last executing test programs: 4m7.742839433s ago: executing program 1 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 4m7.467114604s ago: executing program 1 (id=1041): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) mmap$auto(0x0, 0xa4b2, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x12000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) acct$auto(&(0x7f0000000000)='/dev/ttyS2\x00') socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) socket(0x2, 0x3, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001780)='/dev/input/event2\x00', 0x0, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xd, 0x20000000001, 0x948a, 0x5, 0x7, 0x1, 0x3, 0x300000000000000, 0xa0000001, 0xffffffffffffffff, 0x6d3c, 0x9, 0x3, 0xffffffffffffffff]}, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) fcntl$auto(0x3, 0x4, 0xa553) read$auto(0xffffffffffffffff, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) 4m6.398879297s ago: executing program 1 (id=1044): mmap$auto(0xa, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r3], 0x1c}}, 0x4008000) 4m5.109206449s ago: executing program 1 (id=1047): socket(0x6, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) close_range$auto(0x2, 0x8, 0x0) poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4) fcntl$auto(r0, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) statmount$auto(0x0, &(0x7f0000000080)={0xd24c, 0x7, 0x1ff, 0x7, 0x5180, 0x585, 0x1ffdf, 0xa, 0x8, 0x7, 0xa121, 0x3, 0x0, 0x271, 0xb4, 0xa, 0x6, 0x10001, 0x5, 0x100000000, 0xe, 0x7, 0x2100, 0xb9e, 0x0, 0x8, [0x4000000000, 0x0, 0x0, 0x50100000000000, 0x6, 0x4000002000, 0x0, 0x9, 0x8000, 0x8001, 0x6, 0xaf1, 0x0, 0x80000, 0x5, 0x7fe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x6, 0x800000000000007, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005bb, 0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffc, 0x88b, 0x8000000000008, 0x1, 0x9, 0xa38, 0x7, 0x3, 0x8, 0x8, 0x9, 0x7, 0x1]}, 0x1ff, 0xd) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r4, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000800), r1) getpgid$auto(0x0) 4m2.51480264s ago: executing program 1 (id=1054): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) sendfile$auto(r1, r0, 0x0, 0x6) close_range$auto(r0, r0, 0x2) socket(0x15, 0x5, 0x0) eventfd$auto(0x7) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket(0x2, 0x3, 0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/223, 0xdf) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc0445624, r3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x22, 0xfffffffffffffffe, 0x0) 4m1.173032867s ago: executing program 1 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) getresgid$auto(&(0x7f0000000380), 0xfffffffffffffffc, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6ed4ef9235ee0cc1753dff6c08a55c7dfa460474b6d879dfbac7410804fcad82ac2b67b81c4b2baf15276573ecf550bbebc854ee71416454b67db4ce9f1d932619a2a9e5bfead34b0fcfeec62c2bb6d6eb9c2c497a68378d8e1d358715f007000062e251551fe50347a04114", @ANYRES16=r1, @ANYBLOB="210028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) epoll_create$auto(0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x200200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000005c0)={[0x200, 0x5, 0xffffffffffff7fff, 0x1, 0x7fffffffffffffff, 0x2, 0x4, 0x1, 0x0, 0x300000000000000, 0x9, 0x1, 0x1006d3c, 0x5, 0x4]}, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac100436", 0xc5) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x2000000000000001, 0x9487, 0x3, 0x15f4da0a, 0x50d, 0x0, 0x5f, 0x8000011b, 0x8000000000007, 0xe, 0x9, 0x2, 0x40000000000000e2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0xa, 0x4) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') close_range$auto(0x2, 0x8, 0x0) 4m0.8319854s ago: executing program 32 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) getresgid$auto(&(0x7f0000000380), 0xfffffffffffffffc, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6ed4ef9235ee0cc1753dff6c08a55c7dfa460474b6d879dfbac7410804fcad82ac2b67b81c4b2baf15276573ecf550bbebc854ee71416454b67db4ce9f1d932619a2a9e5bfead34b0fcfeec62c2bb6d6eb9c2c497a68378d8e1d358715f007000062e251551fe50347a04114", @ANYRES16=r1, @ANYBLOB="210028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) epoll_create$auto(0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x200200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000005c0)={[0x200, 0x5, 0xffffffffffff7fff, 0x1, 0x7fffffffffffffff, 0x2, 0x4, 0x1, 0x0, 0x300000000000000, 0x9, 0x1, 0x1006d3c, 0x5, 0x4]}, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac100436", 0xc5) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x2000000000000001, 0x9487, 0x3, 0x15f4da0a, 0x50d, 0x0, 0x5f, 0x8000011b, 0x8000000000007, 0xe, 0x9, 0x2, 0x40000000000000e2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0xa, 0x4) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') close_range$auto(0x2, 0x8, 0x0) 3m58.255826272s ago: executing program 2 (id=1065): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3m54.31515004s ago: executing program 2 (id=1073): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r0, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c) r1 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r3) sendmsg$auto_HWSIM_CMD_REGISTER(r2, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r2, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r6 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r5, 0xc, 0xd) r7 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r7, 0x7b9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r6) r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000) mq_getsetattr$auto(r4, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) 3m53.635401104s ago: executing program 2 (id=1075): mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) msgctl$auto_IPC_INFO(0x9, 0x3, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) (async) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x103040, 0x250) (async) geteuid() (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffc, 0x1f, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="19000003d30000", 0x7) (async) socket(0x10, 0x0, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0x80000e, 0x0, 0x0, &(0x7f0000001380)={[0x1ff, 0x3, 0x80000000000000d, 0x2, 0x948d, 0x6, 0x15f4da0a, 0xffffffffffffffff, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/4096, 0x1000) (async) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0x5, 0xd, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x20000, 0x9, 0x7, 0x8}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) close_range$auto(0x2, 0x8, 0x0) 3m51.733834795s ago: executing program 2 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x8004005) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 3m51.685669291s ago: executing program 3 (id=1078): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x42540, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r0 = socket(0x29, 0x800, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3da) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t@\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000400018004000f80c3fc0e003264650101000000000000636572320014001300766c616e3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptycc\x00', 0x280b02, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f00000005c0)=""/248, 0xf8) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000280)={0xe, 0x5, 0x2, 0x80, 0x1, 0x2003, 0x74f, 0x1fb, 0xf}) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mq_open$auto(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00', 0x7e, 0x9, 0x0) 3m51.557826394s ago: executing program 2 (id=1080): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) sendfile$auto(r1, r0, 0x0, 0x6) close_range$auto(r0, r0, 0x2) socket(0x15, 0x5, 0x0) eventfd$auto(0x7) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket(0x2, 0x3, 0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/223, 0xdf) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc0445624, r3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x22, 0xfffffffffffffffe, 0x0) 3m50.115835412s ago: executing program 2 (id=1082): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r0, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c) r1 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r3) sendmsg$auto_HWSIM_CMD_REGISTER(r2, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r2, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r6 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r5, 0xc, 0xd) r7 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r7, 0x7b9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r6) r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000) mq_getsetattr$auto(r4, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) 3m49.698946933s ago: executing program 33 (id=1082): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) pwritev2$auto(r0, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/124, 0x7c) r1 = prctl$auto(0x8, 0x1, 0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r3) sendmsg$auto_HWSIM_CMD_REGISTER(r2, &(0x7f00000003c0)={0x0, 0x3d, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000ed0e8c6f528e3c409776170152aef798ad5762f8c45e553ba5aee33f550c45e5403aa0a1c754b21899be4c11a82e92deecfd5724f2fc8eda62b0f661e9373065aa4397d825f966dd2b6eb70a47ecb4332c76", @ANYRESOCT=r2, @ANYBLOB="010028bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r6 = prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x100000001, r5, 0xc, 0xd) r7 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r7, 0x7b9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000300), r6) r9 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim2/trap_flow_action_cookie\x00', 0x200, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="030000000000000086acbd7000fcdbdf2503", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x20040000) mq_getsetattr$auto(r4, &(0x7f0000000080)={0x5, 0x5, 0xfffffffffffffffc, 0x11}, &(0x7f00000000c0)={0x3a3, 0x5, 0xa, 0x4}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x260a00, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) 3m48.800323694s ago: executing program 3 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) getresgid$auto(&(0x7f0000000380), 0xfffffffffffffffc, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6ed4ef9235ee0cc1753dff6c08a55c7dfa460474b6d879dfbac7410804fcad82ac2b67b81c4b2baf15276573ecf550bbebc854ee71416454b67db4ce9f1d932619a2a9e5bfead34b0fcfeec62c2bb6d6eb9c2c497a68378d8e1d358715f007000062e251551fe50347a04114", @ANYRES16=r1, @ANYBLOB="210028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) epoll_create$auto(0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x200200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000005c0)={[0x200, 0x5, 0xffffffffffff7fff, 0x1, 0x7fffffffffffffff, 0x2, 0x4, 0x1, 0x0, 0x300000000000000, 0x9, 0x1, 0x1006d3c, 0x5, 0x4]}, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac100436", 0xc5) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x2000000000000001, 0x9487, 0x3, 0x15f4da0a, 0x50d, 0x0, 0x5f, 0x8000011b, 0x8000000000007, 0xe, 0x9, 0x2, 0x40000000000000e2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0xa, 0x4) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') close_range$auto(0x2, 0x8, 0x0) 3m47.694827927s ago: executing program 3 (id=1086): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/vm/nr_hugepages\x00', 0x60000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/004/001\x00', 0xa941, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x40f00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) socket(0x2, 0x5, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x110) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) semctl$auto(0x204, 0xfffffffe, 0x3, 0x4) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) r1 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy8/hwsim/group\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0xfffffffffffffffb, 0x2) read$auto(r1, &(0x7f0000000040)='\'-\x00', 0x5) 3m47.283157098s ago: executing program 3 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x8004005) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 3m46.656097141s ago: executing program 3 (id=1089): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) ioperm$auto(0xd44, 0x6, 0x8) tkill$auto(0x80000000000001, 0x7) sendfile$auto(r1, r0, 0x0, 0x6) close_range$auto(r0, r0, 0x2) socket(0x15, 0x5, 0x0) eventfd$auto(0x7) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket(0x2, 0x3, 0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)=""/223, 0xdf) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc0445624, r3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x22, 0xfffffffffffffffe, 0x0) 3m45.980478955s ago: executing program 3 (id=1091): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x161740, 0x48) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x4], {0x6, 0x6, 0x7ff, 0x2df, 0x500, 0x81, 0xfe, 0x7, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000050) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r2) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x2a80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 3m45.485871176s ago: executing program 34 (id=1091): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x161740, 0x48) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x4], {0x6, 0x6, 0x7ff, 0x2df, 0x500, 0x81, 0xfe, 0x7, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000050) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r2) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x2a80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 9.073007313s ago: executing program 5 (id=1715): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r2, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x700000000000000, 0x20000084}, 0x0) 8.530218783s ago: executing program 5 (id=1718): socket(0x6, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) close_range$auto(0x2, 0x8, 0x0) poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4) fcntl$auto(r0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) statmount$auto(0x0, &(0x7f0000000080)={0xd24c, 0x7, 0x1ff, 0x7, 0x5180, 0x585, 0x1ffdf, 0xa, 0x8, 0x7, 0xa121, 0x3, 0x0, 0x271, 0xb4, 0xa, 0x6, 0x10001, 0x5, 0x100000000, 0xe, 0x7, 0x2100, 0xb9e, 0x0, 0x8, [0x4000000000, 0x0, 0x0, 0x50100000000000, 0x6, 0x4000002000, 0x0, 0x9, 0x8000, 0x8001, 0x6, 0xaf1, 0x0, 0x80000, 0x5, 0x7fe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x6, 0x800000000000007, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005bb, 0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffc, 0x88b, 0x8000000000008, 0x1, 0x9, 0xa38, 0x7, 0x3, 0x8, 0x8, 0x9, 0x7, 0x1]}, 0x1ff, 0xd) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r4, 0x0, 0x7fe) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000800), r1) getpgid$auto(0x0) 7.621434756s ago: executing program 0 (id=1721): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(r0, 0x7) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r2, 0xa, r2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/notes\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) 7.309830818s ago: executing program 0 (id=1722): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002b8f7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/xfs/stats/stats\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001180)=""/187, 0xbb) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) semctl$auto_SEM_INFO(0x2, 0x7, 0x13, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x8, 0x2020009, 0xffffffffffffffff, 0xebf, r1, 0x8000) socket(0x1d, 0x1, 0xa) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 6.280412533s ago: executing program 0 (id=1723): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x00\x00\x00\x00\x00\x00\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) r1 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto(r1, &(0x7f0000000080)='}//&*\x00', 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) sched_get_priority_min$auto(0x40) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/netdev_group\x00', 0x70842, 0x0) sendfile$auto(r2, r2, 0x0, 0xe00000000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socket(0x1a, 0x800, 0x7f) 4.973672099s ago: executing program 0 (id=1727): r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r0, 0x0, 0xff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b4438a659a000413f7eb016bb998900123ad43479ea829e58efa705ba13674f13d39b45", 0x81) 4.488813082s ago: executing program 0 (id=1730): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, r0, 0x40000000008000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}}, 0x40000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f0000000200)={0x3, 0xffffffff, 0x8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x1, 0x0) syz_clone(0x220000, &(0x7f0000000240)="4352c8c950f93a700829d101aaa1c5d93599b1d24cf34a928a2ffe89ff78bffb3e6f39bad03b1f15a591941ffa3110edfb72913df6de540c4257400bea90e9fe5a58b6347fa6558dedba5ba91bd46b69b662d52880eab1a7e1c187b126fd338d9b092baa5cfe83f3056ccc62103758b5fd3422e2596eb19ea0b87478bd36b8888eac347e688afc6e5a32f48973e529134bd20e2efe8b0eb6d309977897c5fa21e1232ad3f2cdc3c8a918e8dd1b0b692d3038c9", 0xb3, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="f95e3542ff5b65d1d2481c61451d6e6a82bd4f951d2a06b0d05238af1010484080e8337f019a5c8211cdcd6dbb297a61179520f4e09e7f5164414141a3af339b8de6880bb4895eb42d8f77a3d5") waitid$auto(0x4b8, 0xffffffffffffffff, &(0x7f0000000400)={@_si_pad}, 0x5, &(0x7f0000000480)={{0x7fff, 0x9}, {0x9, 0x1ff}, 0x3ff, 0x6, 0x916, 0x80000001, 0x6, 0x0, 0x5, 0x4, 0x3, 0x80, 0xb1cd, 0xffffffffffffff01, 0x2, 0x3}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0xfffffffffffffffc, 0x100000000}, 0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) getpgid(0x0) semctl$auto_SETALL(0x7, 0x970, 0x11, 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000003200)='/dev/usbmon18\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) recvfrom$auto(r0, &(0x7f0000003080)="d7770ccada07ecf32e56cf5fe439fb1c34d9ad88589330397cd4690073fd368f508985e026d8ad4d4af21048b65dc84e7e11a75472e974713801e8eaf656da845528621d05c23445ca956b657a67ec750da7c13f2ec23b8c4e77cd776ebdbe23a2f8930a94c492b4af64162f76f3810f9cc5416b7078e5f143b793446776be20c39ab5ddf6c72e192ef7836bd230984cdbc84162e58ce4e2430a4f52814ffe084e9dd6dbe475989ae6b9f079a62d69753ed8b6ed69af3067b9b9065b6dcec50bfa901390ee18cd8b562acec4bb9849fdc0ac2f21d661776a39735d0f86ec1409222fd65e", 0x2, 0x8, &(0x7f0000003180)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f00000031c0)=0x7) ioctl$auto(0x3, 0xc040564a, 0x38) 4.190475835s ago: executing program 5 (id=1732): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, r0, 0x40000000008000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}}, 0x40000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f0000000200)={0x3, 0xffffffff, 0x8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000180)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x1, 0x0) syz_clone(0x220000, &(0x7f0000000240)="4352c8c950f93a700829d101aaa1c5d93599b1d24cf34a928a2ffe89ff78bffb3e6f39bad03b1f15a591941ffa3110edfb72913df6de540c4257400bea90e9fe5a58b6347fa6558dedba5ba91bd46b69b662d52880eab1a7e1c187b126fd338d9b092baa5cfe83f3056ccc62103758b5fd3422e2596eb19ea0b87478bd36b8888eac347e688afc6e5a32f48973e529134bd20e2efe8b0eb6d309977897c5fa21e1232ad3f2cdc3c8a918e8dd1b0b692d3038c9", 0xb3, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="f95e3542ff5b65d1d2481c61451d6e6a82bd4f951d2a06b0d05238af1010484080e8337f019a5c8211cdcd6dbb297a61179520f4e09e7f5164414141a3af339b8de6880bb4895eb42d8f77a3d5") waitid$auto(0x4b8, 0xffffffffffffffff, &(0x7f0000000400)={@_si_pad}, 0x5, &(0x7f0000000480)={{0x7fff, 0x9}, {0x9, 0x1ff}, 0x3ff, 0x6, 0x916, 0x80000001, 0x6, 0x0, 0x5, 0x4, 0x3, 0x80, 0xb1cd, 0xffffffffffffff01, 0x2, 0x3}) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0xfffffffffffffffc, 0x100000000}, 0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) getpgid(0x0) semctl$auto_SETALL(0x7, 0x970, 0x11, 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000003200)='/dev/usbmon18\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) recvfrom$auto(r0, &(0x7f0000003080)="d7770ccada07ecf32e56cf5fe439fb1c34d9ad88589330397cd4690073fd368f508985e026d8ad4d4af21048b65dc84e7e11a75472e974713801e8eaf656da845528621d05c23445ca956b657a67ec750da7c13f2ec23b8c4e77cd776ebdbe23a2f8930a94c492b4af64162f76f3810f9cc5416b7078e5f143b793446776be20c39ab5ddf6c72e192ef7836bd230984cdbc84162e58ce4e2430a4f52814ffe084e9dd6dbe475989ae6b9f079a62d69753ed8b6ed69af3067b9b9065b6dcec50bfa901390ee18cd8b562acec4bb9849fdc0ac2f21d661776a39735d0f86ec1409222fd65e", 0x2, 0x8, &(0x7f0000003180)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f00000031c0)=0x7) ioctl$auto(0x3, 0xc040564a, 0x38) 4.083107918s ago: executing program 6 (id=1733): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x1269, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x100) r3 = getsockopt$auto(r2, 0x40000000029, 0x5, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r3, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc008561b, 0x38) 3.894031958s ago: executing program 6 (id=1734): madvise$auto(0x101, 0x2, 0x10001) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop5\x00', 0x22200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x428, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FTM_RESPONDER={0x318, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x94, 0x3, "4b94ea4bc8dc54ad730dd2442553d4a3f80c467a89327c296d7453898d9035f3512fbf763f44378cd88b4b3c0026e7394f64e92e094d2a255ff8ef97f6884ef06d722d1a7f64e844e4f00bdfeb741482665c63b34477a61d1f7327c28d51e01192bea6e3a3a040914f3ea2497740535163da85d5eef3ac186a1e3339efc0876cd408c5c8c5df98e2e2b3a56c3acf8ce1"}, @NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "16dc29d053a01b9a30a708d666d4cefc484cccd9d052a53fccc6911b4d9e49695b54d2a18cba709f4a22fee12a7bf5579824024e91ec4190010dbf4d2a2f5a741015e53d3f397778d769ef7225bdb6b754be18b63b3a7aef9c655963900aac7557e56afbbd24f77da6c56affb4d84079cf779493f70df460d9ac6ebf67bff64cdbc1b24962365423a9aa200f887cfb60b60427f418404da35b22cb27807115fbca878435d5dafea9e93e302a5343481c20178b5a40f1"}, @NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "bc35f60a9ea5c0ccfded2229f8b2b9738cfe68a23aed416c7cf1f197cf0d784c047be37ecd3ebc5ef45815743328c15382d3650ea522b9fa904282670a91254462295c717a12e4da383b0e49be8815acda26ee030f4f56c39eb46a1dadea"}, @NL80211_FTM_RESP_ATTR_LCI={0x7c, 0x2, "7ec48a5473d728071a390e82a88d5c20c125e460d3a6a872902796d5a1ce1efe2981cce537506c668c63b9a38929a1aa5ab207b09da2118bacc394e9dc61ceeae2e0ca3a51e466f101b32430a234eb6b3f60784dc5f7c99d48e840809045a6d3ab1f4b6de1cbd7b0f43708bc3d771fb7bb93e305fc6b7e3d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xdb, 0x2, "9e96cfcd5ebbf1a6ca477c3c0a379c5b533dbb44b69047392c7e3a4ec09fa3e396e41d66653a10e26a1871eae620d1911a363e2c43a60927d6168d77cffdb2e542c68e84b7913c08bc09187bbd85db9264d91d57cba1adf8c50694baaf83de32f0da38aba5a84b6d406185f2cf4f4cbe75a6213c592381430d773611e3157fc6fcdc54ceb39150486c0f1bc73bcaa7c43a028def27012fc1f87a53fb14a5e7407bb13759ed756d83b0d2a496bc9c71197eb84735df115aa006cb7aae52234bcd4a1962139763e524ae9ac4b232707a1dabf70d4f516e9a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FILS_NONCES={0xdc, 0xf3, "296aa8223d0b8cfee2d897fd1f6763314e8c05f4facd5b7dd4d56daf9510c802b2508f36bc3655d64b3cf7f960d80b31498c35433a6101b54321bd3c701cf60917b0c012325cb5007c9004a385265c87eca41c61d4203b447a3b3b45c7a93e06bf2cfe0ba6b71ca00d080eee0ff6cc8d078f403eee55bb2fc5d09403709a13bece105061d5ab03ce2e660c779668da9f550ce62252efbd7175b6275f94c9588c237efbb9a38ed50716950a54a0d22f74ce15aacc79bb94df1cf863c4e072fa673d671a334e8b57284f4a0cd77bbb17d1dffdc3b77ecef8aa"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x40}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffd}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xffff4904}]}, 0x428}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000041) r2 = socket(0x27, 0x806, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_ADD_UEID(r3, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x234, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '//*%'}, @SMC_NLA_EID_TABLE_ENTRY={0xb, 0x1, '{[%:)}('}, @SMC_NLA_EID_TABLE_UNSPEC={0x71, 0x0, "7dd00872c14e8cacf554a23ad27f63390c7288a040bb49dd248e0c310f3731d82e2689ff972744f515ba8f811ff22d44fbd4e3d16a8a182982b87d240684124183b587cd1ab71f61f8442717904a0dd6e7670653cbcd8a44cf03dee37297ecc7b8f39b18ae6b83a5b2b5581d01"}, @SMC_NLA_EID_TABLE_UNSPEC={0xfc, 0x0, "96142f0a47ba03dd8bb588b4cacc2ae78b945c5c229099dbc81d92939f73950a20f63849a7c195c8a86412d86a61e4a27270a5e534498dfc8b2b79c9dac198b1a5753711475fdc09b2cad6a7580d99ebea9d1f586f2aa4a40f73b260ac985a7ea156f27c3067409f1f13bb200d7668303b64b130369d38b458fc31008d9146de4adb3539403efdf4b00afafdaa5f7dfbd676cb7769b508993959656126cf51f043b63b8ac7f1bcfde14192ac6145b229a5404ec358cb3384d9be16c771171d7b452e5cf8d8f88655a23fee037da5d180e6a098f024a1192157c45c91f863d5a5443f906d46c18d0e80a4b3c8088f8af6db5be262949970d6"}, @SMC_NLA_EID_TABLE_UNSPEC={0x97, 0x0, "32ae2ff8cb63e66a932752853e230ea4c0d04fbf6379171f36bff45d948578814bf8df35503464f083a9e1c87c42e9c1b1e212ad5fb47ed114b717281caf04c9afeb49ba13caaa65655ef687219713beb2c49f340bb9bb3875250eb6c2fe3b83fcbc2fc80768bd6be268959d47ab48649505e99fe451fe61acbf8d49e458537d785fb875a0ed6ee1bbca309919e5cc234dce06"}, @SMC_NLA_EID_TABLE_UNSPEC={0x4}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}]}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x51}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x7}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000) clone$auto(0x101, 0xa2, &(0x7f0000000980)=0x9, &(0x7f00000009c0)=0x800, 0x299) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000a00)={{0x7ff, 0xac, 0x80000000, 0x5}, "6a88518c242af85746aa862831e61ede6fb5fb22e88c13932a54249f214fba38"}) mmap$auto(0x4, 0xfffffffffffffffe, 0x4, 0x10, r2, 0xde91) semctl$auto_IPC_STAT(0x7, 0x6, 0x2, 0x7fffffffffffffff) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b80)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'veth0_vlan\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x74, r4, 0x211, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8}, @NETDEV_A_DMABUF_QUEUES={0x24, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfff}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x699e}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}]}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x8001}]}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r9}]}, 0x74}, 0x1, 0x0, 0x0, 0x88d1}, 0x20000040) r10 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/input/event0\x00', 0x222000, 0x0) ioctl$auto_EVIOCSMASK(r10, 0x40104593, &(0x7f0000000d40)={0x1, 0x9, 0x3}) sched_setaffinity$auto(0x0, 0x476, &(0x7f0000000d80)=0x80000000000000) ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000dc0)=0x2) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e40), r0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000f40)={0x1, 0x4, 0xf4, 0x5, 0x100, 0x101, r1, [0xd, 0x5, 0x10001], {0x7, 0x6, 0x8, 0x6a, 0x6000000, 0x9, 0x80, 0x1, 0x800}, {0xc, 0xa85, 0x9, 0x7, 0x401, 0xa1f8, 0x1, 0x3, 0x1}}) r13 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r12, 0x8, &(0x7f0000000fc0)="586cce195f7a530c63648ff5ce81a6deb9c563478c7fe18579ec5524dcffb70d86cf1c8c0a44b10e50fcb74c059502db849560f73a0fd5b62ea4f72c903c13df90bbba7a069eeb4be5d22d9037a8dcf85c1903236690377f03e5648716e6aec7a9e7cd582847253749b5133600a4673b4e42cb71e14b409b51c512f4243408c0b5ee0828595dd5e116f76dac3f8bbd15144cfb4bf0b1741656954c34a2f11d08") ioctl$auto_VHOST_SET_LOG_FD2(r13, 0x4004af07, &(0x7f0000001080)=r10) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000010c0), 0x100, 0x0) madvise$auto(0x0, 0x9, 0x4) 3.872294999s ago: executing program 4 (id=1735): syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) 3.435108126s ago: executing program 4 (id=1736): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x00\x00\x00\x00\x00\x00\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) r1 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto(r1, &(0x7f0000000080)='}//&*\x00', 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) sched_get_priority_min$auto(0x40) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/netdev_group\x00', 0x70842, 0x0) sendfile$auto(r2, r2, 0x0, 0xe00000000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socket(0x1a, 0x800, 0x7f) 3.434218747s ago: executing program 0 (id=1744): openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysinfo$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r0 = socket(0x2, 0x6, 0x0) clone$auto(0x4, 0x2, 0x0, 0x0, 0x2000000000a1c) getsockopt$auto(r0, 0x10d, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000000100)='MAC80\x03\x00\x00\x00\x00\x00\x00\x00IM\x00\xda?\x1c\x9d\xaaQ9\xfd\x8d\xdb\aQ@\xe1\xc3,\xc6\x97E\x17S\x9eK*\x86\xa63m\x94F\x80\xe8~\xe2<\xbe\b\x1e\x97\xdd\xdf\xa5o', 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x2, 0x3a) getsockopt$auto(r2, 0x0, 0xf, 0xfffffffffffffffe, 0x0) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvfrom$auto(0xffffffffffffffff, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000180)=0x3ff) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) unshare$auto(0x1) io_uring_setup$auto(0xfffffffb, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$', @ANYRES16=0x0, @ANYBLOB="41004bbd7000fbdbdf250a000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 3.323249362s ago: executing program 6 (id=1737): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) preadv$auto(r0, &(0x7f0000002fc0)={0x0, 0x9}, 0x2, 0x5, 0x19) (fail_nth: 1) 2.726912832s ago: executing program 6 (id=1738): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r0, 0x0, 0x3ff) close_range$auto(0x2, 0x8000, 0x0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010327d3250000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x4c010) 2.327988116s ago: executing program 5 (id=1739): r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r0, 0x0, 0xff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b4438a659a000413f7eb016bb998900123ad43479ea829e58efa705ba13674f13d39b45", 0x81) 2.178724056s ago: executing program 4 (id=1740): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x70a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) 1.58693359s ago: executing program 4 (id=1741): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) socket(0x2, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (fail_nth: 97) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = fsopen$auto(0x0, 0x1) ioctl$auto(0x3, 0x4040ae79, r0) 1.539622126s ago: executing program 5 (id=1742): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x28, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x37, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x80000000368e, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.430969336s ago: executing program 6 (id=1743): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x40084d05, 0x7) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video53\x00', 0x8000, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xa0b}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x1f) prctl$auto_PR_GET_FP_MODE(0x2e, 0x4, 0x0, 0x3, 0xa2d) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) ioctl$auto(0x3, 0x7, r1) 536.067483ms ago: executing program 6 (id=1745): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/integrity/tag_size\x00', 0x0, 0x0) read$auto(r2, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) socketcall$auto_SYS_RECVMMSG(0x13, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0xfffffffffffffffc, 0x400000000000005, 0xdf, 0xaa78, r3, 0x200008003) socket(0xa, 0x801, 0x84) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(0x3, 0x83) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r5 = getsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000000) 395.142336ms ago: executing program 4 (id=1746): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r2, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0xb00000000000000, 0x20000084}, 0x0) 76.044626ms ago: executing program 5 (id=1747): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001100)=""/4105, 0x1009) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000006c0), r0) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x70, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x1b, 0x14, '^ -^$:z:})-#}^&],*(,\xea,%'}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc25}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xf6}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x87}, @NFC_ATTR_LLC_SDP={0x20, 0x13, 0x0, 0x1, [@typed={0x4, 0x108}, @generic="d1c8ad141050741399d20bc2d5dba7f3d4e729012e8f833e"]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4080) mmap$auto(0x0, 0xfffffffffffff001, 0xc00000072, 0x12, 0x1000000002, 0xfffffffffffeffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x591302, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) socket(0xa, 0x2, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000140), 0x2c2042, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, &(0x7f0000000300)="6a61b06f49031ccdf7f53698a4e4d0680800340de00f7b67d6ab0caf2bdcde56ea80a9fd57e49643e01b9502946f2cb7c9c8812c2cc4e87efb35c5f5e686a50a5c39cace1dede7c5649b16ae4919e93b8f923d78951c2899f52bde0fc0b6c218fdaf55315b230e2d57b9024b501a06f5d7dcea6951a32075d9631d8d910aa1d3ae4eaaf40b3144000000000000000000000000000000000000be0b9d7990870b32f06f9d32c41aa7f2b709b7e817e0f519662d7a49ce517d53") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x8060, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_I2C_SLAVE(0xffffffffffffffff, 0x703, &(0x7f0000000600)="de7269e9f58ce67dd332b2449c051a0096492276c323063d7684c0c11db25ef8c6f91f85cc12ff351342eef29baff1624fe8422004ab5d1ed17aa1b8f93729026cc068c3c105ad80517d1351c1e8d8858c89914a81afa8d45137c525afbfba0d429625e0736b520b24b435e3049ce6bd6378a2c45f8399b25c29f4362d5e070a57348f57a517b8a62a926b3af11fcbc854877ed2e8f12ab0958a9b") mmap$auto(0xd, 0x20005, 0x7f, 0xeb1, 0x401, 0x9) socket(0x2, 0x1, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(r2, 0x0, 0x4e0478f9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffff, 0x0, 0x4000000000df, 0x44eb1, 0xffffffffffffffff, 0x2ffffffffff9) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) bpf$auto(0x22, 0x0, 0x2) madvise$auto(0x53fc, 0x20000a, 0x9) pread64$auto(r2, 0x0, 0x594c, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) 0s ago: executing program 4 (id=1748): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) preadv$auto(r0, &(0x7f0000002fc0)={0x0, 0x9}, 0x2, 0x5, 0x19) (fail_nth: 2) kernel console output (not intermixed with test programs): 530.435099][T12003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.456972][T12003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.463101][T12003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.516610][T12003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.757398][T12017] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 530.797391][T12018] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1387'. [ 530.855723][T12016] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1387'. [ 531.345391][T12031] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 531.444630][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 531.473751][T12033] snd_aloop snd_aloop.0: control 16781581:65535:6:é'x?F¢é/èìzFË·fCªáª:0 is already present [ 531.912054][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 532.418622][T12043] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 532.546263][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.552464][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.558636][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 533.497951][T12050] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 534.000811][T12056] FAULT_INJECTION: forcing a failure. [ 534.000811][T12056] name failslab, interval 1, probability 0, space 0, times 0 [ 534.047724][T12056] CPU: 1 UID: 0 PID: 12056 Comm: syz.4.1397 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 534.047767][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 534.047785][T12056] Call Trace: [ 534.047794][T12056] [ 534.047806][T12056] dump_stack_lvl+0x16c/0x1f0 [ 534.047859][T12056] should_fail_ex+0x50a/0x650 [ 534.047897][T12056] should_failslab+0xc2/0x120 [ 534.047929][T12056] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 534.047982][T12056] ? skb_clone+0x190/0x3f0 [ 534.048020][T12056] skb_clone+0x190/0x3f0 [ 534.048054][T12056] netlink_deliver_tap+0xabd/0xd30 [ 534.048112][T12056] netlink_dump+0x639/0xd00 [ 534.048165][T12056] ? __pfx_netlink_dump+0x10/0x10 [ 534.048235][T12056] ? __asan_memset+0x23/0x50 [ 534.048285][T12056] ? genl_start+0x67d/0x960 [ 534.048322][T12056] __netlink_dump_start+0x6ca/0x970 [ 534.048378][T12056] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 534.048419][T12056] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 534.048467][T12056] ? __pfx_genl_get_cmd+0x10/0x10 [ 534.048517][T12056] ? __pfx_genl_start+0x10/0x10 [ 534.048546][T12056] ? __pfx_genl_dumpit+0x10/0x10 [ 534.048576][T12056] ? __pfx_genl_done+0x10/0x10 [ 534.048615][T12056] ? __radix_tree_lookup+0x21f/0x2c0 [ 534.048668][T12056] genl_rcv_msg+0x470/0x800 [ 534.048707][T12056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.048748][T12056] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 534.048793][T12056] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 534.048858][T12056] netlink_rcv_skb+0x16b/0x440 [ 534.048907][T12056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.048944][T12056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.049013][T12056] ? down_read+0xc9/0x330 [ 534.049065][T12056] ? __pfx_down_read+0x10/0x10 [ 534.049119][T12056] ? netlink_deliver_tap+0x1ae/0xd30 [ 534.049173][T12056] genl_rcv+0x28/0x40 [ 534.049201][T12056] netlink_unicast+0x53c/0x7f0 [ 534.049257][T12056] ? __pfx_netlink_unicast+0x10/0x10 [ 534.049313][T12056] ? __phys_addr_symbol+0x30/0x80 [ 534.049345][T12056] ? __check_object_size+0x488/0x710 [ 534.049383][T12056] netlink_sendmsg+0x8b8/0xd70 [ 534.049438][T12056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.049505][T12056] ____sys_sendmsg+0xaaf/0xc90 [ 534.049547][T12056] ? copy_msghdr_from_user+0x10b/0x160 [ 534.049602][T12056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.049662][T12056] ___sys_sendmsg+0x135/0x1e0 [ 534.049717][T12056] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.049788][T12056] ? __pfx_lock_release+0x10/0x10 [ 534.049833][T12056] ? trace_lock_acquire+0x14e/0x1f0 [ 534.049885][T12056] ? __fget_files+0x206/0x3a0 [ 534.049944][T12056] __sys_sendmsg+0x16e/0x220 [ 534.049975][T12056] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.050034][T12056] do_syscall_64+0xcd/0x250 [ 534.050086][T12056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.050131][T12056] RIP: 0033:0x7f8e9998d169 [ 534.050155][T12056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.050185][T12056] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.050214][T12056] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 534.050235][T12056] RDX: 000000000000c004 RSI: 0000200000001180 RDI: 0000000000000003 [ 534.050254][T12056] RBP: 00007f8e9a825090 R08: 0000000000000000 R09: 0000000000000000 [ 534.050279][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.050297][T12056] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 534.050337][T12056] [ 534.481719][T12059] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 534.583474][T12060] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 535.369520][T12071] FAULT_INJECTION: forcing a failure. [ 535.369520][T12071] name failslab, interval 1, probability 0, space 0, times 0 [ 535.431068][T12071] CPU: 0 UID: 0 PID: 12071 Comm: syz.6.1401 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 535.431124][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.431144][T12071] Call Trace: [ 535.431154][T12071] [ 535.431166][T12071] dump_stack_lvl+0x16c/0x1f0 [ 535.431262][T12071] should_fail_ex+0x50a/0x650 [ 535.431293][T12071] ? fs_reclaim_acquire+0xae/0x150 [ 535.431338][T12071] ? nat_init_net+0x56/0x270 [ 535.431385][T12071] should_failslab+0xc2/0x120 [ 535.431418][T12071] __kmalloc_cache_noprof+0x68/0x410 [ 535.431472][T12071] ? __pfx_nat_init_net+0x10/0x10 [ 535.431520][T12071] nat_init_net+0x56/0x270 [ 535.431568][T12071] ops_init+0x1df/0x5f0 [ 535.431607][T12071] setup_net+0x21f/0x860 [ 535.431656][T12071] ? __pfx_setup_net+0x10/0x10 [ 535.431686][T12071] ? down_read_killable+0xcc/0x380 [ 535.431717][T12071] ? __pfx_down_read_killable+0x10/0x10 [ 535.431746][T12071] ? __raw_spin_lock_init+0x3a/0x110 [ 535.431779][T12071] ? debug_mutex_init+0x37/0x70 [ 535.431818][T12071] copy_net_ns+0x2a6/0x5f0 [ 535.431858][T12071] create_new_namespaces+0x3ea/0xad0 [ 535.431921][T12071] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 535.431980][T12071] ksys_unshare+0x45d/0xa40 [ 535.432016][T12071] ? __pfx_ksys_unshare+0x10/0x10 [ 535.432048][T12071] ? xfd_validate_state+0x5d/0x180 [ 535.432106][T12071] __x64_sys_unshare+0x31/0x40 [ 535.432139][T12071] do_syscall_64+0xcd/0x250 [ 535.432203][T12071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.432249][T12071] RIP: 0033:0x7f477b78d169 [ 535.432275][T12071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.432310][T12071] RSP: 002b:00007f477c5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 535.432340][T12071] RAX: ffffffffffffffda RBX: 00007f477b9a5fa0 RCX: 00007f477b78d169 [ 535.432361][T12071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 535.432381][T12071] RBP: 00007f477b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.432400][T12071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.432421][T12071] R13: 0000000000000000 R14: 00007f477b9a5fa0 R15: 00007fff40fe0aa8 [ 535.432462][T12071] [ 535.870937][T12076] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 536.381054][T12078] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1403'. [ 536.416804][T12078] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 536.979525][T12095] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 537.177176][T12098] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 537.213083][T12099] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1406'. [ 537.236276][T12097] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1406'. [ 538.118161][T12106] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 539.046041][T12105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.092714][T12105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.132592][T12105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.159390][T12116] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 539.176730][T12105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 can't run '/sbi[ 539.778428][T12131] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.210754][T12136] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 540.274559][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1414'. [ 540.349030][T12138] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1416'. [ 540.386312][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 540.455587][T12141] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.737115][T12146] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 541.116172][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.186397][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.192993][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 541.259666][T12149] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 541.419029][T12148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1418'. [ 541.696150][T12154] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 541.771825][T12148] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 542.040012][T12156] netlink: zone id is out of range [ 542.041215][T12159] FAULT_INJECTION: forcing a failure. [ 542.041215][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.045171][T12156] netlink: zone id is out of range [ 542.167393][T12156] netlink: zone id is out of range [ 542.172592][T12156] netlink: zone id is out of range [ 542.186049][T12159] CPU: 0 UID: 0 PID: 12159 Comm: syz.6.1420 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 542.186089][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.186107][T12159] Call Trace: [ 542.186116][T12159] [ 542.186128][T12159] dump_stack_lvl+0x16c/0x1f0 [ 542.186179][T12159] should_fail_ex+0x50a/0x650 [ 542.186216][T12159] _copy_from_user+0x2e/0xd0 [ 542.186250][T12159] copy_msghdr_from_user+0x99/0x160 [ 542.186305][T12159] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 542.186369][T12159] ? __pfx___lock_acquire+0x10/0x10 [ 542.186429][T12159] ___sys_recvmsg+0xdc/0x1a0 [ 542.186482][T12159] ? __pfx____sys_recvmsg+0x10/0x10 [ 542.186534][T12159] ? find_held_lock+0x2d/0x110 [ 542.186587][T12159] ? __pfx___might_resched+0x10/0x10 [ 542.186639][T12159] ? __might_fault+0xe3/0x190 [ 542.186678][T12159] do_recvmmsg+0x2f8/0x740 [ 542.186737][T12159] ? __pfx_do_recvmmsg+0x10/0x10 [ 542.186787][T12159] ? vfs_write+0x306/0x1150 [ 542.186839][T12159] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 542.186903][T12159] ? __fget_files+0x206/0x3a0 [ 542.186960][T12159] __x64_sys_recvmmsg+0x239/0x290 [ 542.187007][T12159] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 542.187050][T12159] do_syscall_64+0xcd/0x250 [ 542.187100][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.187146][T12159] RIP: 0033:0x7f477b78d169 [ 542.187169][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.187200][T12159] RSP: 002b:00007f477c5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 542.187229][T12159] RAX: ffffffffffffffda RBX: 00007f477b9a6160 RCX: 00007f477b78d169 [ 542.187250][T12159] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 542.187269][T12159] RBP: 00007f477c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 542.187288][T12159] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 542.187307][T12159] R13: 0000000000000000 R14: 00007f477b9a6160 R15: 00007fff40fe0aa8 [ 542.187345][T12159] [ 542.479222][T12157] Invalid ELF header magic: != ELF [ 542.523754][T12156] netlink: zone id is out of range [ 542.647527][T12161] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 542.656099][T12156] netlink: zone id is out of range can't run '/sbi[ 542.708988][T12156] netlink: zone id is out of range [ 542.737432][T12156] netlink: zone id is out of range [ 542.784056][T12156] netlink: zone id is out of range [ 542.814557][T12156] netlink: zone id is out of range [ 542.887528][T12164] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 543.683758][T12169] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 544.751200][T12182] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 544.835621][T12180] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1421'. can't run '/sbi[ 545.378899][T12188] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1424'. [ 545.489231][T12188] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 545.622473][T12198] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1427'. [ 545.726916][T12201] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 545.868203][T12205] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 546.908964][T12211] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 547.292735][T12218] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 547.498455][T12223] FAULT_INJECTION: forcing a failure. [ 547.498455][T12223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.554097][T12223] CPU: 1 UID: 0 PID: 12223 Comm: syz.0.1434 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 547.554137][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.554154][T12223] Call Trace: [ 547.554163][T12223] [ 547.554174][T12223] dump_stack_lvl+0x16c/0x1f0 [ 547.554230][T12223] should_fail_ex+0x50a/0x650 [ 547.554260][T12223] ? __pfx___might_resched+0x10/0x10 [ 547.554317][T12223] should_fail_alloc_page+0xe7/0x130 [ 547.554351][T12223] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 547.554403][T12223] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 547.554459][T12223] ? hlock_class+0x4e/0x130 [ 547.554493][T12223] ? mark_lock+0xb5/0xc60 [ 547.554542][T12223] ? __pfx_mark_lock+0x10/0x10 [ 547.554584][T12223] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.554632][T12223] ? finish_task_switch.isra.0+0x217/0xcc0 [ 547.554681][T12223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.554742][T12223] ? hlock_class+0x4e/0x130 [ 547.554786][T12223] ? hlock_class+0x4e/0x130 [ 547.554819][T12223] ? __lock_acquire+0xcc5/0x3c40 [ 547.554865][T12223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.554933][T12223] ? policy_nodemask+0xea/0x4e0 [ 547.554968][T12223] alloc_pages_mpol+0x1fc/0x540 [ 547.555002][T12223] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 547.555040][T12223] ? __lock_acquire+0xcc5/0x3c40 [ 547.555094][T12223] folio_alloc_mpol_noprof+0x36/0x2f0 [ 547.555135][T12223] vma_alloc_folio_noprof+0xee/0x1b0 [ 547.555173][T12223] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 547.555211][T12223] ? find_held_lock+0x2d/0x110 [ 547.555256][T12223] do_pte_missing+0x202f/0x3e10 [ 547.555319][T12223] __handle_mm_fault+0x103c/0x2a40 [ 547.555376][T12223] ? lock_vma_under_rcu+0x6b9/0x980 [ 547.555421][T12223] ? __pfx___handle_mm_fault+0x10/0x10 [ 547.555505][T12223] handle_mm_fault+0x3fa/0xaa0 [ 547.555563][T12223] do_user_addr_fault+0x60d/0x13f0 [ 547.555620][T12223] exc_page_fault+0x5c/0xc0 [ 547.555667][T12223] asm_exc_page_fault+0x26/0x30 [ 547.555711][T12223] RIP: 0033:0x7fd1bd858b7b [ 547.555737][T12223] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 547.555767][T12223] RSP: 002b:00007fd1be877fb0 EFLAGS: 00010202 [ 547.555792][T12223] RAX: 0000000000000000 RBX: 00007fd1bdba5fa0 RCX: 0000000000000000 [ 547.555812][T12223] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001940 [ 547.555832][T12223] RBP: 00007fd1bda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 547.555852][T12223] R10: 0000200000001940 R11: 0000000000000000 R12: 0000000000000000 [ 547.555872][T12223] R13: 0000000000000000 R14: 00007fd1bdba5fa0 R15: 00007ffdb858ae58 [ 547.555920][T12223] [ 547.963704][T12223] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 548.137034][T12229] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1436'. [ 548.167244][T12227] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 548.769997][T12241] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 549.223571][T12247] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 550.295606][T12265] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 550.508180][T12271] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 550.743288][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1445'. [ 550.968403][T12270] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 551.255448][T12283] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.306372][T12285] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.335304][T12286] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.370576][T12287] blktrace: Concurrent blktraces are not allowed on mtdblock0 [ 551.383256][T12289] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.400628][T12288] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.439590][T12290] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 551.474451][T12282] could not allocate digest TFM handle [ 551.627196][T12291] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 551.997005][T12292] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 552.049998][T12284] could not allocate digest TFM handle [ 552.054628][T12294] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 552.460945][T12299] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 553.049236][ T2017] Process accounting resumed can't run '/sbi[ 554.507270][T12312] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1453'. can't run '/sbican't run '/sbi[ 556.489813][T12350] FAULT_INJECTION: forcing a failure. [ 556.489813][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 556.576417][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.4.1461 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 556.576467][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 556.576487][T12350] Call Trace: [ 556.576496][T12350] [ 556.576508][T12350] dump_stack_lvl+0x16c/0x1f0 [ 556.576565][T12350] should_fail_ex+0x50a/0x650 [ 556.576596][T12350] ? fs_reclaim_acquire+0xae/0x150 [ 556.576639][T12350] ? smaps_rollup_open+0x4c/0x150 [ 556.576677][T12350] should_failslab+0xc2/0x120 [ 556.576707][T12350] __kmalloc_cache_noprof+0x68/0x410 [ 556.576751][T12350] ? __pfx_apparmor_file_open+0x10/0x10 [ 556.576794][T12350] ? lock_acquire+0x2f/0xb0 [ 556.576846][T12350] smaps_rollup_open+0x4c/0x150 [ 556.576889][T12350] do_dentry_open+0x735/0x1c40 [ 556.576938][T12350] ? __pfx_smaps_rollup_open+0x10/0x10 [ 556.576987][T12350] vfs_open+0x82/0x3f0 [ 556.577019][T12350] ? may_open+0x1f2/0x400 [ 556.577059][T12350] path_openat+0x1e88/0x2d80 [ 556.577120][T12350] ? __pfx_path_openat+0x10/0x10 [ 556.577168][T12350] ? __pfx___lock_acquire+0x10/0x10 [ 556.577213][T12350] ? lock_acquire.part.0+0x11b/0x380 [ 556.577259][T12350] ? find_held_lock+0x2d/0x110 [ 556.577299][T12350] do_filp_open+0x20c/0x470 [ 556.577349][T12350] ? __pfx_do_filp_open+0x10/0x10 [ 556.577395][T12350] ? find_held_lock+0x2d/0x110 [ 556.577448][T12350] ? __pfx_kfree_link+0x10/0x10 [ 556.577497][T12350] ? alloc_fd+0x41f/0x760 [ 556.577555][T12350] do_sys_openat2+0x17a/0x1e0 [ 556.577589][T12350] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.577639][T12350] __x64_sys_openat+0x175/0x210 [ 556.577675][T12350] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.577726][T12350] do_syscall_64+0xcd/0x250 [ 556.577779][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.577824][T12350] RIP: 0033:0x7f8e9998d169 [ 556.577849][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.577882][T12350] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.577913][T12350] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 556.577934][T12350] RDX: 0000000000040000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 556.577955][T12350] RBP: 00007f8e99a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 556.577975][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.577994][T12350] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 556.578032][T12350] [ 557.082399][T12352] EXT4-fs error: 3 callbacks suppressed [ 557.082422][T12352] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 557.548206][T12359] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 557.631730][T12357] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1463'. [ 557.656350][T12360] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1463'. [ 557.727107][T12362] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 558.006128][T12364] tipc: Can't bind to reserved service type 2 [ 558.274815][T12369] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 559.388576][T12381] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleani[ 559.557607][ T2017] Process accounting resumed [ 560.264238][T12395] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.461818][ T30] audit: type=1800 audit(4294967598.789:16): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1469" name="dbroot" dev="configfs" ino=35934 res=0 errno=0 [ 560.504017][T12399] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.529561][T12398] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.612796][T12402] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 560.701036][T12403] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.836443][T12382] zswap: compressor not available [ 560.886173][T12385] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1467'. can't run '/sbi[ 562.778841][T12406] EXT4-fs error: 1 callbacks suppressed [ 562.778862][T12406] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 562.872859][T12407] FAULT_INJECTION: forcing a failure. [ 562.872859][T12407] name failslab, interval 1, probability 0, space 0, times 0 can't run '/sbi[ 562.961121][T12407] CPU: 0 UID: 0 PID: 12407 Comm: syz.6.1471 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 562.961165][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.961183][T12407] Call Trace: [ 562.961192][T12407] [ 562.961203][T12407] dump_stack_lvl+0x16c/0x1f0 [ 562.961257][T12407] should_fail_ex+0x50a/0x650 [ 562.961287][T12407] ? fs_reclaim_acquire+0xae/0x150 [ 562.961332][T12407] should_failslab+0xc2/0x120 [ 562.961364][T12407] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 562.961420][T12407] ? __pfx_simple_offset_add+0x10/0x10 [ 562.961467][T12407] ? shmem_symlink+0x269/0x890 [ 562.961511][T12407] kmemdup_noprof+0x29/0x60 [ 562.961560][T12407] shmem_symlink+0x269/0x890 [ 562.961605][T12407] ? __pfx_shmem_symlink+0x10/0x10 [ 562.961643][T12407] ? bpf_lsm_inode_permission+0x9/0x10 [ 562.961690][T12407] ? security_inode_permission+0xbf/0x260 [ 562.961733][T12407] ? inode_permission+0xdd/0x5f0 [ 562.961773][T12407] vfs_symlink+0x3e8/0x660 [ 562.961818][T12407] do_symlinkat+0x263/0x310 [ 562.961871][T12407] ? __pfx_do_symlinkat+0x10/0x10 [ 562.961919][T12407] ? getname_flags.part.0+0x1c5/0x550 [ 562.961964][T12407] ? rcu_is_watching+0x12/0xc0 [ 562.962005][T12407] __x64_sys_symlinkat+0x93/0xc0 [ 562.962060][T12407] do_syscall_64+0xcd/0x250 [ 562.962112][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.962160][T12407] RIP: 0033:0x7f477b78d169 [ 562.962186][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.962218][T12407] RSP: 002b:00007f477c5f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 562.962249][T12407] RAX: ffffffffffffffda RBX: 00007f477b9a5fa0 RCX: 00007f477b78d169 [ 562.962270][T12407] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000000000 [ 562.962291][T12407] RBP: 00007f477b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 562.962311][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.962331][T12407] R13: 0000000000000000 R14: 00007f477b9a5fa0 R15: 00007fff40fe0aa8 [ 562.962371][T12407] [ 563.501812][ T52] Process accounting resumed [ 563.956587][T12420] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 564.517367][T12416] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1472'. [ 564.673402][T12434] Invalid ELF header magic: != ELF [ 565.053238][T12441] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleani[ 565.991833][T12459] ucma_write: process 370 (syz.5.1482) changed security contexts after opening file descriptor, this is not allowed. [ 566.135556][T12462] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.180536][T12463] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.247807][T12434] can: request_module (can-proto-4) failed. can't run '/sbi[ 566.449529][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1484'. [ 567.310653][T12476] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 567.417781][T12479] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 568.318446][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.324817][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.387406][T12488] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 568.809341][T12481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.872894][T12481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.889488][T12481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.950702][T12481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 569.423085][T12510] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 569.449476][T12507] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1492'. [ 569.475233][T12511] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 569.503329][T12513] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 569.687140][T12517] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 569.716461][T12519] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1493'. [ 569.769339][T12522] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 569.796423][T12516] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1493'. [ 570.066100][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.197111][T12526] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 570.237682][T12525] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1494'. [ 570.313553][T12528] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 570.560935][T12532] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 570.875630][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.947134][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.953236][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.312481][T12535] Invalid ELF header magic: != ELF [ 571.331651][ T52] Process accounting resumed [ 571.632341][T12544] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 572.667052][T12537] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1497'. can't run '/sbi[ 573.315216][T12556] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 573.376154][T12556] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 573.384761][T12556] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 573.635102][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1503'. [ 573.644777][T12556] page_type: f5(slab) [ 573.756364][T12556] raw: 00fff00000000040 ffff88801c293780 dead000000000122 0000000000000000 [ 573.765052][T12556] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 573.819648][T12564] EXT4-fs error: 2 callbacks suppressed [ 573.819669][T12564] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 573.911145][T12565] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 574.143804][T12556] head: 00fff00000000040 ffff88801c293780 dead000000000122 0000000000000000 [ 574.263091][T12556] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 574.271973][T12556] head: 00fff00000000003 ffffea0001ff8001 ffffffffffffffff 0000000000000000 [ 574.280774][T12556] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 574.282497][T12535] can: request_module (can-proto-4) failed. [ 574.289640][T12556] page dumped because: unmovable page [ 574.301081][T12556] page_owner tracks the page as allocated [ 574.307087][T12556] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevd), ts 569443186822, free_ts 569404460021 [ 574.328201][T12556] post_alloc_hook+0x181/0x1b0 [ 574.333053][T12556] get_page_from_freelist+0xfce/0x2f80 [ 574.338682][T12556] __alloc_frozen_pages_noprof+0x221/0x2470 [ 574.344667][T12556] alloc_pages_mpol+0x1fc/0x540 [ 574.355599][T12556] new_slab+0x23d/0x330 [ 574.359962][T12556] ___slab_alloc+0xc5d/0x1720 [ 574.364725][T12556] __slab_alloc.constprop.0+0x56/0xb0 [ 574.370452][T12556] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 574.375924][T12556] getname_flags.part.0+0x4c/0x550 [ 574.381175][T12556] __x64_sys_unlink+0xb0/0x110 [ 574.396024][T12556] do_syscall_64+0xcd/0x250 [ 574.400802][T12556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.435833][T12556] page last free pid 12509 tgid 12509 stack trace: [ 574.556080][T12556] free_frozen_pages+0x6db/0xfb0 [ 574.626063][T12556] __put_partials+0x14c/0x170 [ 574.686042][T12556] qlist_free_all+0x4e/0x120 [ 574.709743][T12556] kasan_quarantine_reduce+0x195/0x1e0 [ 574.766101][T12556] __kasan_slab_alloc+0x69/0x90 [ 574.771116][T12556] __kmalloc_node_noprof+0x1d0/0x510 [ 574.829639][T12556] __kvmalloc_node_noprof+0xad/0x1a0 [ 574.835067][T12556] do_coredump+0x17b2/0x4410 [ 574.855199][T12571] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 574.886033][T12556] get_signal+0x230b/0x26c0 [ 574.890664][T12556] arch_do_signal_or_restart+0x90/0x7e0 can't run '/sbi[ 574.966074][T12556] irqentry_exit_to_user_mode+0x13f/0x280 [ 574.972022][T12556] asm_exc_page_fault+0x26/0x30 [ 575.546430][T12579] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 575.593931][T12582] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1508'. [ 575.617438][T12578] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1508'. [ 575.770872][T12590] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 575.949449][T12592] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 577.018674][T12599] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 577.353846][T12603] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 577.427510][T12602] Falling back ldisc for ttyS2. [ 577.767106][T12612] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 577.987214][T12616] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 578.132264][T12600] zswap: compressor not available [ 578.962313][T12629] Scaler: ================= START STATUS ================= [ 579.018593][T12629] Scaler: ================== END STATUS ================== [ 579.149520][T12632] EXT4-fs error: 4 callbacks suppressed [ 579.149543][T12632] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 579.320318][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. can't run '/sbi[ 580.327345][ T52] Process accounting resumed [ 580.407726][T12644] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 580.772010][T12649] tipc: Started in network mode [ 580.799352][T12649] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 580.807384][T12653] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 580.844838][T12654] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1526'. [ 580.915914][T12649] tipc: Node number set to 2387504917 [ 580.955899][T12658] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 580.975404][T12650] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1526'. [ 581.047370][T12646] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1524'. [ 581.493357][T12662] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 582.017117][T12669] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 582.063363][T12672] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1529'. [ 582.113059][T12668] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1529'. [ 582.197573][T12674] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 582.557330][T12681] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 583.642331][T12695] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 583.681245][T12693] FAULT_INJECTION: forcing a failure. [ 583.681245][T12693] name failslab, interval 1, probability 0, space 0, times 0 can't run '/sbi[ 583.750014][T12693] CPU: 0 UID: 0 PID: 12693 Comm: syz.0.1534 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 583.750071][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 583.750090][T12693] Call Trace: [ 583.750099][T12693] [ 583.750110][T12693] dump_stack_lvl+0x16c/0x1f0 [ 583.750165][T12693] should_fail_ex+0x50a/0x650 [ 583.750197][T12693] ? fs_reclaim_acquire+0xae/0x150 [ 583.750244][T12693] should_failslab+0xc2/0x120 [ 583.750276][T12693] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 583.750326][T12693] ? _raw_spin_unlock+0x28/0x50 [ 583.750368][T12693] ? alloc_inode+0xbf/0x230 [ 583.750407][T12693] alloc_inode+0xbf/0x230 [ 583.750438][T12693] new_inode+0x22/0x210 [ 583.750474][T12693] simple_fill_super+0x306/0x720 [ 583.750527][T12693] ? __pfx_nfsd_fill_super+0x10/0x10 [ 583.750577][T12693] nfsd_fill_super+0x90/0x530 [ 583.750620][T12693] ? __pfx_set_anon_super_fc+0x10/0x10 [ 583.750664][T12693] ? __pfx_nfsd_fill_super+0x10/0x10 [ 583.750711][T12693] get_tree_keyed+0x10b/0x1d0 [ 583.750760][T12693] vfs_get_tree+0x8b/0x340 [ 583.750798][T12693] path_mount+0x14e6/0x1f10 [ 583.750855][T12693] ? kmem_cache_free+0x2e2/0x4d0 [ 583.750904][T12693] ? __pfx_path_mount+0x10/0x10 [ 583.750963][T12693] ? putname+0x13c/0x180 [ 583.751000][T12693] __x64_sys_mount+0x28f/0x310 [ 583.751038][T12693] ? __pfx___x64_sys_mount+0x10/0x10 [ 583.751082][T12693] do_syscall_64+0xcd/0x250 [ 583.751136][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.751184][T12693] RIP: 0033:0x7fd1bd98d169 [ 583.751209][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.751241][T12693] RSP: 002b:00007fd1be879038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 583.751272][T12693] RAX: ffffffffffffffda RBX: 00007fd1bdba5fa0 RCX: 00007fd1bd98d169 [ 583.751293][T12693] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 583.751324][T12693] RBP: 00007fd1bda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 583.751343][T12693] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 583.751362][T12693] R13: 0000000000000000 R14: 00007fd1bdba5fa0 R15: 00007ffdb858ae58 [ 583.751400][T12693] [ 584.728339][T12704] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 584.846092][ T2017] Process accounting resumed [ 585.491952][T12708] tipc: Started in network mode [ 585.624195][T12708] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 585.808052][T12711] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 585.842060][T12708] tipc: Node number set to 2387504917 can't run '/sbi[ 586.606649][T12705] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1537'. [ 586.871465][T12722] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 587.325856][T12727] FAULT_INJECTION: forcing a failure. [ 587.325856][T12727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.426197][T12727] CPU: 1 UID: 0 PID: 12727 Comm: syz.0.1543 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 587.426239][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.426256][T12727] Call Trace: [ 587.426265][T12727] [ 587.426276][T12727] dump_stack_lvl+0x16c/0x1f0 [ 587.426327][T12727] should_fail_ex+0x50a/0x650 [ 587.426356][T12727] ? __pfx___might_resched+0x10/0x10 [ 587.426410][T12727] should_fail_alloc_page+0xe7/0x130 [ 587.426444][T12727] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 587.426495][T12727] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 587.426558][T12727] ? __pfx_mark_lock+0x10/0x10 [ 587.426604][T12727] ? __pfx_mark_lock+0x10/0x10 [ 587.426647][T12727] ? __pfx_stack_trace_save+0x10/0x10 [ 587.426682][T12727] ? __memcg_kmem_charge_page+0x1b0/0x2b0 [ 587.426736][T12727] ? stack_depot_save_flags+0x28/0x9c0 [ 587.426767][T12727] ? rcu_is_watching+0x12/0xc0 [ 587.426802][T12727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.426857][T12727] ? kasan_save_stack+0x42/0x60 [ 587.426903][T12727] ? kasan_save_track+0x14/0x30 [ 587.426959][T12727] ? hlock_class+0x4e/0x130 [ 587.426991][T12727] ? __lock_acquire+0x15a9/0x3c40 [ 587.427039][T12727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 587.427088][T12727] ? policy_nodemask+0xea/0x4e0 [ 587.427120][T12727] alloc_pages_mpol+0x1fc/0x540 [ 587.427156][T12727] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 587.427191][T12727] ? lock_acquire.part.0+0x11b/0x380 [ 587.427241][T12727] ? __pfx_filemap_map_pages+0x10/0x10 [ 587.427278][T12727] alloc_pages_noprof+0x131/0x390 [ 587.427308][T12727] pte_alloc_one+0x20/0x390 [ 587.427358][T12727] __do_fault+0x320/0x490 [ 587.427395][T12727] ? __pfx_filemap_map_pages+0x10/0x10 [ 587.427433][T12727] do_pte_missing+0x1a8/0x3e10 [ 587.427483][T12727] ? do_raw_spin_unlock+0x172/0x230 [ 587.427523][T12727] ? __pmd_alloc+0x3c2/0x870 [ 587.427564][T12727] __handle_mm_fault+0x103c/0x2a40 [ 587.427628][T12727] ? __pfx___handle_mm_fault+0x10/0x10 [ 587.427675][T12727] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 587.427746][T12727] ? find_vma+0xc0/0x140 [ 587.427784][T12727] ? __pfx_find_vma+0x10/0x10 [ 587.427829][T12727] handle_mm_fault+0x3fa/0xaa0 [ 587.427887][T12727] do_user_addr_fault+0x7a3/0x13f0 [ 587.427943][T12727] exc_page_fault+0x5c/0xc0 [ 587.427988][T12727] asm_exc_page_fault+0x26/0x30 [ 587.428032][T12727] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 587.428071][T12727] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 587.428101][T12727] RSP: 0018:ffffc9000c16faf8 EFLAGS: 00050202 [ 587.428125][T12727] RAX: 0000000000000030 RBX: 0000000000000002 RCX: 0000000000000002 [ 587.428143][T12727] RDX: ffffed100fe1b801 RSI: ffff88807f0dc000 RDI: 0000000000000000 [ 587.428161][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100fe1b800 [ 587.428179][T12727] R10: ffff88807f0dc001 R11: 0000000000000002 R12: ffffc9000c16fda0 [ 587.428196][T12727] R13: 0000000000000002 R14: ffff88807f0dc000 R15: 00007ffffffff000 [ 587.428237][T12727] _copy_to_iter+0x385/0x1560 [ 587.428275][T12727] ? trace_lock_acquire+0x14e/0x1f0 [ 587.428312][T12727] ? __pfx_lock_release+0x10/0x10 [ 587.428359][T12727] ? __pfx__copy_to_iter+0x10/0x10 [ 587.428393][T12727] ? __virt_addr_valid+0x1a4/0x590 [ 587.428430][T12727] ? __virt_addr_valid+0x5e/0x590 [ 587.428462][T12727] ? __phys_addr_symbol+0x30/0x80 [ 587.428493][T12727] ? __check_object_size+0x488/0x710 [ 587.428540][T12727] seq_read_iter+0xd00/0x12b0 [ 587.428599][T12727] kernfs_fop_read_iter+0x414/0x580 [ 587.428632][T12727] ? rw_verify_area+0xcf/0x680 [ 587.428676][T12727] vfs_read+0x886/0xbf0 [ 587.428726][T12727] ? __pfx_vfs_read+0x10/0x10 [ 587.428797][T12727] ksys_read+0x12b/0x250 [ 587.428841][T12727] ? __pfx_ksys_read+0x10/0x10 [ 587.428898][T12727] do_syscall_64+0xcd/0x250 [ 587.428949][T12727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.428992][T12727] RIP: 0033:0x7fd1bd98d169 [ 587.429017][T12727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.429047][T12727] RSP: 002b:00007fd1be879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.429075][T12727] RAX: ffffffffffffffda RBX: 00007fd1bdba5fa0 RCX: 00007fd1bd98d169 [ 587.429097][T12727] RDX: 00000000000000e8 RSI: 0000000000000000 RDI: 0000000000000003 [ 587.429115][T12727] RBP: 00007fd1be879090 R08: 0000000000000000 R09: 0000000000000000 [ 587.429134][T12727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.429152][T12727] R13: 0000000000000000 R14: 00007fd1bdba5fa0 R15: 00007ffdb858ae58 [ 587.429193][T12727] [ 588.184012][T12728] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 589.083080][T12737] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 589.128834][T12736] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1546'. [ 589.227172][T12740] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 589.323062][T12744] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 590.403690][T12755] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 590.689224][ T52] Process accounting resumed [ 590.740722][T12759] FAULT_INJECTION: forcing a failure. [ 590.740722][T12759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.811606][T12759] CPU: 0 UID: 0 PID: 12759 Comm: syz.0.1552 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 590.811648][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 590.811667][T12759] Call Trace: [ 590.811676][T12759] [ 590.811688][T12759] dump_stack_lvl+0x16c/0x1f0 [ 590.811742][T12759] should_fail_ex+0x50a/0x650 [ 590.811772][T12759] ? __pfx___might_resched+0x10/0x10 [ 590.811830][T12759] should_fail_alloc_page+0xe7/0x130 [ 590.811864][T12759] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 590.811911][T12759] ? hlock_class+0x4e/0x130 [ 590.811949][T12759] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 590.812005][T12759] ? __pfx_mark_lock+0x10/0x10 [ 590.812051][T12759] ? __pfx_stack_trace_save+0x10/0x10 [ 590.812087][T12759] ? __memcg_kmem_charge_page+0x1b0/0x2b0 [ 590.812143][T12759] ? stack_depot_save_flags+0x28/0x9c0 [ 590.812176][T12759] ? rcu_is_watching+0x12/0xc0 [ 590.812228][T12759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 590.812290][T12759] ? hlock_class+0x4e/0x130 [ 590.812341][T12759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 590.812394][T12759] ? policy_nodemask+0xea/0x4e0 [ 590.812429][T12759] alloc_pages_mpol+0x1fc/0x540 [ 590.812462][T12759] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 590.812506][T12759] alloc_pages_noprof+0x131/0x390 [ 590.812539][T12759] pte_alloc_one+0x20/0x390 [ 590.812589][T12759] do_pte_missing+0x1aff/0x3e10 [ 590.812647][T12759] ? do_raw_spin_unlock+0x172/0x230 [ 590.812682][T12759] ? __pmd_alloc+0x3c2/0x870 [ 590.812729][T12759] __handle_mm_fault+0x103c/0x2a40 [ 590.812793][T12759] ? __pfx___handle_mm_fault+0x10/0x10 [ 590.812841][T12759] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 590.812913][T12759] ? find_vma+0xc0/0x140 [ 590.812952][T12759] ? __pfx_find_vma+0x10/0x10 [ 590.812998][T12759] handle_mm_fault+0x3fa/0xaa0 [ 590.813057][T12759] do_user_addr_fault+0x7a3/0x13f0 [ 590.813134][T12759] exc_page_fault+0x5c/0xc0 [ 590.813182][T12759] asm_exc_page_fault+0x26/0x30 [ 590.813232][T12759] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 590.813271][T12759] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 590.813302][T12759] RSP: 0018:ffffc90003027d18 EFLAGS: 00050202 [ 590.813328][T12759] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000004 [ 590.813345][T12759] RDX: fffff52000604fb8 RSI: 0000000000000038 RDI: ffffc90003027db8 [ 590.813364][T12759] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000604fb7 [ 590.813382][T12759] R10: ffffc90003027dbb R11: 0000000000000000 R12: 0000000000000000 [ 590.813400][T12759] R13: ffffc90003027db8 R14: ffffc90003027db8 R15: 0000000000000004 [ 590.813440][T12759] _copy_from_user+0x98/0xd0 [ 590.813478][T12759] video_usercopy+0xedb/0x1620 [ 590.813521][T12759] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 590.813563][T12759] ? __pfx_video_usercopy+0x10/0x10 [ 590.813632][T12759] v4l2_ioctl+0x1ba/0x250 [ 590.813668][T12759] ? __pfx_v4l2_ioctl+0x10/0x10 [ 590.813708][T12759] __x64_sys_ioctl+0x190/0x200 [ 590.813751][T12759] do_syscall_64+0xcd/0x250 [ 590.813803][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.813848][T12759] RIP: 0033:0x7fd1bd98d169 [ 590.813871][T12759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.813901][T12759] RSP: 002b:00007fd1be879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.813929][T12759] RAX: ffffffffffffffda RBX: 00007fd1bdba5fa0 RCX: 00007fd1bd98d169 [ 590.813949][T12759] RDX: 0000000000000038 RSI: 00000000c008561b RDI: 0000000000000003 [ 590.813966][T12759] RBP: 00007fd1be879090 R08: 0000000000000000 R09: 0000000000000000 [ 590.813984][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.814000][T12759] R13: 0000000000000000 R14: 00007fd1bdba5fa0 R15: 00007ffdb858ae58 [ 590.814039][T12759] [ 591.476985][T12764] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1553'. [ 591.509330][T12765] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 591.999079][T12772] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 592.008169][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 592.054026][T12770] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1555'. [ 592.135872][T12773] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1555'. [ 592.182920][T12777] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 592.336050][T12771] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 592.702647][T12783] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 593.107163][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1560'. [ 593.229865][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 593.236643][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 593.243195][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 593.249763][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 593.256339][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 593.262813][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 593.269416][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 593.275886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.278766][T12792] net_ratelimit: 77 callbacks suppressed [ 593.278791][T12792] openvswitch: netlink: IP tunnel dst address not specified [ 593.283865][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.304664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.312659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.320583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.328592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.336577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.344514][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.352460][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.360459][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.368420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.376417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.384283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.392321][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.400250][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.408242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.416154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.425692][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.425724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.425794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 593.425823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 593.790622][T12797] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 595.006988][T12817] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 595.618258][T12827] FAULT_INJECTION: forcing a failure. [ 595.618258][T12827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.693335][T12826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 595.813737][T12827] CPU: 1 UID: 0 PID: 12827 Comm: syz.5.1568 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 595.813780][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 595.813797][T12827] Call Trace: [ 595.813806][T12827] [ 595.813818][T12827] dump_stack_lvl+0x16c/0x1f0 [ 595.813869][T12827] should_fail_ex+0x50a/0x650 [ 595.813905][T12827] _copy_from_user+0x2e/0xd0 [ 595.813943][T12827] copy_msghdr_from_user+0x99/0x160 [ 595.813996][T12827] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.814060][T12827] ? __pfx___lock_acquire+0x10/0x10 [ 595.814113][T12827] ___sys_recvmsg+0xdc/0x1a0 [ 595.814166][T12827] ? __pfx____sys_recvmsg+0x10/0x10 [ 595.814218][T12827] ? find_held_lock+0x2d/0x110 [ 595.814272][T12827] ? __pfx___might_resched+0x10/0x10 [ 595.814324][T12827] ? __might_fault+0xe3/0x190 [ 595.814363][T12827] do_recvmmsg+0x2f8/0x740 [ 595.814421][T12827] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.814470][T12827] ? vfs_write+0x306/0x1150 [ 595.814522][T12827] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 595.814584][T12827] ? __fget_files+0x206/0x3a0 [ 595.814641][T12827] __x64_sys_recvmmsg+0x239/0x290 [ 595.814676][T12827] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.814727][T12827] do_syscall_64+0xcd/0x250 [ 595.814779][T12827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.814825][T12827] RIP: 0033:0x7ff12ab8d169 [ 595.814850][T12827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.814881][T12827] RSP: 002b:00007ff1289f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.814910][T12827] RAX: ffffffffffffffda RBX: 00007ff12ada6160 RCX: 00007ff12ab8d169 [ 595.814930][T12827] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 595.814948][T12827] RBP: 00007ff1289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 595.814966][T12827] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 595.814984][T12827] R13: 0000000000000000 R14: 00007ff12ada6160 R15: 00007ffd42b2d2e8 [ 595.815021][T12827] [ 596.122918][T12829] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 596.182169][T12822] Invalid ELF header magic: != ELF can't run '/sbi[ 596.336426][T12831] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 596.783798][T12837] FAULT_INJECTION: forcing a failure. [ 596.783798][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 596.826191][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.6.1574 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 596.826234][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 596.826253][T12837] Call Trace: [ 596.826262][T12837] [ 596.826274][T12837] dump_stack_lvl+0x16c/0x1f0 [ 596.826329][T12837] should_fail_ex+0x50a/0x650 [ 596.826361][T12837] ? fs_reclaim_acquire+0xae/0x150 [ 596.826407][T12837] ? __pfx_filemap_map_pages+0x10/0x10 [ 596.826446][T12837] should_failslab+0xc2/0x120 [ 596.826477][T12837] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 596.826529][T12837] ? lock_acquire.part.0+0x11b/0x380 [ 596.826575][T12837] ? ptlock_alloc+0x1f/0x70 [ 596.826626][T12837] ? __pfx_filemap_map_pages+0x10/0x10 [ 596.826668][T12837] ptlock_alloc+0x1f/0x70 [ 596.826717][T12837] pte_alloc_one+0x74/0x390 [ 596.826769][T12837] __do_fault+0x320/0x490 [ 596.826808][T12837] ? __pfx_filemap_map_pages+0x10/0x10 [ 596.826849][T12837] do_pte_missing+0x1a8/0x3e10 [ 596.826900][T12837] ? do_raw_spin_unlock+0x172/0x230 [ 596.826935][T12837] ? __pmd_alloc+0x3c2/0x870 [ 596.826991][T12837] __handle_mm_fault+0x103c/0x2a40 [ 596.827054][T12837] ? __pfx___handle_mm_fault+0x10/0x10 [ 596.827103][T12837] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 596.827176][T12837] ? find_vma+0xc0/0x140 [ 596.827216][T12837] ? __pfx_find_vma+0x10/0x10 [ 596.827262][T12837] handle_mm_fault+0x3fa/0xaa0 [ 596.827321][T12837] do_user_addr_fault+0x7a3/0x13f0 [ 596.827378][T12837] exc_page_fault+0x5c/0xc0 [ 596.827425][T12837] asm_exc_page_fault+0x26/0x30 [ 596.827471][T12837] RIP: 0010:rep_movs_alternative+0x15/0x70 [ 596.827510][T12837] Code: cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 [ 596.827542][T12837] RSP: 0018:ffffc9000134faf8 EFLAGS: 00050202 [ 596.827566][T12837] RAX: 0000000000000030 RBX: 0000000000000002 RCX: 0000000000000002 [ 596.827584][T12837] RDX: ffffed1004944001 RSI: ffff888024a20000 RDI: 0000000000000000 [ 596.827602][T12837] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1004944000 [ 596.827619][T12837] R10: ffff888024a20001 R11: 0000000000000002 R12: ffffc9000134fda0 [ 596.827638][T12837] R13: 0000000000000002 R14: ffff888024a20000 R15: 00007ffffffff000 [ 596.827677][T12837] _copy_to_iter+0x385/0x1560 [ 596.827717][T12837] ? trace_lock_acquire+0x14e/0x1f0 [ 596.827755][T12837] ? __pfx_lock_release+0x10/0x10 [ 596.827804][T12837] ? __pfx__copy_to_iter+0x10/0x10 [ 596.827838][T12837] ? __virt_addr_valid+0x1a4/0x590 [ 596.827877][T12837] ? __virt_addr_valid+0x5e/0x590 [ 596.827910][T12837] ? __phys_addr_symbol+0x30/0x80 [ 596.827943][T12837] ? __check_object_size+0x488/0x710 [ 596.827992][T12837] seq_read_iter+0xd00/0x12b0 [ 596.828054][T12837] kernfs_fop_read_iter+0x414/0x580 [ 596.828089][T12837] ? rw_verify_area+0xcf/0x680 [ 596.828134][T12837] vfs_read+0x886/0xbf0 [ 596.828185][T12837] ? __pfx_vfs_read+0x10/0x10 [ 596.828259][T12837] ksys_read+0x12b/0x250 [ 596.828302][T12837] ? __pfx_ksys_read+0x10/0x10 [ 596.828359][T12837] do_syscall_64+0xcd/0x250 [ 596.828413][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.828458][T12837] RIP: 0033:0x7f477b78d169 [ 596.828482][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.828510][T12837] RSP: 002b:00007f477c5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.828539][T12837] RAX: ffffffffffffffda RBX: 00007f477b9a5fa0 RCX: 00007f477b78d169 [ 596.828560][T12837] RDX: 00000000000000e8 RSI: 0000000000000000 RDI: 0000000000000003 [ 596.828577][T12837] RBP: 00007f477c5f4090 R08: 0000000000000000 R09: 0000000000000000 [ 596.828595][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.828612][T12837] R13: 0000000000000000 R14: 00007f477b9a5fa0 R15: 00007fff40fe0aa8 [ 596.828653][T12837] [ 597.221375][T12838] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 597.837012][T12846] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 597.937681][T12848] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 598.017110][T12850] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 598.095884][T12845] zswap: compressor not available [ 598.137667][T12854] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 598.245762][T12855] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 598.272008][T12856] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1577'. [ 598.315601][T12852] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1577'. [ 598.346203][T12858] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 599.048407][T12861] FAULT_INJECTION: forcing a failure. [ 599.048407][T12861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.092351][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.4.1578 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 599.092413][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 599.092437][T12861] Call Trace: [ 599.092446][T12861] [ 599.092457][T12861] dump_stack_lvl+0x16c/0x1f0 [ 599.092510][T12861] should_fail_ex+0x50a/0x650 [ 599.092539][T12861] ? __pfx___might_resched+0x10/0x10 [ 599.092596][T12861] should_fail_alloc_page+0xe7/0x130 [ 599.092629][T12861] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 599.092681][T12861] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 599.092737][T12861] ? __pfx_mark_lock+0x10/0x10 [ 599.092788][T12861] ? __pfx___lock_acquire+0x10/0x10 [ 599.092833][T12861] ? mark_lock+0xb5/0xc60 [ 599.092874][T12861] ? find_held_lock+0x2d/0x110 [ 599.092912][T12861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 599.092991][T12861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.093046][T12861] ? policy_nodemask+0xea/0x4e0 [ 599.093081][T12861] alloc_pages_mpol+0x1fc/0x540 [ 599.093115][T12861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 599.093147][T12861] ? find_held_lock+0x2d/0x110 [ 599.093190][T12861] folio_alloc_mpol_noprof+0x36/0x2f0 [ 599.093231][T12861] shmem_alloc_folio+0x135/0x160 [ 599.093286][T12861] shmem_alloc_and_add_folio+0x48e/0xc10 [ 599.093331][T12861] ? shmem_huge_global_enabled+0x72/0x6b0 [ 599.093365][T12861] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 599.093407][T12861] ? shmem_allowable_huge_orders+0xd0/0x410 [ 599.093460][T12861] shmem_get_folio_gfp+0x689/0x1530 [ 599.093509][T12861] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 599.093553][T12861] ? filemap_map_pages+0xf92/0x16b0 [ 599.093599][T12861] shmem_fault+0x200/0xae0 [ 599.093641][T12861] ? __pfx_shmem_fault+0x10/0x10 [ 599.093697][T12861] ? do_pte_missing+0xde9/0x3e10 [ 599.093745][T12861] ? __pfx_lock_release+0x10/0x10 [ 599.093798][T12861] __do_fault+0x10a/0x490 [ 599.093836][T12861] do_pte_missing+0xecf/0x3e10 [ 599.093884][T12861] ? do_raw_spin_unlock+0x172/0x230 [ 599.093918][T12861] ? __pmd_alloc+0x3c2/0x870 [ 599.093982][T12861] __handle_mm_fault+0x103c/0x2a40 [ 599.094043][T12861] ? __pfx___handle_mm_fault+0x10/0x10 [ 599.094089][T12861] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 599.094159][T12861] ? find_vma+0xc0/0x140 [ 599.094198][T12861] ? __pfx_find_vma+0x10/0x10 [ 599.094243][T12861] handle_mm_fault+0x3fa/0xaa0 [ 599.094301][T12861] do_user_addr_fault+0x7a3/0x13f0 [ 599.094359][T12861] exc_page_fault+0x5c/0xc0 [ 599.094406][T12861] asm_exc_page_fault+0x26/0x30 [ 599.094457][T12861] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 599.094494][T12861] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 599.094525][T12861] RSP: 0018:ffffc9000134fd18 EFLAGS: 00050202 [ 599.094550][T12861] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000004 [ 599.094567][T12861] RDX: fffff52000269fb8 RSI: 0000000000000038 RDI: ffffc9000134fdb8 [ 599.094586][T12861] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000269fb7 [ 599.094605][T12861] R10: ffffc9000134fdbb R11: 0000000000000000 R12: 0000000000000000 [ 599.094622][T12861] R13: ffffc9000134fdb8 R14: ffffc9000134fdb8 R15: 0000000000000004 [ 599.094661][T12861] _copy_from_user+0x98/0xd0 [ 599.094698][T12861] video_usercopy+0xedb/0x1620 [ 599.094740][T12861] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 599.094781][T12861] ? __pfx_video_usercopy+0x10/0x10 [ 599.094849][T12861] v4l2_ioctl+0x1ba/0x250 [ 599.094884][T12861] ? __pfx_v4l2_ioctl+0x10/0x10 [ 599.094924][T12861] __x64_sys_ioctl+0x190/0x200 [ 599.094967][T12861] do_syscall_64+0xcd/0x250 [ 599.095020][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.095065][T12861] RIP: 0033:0x7f8e9998d169 [ 599.095089][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.095120][T12861] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.095147][T12861] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 599.095168][T12861] RDX: 0000000000000038 RSI: 00000000c008561b RDI: 0000000000000003 [ 599.095186][T12861] RBP: 00007f8e9a825090 R08: 0000000000000000 R09: 0000000000000000 [ 599.095204][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.095222][T12861] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 599.095260][T12861] [ 599.867949][T12862] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 600.655754][T10774] Process accounting resumed [ 601.046949][T12880] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1585'. can't run '/sbi[ 601.297302][T12878] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1583'. [ 601.770087][T10709] Process accounting resumed [ 602.010360][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1587'. [ 602.072120][T12896] EXT4-fs error: 3 callbacks suppressed [ 602.072167][T12896] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 602.898053][T12894] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1586'. [ 603.155754][T12912] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 604.216511][T12933] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 604.239124][T12932] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 604.272513][T12934] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 604.961827][T10709] Process accounting resumed [ 605.196908][T12941] Process accounting resumed [ 605.407954][T12949] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 606.292418][T12945] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1595'. [ 606.478348][T12957] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 607.312912][T12964] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 607.576564][T12968] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 607.837008][T12972] Invalid ELF header magic: != ELF [ 608.694244][T12980] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 608.973771][T12984] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 609.022641][T12987] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1605'. [ 609.047142][T12988] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 609.200290][T12991] FAULT_INJECTION: forcing a failure. [ 609.200290][T12991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.386144][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.6.1606 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 609.386187][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 609.386205][T12991] Call Trace: [ 609.386215][T12991] [ 609.386226][T12991] dump_stack_lvl+0x16c/0x1f0 [ 609.386279][T12991] should_fail_ex+0x50a/0x650 [ 609.386316][T12991] _copy_from_user+0x2e/0xd0 [ 609.386352][T12991] copy_msghdr_from_user+0x99/0x160 [ 609.386405][T12991] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 609.386469][T12991] ? __pfx___lock_acquire+0x10/0x10 [ 609.386519][T12991] ___sys_recvmsg+0xdc/0x1a0 [ 609.386572][T12991] ? __pfx____sys_recvmsg+0x10/0x10 [ 609.386624][T12991] ? find_held_lock+0x2d/0x110 [ 609.386677][T12991] ? __pfx___might_resched+0x10/0x10 [ 609.386728][T12991] ? __might_fault+0xe3/0x190 [ 609.386765][T12991] do_recvmmsg+0x2f8/0x740 [ 609.386830][T12991] ? __pfx_do_recvmmsg+0x10/0x10 [ 609.386880][T12991] ? vfs_write+0x306/0x1150 [ 609.386933][T12991] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 609.386995][T12991] ? __fget_files+0x206/0x3a0 [ 609.387049][T12991] __x64_sys_recvmmsg+0x239/0x290 [ 609.387085][T12991] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 609.387129][T12991] do_syscall_64+0xcd/0x250 [ 609.387180][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.387225][T12991] RIP: 0033:0x7f477b78d169 [ 609.387250][T12991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.387280][T12991] RSP: 002b:00007f477c5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 609.387310][T12991] RAX: ffffffffffffffda RBX: 00007f477b9a6160 RCX: 00007f477b78d169 [ 609.387329][T12991] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 609.387347][T12991] RBP: 00007f477c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 609.387365][T12991] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 609.387382][T12991] R13: 0000000000000000 R14: 00007f477b9a6160 R15: 00007fff40fe0aa8 [ 609.387420][T12991] [ 609.419135][T12990] Invalid ELF header magic: != ELF [ 609.626969][T13000] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 609.739923][T13001] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 610.807374][T13036] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 610.848445][T13014] block nbd8: NBD_DISCONNECT can't run '/sbi[ 610.873839][T13015] cgroup: fork rejected by pids controller in /syz6 [ 611.088571][T13050] random: crng reseeded on system resumption [ 611.750115][T13074] Invalid ELF header magic: != ELF [ 611.872706][T13092] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 612.967476][T13143] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 613.527831][T13181] FAULT_INJECTION: forcing a failure. [ 613.527831][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.560020][T13179] Invalid ELF header magic: != ELF [ 613.636034][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.4.1618 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 613.636078][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 613.636095][T13181] Call Trace: [ 613.636104][T13181] [ 613.636115][T13181] dump_stack_lvl+0x16c/0x1f0 [ 613.636166][T13181] should_fail_ex+0x50a/0x650 [ 613.636202][T13181] _copy_from_user+0x2e/0xd0 [ 613.636239][T13181] copy_msghdr_from_user+0x99/0x160 [ 613.636291][T13181] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 613.636354][T13181] ? __pfx___lock_acquire+0x10/0x10 [ 613.636412][T13181] ___sys_recvmsg+0xdc/0x1a0 [ 613.636465][T13181] ? __pfx____sys_recvmsg+0x10/0x10 [ 613.636518][T13181] ? find_held_lock+0x2d/0x110 [ 613.636571][T13181] ? __pfx___might_resched+0x10/0x10 [ 613.636621][T13181] ? __might_fault+0xe3/0x190 [ 613.636660][T13181] do_recvmmsg+0x2f8/0x740 [ 613.636719][T13181] ? __pfx_do_recvmmsg+0x10/0x10 [ 613.636768][T13181] ? vfs_write+0x306/0x1150 [ 613.636819][T13181] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 613.636880][T13181] ? __fget_files+0x206/0x3a0 [ 613.636935][T13181] __x64_sys_recvmmsg+0x239/0x290 [ 613.636970][T13181] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 613.637015][T13181] do_syscall_64+0xcd/0x250 [ 613.637067][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.637113][T13181] RIP: 0033:0x7f8e9998d169 [ 613.637138][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.637169][T13181] RSP: 002b:00007f8e9a7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 613.637199][T13181] RAX: ffffffffffffffda RBX: 00007f8e99ba6160 RCX: 00007f8e9998d169 [ 613.637219][T13181] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.637237][T13181] RBP: 00007f8e9a7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 613.637256][T13181] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 613.637276][T13181] R13: 0000000000000000 R14: 00007f8e99ba6160 R15: 00007fff3d7e4b28 [ 613.637314][T13181] [ 613.907167][T13187] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 614.088578][T13188] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 615.154567][T13199] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 615.255374][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 615.308237][T13201] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1623'. [ 616.223233][T13213] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 617.267433][T13215] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 618.328794][T13216] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 619.386823][T13224] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 620.109577][T13241] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 620.462456][T13246] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 620.787951][T13251] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 620.886923][T13252] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 621.501270][T13258] FAULT_INJECTION: forcing a failure. [ 621.501270][T13258] name failslab, interval 1, probability 0, space 0, times 0 [ 621.549587][T13262] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 621.616090][T13258] CPU: 0 UID: 0 PID: 13258 Comm: syz.4.1634 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 621.616137][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 621.616156][T13258] Call Trace: [ 621.616165][T13258] [ 621.616177][T13258] dump_stack_lvl+0x16c/0x1f0 [ 621.616227][T13258] should_fail_ex+0x50a/0x650 [ 621.616254][T13258] ? fs_reclaim_acquire+0xae/0x150 [ 621.616293][T13258] should_failslab+0xc2/0x120 [ 621.616319][T13258] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 621.616368][T13258] ? __ip_vs_tcp_init+0x37/0xc0 [ 621.616414][T13258] ? __pfx___ip_vs_tcp_init+0x10/0x10 [ 621.616458][T13258] kmemdup_noprof+0x29/0x60 [ 621.616492][T13258] __ip_vs_tcp_init+0x37/0xc0 [ 621.616537][T13258] ip_vs_protocol_net_init+0x18f/0x300 [ 621.616586][T13258] __ip_vs_init+0x239/0x520 [ 621.616618][T13258] ? __pfx___ip_vs_init+0x10/0x10 [ 621.616649][T13258] ops_init+0x1df/0x5f0 [ 621.616680][T13258] setup_net+0x21f/0x860 [ 621.616710][T13258] ? __pfx_setup_net+0x10/0x10 [ 621.616736][T13258] ? down_read_killable+0xcc/0x380 [ 621.616785][T13258] ? __pfx_down_read_killable+0x10/0x10 [ 621.616809][T13258] ? __raw_spin_lock_init+0x3a/0x110 [ 621.616839][T13258] ? debug_mutex_init+0x37/0x70 [ 621.616875][T13258] copy_net_ns+0x2a6/0x5f0 [ 621.616910][T13258] create_new_namespaces+0x3ea/0xad0 [ 621.616963][T13258] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 621.617011][T13258] ksys_unshare+0x45d/0xa40 [ 621.617040][T13258] ? __pfx_ksys_unshare+0x10/0x10 [ 621.617067][T13258] ? xfd_validate_state+0x5d/0x180 [ 621.617115][T13258] __x64_sys_unshare+0x31/0x40 [ 621.617142][T13258] do_syscall_64+0xcd/0x250 [ 621.617184][T13258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.617222][T13258] RIP: 0033:0x7f8e9998d169 [ 621.617244][T13258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.617272][T13258] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 621.617299][T13258] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 621.617317][T13258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 621.617334][T13258] RBP: 00007f8e99a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 621.617350][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.617367][T13258] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 621.617402][T13258] [ 621.655263][T10382] Process accounting resumed [ 621.657906][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.878822][ C0] hrtimer: interrupt took 252902539 ns [ 621.978915][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.628196][T13273] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 622.798184][T13267] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1636'. [ 623.051634][T13280] netlink: 350 bytes leftover after parsing attributes in process `syz.6.1639'. [ 623.256485][T13288] sctp: [Deprecated]: syz.4.1640 (pid 13288) Use of int in maxseg socket option. [ 623.256485][T13288] Use struct sctp_assoc_value instead [ 623.482195][T13298] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 623.878238][T13302] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 624.400716][T13315] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 624.407989][T13314] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 624.454189][T13316] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 624.499124][T13317] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 624.959598][T13324] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 624.985915][T13325] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 625.026973][T13328] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1647'. can't run '/sbi[ 625.066246][T13322] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1647'. [ 625.123164][T13330] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 625.855424][T13301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.879158][T13301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.929892][T13301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.972162][T13301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.080753][T13335] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 626.226514][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 626.535157][ T9] Process accounting resumed [ 627.045185][T13349] Invalid ELF header magic: != ELF [ 627.057366][T13346] FAULT_INJECTION: forcing a failure. [ 627.057366][T13346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.216264][T13346] CPU: 1 UID: 0 PID: 13346 Comm: syz.5.1654 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 627.216307][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.216332][T13346] Call Trace: [ 627.216342][T13346] can't run '/sbi[ 627.216353][T13346] dump_stack_lvl+0x16c/0x1f0 n/getty': Struct[ 627.216405][T13346] should_fail_ex+0x50a/0x650 ure needs cleani[ 627.216442][T13346] _copy_from_user+0x2e/0xd0 [ 627.216479][T13346] copy_msghdr_from_user+0x99/0x160 ng[ 627.216533][T13346] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 627.216596][T13346] ? __pfx___lock_acquire+0x10/0x10 [ 627.216648][T13346] ___sys_recvmsg+0xdc/0x1a0 [ 627.216701][T13346] ? __pfx____sys_recvmsg+0x10/0x10 [ 627.216754][T13346] ? find_held_lock+0x2d/0x110 [ 627.216807][T13346] ? __pfx___might_resched+0x10/0x10 [ 627.216857][T13346] ? __might_fault+0xe3/0x190 [ 627.216896][T13346] do_recvmmsg+0x2f8/0x740 [ 627.216954][T13346] ? __pfx_do_recvmmsg+0x10/0x10 [ 627.217004][T13346] ? vfs_write+0x306/0x1150 [ 627.217056][T13346] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 627.217119][T13346] ? __fget_files+0x206/0x3a0 [ 627.217173][T13346] __x64_sys_recvmmsg+0x239/0x290 [ 627.217209][T13346] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 627.217253][T13346] do_syscall_64+0xcd/0x250 [ 627.217303][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.217359][T13346] RIP: 0033:0x7ff12ab8d169 [ 627.217383][T13346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.217413][T13346] RSP: 002b:00007ff12b93a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 627.217442][T13346] RAX: ffffffffffffffda RBX: 00007ff12ada5fa0 RCX: 00007ff12ab8d169 [ 627.217462][T13346] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.217480][T13346] RBP: 00007ff12b93a090 R08: 0000000000000000 R09: 0000000000000000 [ 627.217498][T13346] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 627.217516][T13346] R13: 0000000000000000 R14: 00007ff12ada5fa0 R15: 00007ffd42b2d2e8 [ 627.217552][T13346] [ 627.906112][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.986536][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 627.992806][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.273360][T13348] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1651'. [ 628.496666][T13376] EXT4-fs error: 5 callbacks suppressed [ 628.496689][T13376] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 629.420483][T13384] FAULT_INJECTION: forcing a failure. [ 629.420483][T13384] name failslab, interval 1, probability 0, space 0, times 0 [ 629.479678][T13384] CPU: 1 UID: 0 PID: 13384 Comm: syz.6.1660 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 629.479731][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 629.479752][T13384] Call Trace: [ 629.479762][T13384] [ 629.479775][T13384] dump_stack_lvl+0x16c/0x1f0 [ 629.479851][T13384] should_fail_ex+0x50a/0x650 [ 629.479883][T13384] ? fs_reclaim_acquire+0xae/0x150 [ 629.479927][T13384] ? ops_init+0x77/0x5f0 [ 629.479956][T13384] should_failslab+0xc2/0x120 [ 629.479988][T13384] __kmalloc_noprof+0xcb/0x510 [ 629.480035][T13384] ? __kasan_kmalloc+0xaa/0xb0 [ 629.480093][T13384] ops_init+0x77/0x5f0 [ 629.480131][T13384] setup_net+0x21f/0x860 [ 629.480166][T13384] ? __pfx_setup_net+0x10/0x10 [ 629.480196][T13384] ? down_read_killable+0xcc/0x380 [ 629.480228][T13384] ? __pfx_down_read_killable+0x10/0x10 [ 629.480276][T13384] ? __raw_spin_lock_init+0x3a/0x110 [ 629.480312][T13384] ? debug_mutex_init+0x37/0x70 [ 629.480351][T13384] copy_net_ns+0x2a6/0x5f0 [ 629.480394][T13384] create_new_namespaces+0x3ea/0xad0 [ 629.480461][T13384] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 629.480520][T13384] ksys_unshare+0x45d/0xa40 [ 629.480555][T13384] ? __pfx_ksys_unshare+0x10/0x10 [ 629.480589][T13384] ? xfd_validate_state+0x5d/0x180 [ 629.480650][T13384] __x64_sys_unshare+0x31/0x40 [ 629.480685][T13384] do_syscall_64+0xcd/0x250 [ 629.480743][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.480796][T13384] RIP: 0033:0x7f477b78d169 [ 629.480821][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.480855][T13384] RSP: 002b:00007f477c5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 629.480886][T13384] RAX: ffffffffffffffda RBX: 00007f477b9a5fa0 RCX: 00007f477b78d169 [ 629.480907][T13384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 629.480926][T13384] RBP: 00007f477b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 629.480946][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.480965][T13384] R13: 0000000000000000 R14: 00007f477b9a5fa0 R15: 00007fff40fe0aa8 [ 629.481005][T13384] [ 629.813151][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.826217][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.848057][T13386] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 630.177913][T13395] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 630.215480][T13396] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1661'. [ 630.257090][T13390] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1661'. [ 630.348580][T13399] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 630.371486][ T5837] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 630.708113][T13414] FAULT_INJECTION: forcing a failure. [ 630.708113][T13414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.806457][T13409] Invalid ELF header magic: != ELF [ 630.834222][T13414] CPU: 1 UID: 0 PID: 13414 Comm: syz.6.1665 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 630.834264][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.834281][T13414] Call Trace: [ 630.834291][T13414] [ 630.834303][T13414] dump_stack_lvl+0x16c/0x1f0 [ 630.834357][T13414] should_fail_ex+0x50a/0x650 [ 630.834393][T13414] _copy_from_user+0x2e/0xd0 [ 630.834431][T13414] copy_msghdr_from_user+0x99/0x160 [ 630.834484][T13414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 630.834547][T13414] ? __pfx___lock_acquire+0x10/0x10 [ 630.834604][T13414] ___sys_recvmsg+0xdc/0x1a0 [ 630.834657][T13414] ? __pfx____sys_recvmsg+0x10/0x10 [ 630.834715][T13414] ? find_held_lock+0x2d/0x110 [ 630.834766][T13414] ? __pfx___might_resched+0x10/0x10 [ 630.834816][T13414] ? __might_fault+0xe3/0x190 [ 630.834854][T13414] do_recvmmsg+0x2f8/0x740 [ 630.834911][T13414] ? __pfx_do_recvmmsg+0x10/0x10 [ 630.834962][T13414] ? vfs_write+0x306/0x1150 [ 630.835015][T13414] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 630.835074][T13414] ? __fget_files+0x206/0x3a0 [ 630.835130][T13414] __x64_sys_recvmmsg+0x239/0x290 [ 630.835164][T13414] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 630.835208][T13414] do_syscall_64+0xcd/0x250 [ 630.835258][T13414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.835305][T13414] RIP: 0033:0x7f477b78d169 [ 630.835329][T13414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.835359][T13414] RSP: 002b:00007f477c5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 630.835387][T13414] RAX: ffffffffffffffda RBX: 00007f477b9a6160 RCX: 00007f477b78d169 [ 630.835406][T13414] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 630.835425][T13414] RBP: 00007f477c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 630.835442][T13414] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 630.835459][T13414] R13: 0000000000000000 R14: 00007f477b9a6160 R15: 00007fff40fe0aa8 [ 630.835495][T13414] [ 631.127966][T13416] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 631.164023][T13419] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 631.662756][T13427] openvswitch: netlink: IP tunnel dst address not specified [ 631.925754][T13432] FAULT_INJECTION: forcing a failure. [ 631.925754][T13432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 631.952717][T13432] CPU: 0 UID: 0 PID: 13432 Comm: syz.4.1672 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 631.952769][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 631.952788][T13432] Call Trace: [ 631.952797][T13432] [ 631.952818][T13432] dump_stack_lvl+0x16c/0x1f0 [ 631.952889][T13432] should_fail_ex+0x50a/0x650 [ 631.952925][T13432] ? __pfx___might_resched+0x10/0x10 [ 631.952999][T13432] should_fail_alloc_page+0xe7/0x130 [ 631.953036][T13432] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 631.953094][T13432] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 631.953171][T13432] ? find_held_lock+0x2d/0x110 [ 631.953213][T13432] ? weighted_interleave_nid+0x3ec/0x5b0 [ 631.953252][T13432] ? __pfx_lock_release+0x10/0x10 [ 631.953299][T13432] ? trace_lock_acquire+0x14e/0x1f0 [ 631.953338][T13432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 631.953410][T13432] ? __pfx_weighted_interleave_nid+0x10/0x10 [ 631.953467][T13432] ? hlock_class+0x4e/0x130 [ 631.953502][T13432] ? __lock_acquire+0xcc5/0x3c40 [ 631.953556][T13432] ? policy_nodemask+0xea/0x4e0 [ 631.953590][T13432] alloc_pages_mpol+0x1fc/0x540 [ 631.953624][T13432] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 631.953656][T13432] ? hlock_class+0x4e/0x130 [ 631.953707][T13432] folio_alloc_mpol_noprof+0x36/0x2f0 [ 631.953750][T13432] vma_alloc_folio_noprof+0xee/0x1b0 [ 631.953789][T13432] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 631.953830][T13432] ? find_held_lock+0x2d/0x110 [ 631.953884][T13432] do_pte_missing+0x202f/0x3e10 [ 631.953951][T13432] __handle_mm_fault+0x103c/0x2a40 [ 631.954016][T13432] ? __pfx___handle_mm_fault+0x10/0x10 [ 631.954064][T13432] ? follow_page_pte+0x3ac/0x1490 [ 631.954113][T13432] ? __pfx_lock_release+0x10/0x10 [ 631.954191][T13432] handle_mm_fault+0x3fa/0xaa0 [ 631.954250][T13432] __get_user_pages+0x773/0x36f0 [ 631.954309][T13432] ? __pfx_mt_find+0x10/0x10 [ 631.954362][T13432] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 631.954412][T13432] ? __pfx___get_user_pages+0x10/0x10 [ 631.954466][T13432] ? __mm_populate+0x21d/0x380 [ 631.954526][T13432] populate_vma_page_range+0x27f/0x3a0 [ 631.954580][T13432] ? __pfx_populate_vma_page_range+0x10/0x10 [ 631.954633][T13432] ? __pfx_find_vma_intersection+0x10/0x10 [ 631.954679][T13432] ? vm_mmap_pgoff+0x31a/0x440 [ 631.954733][T13432] __mm_populate+0x1d6/0x380 [ 631.954787][T13432] ? __pfx___mm_populate+0x10/0x10 [ 631.954847][T13432] ? up_write+0x1b2/0x520 [ 631.954904][T13432] vm_mmap_pgoff+0x352/0x440 [ 631.954957][T13432] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 631.955015][T13432] ? __x64_sys_futex+0x1e1/0x4c0 [ 631.955056][T13432] ? __x64_sys_futex+0x1ea/0x4c0 [ 631.955103][T13432] ksys_mmap_pgoff+0x7d/0x5c0 [ 631.955145][T13432] ? rcu_is_watching+0x12/0xc0 [ 631.955187][T13432] __x64_sys_mmap+0x125/0x190 [ 631.955241][T13432] do_syscall_64+0xcd/0x250 [ 631.955296][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.955342][T13432] RIP: 0033:0x7f8e9998d169 [ 631.955369][T13432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.955402][T13432] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 631.955433][T13432] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 631.955455][T13432] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 631.955475][T13432] RBP: 00007f8e99a0e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 631.955495][T13432] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 631.955514][T13432] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 631.955554][T13432] [ 632.426119][T10774] Process accounting resumed [ 632.482451][T13438] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 632.811537][T13441] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 632.901859][T13446] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 633.594371][T13457] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 634.239382][T13466] FAULT_INJECTION: forcing a failure. [ 634.239382][T13466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.256248][T13466] CPU: 0 UID: 0 PID: 13466 Comm: syz.6.1678 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 634.256287][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 634.256305][T13466] Call Trace: [ 634.256315][T13466] [ 634.256327][T13466] dump_stack_lvl+0x16c/0x1f0 [ 634.256380][T13466] should_fail_ex+0x50a/0x650 [ 634.256416][T13466] _copy_from_user+0x2e/0xd0 [ 634.256453][T13466] copy_msghdr_from_user+0x99/0x160 [ 634.256508][T13466] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 634.256572][T13466] ? __pfx___lock_acquire+0x10/0x10 [ 634.256624][T13466] ___sys_recvmsg+0xdc/0x1a0 [ 634.256686][T13466] ? __pfx____sys_recvmsg+0x10/0x10 [ 634.256740][T13466] ? find_held_lock+0x2d/0x110 [ 634.256793][T13466] ? __pfx___might_resched+0x10/0x10 [ 634.256844][T13466] ? __might_fault+0xe3/0x190 [ 634.256881][T13466] do_recvmmsg+0x2f8/0x740 [ 634.256938][T13466] ? __pfx_do_recvmmsg+0x10/0x10 [ 634.256986][T13466] ? vfs_write+0x306/0x1150 [ 634.257037][T13466] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 634.257098][T13466] ? __fget_files+0x206/0x3a0 [ 634.257152][T13466] __x64_sys_recvmmsg+0x239/0x290 [ 634.257186][T13466] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 634.257231][T13466] do_syscall_64+0xcd/0x250 [ 634.257283][T13466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.257329][T13466] RIP: 0033:0x7f477b78d169 [ 634.257353][T13466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.257383][T13466] RSP: 002b:00007f477c5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 634.257413][T13466] RAX: ffffffffffffffda RBX: 00007f477b9a6160 RCX: 00007f477b78d169 [ 634.257435][T13466] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 634.257454][T13466] RBP: 00007f477c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 634.257473][T13466] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 634.257490][T13466] R13: 0000000000000000 R14: 00007f477b9a6160 R15: 00007fff40fe0aa8 [ 634.257527][T13466] [ 634.490771][T13465] Invalid ELF header magic: != ELF [ 634.714773][T13469] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 634.781773][T13470] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 634.802155][T13436] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1671'. can't run '/sbi[ 635.806996][T13493] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 635.858211][T13494] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 636.912714][T13513] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 638.008959][T13525] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 638.157451][T13503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.164482][T13503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.171975][T13503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.182199][T13503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.307119][T10709] Process accounting resumed [ 638.731131][T13536] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 638.786998][T13538] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1693'. [ 638.833254][T13535] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1693'. [ 638.866081][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.917618][T13542] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 639.086442][T13546] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 639.794677][T13532] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1692'. [ 640.148424][T13557] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 640.226190][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout can't run '/sbi[ 640.233693][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout n/getty': Struct[ 640.233764][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 640.621868][T13562] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1698'. [ 641.285630][T13572] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 641.307116][T13574] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleani[ 641.401666][T13576] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 641.439492][T13579] FAULT_INJECTION: forcing a failure. [ 641.439492][T13579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.536045][T13579] CPU: 1 UID: 0 PID: 13579 Comm: syz.4.1702 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 641.536089][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 641.536107][T13579] Call Trace: [ 641.536116][T13579] [ 641.536127][T13579] dump_stack_lvl+0x16c/0x1f0 [ 641.536179][T13579] should_fail_ex+0x50a/0x650 [ 641.536215][T13579] _copy_from_user+0x2e/0xd0 [ 641.536250][T13579] copy_msghdr_from_user+0x99/0x160 [ 641.536304][T13579] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 641.536376][T13579] ? __pfx___lock_acquire+0x10/0x10 [ 641.536422][T13579] ___sys_recvmsg+0xdc/0x1a0 [ 641.536464][T13579] ? __pfx____sys_recvmsg+0x10/0x10 [ 641.536504][T13579] ? find_held_lock+0x2d/0x110 [ 641.536545][T13579] ? __pfx___might_resched+0x10/0x10 [ 641.536584][T13579] ? __might_fault+0xe3/0x190 [ 641.536614][T13579] do_recvmmsg+0x2f8/0x740 [ 641.536659][T13579] ? __pfx_do_recvmmsg+0x10/0x10 [ 641.536698][T13579] ? vfs_write+0x306/0x1150 [ 641.536739][T13579] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 641.536788][T13579] ? __fget_files+0x206/0x3a0 [ 641.536832][T13579] __x64_sys_recvmmsg+0x239/0x290 [ 641.536859][T13579] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 641.536893][T13579] do_syscall_64+0xcd/0x250 [ 641.536933][T13579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.536969][T13579] RIP: 0033:0x7f8e9998d169 [ 641.536997][T13579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.537022][T13579] RSP: 002b:00007f8e9a7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 641.537046][T13579] RAX: ffffffffffffffda RBX: 00007f8e99ba6160 RCX: 00007f8e9998d169 [ 641.537062][T13579] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 641.537077][T13579] RBP: 00007f8e9a7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 641.537092][T13579] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 641.537107][T13579] R13: 0000000000000000 R14: 00007f8e99ba6160 R15: 00007fff3d7e4b28 [ 641.537136][T13579] [ 641.892157][T13566] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 641.925789][T13573] Invalid ELF header magic: != ELF [ 642.010247][T13584] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 642.167072][T13586] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 642.438173][T13592] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbican't run '/sbi[ 643.746168][T10774] Process accounting resumed [ 644.598139][T13613] EXT4-fs error: 1 callbacks suppressed [ 644.598161][T13613] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 645.234533][T13619] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 645.338331][T13610] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1710'. [ 645.700601][T13623] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 646.801870][T13633] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 647.879718][T13649] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 648.149426][T13655] FAULT_INJECTION: forcing a failure. [ 648.149426][T13655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.317494][T13654] Invalid ELF header magic: != ELF [ 648.341335][T13655] CPU: 0 UID: 0 PID: 13655 Comm: syz.6.1720 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 648.341378][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 648.341397][T13655] Call Trace: [ 648.341408][T13655] [ 648.341420][T13655] dump_stack_lvl+0x16c/0x1f0 [ 648.341476][T13655] should_fail_ex+0x50a/0x650 [ 648.341513][T13655] _copy_from_user+0x2e/0xd0 [ 648.341552][T13655] copy_msghdr_from_user+0x99/0x160 [ 648.341608][T13655] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 648.341671][T13655] ? __pfx___lock_acquire+0x10/0x10 [ 648.341723][T13655] ___sys_recvmsg+0xdc/0x1a0 [ 648.341777][T13655] ? __pfx____sys_recvmsg+0x10/0x10 [ 648.341829][T13655] ? find_held_lock+0x2d/0x110 [ 648.341884][T13655] ? __pfx___might_resched+0x10/0x10 [ 648.341937][T13655] ? __might_fault+0xe3/0x190 [ 648.341978][T13655] do_recvmmsg+0x2f8/0x740 [ 648.342038][T13655] ? __pfx_do_recvmmsg+0x10/0x10 [ 648.342090][T13655] ? vfs_write+0x306/0x1150 [ 648.342145][T13655] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 648.342217][T13655] ? __fget_files+0x206/0x3a0 [ 648.342274][T13655] __x64_sys_recvmmsg+0x239/0x290 [ 648.342311][T13655] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 648.342358][T13655] do_syscall_64+0xcd/0x250 [ 648.342412][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.342459][T13655] RIP: 0033:0x7f477b78d169 [ 648.342486][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.342518][T13655] RSP: 002b:00007f477c5b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 648.342549][T13655] RAX: ffffffffffffffda RBX: 00007f477b9a6160 RCX: 00007f477b78d169 [ 648.342570][T13655] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 648.342589][T13655] RBP: 00007f477c5b2090 R08: 0000000000000000 R09: 0000000000000000 [ 648.342608][T13655] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 648.342627][T13655] R13: 0000000000000000 R14: 00007f477b9a6160 R15: 00007fff40fe0aa8 [ 648.342665][T13655] [ 648.639521][T13662] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 648.853646][T13635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.870775][T13635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.916681][T13635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.946280][T13635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.961644][T13664] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 649.606119][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.675797][T13676] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 650.025751][T13679] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 650.353964][T13682] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 650.956206][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 650.962373][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 651.027062][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 651.086635][T13695] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 651.143764][T13699] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 651.216376][T13700] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1730'. [ 651.253627][T13694] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1730'. [ 651.297181][T13702] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 651.574116][T13708] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 651.608257][T13710] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1732'. [ 651.642253][T13707] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1732'. [ 651.662214][T13713] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 651.705495][T13716] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:11: corrupted in-inode xattr: bad magic number in in-inode xattr [ 651.730816][T13717] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 652.127937][T13725] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 652.217505][T13727] FAULT_INJECTION: forcing a failure. [ 652.217505][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 652.289645][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.6.1737 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 652.289688][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.289707][T13727] Call Trace: [ 652.289717][T13727] [ 652.289730][T13727] dump_stack_lvl+0x16c/0x1f0 [ 652.289783][T13727] should_fail_ex+0x50a/0x650 [ 652.289815][T13727] ? fs_reclaim_acquire+0xae/0x150 [ 652.289858][T13727] should_failslab+0xc2/0x120 [ 652.289896][T13727] __kmalloc_node_noprof+0xd1/0x510 [ 652.289947][T13727] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 652.289998][T13727] __kvmalloc_node_noprof+0xad/0x1a0 [ 652.290047][T13727] traverse.part.0.constprop.0+0x392/0x640 [ 652.290092][T13727] ? __pfx_lock_release+0x10/0x10 [ 652.290139][T13727] ? trace_lock_acquire+0x14e/0x1f0 [ 652.290175][T13727] ? __pfx___lock_acquire+0x10/0x10 [ 652.290229][T13727] seq_read_iter+0x934/0x12b0 [ 652.290275][T13727] ? aa_file_perm+0x4d5/0xfe0 [ 652.290334][T13727] seq_read+0x39f/0x4e0 [ 652.290374][T13727] ? __pfx_seq_read+0x10/0x10 [ 652.290417][T13727] ? copy_iovec_from_user+0x138/0x170 [ 652.290458][T13727] ? iovec_from_user.part.0+0x7e/0x130 [ 652.290511][T13727] full_proxy_read+0x13c/0x200 [ 652.290554][T13727] ? __pfx_full_proxy_read+0x10/0x10 [ 652.290596][T13727] vfs_readv+0x6c2/0x8a0 [ 652.290634][T13727] ? __pfx___lock_acquire+0x10/0x10 [ 652.290681][T13727] ? find_held_lock+0x2d/0x110 [ 652.290721][T13727] ? __pfx_vfs_readv+0x10/0x10 [ 652.290769][T13727] ? __fget_files+0x1fc/0x3a0 [ 652.290814][T13727] ? __pfx_lock_release+0x10/0x10 [ 652.290881][T13727] ? __fget_files+0x206/0x3a0 [ 652.290935][T13727] ? do_preadv+0x1b1/0x270 [ 652.290973][T13727] do_preadv+0x1b1/0x270 [ 652.291012][T13727] ? __pfx_do_preadv+0x10/0x10 [ 652.291063][T13727] do_syscall_64+0xcd/0x250 [ 652.291114][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.291159][T13727] RIP: 0033:0x7f477b78d169 [ 652.291183][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.291213][T13727] RSP: 002b:00007f477c5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 652.291242][T13727] RAX: ffffffffffffffda RBX: 00007f477b9a5fa0 RCX: 00007f477b78d169 [ 652.291262][T13727] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 652.291283][T13727] RBP: 00007f477c5f4090 R08: 0000000000000019 R09: 0000000000000000 [ 652.291302][T13727] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 652.291321][T13727] R13: 0000000000000000 R14: 00007f477b9a5fa0 R15: 00007fff40fe0aa8 [ 652.291362][T13727] can't run '/sbin/getty': Struct[ 654.058941][T13749] FAULT_INJECTION: forcing a failure. [ 654.058941][T13749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.080730][T13748] Invalid ELF header magic: != ELF [ 654.151993][T13749] CPU: 1 UID: 0 PID: 13749 Comm: syz.4.1741 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 654.152037][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 654.152056][T13749] Call Trace: [ 654.152066][T13749] [ 654.152077][T13749] dump_stack_lvl+0x16c/0x1f0 [ 654.152129][T13749] should_fail_ex+0x50a/0x650 [ 654.152185][T13749] _copy_from_user+0x2e/0xd0 [ 654.152224][T13749] copy_msghdr_from_user+0x99/0x160 [ 654.152298][T13749] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 654.152364][T13749] ? __pfx___lock_acquire+0x10/0x10 [ 654.152419][T13749] ___sys_recvmsg+0xdc/0x1a0 [ 654.152474][T13749] ? __pfx____sys_recvmsg+0x10/0x10 [ 654.152528][T13749] ? find_held_lock+0x2d/0x110 [ 654.152583][T13749] ? __pfx___might_resched+0x10/0x10 [ 654.152634][T13749] ? __might_fault+0xe3/0x190 [ 654.152673][T13749] do_recvmmsg+0x2f8/0x740 [ 654.152733][T13749] ? __pfx_do_recvmmsg+0x10/0x10 [ 654.152784][T13749] ? vfs_write+0x306/0x1150 [ 654.152856][T13749] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 654.152927][T13749] ? __fget_files+0x206/0x3a0 [ 654.152985][T13749] __x64_sys_recvmmsg+0x239/0x290 [ 654.153021][T13749] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 654.153068][T13749] do_syscall_64+0xcd/0x250 [ 654.153122][T13749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.153169][T13749] RIP: 0033:0x7f8e9998d169 [ 654.153195][T13749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.153227][T13749] RSP: 002b:00007f8e9a7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 654.153258][T13749] RAX: ffffffffffffffda RBX: 00007f8e99ba6160 RCX: 00007f8e9998d169 can't run '/sbi[ 654.153281][T13749] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 n/getty': Struct[ 654.153301][T13749] RBP: 00007f8e9a7e3090 R08: 0000000000000000 R09: 0000000000000000 ure needs cleani[ 654.153322][T13749] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 ng[ 654.153342][T13749] R13: 0000000000000000 R14: 00007f8e99ba6160 R15: 00007fff3d7e4b28 [ 654.153382][T13749] [ 655.417611][T13766] EXT4-fs error: 4 callbacks suppressed [ 655.417634][T13766] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 655.587290][T13769] FAULT_INJECTION: forcing a failure. [ 655.587290][T13769] name failslab, interval 1, probability 0, space 0, times 0 [ 655.641820][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1747'. [ 655.691851][T13769] CPU: 1 UID: 0 PID: 13769 Comm: syz.4.1748 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 655.691891][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 655.691907][T13769] Call Trace: [ 655.691916][T13769] [ 655.691926][T13769] dump_stack_lvl+0x16c/0x1f0 [ 655.691974][T13769] should_fail_ex+0x50a/0x650 [ 655.692003][T13769] ? fs_reclaim_acquire+0xae/0x150 [ 655.692046][T13769] ? gpiolib_seq_start+0x69/0x270 [ 655.692083][T13769] should_failslab+0xc2/0x120 [ 655.692112][T13769] __kmalloc_cache_noprof+0x68/0x410 [ 655.692157][T13769] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 655.692209][T13769] gpiolib_seq_start+0x69/0x270 [ 655.692249][T13769] traverse.part.0.constprop.0+0xac/0x640 [ 655.692293][T13769] ? __pfx_lock_release+0x10/0x10 [ 655.692337][T13769] ? __pfx___lock_acquire+0x10/0x10 [ 655.692385][T13769] seq_read_iter+0x934/0x12b0 [ 655.692428][T13769] ? aa_file_perm+0x4d5/0xfe0 [ 655.692482][T13769] seq_read+0x39f/0x4e0 [ 655.692528][T13769] ? __pfx_seq_read+0x10/0x10 [ 655.692568][T13769] ? copy_iovec_from_user+0x138/0x170 [ 655.692607][T13769] ? iovec_from_user.part.0+0x7e/0x130 [ 655.692659][T13769] full_proxy_read+0x13c/0x200 [ 655.692702][T13769] ? __pfx_full_proxy_read+0x10/0x10 [ 655.692744][T13769] vfs_readv+0x6c2/0x8a0 [ 655.692782][T13769] ? __pfx___lock_acquire+0x10/0x10 [ 655.692825][T13769] ? find_held_lock+0x2d/0x110 [ 655.692867][T13769] ? __pfx_vfs_readv+0x10/0x10 [ 655.692911][T13769] ? __fget_files+0x1fc/0x3a0 [ 655.692948][T13769] ? __pfx_lock_release+0x10/0x10 [ 655.692998][T13769] ? __fget_files+0x206/0x3a0 [ 655.693043][T13769] ? do_preadv+0x1b1/0x270 [ 655.693074][T13769] do_preadv+0x1b1/0x270 [ 655.693107][T13769] ? __pfx_do_preadv+0x10/0x10 [ 655.693150][T13769] do_syscall_64+0xcd/0x250 [ 655.693192][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.693229][T13769] RIP: 0033:0x7f8e9998d169 [ 655.693251][T13769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.693277][T13769] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 655.693303][T13769] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 655.693321][T13769] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 655.693337][T13769] RBP: 00007f8e9a825090 R08: 0000000000000019 R09: 0000000000000000 [ 655.693353][T13769] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 655.693369][T13769] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 655.693403][T13769] [ 655.693545][T13769] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 655.960608][T13769] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 655.969042][T13769] CPU: 1 UID: 0 PID: 13769 Comm: syz.4.1748 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 655.979827][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 655.989898][T13769] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 655.995480][T13769] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 656.015312][T13769] RSP: 0018:ffffc90004cbf9a0 EFLAGS: 00010247 [ 656.021414][T13769] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802a52c268 [ 656.029866][T13769] RDX: 0000000000000000 RSI: ffffffff84f6c9be RDI: 0000000000000004 [ 656.038234][T13769] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 656.046237][T13769] R10: ffffffff8e37f993 R11: fffffffffffc32a8 R12: ffffffff8bd73ba0 [ 656.054229][T13769] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90004cbfb88 [ 656.062218][T13769] FS: 00007f8e9a8256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 656.071197][T13769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.077802][T13769] CR2: 00007f477c5b1f98 CR3: 0000000027b08000 CR4: 00000000003526f0 [ 656.085997][T13769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 656.093994][T13769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 656.101990][T13769] Call Trace: [ 656.105282][T13769] [ 656.108225][T13769] ? die_addr+0x3b/0xa0 [ 656.112419][T13769] ? exc_general_protection+0x155/0x230 [ 656.117990][T13769] ? asm_exc_general_protection+0x26/0x30 [ 656.123743][T13769] ? gpiolib_seq_stop+0xe/0xe0 [ 656.128544][T13769] ? gpiolib_seq_stop+0x4c/0xe0 [ 656.133422][T13769] traverse.part.0.constprop.0+0x2bd/0x640 [ 656.139261][T13769] ? __pfx_lock_release+0x10/0x10 [ 656.144319][T13769] seq_read_iter+0x934/0x12b0 [ 656.149024][T13769] ? aa_file_perm+0x4d5/0xfe0 [ 656.153732][T13769] seq_read+0x39f/0x4e0 [ 656.157915][T13769] ? __pfx_seq_read+0x10/0x10 [ 656.162615][T13769] ? copy_iovec_from_user+0x138/0x170 [ 656.168006][T13769] ? iovec_from_user.part.0+0x7e/0x130 [ 656.173494][T13769] full_proxy_read+0x13c/0x200 [ 656.178293][T13769] ? __pfx_full_proxy_read+0x10/0x10 [ 656.183608][T13769] vfs_readv+0x6c2/0x8a0 [ 656.187879][T13769] ? __pfx___lock_acquire+0x10/0x10 [ 656.193114][T13769] ? find_held_lock+0x2d/0x110 [ 656.197899][T13769] ? __pfx_vfs_readv+0x10/0x10 [ 656.202692][T13769] ? __fget_files+0x1fc/0x3a0 [ 656.207409][T13769] ? __pfx_lock_release+0x10/0x10 [ 656.212481][T13769] ? __fget_files+0x206/0x3a0 [ 656.217196][T13769] ? do_preadv+0x1b1/0x270 [ 656.221643][T13769] do_preadv+0x1b1/0x270 [ 656.226004][T13769] ? __pfx_do_preadv+0x10/0x10 [ 656.230802][T13769] do_syscall_64+0xcd/0x250 [ 656.235340][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.241266][T13769] RIP: 0033:0x7f8e9998d169 [ 656.245698][T13769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.265327][T13769] RSP: 002b:00007f8e9a825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 656.273764][T13769] RAX: ffffffffffffffda RBX: 00007f8e99ba5fa0 RCX: 00007f8e9998d169 [ 656.281755][T13769] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 656.289747][T13769] RBP: 00007f8e9a825090 R08: 0000000000000019 R09: 0000000000000000 [ 656.297825][T13769] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 656.305814][T13769] R13: 0000000000000000 R14: 00007f8e99ba5fa0 R15: 00007fff3d7e4b28 [ 656.313812][T13769] [ 656.316845][T13769] Modules linked in: [ 656.321611][T13769] ---[ end trace 0000000000000000 ]--- [ 656.357767][T13770] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 656.446086][T13769] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 656.451674][T13769] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 656.500795][T13775] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 656.526271][T13769] RSP: 0018:ffffc90004cbf9a0 EFLAGS: 00010247 can't run '/sbi[ 656.554218][T13769] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88802a52c268 [ 656.587062][T13769] RDX: 0000000000000000 RSI: ffffffff84f6c9be RDI: 0000000000000004 [ 656.595113][T13769] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 656.676008][T13769] R10: ffffffff8e37f993 R11: fffffffffffc32a8 R12: ffffffff8bd73ba0 [ 656.720542][T13769] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90004cbfb88 [ 656.746048][T13769] FS: 00007f8e9a8256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 656.766153][T13769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.772816][T13769] CR2: 00007ff1289f6d58 CR3: 0000000027b08000 CR4: 00000000003526f0 [ 656.806794][T13769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 656.814855][T13769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 656.856085][T13769] Kernel panic - not syncing: Fatal exception [ 656.862526][T13769] Kernel Offset: disabled [ 656.866903][T13769] Rebooting in 86400 seconds..