0x10 [ 797.243990][T19532] ? do_futex+0x123/0x350 [ 797.244020][T19532] ? __fget_files+0x40/0x3a0 [ 797.244062][T19532] ksys_write+0x12b/0x250 [ 797.244091][T19532] ? __pfx_ksys_write+0x10/0x10 [ 797.244128][T19532] do_syscall_64+0xcd/0x250 [ 797.244160][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.244191][T19532] RIP: 0033:0x7f9b6418d169 [ 797.244210][T19532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.244234][T19532] RSP: 002b:00007f9b65056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.244257][T19532] RAX: ffffffffffffffda RBX: 00007f9b643a5fa0 RCX: 00007f9b6418d169 [ 797.244274][T19532] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 797.244290][T19532] RBP: 00007f9b6420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 797.244304][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.244319][T19532] R13: 0000000000000000 R14: 00007f9b643a5fa0 R15: 00007ffc43961968 [ 797.244347][T19532] [ 797.536246][T19540] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 798.076292][T19555] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:27: corrupted in-inode xattr: bad magic number in in-inode xattr [ 798.711248][T19561] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 799.544342][T19578] synth uevent: /module/qat_c62x: unknown uevent action string [ 799.595569][T19577] synth uevent: /module/qat_c62x: unknown uevent action string [ 799.705892][T19581] FAULT_INJECTION: forcing a failure. [ 799.705892][T19581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.751679][T19581] CPU: 0 UID: 0 PID: 19581 Comm: syz.2.3063 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 799.751718][T19581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 799.751733][T19581] Call Trace: [ 799.751742][T19581] [ 799.751753][T19581] dump_stack_lvl+0x16c/0x1f0 [ 799.751792][T19581] should_fail_ex+0x50a/0x650 [ 799.751831][T19581] ? __pfx___might_resched+0x10/0x10 [ 799.751872][T19581] should_fail_alloc_page+0xe7/0x130 [ 799.751899][T19581] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 799.751938][T19581] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 799.751981][T19581] ? hlock_class+0x4e/0x130 [ 799.752010][T19581] ? hlock_class+0x4e/0x130 [ 799.752034][T19581] ? __lock_acquire+0xcc5/0x3c40 [ 799.752067][T19581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 799.752115][T19581] ? __pfx___lock_acquire+0x10/0x10 [ 799.752155][T19581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.752200][T19581] ? policy_nodemask+0xea/0x4e0 [ 799.752227][T19581] alloc_pages_mpol+0x1fc/0x540 [ 799.752254][T19581] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 799.752281][T19581] ? xas_load+0x49/0x5b0 [ 799.752312][T19581] ? filemap_get_entry+0xd0/0x3c0 [ 799.752349][T19581] folio_alloc_noprof+0x20/0x2d0 [ 799.752378][T19581] filemap_alloc_folio_noprof+0x39b/0x470 [ 799.752407][T19581] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 799.752434][T19581] ? find_held_lock+0x2d/0x110 [ 799.752465][T19581] __filemap_get_folio+0x5e9/0xbd0 [ 799.752504][T19581] iomap_write_begin+0x693/0x1660 [ 799.752531][T19581] ? __mark_inode_dirty+0x2a5/0xe50 [ 799.752562][T19581] ? mark_buffer_dirty+0x397/0x420 [ 799.752598][T19581] ? __pfx_iomap_write_begin+0x10/0x10 [ 799.752623][T19581] ? fault_in_readable+0x1a7/0x200 [ 799.752655][T19581] ? __pfx_fault_in_readable+0x10/0x10 [ 799.752686][T19581] ? I_BDEV+0xd/0x20 [ 799.752711][T19581] ? inode_to_bdi+0x9e/0x160 [ 799.752749][T19581] iomap_file_buffered_write+0x419/0xc70 [ 799.752790][T19581] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 799.752818][T19581] ? find_held_lock+0x2d/0x110 [ 799.752843][T19581] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 799.752893][T19581] ? preempt_count_add+0x76/0x150 [ 799.752924][T19581] ? mnt_put_write_access_file+0xc1/0xf0 [ 799.752961][T19581] blkdev_write_iter+0x574/0xdd0 [ 799.752998][T19581] vfs_write+0x5ae/0x1150 [ 799.753031][T19581] ? __pfx_blkdev_write_iter+0x10/0x10 [ 799.753067][T19581] ? __pfx_vfs_write+0x10/0x10 [ 799.753096][T19581] ? do_futex+0x123/0x350 [ 799.753127][T19581] ? __fget_files+0x40/0x3a0 [ 799.753175][T19581] ksys_write+0x12b/0x250 [ 799.753212][T19581] ? __pfx_ksys_write+0x10/0x10 [ 799.753254][T19581] do_syscall_64+0xcd/0x250 [ 799.753289][T19581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.753323][T19581] RIP: 0033:0x7f92d718d169 [ 799.753343][T19581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.753367][T19581] RSP: 002b:00007f92d7f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.753390][T19581] RAX: ffffffffffffffda RBX: 00007f92d73a5fa0 RCX: 00007f92d718d169 [ 799.753407][T19581] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 799.753422][T19581] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 799.753438][T19581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.753453][T19581] R13: 0000000000000000 R14: 00007f92d73a5fa0 R15: 00007ffdbe1313f8 [ 799.753485][T19581] [ 800.198321][ T5145] Bluetooth: hci1: unexpected event 0x06 length: 11 > 3 [ 800.198415][ T5145] Bluetooth: hci1: unexpected event 0x06 length: 11 > 3 [ 800.287980][T19583] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 800.290918][T19585] FAULT_INJECTION: forcing a failure. [ 800.290918][T19585] name fail_usercopy, interval 1, probability 0, space 0, times 0 can't run '/sbi[ 800.329581][T19585] CPU: 1 UID: 0 PID: 19585 Comm: syz.1.3065 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 800.329613][T19585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 800.329628][T19585] Call Trace: [ 800.329637][T19585] [ 800.329647][T19585] dump_stack_lvl+0x16c/0x1f0 [ 800.329684][T19585] should_fail_ex+0x50a/0x650 [ 800.329720][T19585] ? page_copy_sane+0xcd/0x2d0 [ 800.329743][T19585] copy_page_from_iter_atomic+0x39f/0x1920 [ 800.329776][T19585] ? mark_buffer_dirty+0x131/0x420 [ 800.329810][T19585] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 800.329835][T19585] ? fault_in_readable+0x1a7/0x200 [ 800.329864][T19585] ? __pfx_fault_in_readable+0x10/0x10 [ 800.329892][T19585] ? I_BDEV+0xd/0x20 [ 800.329913][T19585] ? inode_to_bdi+0x9e/0x160 [ 800.329945][T19585] iomap_file_buffered_write+0x633/0xc70 [ 800.329980][T19585] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 800.330003][T19585] ? find_held_lock+0x2d/0x110 [ 800.330026][T19585] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 800.330073][T19585] ? preempt_count_add+0x76/0x150 [ 800.330100][T19585] ? mnt_put_write_access_file+0xc1/0xf0 [ 800.330132][T19585] blkdev_write_iter+0x574/0xdd0 [ 800.330166][T19585] vfs_write+0x5ae/0x1150 [ 800.330195][T19585] ? __pfx_blkdev_write_iter+0x10/0x10 [ 800.330227][T19585] ? __pfx_vfs_write+0x10/0x10 [ 800.330252][T19585] ? do_futex+0x123/0x350 [ 800.330279][T19585] ? __fget_files+0x40/0x3a0 [ 800.330322][T19585] ksys_write+0x12b/0x250 [ 800.330352][T19585] ? __pfx_ksys_write+0x10/0x10 [ 800.330401][T19585] do_syscall_64+0xcd/0x250 [ 800.330434][T19585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.330467][T19585] RIP: 0033:0x7fe44b78d169 [ 800.330486][T19585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.330509][T19585] RSP: 002b:00007fe44c50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.330531][T19585] RAX: ffffffffffffffda RBX: 00007fe44b9a5fa0 RCX: 00007fe44b78d169 [ 800.330544][T19585] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 800.330558][T19585] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 800.330571][T19585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.330586][T19585] R13: 0000000000000000 R14: 00007fe44b9a5fa0 R15: 00007ffff481a938 [ 800.330616][T19585] [ 801.035582][T19598] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 801.140604][T19595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'. can't run '/sbi[ 801.347347][T19611] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 801.468324][T19615] FAULT_INJECTION: forcing a failure. [ 801.468324][T19615] name failslab, interval 1, probability 0, space 0, times 0 [ 801.468361][T19615] CPU: 0 UID: 0 PID: 19615 Comm: syz.4.3071 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 can't run '/sbi[ 801.468388][T19615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.468401][T19615] Call Trace: [ 801.468408][T19615] [ 801.468418][T19615] dump_stack_lvl+0x16c/0x1f0 [ 801.468451][T19615] should_fail_ex+0x50a/0x650 [ 801.468484][T19615] ? fs_reclaim_acquire+0xae/0x150 [ 801.468514][T19615] should_failslab+0xc2/0x120 [ 801.468536][T19615] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 801.468566][T19615] ? alloc_empty_file+0x73/0x1e0 [ 801.468594][T19615] alloc_empty_file+0x73/0x1e0 [ 801.468619][T19615] path_openat+0xe1/0x2d80 [ 801.468648][T19615] ? hlock_class+0x4e/0x130 [ 801.468670][T19615] ? __lock_acquire+0x15a9/0x3c40 [ 801.468708][T19615] ? __pfx_path_openat+0x10/0x10 [ 801.468739][T19615] ? __pfx___lock_acquire+0x10/0x10 [ 801.468767][T19615] ? lock_acquire.part.0+0x11b/0x380 [ 801.468797][T19615] ? find_held_lock+0x2d/0x110 [ 801.468825][T19615] do_filp_open+0x20c/0x470 [ 801.468855][T19615] ? __pfx_do_filp_open+0x10/0x10 [ 801.468882][T19615] ? find_held_lock+0x2d/0x110 [ 801.468924][T19615] ? alloc_fd+0x41f/0x760 [ 801.468961][T19615] do_sys_openat2+0x17a/0x1e0 [ 801.468985][T19615] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.469012][T19615] ? __pfx___might_resched+0x10/0x10 [ 801.469053][T19615] __x64_sys_openat+0x175/0x210 [ 801.469079][T19615] ? __pfx___x64_sys_openat+0x10/0x10 [ 801.469116][T19615] do_syscall_64+0xcd/0x250 [ 801.469149][T19615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.469180][T19615] RIP: 0033:0x7fc436f8bad0 [ 801.469198][T19615] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 801.469220][T19615] RSP: 002b:00007fc437ed3fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 801.469249][T19615] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc436f8bad0 [ 801.469265][T19615] RDX: 0000000000000002 RSI: 00007fc43700e585 RDI: 00000000ffffff9c [ 801.469285][T19615] RBP: 00007fc43700e585 R08: 0000000000000000 R09: 00007fc437ed5000 [ 801.469300][T19615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 801.469315][T19615] R13: 0000000000000000 R14: 00007fc4371a5fa0 R15: 00007fff7e11de98 [ 801.469346][T19615] [ 802.352653][T19624] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 802.910597][T19632] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 803.365339][T19641] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 803.524917][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 803.569047][T19649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3080'. [ 803.577188][T19649] FAULT_INJECTION: forcing a failure. [ 803.577188][T19649] name failslab, interval 1, probability 0, space 0, times 0 [ 803.577240][T19649] CPU: 1 UID: 0 PID: 19649 Comm: syz.1.3080 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 803.577271][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 803.577286][T19649] Call Trace: [ 803.577294][T19649] [ 803.577304][T19649] dump_stack_lvl+0x16c/0x1f0 [ 803.577341][T19649] should_fail_ex+0x50a/0x650 [ 803.577378][T19649] ? fs_reclaim_acquire+0xae/0x150 [ 803.577414][T19649] should_failslab+0xc2/0x120 [ 803.577439][T19649] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 803.577475][T19649] ? __xlate_proc_name+0x173/0x210 [ 803.577511][T19649] ? __proc_create+0x2c0/0x8b0 [ 803.577552][T19649] __proc_create+0x2c0/0x8b0 [ 803.577589][T19649] ? __pfx___proc_create+0x10/0x10 [ 803.577628][T19649] ? proc_register+0xa0/0x5f0 [ 803.577654][T19649] ? _raw_write_unlock+0x28/0x50 [ 803.577688][T19649] proc_create_reg+0x7d/0x180 [ 803.577715][T19649] proc_create_data+0x86/0x190 [ 803.577739][T19649] ? __pfx_proc_create_data+0x10/0x10 [ 803.577774][T19649] cache_register_net+0x1e0/0x5e0 [ 803.577804][T19649] nfsd_export_init+0x16e/0x250 [ 803.577837][T19649] ? __pfx_nfsd_net_init+0x10/0x10 [ 803.577869][T19649] nfsd_net_init+0x33/0x3a0 [ 803.577902][T19649] ? __pfx_nfsd_net_init+0x10/0x10 [ 803.577933][T19649] ops_init+0x1df/0x5f0 [ 803.577973][T19649] setup_net+0x21f/0x860 [ 803.578011][T19649] ? __pfx_setup_net+0x10/0x10 [ 803.578044][T19649] ? down_read_killable+0xcc/0x380 [ 803.578084][T19649] ? __pfx_down_read_killable+0x10/0x10 [ 803.578121][T19649] ? __raw_spin_lock_init+0x3a/0x110 [ 803.578149][T19649] ? debug_mutex_init+0x37/0x70 [ 803.578179][T19649] copy_net_ns+0x2a6/0x5f0 [ 803.578208][T19649] create_new_namespaces+0x3ea/0xad0 [ 803.578254][T19649] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 803.578294][T19649] ksys_unshare+0x45d/0xa40 [ 803.578321][T19649] ? __pfx_ksys_unshare+0x10/0x10 [ 803.578345][T19649] ? xfd_validate_state+0x5d/0x180 [ 803.578390][T19649] __x64_sys_unshare+0x31/0x40 [ 803.578416][T19649] do_syscall_64+0xcd/0x250 [ 803.578450][T19649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.578483][T19649] RIP: 0033:0x7fe44b78d169 [ 803.578503][T19649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.578526][T19649] RSP: 002b:00007fe4495d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 803.578550][T19649] RAX: ffffffffffffffda RBX: 00007fe44b9a6160 RCX: 00007fe44b78d169 [ 803.578567][T19649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 803.578583][T19649] RBP: 00007fe44b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 803.578599][T19649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.578615][T19649] R13: 0000000000000000 R14: 00007fe44b9a6160 R15: 00007ffff481a938 [ 803.578649][T19649] [ 803.794280][ T8727] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 804.290451][T19659] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 804.403939][T19660] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 804.557218][T19667] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:27: corrupted in-inode xattr: bad magic number in in-inode xattr [ 804.875661][T19675] FAULT_INJECTION: forcing a failure. [ 804.875661][T19675] name failslab, interval 1, probability 0, space 0, times 0 [ 804.941575][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz.2.3087 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 804.941614][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 804.941628][T19675] Call Trace: [ 804.941645][T19675] [ 804.941656][T19675] dump_stack_lvl+0x16c/0x1f0 [ 804.941696][T19675] should_fail_ex+0x50a/0x650 [ 804.941735][T19675] ? fs_reclaim_acquire+0xae/0x150 [ 804.941806][T19675] ? percpu_ref_init+0xd9/0x400 [ 804.941840][T19675] should_failslab+0xc2/0x120 [ 804.941866][T19675] __kmalloc_cache_noprof+0x68/0x410 [ 804.941903][T19675] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 804.941935][T19675] percpu_ref_init+0xd9/0x400 [ 804.941974][T19675] io_uring_setup+0x3b4/0x2200 [ 804.942006][T19675] ? __pfx_io_uring_setup+0x10/0x10 [ 804.942031][T19675] ? do_futex+0x123/0x350 [ 804.942061][T19675] ? __pfx_do_futex+0x10/0x10 [ 804.942108][T19675] ? rcu_is_watching+0x12/0xc0 [ 804.942142][T19675] __x64_sys_io_uring_setup+0x98/0x140 [ 804.942172][T19675] do_syscall_64+0xcd/0x250 [ 804.942205][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.942237][T19675] RIP: 0033:0x7f92d718d169 [ 804.942257][T19675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.942281][T19675] RSP: 002b:00007f92d7f0d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 804.942304][T19675] RAX: ffffffffffffffda RBX: 00007f92d73a5fa0 RCX: 00007f92d718d169 [ 804.942322][T19675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000048 [ 804.942336][T19675] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 804.942352][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.942367][T19675] R13: 0000000000000000 R14: 00007f92d73a5fa0 R15: 00007ffdbe1313f8 [ 804.942396][T19675] [ 804.949058][T19680] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 805.360764][T19683] FAULT_INJECTION: forcing a failure. [ 805.360764][T19683] name fail_futex, interval 1, probability 0, space 0, times 0 [ 805.540690][T19689] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 805.580525][T19683] CPU: 1 UID: 0 PID: 19683 Comm: syz.4.3086 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 805.580562][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 805.580578][T19683] Call Trace: [ 805.580587][T19683] [ 805.580598][T19683] dump_stack_lvl+0x16c/0x1f0 [ 805.580637][T19683] should_fail_ex+0x50a/0x650 [ 805.580680][T19683] get_futex_key+0x4a3/0x1000 [ 805.580714][T19683] ? __pfx_get_futex_key+0x10/0x10 [ 805.580740][T19683] ? sock_write_iter+0x326/0x5b0 [ 805.580779][T19683] ? __pfx_sock_write_iter+0x10/0x10 [ 805.580816][T19683] futex_wake+0xe8/0x4e0 [ 805.580852][T19683] ? bpf_lsm_file_permission+0x9/0x10 [ 805.580892][T19683] ? __pfx_futex_wake+0x10/0x10 [ 805.580930][T19683] ? vfs_write+0x306/0x1150 [ 805.580965][T19683] ? __pfx_sock_write_iter+0x10/0x10 [ 805.580998][T19683] do_futex+0x1e5/0x350 [ 805.581028][T19683] ? __pfx_do_futex+0x10/0x10 [ 805.581055][T19683] ? __fget_files+0x40/0x3a0 can't run '/sbi[ 805.581098][T19683] __x64_sys_futex+0x1e1/0x4c0 [ 805.581130][T19683] ? fput+0x67/0x440 [ 805.581153][T19683] ? __pfx___x64_sys_futex+0x10/0x10 [ 805.581183][T19683] ? ksys_write+0x1ba/0x250 [ 805.581215][T19683] ? __pfx_ksys_write+0x10/0x10 [ 805.581257][T19683] do_syscall_64+0xcd/0x250 [ 805.581292][T19683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.581326][T19683] RIP: 0033:0x7fc436f8d169 [ 805.581347][T19683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.581370][T19683] RSP: 002b:00007fc437e920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 805.581394][T19683] RAX: ffffffffffffffda RBX: 00007fc4371a6168 RCX: 00007fc436f8d169 [ 805.581411][T19683] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc4371a616c [ 805.581428][T19683] RBP: 00007fc4371a6160 R08: 00007fc437ed5000 R09: 0000000000000000 [ 805.581444][T19683] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc4371a616c [ 805.581462][T19683] R13: 0000000000000000 R14: 00007fff7e11ddb0 R15: 00007fff7e11de98 [ 805.581496][T19683] [ 805.904075][T19692] zram: Added device: zram1 [ 806.869209][T19723] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 806.964764][T19729] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 807.004036][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 807.427029][T19735] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 807.696080][T19746] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 807.921948][T19752] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 807.922575][T19750] FAULT_INJECTION: forcing a failure. [ 807.922575][T19750] name failslab, interval 1, probability 0, space 0, times 0 [ 807.971403][T19750] CPU: 1 UID: 0 PID: 19750 Comm: syz.2.3102 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 807.971437][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 807.971451][T19750] Call Trace: [ 807.971459][T19750] [ 807.971469][T19750] dump_stack_lvl+0x16c/0x1f0 [ 807.971506][T19750] should_fail_ex+0x50a/0x650 [ 807.971540][T19750] ? fs_reclaim_acquire+0xae/0x150 [ 807.971574][T19750] should_failslab+0xc2/0x120 [ 807.971597][T19750] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 807.971632][T19750] ? security_inode_alloc+0x3b/0x2b0 [ 807.971664][T19750] security_inode_alloc+0x3b/0x2b0 [ 807.971692][T19750] inode_init_always_gfp+0xce4/0x1030 [ 807.971731][T19750] alloc_inode+0x82/0x230 [ 807.971754][T19750] new_inode+0x22/0x210 [ 807.971774][T19750] ? rcu_is_watching+0x12/0xc0 [ 807.971803][T19750] bdev_alloc+0x2b/0x420 [ 807.971835][T19750] __alloc_disk_node+0x10c/0x610 [ 807.971862][T19750] ? blk_alloc_queue+0x1a3/0x700 [ 807.971892][T19750] __blk_alloc_disk+0xd8/0x170 [ 807.971921][T19750] ? __pfx___blk_alloc_disk+0x10/0x10 [ 807.971973][T19750] ? __pfx_idr_alloc+0x10/0x10 [ 807.972004][T19750] ? __raw_spin_lock_init+0x3a/0x110 [ 807.972033][T19750] ? __pfx_hot_add_show+0x10/0x10 [ 807.972066][T19750] zram_add+0x160/0x6b0 [ 807.972098][T19750] ? __pfx_zram_add+0x10/0x10 [ 807.972151][T19750] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 807.972185][T19750] ? rcu_is_watching+0x12/0xc0 [ 807.972216][T19750] ? __pfx_hot_add_show+0x10/0x10 [ 807.972248][T19750] hot_add_show+0x21/0x80 [ 807.972279][T19750] class_attr_show+0x6f/0xa0 [ 807.972318][T19750] ? __pfx_class_attr_show+0x10/0x10 [ 807.972345][T19750] sysfs_kf_seq_show+0x23e/0x410 [ 807.972380][T19750] seq_read_iter+0x4f4/0x12b0 [ 807.972427][T19750] kernfs_fop_read_iter+0x414/0x580 [ 807.972452][T19750] ? rw_verify_area+0xcf/0x680 [ 807.972485][T19750] vfs_read+0x886/0xbf0 [ 807.972522][T19750] ? __pfx_vfs_read+0x10/0x10 [ 807.972550][T19750] ? do_futex+0x123/0x350 [ 807.972595][T19750] ? __x64_sys_futex+0x1e1/0x4c0 [ 807.972622][T19750] ? __x64_sys_futex+0x1ea/0x4c0 [ 807.972657][T19750] ksys_read+0x12b/0x250 [ 807.972687][T19750] ? __pfx_ksys_read+0x10/0x10 [ 807.972730][T19750] do_syscall_64+0xcd/0x250 [ 807.972765][T19750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.972797][T19750] RIP: 0033:0x7f92d718d169 [ 807.972816][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.972838][T19750] RSP: 002b:00007f92d7f0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 807.972861][T19750] RAX: ffffffffffffffda RBX: 00007f92d73a5fa0 RCX: 00007f92d718d169 [ 807.972878][T19750] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000009 [ 807.972893][T19750] RBP: 00007f92d720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 807.972907][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.972922][T19750] R13: 0000000000000000 R14: 00007f92d73a5fa0 R15: 00007ffdbe1313f8 [ 807.972957][T19750] can't run '/sbi[ 808.355945][T19750] zram: Error allocating disk structure for device 2 [ 808.651161][T19764] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 808.678298][T19766] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:5: corrupted in-inode xattr: bad magic number in in-inode xattr [ 809.104190][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.113871][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.350311][T19792] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 809.442264][T19800] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 809.522725][T19802] sp0: Synchronizing with TNC [ 809.843027][T19811] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:27: corrupted in-inode xattr: bad magic number in in-inode xattr [ 809.938230][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 809.953826][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 810.003648][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 810.016290][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 810.025496][ T8] rtc rtc0: __rtc_set_alarm: err=-22 can't run '/sbi[ 810.879286][T19803] Process accounting paused can't run '/sbi[ 811.452309][T19820] Invalid ELF header magic: != ELF [ 811.701083][T19820] Invalid ELF header magic: != ELF [ 811.754621][ T29] audit: type=1326 audit(6036336282.689:32): auid=4294967295 uid=1 gid=0 ses=4294967295 subj=unconfined pid=19844 comm="syz.1.3123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe44b78d169 code=0x0 [ 811.929403][ T29] audit: type=1800 audit(6036336282.859:33): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3125" name="dbroot" dev="configfs" ino=86789 res=0 errno=0 [ 812.114513][T19859] EXT4-fs error: 3 callbacks suppressed [ 812.114531][T19859] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:27: corrupted in-inode xattr: bad magic number in in-inode xattr [ 812.431228][T19864] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 812.487767][T19865] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 812.544742][T19865] udevd[19865]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 812.811458][ T5145] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 812.854580][T19872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3129'. [ 813.173191][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3129'. [ 813.614309][T19887] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 814.061147][T19898] netlink: 222 bytes leftover after parsing attributes in process `syz.1.3134'. [ 814.134755][T19898] netlink: 222 bytes leftover after parsing attributes in process `syz.1.3134'. [ 814.759706][T19909] nbd2: detected capacity change from 0 to 68719476736 [ 814.779293][T19929] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 814.779347][T19925] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 815.006717][T18369] block nbd2: Send control failed (result -22) [ 815.045846][T18369] block nbd2: Request send failed, requeueing [ 815.073745][ T41] block nbd2: Dead connection, failed to find a fallback [ 815.074412][ T5145] block nbd2: Receive control failed (result -32) [ 815.087762][ T41] block nbd2: shutting down sockets [ 815.097123][ T41] blk_print_req_error: 24 callbacks suppressed [ 815.097140][ T41] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.115799][ T41] buffer_io_error: 23 callbacks suppressed [ 815.115815][ T41] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.137134][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.153646][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.173383][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.187575][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.197488][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.215296][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.273800][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.317399][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.343896][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.383630][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.404379][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.433666][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.443131][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.474079][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.483440][T18369] ldm_validate_partition_table(): Disk read failed. [ 815.527142][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.573710][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.604334][T18369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.634817][T19943] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 815.643770][T18369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 815.683229][T19944] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:36: corrupted in-inode xattr: bad magic number in in-inode xattr [ 815.737315][T18369] Dev nbd2: unable to read RDB block 0 [ 815.756154][T18369] nbd2: unable to read partition table [ 815.778575][T18369] ldm_validate_partition_table(): Disk read failed. [ 815.807465][T18369] Dev nbd2: unable to read RDB block 0 [ 815.843258][ T5145] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 815.857245][T18369] nbd2: unable to read partition table [ 815.916132][T18369] [ 815.918954][T18369] ====================================================== [ 815.918965][T18369] WARNING: possible circular locking dependency detected [ 815.918975][T18369] 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 Not tainted [ 815.918989][T18369] ------------------------------------------------------ [ 815.918997][T18369] udevd/18369 is trying to acquire lock: [ 815.919009][T18369] ffff8880261d00a8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __submit_bio+0x3d1/0x690 [ 815.971342][T18369] [ 815.971342][T18369] but task is already holding lock: [ 815.980158][T18369] ffff88802393d9c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 815.993101][T18369] [ 815.993101][T18369] which lock already depends on the new lock. [ 815.993101][T18369] [ 816.005556][T18369] [ 816.005556][T18369] the existing dependency chain (in reverse order) is: [ 816.016353][T18369] [ 816.016353][T18369] -> #6 (mapping.invalidate_lock#2){++++}-{4:4}: [ 816.026569][T18369] down_read+0x9a/0x330 [ 816.032185][T18369] filemap_fault+0x2e7/0x2ca0 [ 816.038409][T18369] __do_fault+0x10a/0x490 [ 816.044214][T18369] do_pte_missing+0xecf/0x3e10 [ 816.050545][T18369] __handle_mm_fault+0x1166/0x2c60 [ 816.057300][T18369] handle_mm_fault+0x3fa/0xaa0 [ 816.063633][T18369] __get_user_pages+0x773/0x36f0 [ 816.070168][T18369] __gup_longterm_locked+0x212/0x1870 [ 816.077242][T18369] gup_fast_fallback+0x1802/0x2690 [ 816.083997][T18369] pin_user_pages_fast+0xa8/0x100 [ 816.090646][T18369] iov_iter_extract_pages+0x3a5/0x2010 [ 816.097820][T18369] bio_iov_iter_get_pages+0x37c/0x1100 [ 816.104986][T18369] blkdev_direct_IO+0x110e/0x1c40 [ 816.111646][T18369] blkdev_write_iter+0x6f9/0xdd0 [ 816.118190][T18369] vfs_write+0x5ae/0x1150 [ 816.124004][T18369] ksys_write+0x12b/0x250 [ 816.129822][T18369] do_syscall_64+0xcd/0x250 [ 816.135848][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.143545][T18369] [ 816.143545][T18369] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 816.152603][T18369] __might_fault+0x11b/0x190 [ 816.158726][T18369] _copy_from_iter+0x1c4/0x1560 [ 816.165156][T18369] tcp_sendmsg_locked+0x1979/0x37c0 [ 816.172002][T18369] tcp_sendmsg+0x2e/0x50 [ 816.177700][T18369] inet_sendmsg+0xb9/0x140 [ 816.183616][T18369] sock_write_iter+0x4ac/0x5b0 [ 816.189937][T18369] vfs_write+0x5ae/0x1150 [ 816.195743][T18369] ksys_write+0x207/0x250 [ 816.201554][T18369] do_syscall_64+0xcd/0x250 [ 816.207573][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.215257][T18369] [ 816.215257][T18369] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 816.224412][T18369] lock_sock_nested+0x3a/0xf0 [ 816.230643][T18369] inet_shutdown+0x67/0x440 [ 816.236658][T18369] nbd_mark_nsock_dead+0xae/0x5d0 [ 816.243292][T18369] sock_shutdown+0x17c/0x280 [ 816.249401][T18369] nbd_config_put+0x1e6/0x750 [ 816.255615][T18369] nbd_genl_connect+0x12d5/0x1c00 [ 816.262246][T18369] genl_family_rcv_msg_doit+0x202/0x2f0 [ 816.269512][T18369] genl_rcv_msg+0x565/0x800 [ 816.275526][T18369] netlink_rcv_skb+0x16b/0x440 [ 816.281852][T18369] genl_rcv+0x28/0x40 [ 816.287239][T18369] netlink_unicast+0x53c/0x7f0 [ 816.293568][T18369] netlink_sendmsg+0x8b8/0xd70 [ 816.299892][T18369] ____sys_sendmsg+0xaaf/0xc90 [ 816.306214][T18369] ___sys_sendmsg+0x135/0x1e0 [ 816.312433][T18369] __sys_sendmsg+0x16e/0x220 [ 816.318556][T18369] do_syscall_64+0xcd/0x250 [ 816.324573][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.332261][T18369] [ 816.332261][T18369] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 816.341418][T18369] __mutex_lock+0x19b/0xb10 [ 816.347442][T18369] nbd_queue_rq+0x424/0x1220 [ 816.353559][T18369] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 816.360822][T18369] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 816.369018][T18369] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 816.376795][T18369] blk_mq_run_hw_queue+0x239/0x670 [ 816.383538][T18369] blk_mq_flush_plug_list+0x673/0x1c60 [ 816.390692][T18369] __blk_flush_plug+0x2c5/0x4b0 [ 816.397119][T18369] __submit_bio+0x547/0x690 [ 816.403124][T18369] submit_bio_noacct_nocheck+0x698/0xd70 [ 816.410489][T18369] submit_bio_noacct+0x50d/0x1ec0 [ 816.417126][T18369] block_read_full_folio+0x812/0xa50 [ 816.424088][T18369] filemap_read_folio+0xc6/0x2a0 [ 816.430623][T18369] do_read_cache_folio+0x263/0x5c0 [ 816.437367][T18369] read_part_sector+0xd4/0x310 [ 816.443693][T18369] adfspart_check_ICS+0x94/0x940 [ 816.450228][T18369] bdev_disk_changed+0x71f/0x1520 [ 816.456864][T18369] blkdev_get_whole+0x187/0x290 [ 816.463289][T18369] bdev_open+0x2c7/0xe20 [ 816.468983][T18369] blkdev_open+0x27b/0x3f0 [ 816.474888][T18369] do_dentry_open+0x735/0x1c40 [ 816.481212][T18369] vfs_open+0x82/0x3f0 [ 816.486697][T18369] path_openat+0x1e88/0x2d80 [ 816.492813][T18369] do_filp_open+0x20c/0x470 [ 816.498827][T18369] do_sys_openat2+0x17a/0x1e0 [ 816.505040][T18369] __x64_sys_openat+0x175/0x210 [ 816.511463][T18369] do_syscall_64+0xcd/0x250 [ 816.517480][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.525163][T18369] [ 816.525163][T18369] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 816.533794][T18369] __mutex_lock+0x19b/0xb10 [ 816.539808][T18369] nbd_queue_rq+0xbe/0x1220 [ 816.545820][T18369] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 816.553081][T18369] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 816.561275][T18369] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 816.569053][T18369] blk_mq_run_hw_queue+0x239/0x670 [ 816.575787][T18369] blk_mq_flush_plug_list+0x673/0x1c60 [ 816.582943][T18369] __blk_flush_plug+0x2c5/0x4b0 [ 816.589370][T18369] __submit_bio+0x547/0x690 [ 816.595377][T18369] submit_bio_noacct_nocheck+0x698/0xd70 [ 816.602745][T18369] submit_bio_noacct+0x50d/0x1ec0 [ 816.609377][T18369] block_read_full_folio+0x812/0xa50 [ 816.616334][T18369] filemap_read_folio+0xc6/0x2a0 [ 816.622868][T18369] do_read_cache_folio+0x263/0x5c0 [ 816.629611][T18369] read_part_sector+0xd4/0x310 [ 816.635938][T18369] adfspart_check_ICS+0x94/0x940 [ 816.642471][T18369] bdev_disk_changed+0x71f/0x1520 [ 816.649110][T18369] blkdev_get_whole+0x187/0x290 [ 816.655549][T18369] bdev_open+0x2c7/0xe20 [ 816.661244][T18369] blkdev_open+0x27b/0x3f0 [ 816.667152][T18369] do_dentry_open+0x735/0x1c40 [ 816.673477][T18369] vfs_open+0x82/0x3f0 [ 816.678962][T18369] path_openat+0x1e88/0x2d80 [ 816.685077][T18369] do_filp_open+0x20c/0x470 [ 816.691091][T18369] do_sys_openat2+0x17a/0x1e0 [ 816.697306][T18369] __x64_sys_openat+0x175/0x210 [ 816.703730][T18369] do_syscall_64+0xcd/0x250 [ 816.709744][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.717428][T18369] [ 816.717428][T18369] -> #1 (set->srcu){.+.+}-{0:0}: [ 816.725956][T18369] __synchronize_srcu+0xa9/0x2a0 [ 816.732496][T18369] blk_mq_update_nr_requests+0x288/0x670 [ 816.739866][T18369] queue_requests_store+0x161/0x210 [ 816.746714][T18369] queue_attr_store+0x370/0x510 [ 816.753140][T18369] sysfs_kf_write+0x117/0x170 [ 816.759355][T18369] kernfs_fop_write_iter+0x33d/0x500 [ 816.766300][T18369] vfs_write+0x5ae/0x1150 [ 816.772109][T18369] ksys_write+0x12b/0x250 [ 816.777911][T18369] do_syscall_64+0xcd/0x250 [ 816.783921][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.791614][T18369] [ 816.791614][T18369] -> #0 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 816.801938][T18369] __lock_acquire+0x249e/0x3c40 [ 816.808379][T18369] lock_acquire.part.0+0x11b/0x380 [ 816.815156][T18369] blk_mq_submit_bio+0x20f5/0x2610 [ 816.821902][T18369] __submit_bio+0x3d1/0x690 [ 816.827916][T18369] submit_bio_noacct_nocheck+0x698/0xd70 [ 816.835287][T18369] submit_bio_noacct+0x50d/0x1ec0 [ 816.841922][T18369] mpage_readahead+0x41d/0x590 [ 816.848243][T18369] read_pages+0x1a7/0xc60 [ 816.854043][T18369] page_cache_ra_unbounded+0x426/0x7d0 [ 816.861198][T18369] force_page_cache_ra+0x24b/0x340 [ 816.867936][T18369] page_cache_sync_ra+0x158/0xa30 [ 816.874574][T18369] filemap_get_pages+0xb62/0x1c30 [ 816.881210][T18369] filemap_read+0x3c5/0xe70 [ 816.887225][T18369] blkdev_read_iter+0x187/0x4b0 [ 816.893653][T18369] vfs_read+0x886/0xbf0 [ 816.899246][T18369] ksys_read+0x12b/0x250 [ 816.904942][T18369] do_syscall_64+0xcd/0x250 [ 816.910955][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.918640][T18369] [ 816.918640][T18369] other info that might help us debug this: [ 816.918640][T18369] [ 816.930896][T18369] Chain exists of: [ 816.930896][T18369] &q->q_usage_counter(io)#51 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 816.930896][T18369] [ 816.948618][T18369] Possible unsafe locking scenario: [ 816.948618][T18369] [ 816.957531][T18369] CPU0 CPU1 [ 816.963941][T18369] ---- ---- [ 816.970357][T18369] rlock(mapping.invalidate_lock#2); [ 816.976802][T18369] lock(&mm->mmap_lock); [ 816.985010][T18369] lock(mapping.invalidate_lock#2); [ 816.994394][T18369] rlock(&q->q_usage_counter(io)#51); [ 817.000936][T18369] [ 817.000936][T18369] *** DEADLOCK *** [ 817.000936][T18369] [ 817.010683][T18369] 1 lock held by udevd/18369: [ 817.016269][T18369] #0: ffff88802393d9c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 817.029738][T18369] [ 817.029738][T18369] stack backtrace: [ 817.036779][T18369] CPU: 0 UID: 0 PID: 18369 Comm: udevd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 817.036802][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 817.036814][T18369] Call Trace: [ 817.036820][T18369] [ 817.036828][T18369] dump_stack_lvl+0x116/0x1f0 [ 817.036855][T18369] print_circular_bug+0x490/0x760 [ 817.036882][T18369] check_noncircular+0x31a/0x400 [ 817.036907][T18369] ? __pfx_check_noncircular+0x10/0x10 [ 817.036931][T18369] ? __kernel_text_address+0xd/0x40 [ 817.036956][T18369] ? unwind_get_return_address+0x59/0xa0 [ 817.036986][T18369] ? lockdep_lock+0xc6/0x200 [ 817.037006][T18369] ? __pfx_lockdep_lock+0x10/0x10 [ 817.037028][T18369] __lock_acquire+0x249e/0x3c40 [ 817.037057][T18369] ? __pfx___lock_acquire+0x10/0x10 [ 817.037081][T18369] ? hlock_class+0x4e/0x130 [ 817.037099][T18369] ? mark_lock+0xb5/0xc60 [ 817.037123][T18369] ? mark_lock+0xb5/0xc60 [ 817.037145][T18369] ? page_cache_ra_unbounded+0x426/0x7d0 [ 817.037167][T18369] ? page_cache_sync_ra+0x158/0xa30 [ 817.037189][T18369] lock_acquire.part.0+0x11b/0x380 [ 817.037215][T18369] ? __submit_bio+0x3d1/0x690 [ 817.037236][T18369] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 817.037262][T18369] ? rcu_is_watching+0x12/0xc0 [ 817.037283][T18369] ? trace_lock_acquire+0x14e/0x1f0 [ 817.037304][T18369] ? __submit_bio+0x3d1/0x690 [ 817.037323][T18369] ? lock_acquire+0x2f/0xb0 [ 817.037347][T18369] ? __submit_bio+0x3d1/0x690 [ 817.037373][T18369] blk_mq_submit_bio+0x20f5/0x2610 [ 817.037396][T18369] ? __submit_bio+0x3d1/0x690 [ 817.037417][T18369] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 817.037439][T18369] ? mark_lock+0xb5/0xc60 [ 817.037462][T18369] ? __pfx___lock_acquire+0x10/0x10 [ 817.037487][T18369] ? __pfx___lock_acquire+0x10/0x10 [ 817.037511][T18369] ? trace_lock_acquire+0x14e/0x1f0 [ 817.037531][T18369] ? __pfx_mark_lock+0x10/0x10 [ 817.037558][T18369] __submit_bio+0x3d1/0x690 [ 817.037579][T18369] ? __pfx___submit_bio+0x10/0x10 [ 817.037599][T18369] ? trace_lock_acquire+0x14e/0x1f0 [ 817.037625][T18369] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 817.037647][T18369] submit_bio_noacct_nocheck+0x698/0xd70 [ 817.037670][T18369] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 817.037693][T18369] ? __pfx___might_resched+0x10/0x10 [ 817.037723][T18369] submit_bio_noacct+0x50d/0x1ec0 [ 817.037746][T18369] mpage_readahead+0x41d/0x590 [ 817.037768][T18369] ? __pfx_mpage_readahead+0x10/0x10 [ 817.037793][T18369] ? __pfx_blkdev_get_block+0x10/0x10 [ 817.037821][T18369] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 817.037850][T18369] ? __pfx_lock_release+0x10/0x10 [ 817.037876][T18369] ? trace_lock_acquire+0x14e/0x1f0 [ 817.037898][T18369] ? __pfx_blkdev_readahead+0x10/0x10 [ 817.037922][T18369] read_pages+0x1a7/0xc60 [ 817.037941][T18369] ? __folio_batch_add_and_move+0x689/0xc60 [ 817.037968][T18369] ? __pfx_read_pages+0x10/0x10 [ 817.037993][T18369] page_cache_ra_unbounded+0x426/0x7d0 [ 817.038019][T18369] force_page_cache_ra+0x24b/0x340 [ 817.038043][T18369] page_cache_sync_ra+0x158/0xa30 [ 817.038064][T18369] ? __lock_acquire+0xcc5/0x3c40 [ 817.038089][T18369] filemap_get_pages+0xb62/0x1c30 [ 817.038118][T18369] ? __pfx_filemap_get_pages+0x10/0x10 [ 817.038144][T18369] ? __pfx___might_resched+0x10/0x10 [ 817.038173][T18369] filemap_read+0x3c5/0xe70 [ 817.038196][T18369] ? trace_lock_acquire+0x14e/0x1f0 [ 817.038221][T18369] ? __pfx_filemap_read+0x10/0x10 [ 817.038254][T18369] ? apparmor_file_permission+0x251/0x400 [ 817.038277][T18369] blkdev_read_iter+0x187/0x4b0 [ 817.038302][T18369] vfs_read+0x886/0xbf0 [ 817.038328][T18369] ? __pfx_vfs_read+0x10/0x10 [ 817.038357][T18369] ? blkdev_llseek+0x9b/0xd0 [ 817.038380][T18369] ? __pfx_lock_release+0x10/0x10 [ 817.038406][T18369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 817.038436][T18369] ksys_read+0x12b/0x250 [ 817.038460][T18369] ? __pfx_ksys_read+0x10/0x10 [ 817.038486][T18369] do_syscall_64+0xcd/0x250 [ 817.038512][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.038539][T18369] RIP: 0033:0x7f40d0516b6a [ 817.038555][T18369] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 817.038573][T18369] RSP: 002b:00007fff28673938 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 817.038591][T18369] RAX: ffffffffffffffda RBX: 00001fffffff0000 RCX: 00007f40d0516b6a [ 817.038604][T18369] RDX: 0000000000000040 RSI: 000055850f6d9048 RDI: 0000000000000009 [ 817.038616][T18369] RBP: 0000000000000040 R08: 000055850f6d9020 R09: 00007f40d05f1b60 [ 817.038628][T18369] R10: 0000000000000007 R11: 0000000000000246 R12: 000055850f6d9020 [ 817.038641][T18369] R13: 000055850f6d9038 R14: 000055850f6dfad8 R15: 000055850f6dfa80 [ 817.038658][T18369] [ 817.773295][T19947] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 818.137311][T19926] caif:caif_disconnect_client(): nothing to disconnect [ 818.830076][T19950] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 819.524657][T19951] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 819.583993][T19951] udevd[19951]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 819.857736][T19952] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 820.898221][T19953] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 821.925706][T19954] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 822.947086][T19955] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 823.969754][T19956] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 824.992933][T19957] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr