last executing test programs: 12m11.170533837s ago: executing program 1 (id=1427): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000) r0 = socketpair$auto(0x1a, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r1, 0x54a0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x18}}, 0x0) connect$auto(0x3, 0x0, 0x54) mmap$auto(0xffff, 0x20007, 0x6, 0x10000026050973, r0, 0x1010000) mmap$auto(0x0, 0x101, 0xde, 0x9b70, 0x7, 0x28000) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open_tree$auto(r2, 0x0, 0xfff) io_uring_register$auto(0x2, 0x6, 0x0, 0x86) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0xc0189436, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r', @ANYBLOB="1e00"], 0x1ac}}, 0x0) unshare$auto(0x40000080) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r4, 0x40005504, 0xffffffffffffffff) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) madvise$auto(0x110c230000, 0x8031ca, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 12m10.706281592s ago: executing program 1 (id=1430): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) set_tid_address$auto(0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) 12m9.85318789s ago: executing program 1 (id=1433): sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ae90f7c", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x54) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x8, 0x10000, 0xfffffffffffffff9, 0xc, 0x802, 0x3, 0x140, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x8000000000000001, 0x46]}, 0x0, 0x0) 12m9.418448134s ago: executing program 1 (id=1436): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x0, 0x23, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)="936f8dd6277348ee2014819d425625bfa345812feef9bff497f0c93ebd232a8827ad892e8fba6fa70fee6fb315a6a28a0e168c76b6f11315ede98cebf85c03c0d50a341fb29b95657c5496a9f5c94e3e82a082127e8b06037020d4", 0xfff}, 0xb9) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x3, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0x2) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, r0, 0x2) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x27, 0x5, 0x6) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x24080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) 12m4.943459504s ago: executing program 1 (id=1441): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) fsopen$auto(0x0, 0x1) read$auto(r0, 0x0, 0x20) socket(0x1e, 0x2, 0x0) 12m4.44544549s ago: executing program 1 (id=1444): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) setsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='\x00', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc0300, 0x0) pread64$auto(r2, 0x0, 0x7fff, 0x800000000003) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b0500"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bb3e6100", @ANYRES16=r5, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4040854}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) (async) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) (async) setsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='\x00', 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc0300, 0x0) (async) pread64$auto(r2, 0x0, 0x7fff, 0x800000000003) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xc8, 0x400454de, 0x5c8d) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b0500"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) (async) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bb3e6100", @ANYRES16=r5, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4040854}, 0x8000) (async) 11m48.908685501s ago: executing program 32 (id=1444): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) setsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='\x00', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc0300, 0x0) pread64$auto(r2, 0x0, 0x7fff, 0x800000000003) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b0500"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bb3e6100", @ANYRES16=r5, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4040854}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) (async) pwrite64$auto(r0, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) (async) setsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='\x00', 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc0300, 0x0) (async) pread64$auto(r2, 0x0, 0x7fff, 0x800000000003) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xc8, 0x400454de, 0x5c8d) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b0500"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1, @ANYRES32], 0x18}}, 0x80) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) (async) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bb3e6100", @ANYRES16=r5, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4040854}, 0x8000) (async) 9m56.720830187s ago: executing program 4 (id=1914): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/nfs/exports\x00', 0x82402, 0x0) getsockopt$auto_SO_NO_CHECK(r0, 0x5, 0xb, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', &(0x7f0000000080)=0x8001) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1fd, 0x7, 0x2, 0x7184, 0x1ffe1, 0x7, 0x7fffffffffffffff, 0x9, 0x9, 0x8, 0x4, 0x200000000001, 0x1, 0x1ff, 0x8, 0x6, 0x4000080, 0x8000, 0x100, 0x9, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x6, 0x0, 0x2, 0x7, 0x2000, 0x0, 0x5a17a924, 0x2b6, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x4080, 0x7fffffff, 0xa, 0xfffffffffffbfff9, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x8, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x1, 0x7, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa3c, 0x0, 0x3, 0x3ff, 0x2, 0x8, 0x7, 0xc567]}, 0x1fe, 0x4000d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x100002, &(0x7f0000000380)={0x0, 0x6}, 0x1, 0x0, 0x5, 0x5}, 0x7}, 0x3, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, 0x0, 0xc800) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) ioperm$auto(0x6, 0x18001, 0x80001) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) 9m55.762956902s ago: executing program 4 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a4, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_RADIO_NAME={0xa, 0x11, '-:\xeb)H\x98'}, @HWSIM_ATTR_PMSR_SUPPORT={0x26c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x98, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x1884}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0xf7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xefc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xd0, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x518}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xba}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x68, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7fff}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x90}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x101}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}]}]}]}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = prctl$auto_PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x2, 0x4) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000003c0)="d18058d0") r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) flistxattr$auto(r0, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x5) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000480), r0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000500), r2) msgctl$auto_MSG_STAT_ANY(0x8, 0xd, &(0x7f00000005c0)={{0x4, 0xee01, 0xee01, 0xe, 0xa3e, 0x5d84, 0x1}, &(0x7f0000000540)=0x40, &(0x7f0000000580)=0xc0, 0x5afb, 0x1, 0x7, 0x3, 0x592, 0x424, 0x2, 0x0, @inferred=0x0, @raw=0xb60}) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f0000000640)={0x1288, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x102c, 0x2, 0x0, 0x1, [@generic="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", @nested={0x14, 0xa2, 0x0, 0x1, [@nested={0x4, 0xa1}, @typed={0x8, 0xf4, 0x0, 0x0, @u32=0x80000001}, @nested={0x4, 0xe5}]}, @typed={0x13, 0xbc, 0x0, 0x0, @str='MAC80211_HWSIM\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x218, 0x1, 0x0, 0x1, [@typed={0x22, 0x21, 0x0, 0x0, @binary="3d42e15c183ad4fe6d12205f13c269238052013870d1ff0ec0ecb7a416fb"}, @nested={0x194, 0xac, 0x0, 0x1, [@nested={0x4, 0x18}, @nested={0x4, 0x2f}, @generic="eee9bf6d588f8b189491e5235a03b3a740eef9eb0d72f2da16ba87df34ad513edc5673ebfa8cad86bfcc09536e982865bb18b1aa852743802d56cdfed8c7cf118a696fd75a0e56524503dabb5f0379956321a63834d8f9b17835e534fef5bd9c1e2271f994c2b307d8c2ed3828e9eae3a3dccdc0298e3e9f8fca09e2ebd6d521efafd7b91cbc0a53156bdf5e9f530b4eb90fdd5788d395a96834931d2d25e79417c41e232b036168f6dce1acb2bbe305d790ad1cd7ab54e4684d8e5ba590777b153f50719db93ad223e5273c106106223591b1c2a43a6716073f", @generic="f826f08ed33bac493eb3b74b6da70d7db03fa254a31b39986090169f43ae4f6483410e9ab1380e0196f343fdb625c929678ec0d1677f7cb30cff0043ee16b0bf98be3db332aabe7349a1d52838f5dfb6cdfc", @generic="87fd2d2cbd4edee9dbb2f39b8794b6acc9368b5140083410db1ae44d00140d2a70809fce2698a6da401e67e34c7fd0f203e2109f36ab0deec1b3f978d4d9f97989f69afbd7d88a3c", @typed={0xc, 0xb5, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x9f, 0x0, 0x0, @uid=r5}]}, @typed={0x5a, 0x121, 0x0, 0x0, @binary="b17fd340ebbf752303a9cd333558793f3364ea4883cc64f55227c126cbd262141d5808db8b0a7a53c55bf62f82ac070c6ab3a49427eefdcd97c8102ae7bb2a8cfe9a211b8a8c6ecadd105403794d6695cef5604bb7b0"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1288}, 0x1, 0x0, 0x0, 0x4000801}, 0x80) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x900, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000019c0)="9ce781b950428da3633710aa4cb9ad8b9a8675db3cd6c43cdada6f096dd44ec1bf156c923dc744fb2cb6b1c3d6d9ec9a268eaf934b92f8be52c9b3a33a30b484efe1d0703461b9951830b1cd915ac8873950de0fd891957e789d5bb42509f4efed23776851f947ed89df01cfad468ee137275fa8ca0477fa307a92b1d04ce880eb81c5214db01529ead76f7f2feb87523c6a15116482db49ea25bbb362c6f2e9737f622dd6931b3355f9557c494ad50f2b2aaa403cbd33df593ebe18895059f5d8a2855c7484c35df8e4f9b76a92b040966181804683") r8 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/self/cpuset\x00', 0x125900, 0x0) r9 = socket(0x10, 0x4, 0x101) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b40), r9) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001b80)={0x650, r10, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_PROBE_RESP={0x26e, 0x91, "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"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x8a, 0xe8, "6a8acaffdc2d28a253d447dba7d7f770199276281c9d3cf505f72944021403db7254afed2160f3e32ac9e426e27e4ae91a88922f2e43d2c2698b786b77d561b3ce282046a019fe967292173c7fb25b92488261d5cea606302239c68e5c07e13a5e79a716040b437d599497908257a115e58d554251797af9134309a9300996ca97f1ae519503"}, @NL80211_ATTR_MAC_MASK={0x3e, 0xd7, "8f2d4d69ac1d796aa89af72d45bd8ac04e8a4cfdb87850558b8ca06df61a5a39fa53d435072ac37f11f1e017044f767aaf9faf374382cb0ccd15"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x2ea, 0xe, "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"}]}, 0x650}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = getsockopt$auto_SO_NETNS_COOKIE(r8, 0x3, 0x47, &(0x7f0000002280)='tcp_metrics\x00', &(0x7f00000022c0)=0xb58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4040) r13 = getpgrp(r6) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000003b80)={&(0x7f0000002480), 0xc, &(0x7f0000003b40)={&(0x7f00000024c0)={0x1670, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x1b3, 0x19, 0x0, 0x1, [@generic="5b9e1fa5a6634b08e75d89c609b8ab09ccbcf0961b30dcda6b6321779454ba94d60afdcbe288fedaf9bc3b1585b89b69a10b795ae8767810cf3eafd8dd94ff210d12b4e4d17744cfdc5ed25bea9a1face51baa723b34e55213eaa67f988bc22be7d72c45e9b42c7d8b3bc33d96e02c778068b91f884f49d47f28d2452ec50b898454127a202b37b43766924aa2ad5068a3504e0f496af23cd1229932a077c48dfd674ede84d4cf0230378deb754e73cddf8ac56ba8067627975ee433ba5e5b9ed503522821ad7d7be0d21905aed236146b28345609db30", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x74, 0x0, 0x0, @u32}, @generic="73fc9b85402a317ee4d0437018898ca9942128f117767d116ab62012cd2be53f2fcade506a07fc07edea3eaf1f82bf766c5cd01c1b3dbefe9c8509fe3e5376f8c06bd7875409ddd86e043411ae8be6fc106ad0d37e967daef7a64ca017c19df4a2830c9483d090c7df500c5f9984548e64c2c7356f3ad4cb9095ca896432c3ff3bd32ad1ab07c95c170d28", @typed={0x8, 0x102, 0x0, 0x0, @uid=r5}, @generic="12dc8e0b3bcbe77b6eaba1ac328e238382b75d9df7270bfb6b14b1d2b2351fb735", @nested={0x14, 0xb1, 0x0, 0x1, [@nested={0x4, 0x7f}, @nested={0x4, 0xcc}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x1}]}]}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1475, 0x2b, 0x0, 0x1, [@nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @pid=r6}]}, @nested={0x8, 0x26, 0x0, 0x1, [@nested={0x4, 0x131}]}, @typed={0x9, 0xb2, 0x0, 0x0, @str='IPVS\x00'}, @nested={0x10a, 0x11d, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x35, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x103, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xce, 0x0, 0x0, @pid=r13}, @generic="a27eed4fc48e31412386e4bbe9f388ce85ac2ff4429715c477f2e5784bab59efa4b0cca0361dc556d558cbb32e2114c648e69763930cbb5f628416c7eebb0e94cdb534d168b32b295d091f937a7e15a4875b1c2d0b6b434a8ac8a1459d1b5a388b33376d57f3be20941264c39406da1279c7e6da20a3c4d944ece19863357ff466b0e4fde1cf16a5fc97cb1efbd6711a51c734b1983b4c0fa70ce03c5a496814e56bad8f22aa28fd29d4b6d49d21f0e99afa862c935cbfa789656b51076d34a8c643e3903e5ff71d59fd7a6c0130fe062847954c1e5c2e0a3b6b", @nested={0x4, 0x106}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r11}]}, @nested={0x10df, 0x14, 0x0, 0x1, [@generic="36a8376eb2fbb45b7b5aff5918bc923285671b82ab5207638d913abe20c0e306964afee078a6d95c4e7b27ae78d72ed8e8c9662eb0c583f02258de26928fb47ea23c7ebae031b3d672b49a8d471adc20f0811663490feda04df3f25f606000e41511a049bc915d8bca6e4221107620a927f32793614f3f85ef4356e59a7390faca8ef25462f223ad70f4b42443955e4bf2e5894ecf2f12b248ee7d85b4bbd4248fe377e50286fc35422393b3c76551e47c847f1cd4ff31aa1167e1f81767fad7895b7ec27ad7a312e57bff1d5f1e99a9e5d720", @nested={0x4, 0x100}, @generic="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", @nested={0x4, 0x146}]}, @generic="9feaaa83349fa56a168923c691669f52f23d3637ae2ad569fca6e9554040a35cc94c4ff4359233981e7b1992278bf6c122", @nested={0x22b, 0x93, 0x0, 0x1, [@typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0xfffffffc}, @generic="2e936b82a44cb8c88abae609c9f777682f2e5ea612f93bab02dea6a89a6ec6fda18f95919ff337c643842feaa6f1f2c86b31981736449977199f1354d9bd37b611d60115468c31f5f4974453f50e0af81d6495b240b56e2f7f0d4989deef68ac71b48e6db7dd10f1d61bd829d17a2977c26a25e5710fe35fbcf56ef1d4f9599b36802e9952ed2eef3d43eb8dd3a2bfe76565a38f64e59c38ae6030b273f5688c765044eda9509eb989b3", @generic="92d378637d3921ad0081b0f2d4f8a26313339b994c66c84674f739b764aba6527430ccf6433eabcf97afdd78ff96f09002c3b10791679da715b617fd50a4acefaf958dc97d5d87c8373e6b7f2614d366309715eb3777e5f3247e2be70a32a404d9adf10f6e54798a125474339bf8", @nested={0x4, 0xd1}, @generic="2dc1794d3d38f294351fabb63224dcc5152115bce591420543ce22f518461f3d9da61d12ce2ef959ec96d3df0c509f5fbf54d037a5155362945097d028982bc8d3a2cc17f50092f2f77e700b9c777026f4beaf5813106131d2a224aeac62463c77f7e7649a372a092c47c3232faa2e4bce2ef9c9cf21ec4095c96d85951368bdaebb5b14ffc14ae39dfe40ce628535abab304d66b14331c9adeb9f3edc8f3272d3125c3ea05f6de7a07ac9866698a71e4316619bae5b639b304df47af58c939376de945fca88b9f203b3045c3123af3c1e3582be6868080afcd6e3d695af389af79736", @nested={0x4, 0x73}, @typed={0x4, 0x12a}, @nested={0x4, 0x12f}]}, @nested={0x8, 0x115, 0x0, 0x1, [@nested={0x4, 0x93}]}]}]}, 0x1670}, 0x1, 0x0, 0x0, 0x8180}, 0x90) r14 = fcntl$auto_F_GETOWN(r7, 0x9, r6) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000003bc0)='/sys/kernel/debug/tracing/trace_options\x00', 0x400803, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000003c00)='/dev/ptye5\x00', 0x40000, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000003c40)='\x00', 0x9, 0xe75d) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_AUTOFS_IOC_SETTIMEOUT(r2, 0xc0089364, &(0x7f0000003c80)=0x7) read$auto_fault_around_bytes_fops_(r14, &(0x7f0000003cc0)=""/61, 0x3d) 9m55.705602772s ago: executing program 4 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) socket(0x1d, 0x3, 0x1) setsockopt$auto(0x3, 0x65, 0x17, 0x0, 0x27) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25050000001c0001800800058004007d00100001"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) 9m55.624678621s ago: executing program 4 (id=1921): rt_sigtimedwait$auto(&(0x7f0000000000)={0x7fffffff}, &(0x7f0000000100)={@_si_pad}, &(0x7f0000000040)={0x8000000000000000, 0x9}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xc, 0x2e, 0x80000000000, 0x3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2dc005000000000000fa86cfc5daedd3809ce51e5d0000e2070004000000010010001a80880001008703000004000480"], 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 9m55.376199924s ago: executing program 4 (id=1924): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 9m55.037239254s ago: executing program 4 (id=1927): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x5, 0xffffffffffffffff, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0xc, 0x50, &(0x7f0000000040)='*[\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x44243, 0xe1d2b27bdc14aabc) 9m54.713251921s ago: executing program 33 (id=1927): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x5, 0xffffffffffffffff, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0xc, 0x50, &(0x7f0000000040)='*[\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x44243, 0xe1d2b27bdc14aabc) 9m16.916328846s ago: executing program 3 (id=2098): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x400008, 0xdc, 0x12000000010, 0xffffffffffffffff, 0x0) r0 = getsockopt$auto_SO_RCVLOWAT(0xffffffffffffffff, 0x595, 0x12, &(0x7f0000000040)='/dev/tty0\x00', &(0x7f00000000c0)=0x800) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9c8808168479c16db1a71ceea31caa"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x8}, @NL80211_ATTR_MBSSID_CONFIG={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x80000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) readv$auto(r1, &(0x7f00000001c0)={0x0, 0xf7}, 0x5) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x2}, 0x2, 0x5, 0xf) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) mmap$auto(0x0, 0x800000000400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4882}, 0x20048090) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r4, 0x301, 0x70bd28, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x15}, @CTRL_ATTR_OP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4019}, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) 9m16.831104319s ago: executing program 3 (id=2099): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x100, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi23\x00', 0x101000, 0x0) ioctl$auto(r1, 0xc0205647, r0) ioperm$auto(0x7, 0x6, 0x1) sched_setaffinity$auto(0x9, 0x0, 0xfffffffffffffffe) set_mempolicy$auto(0x2, 0x0, 0x8) socket(0xa, 0x80002, 0xa423) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000000)=@generic={0x28}, 0x1000) write$auto(0x3, 0x0, 0xffd8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r2, 0x80044dfe, &(0x7f0000000180)="3f8106213d4179560d8a29c83c292e3b2903f7e347b975ade62788") mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x2000004, 0x8001, 0x3, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5387, r3) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0xfffffffffffffffc, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x4]}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) mmap$auto(0x7, 0x4020009, 0x7, 0xeb1, 0x401, 0x48000) 9m15.795898845s ago: executing program 3 (id=2102): close_range$auto(0x0, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000) r0 = socketpair$auto(0x1a, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_START(r1, 0x54a0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x18}}, 0x0) connect$auto(0x3, 0x0, 0x54) mmap$auto(0xffff, 0x20007, 0x6, 0x10000026050973, r0, 0x1010000) mmap$auto(0x3ff, 0xfd, 0xdee, 0x8b70, 0x7, 0xa) r2 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) mmap$auto(0x400, 0x4, 0x73cd, 0x40eb1, 0x401, 0x300000000000) open_tree$auto(r3, 0x0, 0xfff) io_uring_register$auto(0x2, 0x6, 0x0, 0x86) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0xc0189436, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r5, 0x40005504, 0xffffffffffffffff) mknod$auto(&(0x7f00000001c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0xfc, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 9m15.465612045s ago: executing program 3 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbfd, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0xf000000, 0x0, 0x801}, 0x4880) 9m15.330675899s ago: executing program 3 (id=2106): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttya2/power/runtime_status\x00', 0x4ab20, 0x0) read$auto(0x3, 0x0, 0xfffffdef) 9m14.987741014s ago: executing program 3 (id=2107): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x12, 0x7, 0x28001) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r1 = bpf$auto(0x0, &(0x7f0000000780)=@query={@target_ifindex=r0, 0x7fff, 0x5cfe, 0x2, 0x0, @count=0x7f, 0x0, 0x2, 0xe0a, 0xffffffffffff8000, 0x2d5}, 0xa3) unshare$auto(0x40000080) fallocate$auto(r1, 0x0, 0x10, 0xcbd5d) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) mmap$auto(0x2000000000000, 0x2, 0xc, 0x9b71, 0xffffffffffffffff, 0x2) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r2, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0xb, 0xa, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x2c, 0x2, 0x10) getpeername$auto(0x3, 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x4420, 0x4, 0xfffffffd, &(0x7f0000000140)={0x3ff, 0x734}, &(0x7f0000000180)=0xfffd, 0x20001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon5\x00', 0x101000, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) 9m14.449519998s ago: executing program 34 (id=2107): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x12, 0x7, 0x28001) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r1 = bpf$auto(0x0, &(0x7f0000000780)=@query={@target_ifindex=r0, 0x7fff, 0x5cfe, 0x2, 0x0, @count=0x7f, 0x0, 0x2, 0xe0a, 0xffffffffffff8000, 0x2d5}, 0xa3) unshare$auto(0x40000080) fallocate$auto(r1, 0x0, 0x10, 0xcbd5d) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) mmap$auto(0x2000000000000, 0x2, 0xc, 0x9b71, 0xffffffffffffffff, 0x2) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r2, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0xb, 0xa, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x2c, 0x2, 0x10) getpeername$auto(0x3, 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x4420, 0x4, 0xfffffffd, &(0x7f0000000140)={0x3ff, 0x734}, &(0x7f0000000180)=0xfffd, 0x20001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon5\x00', 0x101000, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) 7m55.126412117s ago: executing program 5 (id=2525): rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) ioperm$auto(0x3, 0xe, 0x2000000000000149) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) 7m54.999622392s ago: executing program 5 (id=2526): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8004) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) socket(0x2b, 0x1, 0x1) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1}, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r2) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040044) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01002c5c00"/18], 0x18}}, 0x4000010) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000140), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x7fffffff, 0x9, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0x2b4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2004, 0x0, 0xa, 0x70624ce7, 0x0, 0xffbffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0x6, 0xfffffffffffffffd, 0x200000000001, 0x3, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0x7158, 0x0, 0x0, 0xfffffffffffffff9, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x5, 0x1, 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) unshare$auto(0x5) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) 7m49.67810862s ago: executing program 5 (id=2534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00'}) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_pid\x00', 0x139082, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, r1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r2 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r3, r2, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, r0, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/010/001\x00', 0x101000, 0x0) ioctl$auto_USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000300)={0x9, 0x7}) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mbind$auto(0x9, 0x5510, 0x84, &(0x7f0000000280)=0x2, 0x800, 0x7) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x40080, 0x0) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0x18, r5, 0x1) read$auto_rts_threshold_ops_(r5, &(0x7f0000000100)=""/72, 0x48) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000800)={0x81, 0x0, 0x4, 0x9}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008042}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xeecd}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80014}, 0x8c0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) 7m49.209631461s ago: executing program 5 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000480)={0x40, r2, 0x1, 0x2, 0x25dfdbfd, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xfe}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3}, @ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xa}, @ILA_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) 7m49.107498494s ago: executing program 5 (id=2537): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400840, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x1f, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) delete_module$auto(0x0, 0x5) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200156f4e8e76096cf375c45ca71cd7901b13f57a8532a6f1b882359dbe8a6dc625419c9fd4cb5c4103f81c", @ANYBLOB="fbc5da132563c4ed2925beb83af2a6f590de3c9f8cfb83270fbd13eba4e1fc914a4a1b343aef4daa1d7b5be635e0e06e6ea48a5721374db33b49769cd37f8f49f646f08a5b25b199878b1b220fc065e7be5278960d0bbd8a63f609a4b9ee88209b2b4129500280ad5a3de2c8205fa80538f967db4ce958dd3680e42e222f9834498c06852e05a424ac9cc20b5129f6938d19eaf03fe089ca37707ccf08861bd9e3bfc8cbb0a850bc030be0b8d9f1717c7f2a9bd4a6d1f9a4366698cd2420690ea450b3e5bf5eb3949d900a21a0b992def8445c064afa23b71b2ad29e64029faaeba90cdfd66bb1dea9bec9449c7503848e08e294", @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0xe8) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x6, 0x400008, 0xe2, 0x19, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) msgrcv$auto(0x400, 0x0, 0x80000000000004, 0x0, 0x204) msgsnd$auto(0x0, &(0x7f00000002c0)={0x80000000004, 0xd}, 0x0, 0xa) listen$auto(0x3, 0x81) ioperm$auto(0x411f, 0x6b, 0xb2000) 7m48.508837196s ago: executing program 5 (id=2538): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/iosched/front_merges\x00', 0x8a301, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8, 0x1, [0xfd]}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x2, 0x4, 0x15f4da0a, 0x1, 0x51f, 0x1000000, 0x80000001, 0xb, 0x6d3c, 0x5, 0x7, 0x8]}, 0x0) 7m33.139752783s ago: executing program 35 (id=2538): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/iosched/front_merges\x00', 0x8a301, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8, 0x1, [0xfd]}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x2, 0x4, 0x15f4da0a, 0x1, 0x51f, 0x1000000, 0x80000001, 0xb, 0x6d3c, 0x5, 0x7, 0x8]}, 0x0) 4m18.355919454s ago: executing program 0 (id=4012): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x5) syz_clone3(0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x800ac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) set_mempolicy$auto(0x2, 0x0, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) 4m17.56796503s ago: executing program 0 (id=4019): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling\x00', 0x8d80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/132, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00'}) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) r3 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x2, 0x494, 0x1f, r3, 0x7) write$auto_bm_register_operations_binfmt_misc(r2, &(0x7f0000000380)="1fc8349b985f1e6c6020bf56bea2fa2a0de63c769504ed19f4409a1b80bdc029ab624875b8fc5bdbc2cd4d92b19d5e4eb29426d8261a797424ae0644ca9a45cd44bb137c2ec4b0f811a3d89a26af86ae23ed0df22f", 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES8=0x0, @ANYBLOB="f51b26bd7000fedbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) 4m17.326637017s ago: executing program 0 (id=4022): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0], 0x18}}, 0x80) write$auto(0x3, 0x0, 0x81) 4m15.997094951s ago: executing program 0 (id=4028): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio0\x00', 0x181400, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1c, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0xfff}}, 0x7, 0x5, 0x0) (async) mmap$auto(0x1ff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x5407, 0xffffffffffffffff) (async, rerun: 32) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x3, 0x200007, 0x19) mlock$auto(0x40, 0x3) (async, rerun: 64) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x600, 0x0) (rerun: 64) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000200)=""/249, 0xf9) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, r0, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async, rerun: 32) writev$auto(0x0, 0x0, 0xb) (async, rerun: 32) quotactl$auto(0x0, 0xfffffffffffffffc, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x3, 0x2, 0x0, 0x17, 0x3, @broadcast}, 0x68) pipe2$auto(0x0, 0x80) splice$auto(r2, 0x0, 0x3, 0x0, 0x6, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) (async) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) (async, rerun: 64) pread64$auto(r3, 0x0, 0xd570, 0xc24) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) 4m11.471111708s ago: executing program 0 (id=4050): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x15, 0x5, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[], 0x18}}, 0x80) 4m9.442053924s ago: executing program 0 (id=4062): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 64) r0 = epoll_create$auto(0x5) (rerun: 64) tee$auto(r0, r0, 0xffff, 0x49f0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, &(0x7f00000002c0)="73ce6f4a727a537558d6214f09940790f1537634ec79dd763bdc334c3768715186325d1096ef8a85282663d032bb09057a5e8d5d43232a990d5c51d20ec55598298e732ad9fc54fc7b3e591a2f6cc38fe824c46c351e8096bd") (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) (rerun: 32) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0xee00, 0x7, 0x5, 0xa2b8, 0x7}, &(0x7f0000000280)=0x40, &(0x7f00000002c0)=0x2, 0x8, 0x8, 0xe6d, 0x100000000, 0x400000, 0xb, 0x0, 0x9, @raw=0xffffffff, @inferred=0xffffffffffffffff}) (rerun: 64) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4060000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="ff226c256a3c113ee9732cb4a944e7c48889672f54b6c6e269da167cf8c61c046819e518f725a29cbc025317beac5a98a4c2c9708d5f1b4b552bb864ea6a4d4d2c2ce77da8201f2b7e00c5805901e73d2c6f0a3da2dfdfec196ad986d8ff027c0cbedfaa0322f2a18051c6d4da4f44c298601ebcebb06c1c3572e3062ccef439d64eddcd78f36e4188d5da0c0f7178b1dfec5855191a0a8e42fd49383e1202453651bcd77096c1049fd873069e0ae800b482f6ebd2c9d45dbd437256ec1d0800dd00", @ANYRES32=r2, @ANYBLOB="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"], 0x6d4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004044) (async) r3 = prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x81, 0x0, 0x7, 0x9) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xa2, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "547eac5c40000000000000000000033f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, r3}, 0x10) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r4 = prctl$auto_SIGCONT(0xff, 0x12, 0xffffffffffffffff, 0x9, 0x2) (async, rerun: 64) ioperm$auto(0x1, 0x1004, 0x7f) (async, rerun: 64) iopl$auto(0x2) (async) prlimit64$auto(0x0, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xffff}, 0x3fa, 0x1c) (async) getsockopt$auto(r4, 0x6, 0x2, &(0x7f00000000c0)='/dev/input/event0\x00', &(0x7f0000000080)=0xda94) prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, r5, 0x0) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0xa200, 0x0) ioctl$auto(r6, 0xc0585611, r6) 3m54.336618829s ago: executing program 36 (id=4062): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 64) r0 = epoll_create$auto(0x5) (rerun: 64) tee$auto(r0, r0, 0xffff, 0x49f0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, &(0x7f00000002c0)="73ce6f4a727a537558d6214f09940790f1537634ec79dd763bdc334c3768715186325d1096ef8a85282663d032bb09057a5e8d5d43232a990d5c51d20ec55598298e732ad9fc54fc7b3e591a2f6cc38fe824c46c351e8096bd") (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) (rerun: 32) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0xee00, 0x7, 0x5, 0xa2b8, 0x7}, &(0x7f0000000280)=0x40, &(0x7f00000002c0)=0x2, 0x8, 0x8, 0xe6d, 0x100000000, 0x400000, 0xb, 0x0, 0x9, @raw=0xffffffff, @inferred=0xffffffffffffffff}) (rerun: 64) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4060000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="ff226c256a3c113ee9732cb4a944e7c48889672f54b6c6e269da167cf8c61c046819e518f725a29cbc025317beac5a98a4c2c9708d5f1b4b552bb864ea6a4d4d2c2ce77da8201f2b7e00c5805901e73d2c6f0a3da2dfdfec196ad986d8ff027c0cbedfaa0322f2a18051c6d4da4f44c298601ebcebb06c1c3572e3062ccef439d64eddcd78f36e4188d5da0c0f7178b1dfec5855191a0a8e42fd49383e1202453651bcd77096c1049fd873069e0ae800b482f6ebd2c9d45dbd437256ec1d0800dd00", @ANYRES32=r2, @ANYBLOB="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"], 0x6d4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004044) (async) r3 = prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x81, 0x0, 0x7, 0x9) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xa2, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "547eac5c40000000000000000000033f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, r3}, 0x10) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r4 = prctl$auto_SIGCONT(0xff, 0x12, 0xffffffffffffffff, 0x9, 0x2) (async, rerun: 64) ioperm$auto(0x1, 0x1004, 0x7f) (async, rerun: 64) iopl$auto(0x2) (async) prlimit64$auto(0x0, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xffff}, 0x3fa, 0x1c) (async) getsockopt$auto(r4, 0x6, 0x2, &(0x7f00000000c0)='/dev/input/event0\x00', &(0x7f0000000080)=0xda94) prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, r5, 0x0) (async) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0xa200, 0x0) ioctl$auto(r6, 0xc0585611, r6) 10.313082652s ago: executing program 6 (id=5677): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xae, 0x9, 0x1403, 0x4, 0x6, 0x1000005, 0x3, 0x2004000000010006, 0x0, 0x7, 0x5, 0x1, 0x3, 0xaf, 0x209, 0x3, 0x3, 0x105, 0x7, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x2, [0x1b11, 0x0, 0x1000000001, 0x0, 0x3edc, 0x0, 0x0, 0x0, 0x0, 0x7b63a34b, 0x2, 0x7fff, 0x0, 0x77, 0x0, 0x7, 0x200, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10b, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x8000000000000000]}, 0x8, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x50080}, 0x20044054) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f3, r1) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000040)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000380)="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", 0xffff, 0xa505}, 0x803}, 0x7, 0x4008) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/ep_81/power/runtime_suspended_time\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x2, 0x0) mknod$auto(0x0, 0x402, 0x7fffffff) mmap$auto(0x0, 0x2000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') socket(0x21, 0x2, 0x2) 10.171620196s ago: executing program 6 (id=5678): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0xff, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xe, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0xffd, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x80805, 0x0) ioctl$auto(0x3, 0xff0a, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r1, 0x8, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r0) socket(0x11, 0x80003, 0x307) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb95bed6c1ff9ee32}, 0x26004011) socket(0xa, 0x1, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10.055431067s ago: executing program 6 (id=5680): r0 = getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x7, 0x5, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000040)=0x1) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x2bc, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2a5, 0x1, 0x0, 0x1, [@generic="4706af670e1a71875092f114eab681ab5f2e0644df3314fde925fb9a3db2f0b022c64b650ba7f84b6e205907a957c279571526b82d1ab43f3f7ac4182335e6", @nested={0x57, 0xca, 0x0, 0x1, [@generic="0d94410217cd249e7c7117f9154147dda7920891ca1e4a3e976c1c16b35879451329c97ac3c5013ed797f9bad8d6590e402ebd", @nested={0x4, 0x118}, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x8000}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x149}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r2}, @generic="4c5ef1de3e2dbb9ce77d37633b5f6d22e83b29ec", @generic="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", @nested={0xc4, 0x71, 0x0, 0x1, [@generic="02225712359611bd2f6c30684dd09f9958c815052290e50c652ce331f23d6255294d3ca7616114828c88814078cd8f0000d1bd8b3368da43fbed1ef61c1b6dd73cf5ea16e455762b194b31b83440355412cc6c01674c8311cbc3905aa267a10c799c296fafdba9a3b555147225b43e82c1cf69f26f43842a6ee2f4b80359d7142dc459f9e9830fcf6a53166536c4ef6cb9ab1d4e0cce8a8296bc3076a1a7d28eddc5a0fd3abc829ed0ff1d38aa999d51760949ba4e33bf91a5d3be0f20d40807"]}, @generic="e22701c588d02fec625966ca3a03b4ec"]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r5 = socket(0x2, 0x1, 0x100) sysfs$auto(0x2, 0x4, 0x0) getsockopt$auto(r5, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) ioctl$auto_RTC_PIE_ON(r4, 0x7005, 0x0) r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, 0xf4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000100)={{@raw=0x9, 0x85, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @integer64=@value=[0x9, 0x7, 0xc2c3, 0x10000000005, 0x5, 0x8, 0x4, 0x7, 0x80, 0x6, 0xfffffffffffffffd, 0x8000000000000001, 0x0, 0x9, 0x6, 0x1, 0x8, 0x0, 0x7fffffffffffffff, 0x2, 0x5, 0xad, 0x7, 0x100100001, 0x2, 0x5d7a604f, 0xc01, 0x7fffffff, 0x8, 0xff, 0x8, 0x9, 0x4, 0xfffffffffffffffd, 0x7, 0x0, 0x3, 0x9, 0x6, 0x8000000000000000, 0xfff, 0x40, 0x4, 0x4, 0x8001, 0x3, 0x3, 0x2, 0x7fffffff, 0xfff, 0x2, 0x4, 0x5, 0x7, 0xffffffffffffffff, 0x100000001, 0xd468, 0xfffffffffffffff9, 0x612, 0x8000, 0xf60d, 0x5, 0x6, 0xff], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) 9.913102353s ago: executing program 6 (id=5685): waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)={{0x6, 0xa8}, {0x7, 0xb}, 0x38d, 0x20000000006, 0x800, 0xf, 0x8e3, 0x4, 0x10000000000, 0xffffffffffffffff, 0x9081, 0xffffffff, 0x3c2, 0x6, 0x10, 0x10}) mmap$auto(0x1f, 0x100000000006, 0x13fdcf02, 0x8000000000ab0, 0xffffffffffffffff, 0x7) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x3) socketpair$auto(0x1c, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0x4d, 0x500000000000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9972, 0x2, 0x8000) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x185100, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x9, 0x8, 0x0, 0x0, 0x4) ioctl$auto(0x3, 0xff04, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/net_prio.prioidx\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/can/rcvlist_all\x00', 0x6b041, 0x0) write$auto(r3, 0x0, 0x4) ioctl$auto_USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r4 = epoll_create$auto(0x4) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r4, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRESOCT=r3, @ANYBLOB="010026bd7000fedbdf251400e185040807805a48081d4020c575f480600337c851c642d9e108d7194c19de7bb84df268d852019b2fc19d0ee24f04d9f56a9f84788f6522cd38c1af501a561b35916bc104bbf180a43ee857c86dfbbc70492153d4dfdf3f05a90d0b03a5f04001f044dd9995580a34042ba5b616f928a362b2f07b86e5cd06a12f66e724d9c141fbb1f331a2fba730c866a41e80b7333bc313d699a0d0ecf01db8f2504d9c722b1c895811ca0d01f71bbd27075861c40d7d416fb880c5ec143f59724ac887fb3421931fde1844408a490cded95240e62092c23a1bcea6dcc055038569779e7edac10dab4d998080c27a46e6b7f7d72f17295f2d3aa9c5"], 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x20000) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mmap$auto(0x0, 0x400005, 0xdf, 0x5d34, r2, 0x1) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) 9.76584983s ago: executing program 6 (id=5686): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000000), r0) r2 = socket(0x10, 0x2, 0x0) sched_setscheduler$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x1, 0x7, 0x12) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r3, 0x40084504, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4e, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0xf4be, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c990}, 0x4090) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={&(0x7f00000010c0), 0xffffffffffff86d7}, 0x2, &(0x7f00000010c0)="c7bd972185065d2d442d86a8cb81f1513cf0550cb3ee23ebaf48e36b6911ba0fe58682278a60633777d00d76d57ff7390584fd1cc6855db43a3b5d89ecb004dd890777cfd725cfcb7cc3ade5aa5a6e2e142147571d22a715bed0541391f8075ceed5777e0bd82b371a565141d065c4a1594937ea7d83de6cfb6c00004c7a780bd90faa401539f66220112d4447f26319217c4d206e65c1338ad8ee40853820f20ef50a594ba7e346d7b7c6c1933e1949304a9c3de56564679c87532856143a7ad6473d5993c1adfa5c2d20b5b87bfc428caf", 0xa, 0x3e}, 0x801}, 0x5, 0x4008) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001a80)={"e89ca5ecf91f7d3d5185c2d1a8b52f5f5835e8271e5db8c20ed1b49bd3630369", 0x8, 0x1000, 0xa5c8, 0x2, 0x80, 0xffffffffffffffff}) fcntl$auto_F_OFD_SETLK(r1, 0x25, r5) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = getsockopt$auto_SO_NOFCS(r2, 0x7, 0x2b, &(0x7f0000001940)='|an1\x00\x00', &(0x7f0000001a40)=0xfffffff5) r9 = getsockopt$auto(r8, 0x9, 0x9, &(0x7f00000019c0)='({{(\x00', &(0x7f0000001a00)=0x1) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \"\x00\x00', @ANYRES16=r6, @ANYRES64=r9, @ANYRES32, @ANYBLOB="e6ff0000"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20008814) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000001900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001e40)={0x14, r6, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x4000080) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x30, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 9.582315883s ago: executing program 6 (id=5688): close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r0 = socket(0x2a, 0x1, 0x0) r1 = socketcall$auto_SYS_GETSOCKNAME(0x6, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x44815) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0x10000000000eb4, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x40009, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x2, 0x28000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "77f1823bd91bf7ffffff00000100"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x24044065) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/afs/addr_prefs\x00', 0x0, 0x0) r4 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/clients\x00', 0x800002, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r4, &(0x7f0000000380)=""/4096, 0x1000) 6.792699179s ago: executing program 2 (id=5718): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) setsockopt$auto_SO_MARK(r0, 0xd, 0x24, &(0x7f0000000100)=']}&##/\'.\x00', 0x6) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r1, 0x0, 0xc70) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r2, 0x0, 0xc70) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=r0, 0x4007, @old_prog_fd=0x13b}, 0xa3) 6.21006589s ago: executing program 2 (id=5722): mmap$auto(0x3, 0xd, 0x7, 0xf8, 0xffffffffffffffff, 0x7) (async) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1, 0x4) (async) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon35\x00', 0x18b902, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x9, 0xfffffffffffffffd, 0xd4, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x633, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdf, 0x3, 0x0, 0x100000000003, 0x83, 0x65e493a9, 0xa749, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010005000000fbdbdf2504000000ff0011007765e4e2369b89576472977444bb13990f52b91a7dadc5ac53ac1351b4e94e66cbbc3d15ed91495b01ea70c20899c1ab8c6b3ba98406b24f11880bd3fefcf0fb53a8e225853a2c3778b84706e2706583be320ef1febc0f3d9c3b76d80e164dfa35004683ab300c5b87ff09e880832780fab7e8f2dd2040abd586301a7a430fe08a15e983a5ab7517f3bb71b1d3ccae4fe2941e5fe6b1b2a65c624f4638bbf2496c40c0aa9aa6507c7193092ca69fb868f2569b07aaf46e38482d31dfb79cc5531ffcb0166e68068f4cefefd003667cfee0022d2e512e60fbcae1e9255733b7ddcd02d7880770091fed8fb8d2eecbe62318802f49e634cadb0e3bc100"], 0x114}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) (async) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) r3 = open(0x0, 0x261c2, 0x84) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r4}, 0x10) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) r5 = socket(0xa, 0x2, 0x0) setsockopt$auto(r5, 0x29, 0x30, 0x0, 0x90) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x149101, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x2000000062, 0x8000001f, 0x87, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 5.193433905s ago: executing program 2 (id=5725): open(&(0x7f0000000800)='./file0\x00', 0x8241, 0x154) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x8000000000, 0x100000020009, 0x2, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ustat$auto(0x2, 0x0) fcntl$auto(0x3, 0x400, 0x2) 4.190354548s ago: executing program 8 (id=5729): socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video49\x00', 0x8a603, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x402942, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{@raw=0x6, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x2, &(0x7f00000000c0)="885a1a43afa0da1733619f89b6c4cbf52d6f368eeefd51321b321dad3134e7803f99cce00a60057be1baefbbec9cfe154a33c1f1bbf63611dc49b6127acf2fee38769ae59250cdbd29c7dcb92ae8823197a2283cd7373bc5a1baaac38cc81b") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x34, r2, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "eb96e1"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 3.286204198s ago: executing program 8 (id=5733): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x280c2, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x5, 0xfffffffe, 0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0x2000000000000dc, 0x9b72, 0xffffffffffffffff, 0x8000) memfd_create$auto(0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r3) mmap$auto(0xfffffffffffffffc, 0x4020005, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x17d001, 0x0) stat$auto(&(0x7f0000000080)='./file0\x00', 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) capget$auto(&(0x7f0000000040)={0x9, r4}, &(0x7f0000000180)={0x1552, 0xa}) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_4={0x3, r5, 0x6}, 0x9) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) 2.889448912s ago: executing program 2 (id=5734): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 21) 2.593129319s ago: executing program 8 (id=5737): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x167642, 0x64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = io_uring_setup$auto(0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x320, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x1a8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x59, 0x1, "fa42ce69d92a66bd5ed78381ad07efc8c02d6959f15b187e01d6beae3a06fb497e0d94618f06939d45365496180260a33c2d2743dca01e71ad303b357e61ddbcf6808021b22ae7d801f2b0333e6c55ede674a8ae29"}, @NFSD_A_SOCK_ADDR={0xe9, 0x1, "5f74ea5a1b9680b828d9636dc854f5a0d96098965290d98bca149261a0e405fe8aaea6b174cda5383d6cc839738536e1bd64694d9f34b2819ef3ff2fdc5c65f199179e76e47e5ed7327393f4b5ab2fd7fbc5af99783d40164009b0e621ac74ad2712f5b62449abdcc72662d62453163fcbefb06d0eea214ef56257a521fe78c429d77fff34ffa88a4db7efe0fb9b7bcfed8f327b0441fb69f9d3dd4383aba4cc469fdf06c95e4fd58fb47ecf48e3c1901b3345b771ac86da65e36332d7da7067dcd7da0f83ca99a9809cd183b3222d5aa5123961573e7653120ea2f83efba4201dedfc8dac"}, @NFSD_A_SOCK_ADDR={0x59, 0x1, "becf454fdd89d457a81835e5760a135b41f33e6281e41155aed69fe1166574147b742a093bba08d3ae54465659a911c5401965e3a21bf68e051ab94d78be7866d04d11f13db20ebcfa2d57078d74c6e32ba5e01a6e"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x154, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '{\xed\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x27, 0x2, '/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@'}, @NFSD_A_SOCK_ADDR={0x48, 0x1, "1fe3a8d912ac7ada898ebe10967941ef5b822c56d3f8dbe20ccae574a67512ca5095e74664b0401b2c463e7f13cca6cdc9e9e746e8f07d48dc3b93ee379e47bd2a2db9ff"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x27, 0x2, '/proc/sys/net/mpls/platform_labels\x00'}, @NFSD_A_SOCK_ADDR={0x59, 0x1, "2b8afba98d96c6cdabc6886bbf65eac7909bb983ac83bb7e28d5949117363baf895bfa12a9e03a6d8ad7aa0835a1999abb056c984db94f149f3c77e4aa989181764cdc691a74f7e3c2e122e2d02efc1553f572ff86"}, @NFSD_A_SOCK_ADDR={0x54, 0x1, "347918a0cac2e32eeb011e6f04093b07c08d927d4be9b775c0041c2d62dab8e8afa5628550ba7aba1e56314147e090555e97d77e7e4c27bc13eb79f0add7283f9eadbb2c97914dad92fe655881ba6917"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x10, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, '[-\\:\\\\!\x00'}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20040800}, 0x40002) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000b80), 0x23c00, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x3, 0xcbd5d) lseek$auto(r1, 0x2, 0x4) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20010050}, 0x400c014) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) r7 = fcntl$getown(r1, 0x9) kill$auto(r7, 0x100) utimensat$auto(r6, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3ffffffe}, 0x1000) r8 = socket(0x9, 0xa, 0x9) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.426594106s ago: executing program 8 (id=5739): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) timer_create$auto(0x3, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r1 = socket(0x2, 0x6, 0x0) setsockopt$auto(r1, 0x10d, 0x2, 0x0, 0x6d5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) 1.965201684s ago: executing program 2 (id=5741): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0xff, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xe, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0xffd, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x26, 0x80805, 0x0) ioctl$auto(0x3, 0xff0a, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x11, 0x80003, 0x307) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb95bed6c1ff9ee32}, 0x26004011) socket(0xa, 0x1, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.803543235s ago: executing program 2 (id=5742): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d517680000a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x595c00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/usb23-port4/state\x00', 0x12b5c0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs/file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) mmap$auto(0x0, 0x8, 0x7, 0x13, 0x3, 0x0) r1 = pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(0xffffffffffffffff, 0x0, 0x20000000000006) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x642b00, 0x0) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0x16, r1, 0xc3) socket(0x25, 0x1, 0x2) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xc000000010, 0x401, 0x8000) move_pages$auto(0x0, 0x1ffffffffffff, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, 0x38) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) 1.755087613s ago: executing program 7 (id=5743): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x52, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x34, r1, 0x305, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x1}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mremap$auto(0x4000, 0x100fee0, 0x3fd8, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xeffff000) munmap$auto(0x0, 0xffffffff) 1.245040083s ago: executing program 8 (id=5744): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video49\x00', 0x8a603, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0x100000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x402942, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x2, &(0x7f00000000c0)="885a1a43afa0da1733619f89b6c4cbf52d6f368eeefd51321b321dad3134e7803f99cce00a60057be1baefbbec9cfe154a33c1f1bbf63611dc49b6127acf2fee38769ae59250cdbd29c7dcb92ae8823197a2283cd7373bc5a1baaac38cc81b893c057730a8") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x34, r5, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "eb96e1"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xa1, 0x4, "508af05c4ee94ee0627cc39905656c3004a423be1f7d1626cf360255fd11f631f9a15b98706ca7e9bbd0f4a08c6209315b6c2284e870b3d7e6ca493edee041963d46c21b3a3923727c629ecb5d088e0cfb4aadff5ba746591ee42d1357022cfa19d1dec1c9022c7c030f6875c6c60eed038eddcd5bc42a5127600e753fc26aeaebab15a3655661945a0aed9a92e3d74594ca51897b1cf68ab83c7e544e"}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_HMACINFO={0x87, 0x7, 0x0, 0x1, [@generic="24bb29b53652729300d55d3e188a32b8b605fec5e7bb0e33fe686ea7560c65d64fa0337d899fb8a7839d990ccb2e4ac0e0513955c243361d7ba9", @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@multicast2}, @generic="97be11998a57532b06a7e5a186da89b4827361aef9d029c64b2139b8f729d5e14945a427453280741b25ea28bdb6d7d0e9784484024fd7a32e6cca687cf52dad6b"]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x11) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/psched\x00', 0x800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) process_madvise$auto_MADV_REMOVE(r2, &(0x7f0000000140)={&(0x7f0000000340)="02b69ba7972f9d2931f02226d97dde7a3cdd1554e4b64863706590028cc2ccf7496685d1d8567ed9765512b472ab3c4a77d891b799f07a6edc442079b949e3ec5ce595a9b4507be60ec5461758b210472f28c03b290c9db2f2828aa2af12a6761c512f025bbad8438b8e836842792f0ce6cafe08ce7c4f4087c1276af20f88e839a620830f16413e978b7304b1dd02d33167ac0420b603a6c0bf3a28151fd8f79fc5a8907d0231e56ca8d87e7abf40f55a0fcad7d23904bbb18d8b51b94a31d40f3fbfcfabfd76efd3bd5c0287466a943adb49413586e8bfa33d6d133323f3bfd3034f95febe6faef00d4b8496e2d060e5b98317cfbfa1", 0x1}, 0x3, 0x9, 0x0) write$auto(r2, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0xee00, 0xffffffffffffffff, 0x32, 0x3, 0xffffffff, 0x5}, 0x5, 0x7, 0x4, 0x1, @raw=0xb, @raw=0x8, 0x8, 0x0, &(0x7f0000000180)="59b35fee036dbdd132b857994b013b603754bf460b5b9d2acf203b2865c430b33d3ff968d4f44cb0f85d4c9feb4809e6b4b1c68bf1ab54c22d31ef8c188344073a25082d663796c7f9929ab8a485a8941d07486612ce04db6cee90b03d451a89b930e16562f3bdfafea533ea624be2e8", &(0x7f0000000200)="03a5bf968c42e4a6f2e4d90bb1c4805939dda8226701dfb394d5980549fc7fcf635ae5f9e2a22021e144d77f0006d65287ff16accd3d382e5088c8e26859f000d884a938d4c9a3caa60d6058cbb160795f3ca83eedaa77449fc6ec8358fd9606856ec05b33ff9205422ddbbaa1e525e20374f826dd7ed74534c0c210346851c23dc8479dbc438e5dba0879c9bcf118771ca875bc46a8aa302ec9afec0aae56611e8f9966e62445d4a295b11ac3fddb74a160d1c25725427b92f439cb1afc374d34ef1ea831637f8b1f86f174c68937b47816fbaef3cb2e6dbe3780f94e92a26ed6446ccb12f2e80d766f37"}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dce10000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="a3e967338e33ab5aae3f969141521ee03cb37788e912eb109ebcaf770f42f3d15d6db66f555d5c4ca74a12ff68b748c1a69404eedd84761cbb9e4e5394929884c20b328f7e1aea98657328955e563bbe2321baf2879db0dd31f60f5592c6151d8476a8585e0205abb47e925bbc8381ca3d2366447eb5aafe52e37db67e346588f46b498c389aaa5fd028190a2df5cb726d50c12a41f21dc2c4a18654e5c510ebd48b80f4ba0f0b338517bf8901f1a95e2c2198661418fa8d68a7aaefed026712042ca27faa71a87f9a06131cfe2a91581135dc00"], 0x1dc}, 0x1, 0x0, 0x0, 0x8008}, 0x48005) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000680), r0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="04020002", @ANYRES16=r7, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x4c094) 772.2356ms ago: executing program 7 (id=5746): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) 656.085105ms ago: executing program 7 (id=5747): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000300)={r0, &(0x7f0000000040)="5c521ef5d9235438cb1253c686ba3cbc81f636e61ea2d99b47177337ac4dea2e9def6974041321632061e3586e0f212d35661a9701d2bbf8df25aec682ce99fefa84569c0d535e24427a0a09a077b9b5e5dc50ed3a6183afe80af8f82f85ee49e89408715dbba18103364505d9aebbfcbb36f21b2cace99be726ba47d38f5705211335229ecb08d891", 0x0, 0x0, 0x80, 0x0, 0x0}) mmap$auto(0x0, 0x20009, 0x9, 0x2eb1, 0x401, 0x8000) r1 = getpid() mmap$auto(0x0, 0x20009, 0x100000000, 0x807c, 0x400, 0x800000008e8c) prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x1, r1, 0x3, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x800008000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) vmsplice$auto(r2, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r4 = io_uring_setup$auto(0x1, 0x0) ioctl$auto(r3, 0xc0585604, r4) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(0xffffffffffffffff, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x12500, 0x0) mmap$auto(0xfffffffffffffffc, 0x40009, 0xdf, 0x9b70, r2, 0x28002) 513.75896ms ago: executing program 7 (id=5748): madvise$auto(0xffff, 0xffffffffffff0002, 0x15) rseq$auto(&(0x7f00000004c0)={0xe, 0x411, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x4000000070624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x6, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) r1 = getsockopt$auto(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0c\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() setsockopt$auto_SO_DOMAIN(r1, 0x8, 0x27, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='r'], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0xa1) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) kexec_load$auto(0xdcb9, 0x8, 0x0, 0x1000000000000009) 317.532118ms ago: executing program 8 (id=5749): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00'}) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_pid\x00', 0x139082, 0x0) mmap$auto(0x3, 0x2, 0x20000001, 0x20000000000eb1, r1, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r2 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r3, r2, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, r0, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/010/001\x00', 0x101000, 0x0) ioctl$auto_USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000300)={0x9, 0x7}) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mbind$auto(0x9, 0x5510, 0x84, &(0x7f0000000280)=0x2, 0x800, 0x7) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x40080, 0x0) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0x18, r5, 0x1) read$auto_rts_threshold_ops_(r5, &(0x7f0000000100)=""/72, 0x48) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000800)={0x81, 0x0, 0x4, 0x9}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008042}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xeecd}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80014}, 0x8c0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) 0s ago: executing program 7 (id=5750): openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) ioperm$auto(0x7, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T24207] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1020.396176][T11777] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.416487][T24208] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1020.443159][T24209] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1020.479356][T11777] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.540585][T11777] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.581149][T11777] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.651883][T24215] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1020.708096][T24203] chnl_net:caif_netlink_parms(): no params data found [ 1020.738230][T24218] Invalid ELF header magic: != ELF [ 1020.771852][T11777] bridge_slave_1: left allmulticast mode [ 1020.789972][T24218] FAULT_INJECTION: forcing a failure. [ 1020.789972][T24218] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.803021][T24218] CPU: 1 UID: 0 PID: 24218 Comm: syz.8.4973 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1020.803070][T24218] Tainted: [U]=USER [ 1020.803082][T24218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1020.803101][T24218] Call Trace: [ 1020.803111][T24218] [ 1020.803122][T24218] dump_stack_lvl+0x16c/0x1f0 [ 1020.803172][T24218] should_fail_ex+0x50a/0x650 [ 1020.803203][T24218] ? fs_reclaim_acquire+0xae/0x150 [ 1020.803256][T24218] should_failslab+0xc2/0x120 [ 1020.803285][T24218] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1020.803331][T24218] ? rcu_is_watching+0x12/0xc0 [ 1020.803364][T24218] ? security_file_alloc+0x34/0x2b0 [ 1020.803408][T24218] security_file_alloc+0x34/0x2b0 [ 1020.803450][T24218] init_file+0x93/0x4c0 [ 1020.803480][T24218] alloc_empty_file+0x91/0x1e0 [ 1020.803512][T24218] alloc_file_clone+0x5f/0x110 [ 1020.803547][T24218] create_pipe_files+0x412/0x930 [ 1020.803611][T24218] do_pipe2+0xb0/0x1d0 [ 1020.803660][T24218] ? __pfx_do_pipe2+0x10/0x10 [ 1020.803710][T24218] ? rcu_is_watching+0x12/0xc0 [ 1020.803743][T24218] ? rcu_is_watching+0x12/0xc0 [ 1020.803777][T24218] __x64_sys_pipe+0x33/0x50 [ 1020.803805][T24218] do_syscall_64+0xcd/0x250 [ 1020.803850][T24218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.803894][T24218] RIP: 0033:0x7f8a1b98d169 [ 1020.803918][T24218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.803950][T24218] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 1020.803979][T24218] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1020.803999][T24218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.804017][T24218] RBP: 00007f8a1ba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.804036][T24218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.804056][T24218] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1020.804085][T24218] [ 1020.805757][T11777] bridge_slave_1: left promiscuous mode [ 1020.959878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.128372][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.142117][T11777] bridge_slave_0: left allmulticast mode [ 1021.218655][T11777] bridge_slave_0: left promiscuous mode [ 1021.229314][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.377904][T11777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.388866][T11777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.398676][T11777] bond0 (unregistering): Released all slaves [ 1021.465711][T24203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.472993][T24203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.480196][T24203] bridge_slave_0: entered allmulticast mode [ 1021.488384][T24203] bridge_slave_0: entered promiscuous mode [ 1021.495799][T11777] tipc: Left network mode [ 1021.512586][T24203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.519955][T24203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.531607][T24203] bridge_slave_1: entered allmulticast mode [ 1021.538895][T24203] bridge_slave_1: entered promiscuous mode [ 1021.554734][T24231] synth uevent: /module/qat_c62x: unknown uevent action string [ 1021.569637][T24234] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1021.615517][T24203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.656017][T24203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.685463][T24239] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1021.751097][T24203] team0: Port device team_slave_0 added [ 1021.773902][T24203] team0: Port device team_slave_1 added [ 1021.814280][T24203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.832030][T24203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.864520][T24203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.895374][T24203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.910187][T24203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.939663][T24203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.963161][T24242] mkiss: ax0: crc mode is auto. [ 1021.991851][T11777] hsr_slave_0: left promiscuous mode [ 1022.001707][T11777] hsr_slave_1: left promiscuous mode [ 1022.037888][T11777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.047082][T11777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.068538][T11777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.077280][T11777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.085096][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4980'. [ 1022.103713][T11777] veth0_macvtap: left promiscuous mode [ 1022.109304][T11777] veth1_vlan: left promiscuous mode [ 1022.115462][T11777] veth0_vlan: left promiscuous mode [ 1022.292190][T11777] team0 (unregistering): Port device team_slave_1 removed [ 1022.318931][T11777] team0 (unregistering): Port device team_slave_0 removed [ 1022.332526][ T5147] Bluetooth: hci1: command tx timeout [ 1022.509010][T24203] hsr_slave_0: entered promiscuous mode [ 1022.523327][T24203] hsr_slave_1: entered promiscuous mode [ 1023.187728][T24203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1023.206389][T24203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1023.220918][T24203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1023.258065][T24203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1023.399901][T24203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.443336][T24203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.455623][T14197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.462782][T14197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.506329][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.513553][T14140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.640915][T24203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.663401][T24203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.755055][T24203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.899095][T24203] veth0_vlan: entered promiscuous mode [ 1023.917626][T24203] veth1_vlan: entered promiscuous mode [ 1023.951401][T24203] veth0_macvtap: entered promiscuous mode [ 1023.963919][T24203] veth1_macvtap: entered promiscuous mode [ 1023.982264][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.995273][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.005607][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.021474][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.031472][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.047934][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.058318][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.071057][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.085647][T24203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.098374][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.109056][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.119392][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.130040][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.140002][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.154409][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.165217][T24203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.178930][T24203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.190294][T24203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.201041][T24203] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.209969][T24203] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.218808][T24203] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.239477][T24203] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.303660][T24203] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht' [ 1024.326340][T24311] FAULT_INJECTION: forcing a failure. [ 1024.326340][T24311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.330592][T24203] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1024.345040][T14197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.359944][T24311] CPU: 0 UID: 0 PID: 24311 Comm: syz.8.4997 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1024.359994][T24311] Tainted: [U]=USER [ 1024.360006][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1024.360026][T24311] Call Trace: [ 1024.360036][T24311] [ 1024.360049][T24311] dump_stack_lvl+0x16c/0x1f0 [ 1024.360098][T24311] should_fail_ex+0x50a/0x650 [ 1024.360131][T24311] _copy_from_user+0x2e/0xd0 [ 1024.360165][T24311] ____sys_sendmsg+0x590/0xc90 [ 1024.360210][T24311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.360248][T24311] ? _kstrtoull+0x146/0x200 [ 1024.360289][T24311] ? __pfx__kstrtoull+0x10/0x10 [ 1024.360330][T24311] ? lock_release+0x4e2/0x6f0 [ 1024.360375][T24311] ___sys_sendmsg+0x135/0x1e0 [ 1024.360423][T24311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.360471][T24311] ? __pfx_kstrtouint+0x10/0x10 [ 1024.360519][T24311] ? trace_lock_acquire+0x14e/0x1f0 [ 1024.360565][T24311] __sys_sendmmsg+0x201/0x420 [ 1024.360614][T24311] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1024.360666][T24311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1024.360715][T24311] ? fput+0x67/0x440 [ 1024.360743][T24311] ? ksys_write+0x1ba/0x250 [ 1024.360783][T24311] ? __pfx_ksys_write+0x10/0x10 [ 1024.360848][T24311] __x64_sys_sendmmsg+0x9c/0x100 [ 1024.360898][T24311] do_syscall_64+0xcd/0x250 [ 1024.360943][T24311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.360987][T24311] RIP: 0033:0x7f8a1b98d169 [ 1024.361011][T24311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.361044][T24311] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1024.361074][T24311] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1024.361095][T24311] RDX: 0000000000000007 RSI: 0000400000000200 RDI: 0000000000000003 [ 1024.361115][T24311] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.361134][T24311] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1024.361154][T24311] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1024.361182][T24311] [ 1024.361304][T14197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.445846][ T5147] Bluetooth: hci1: command tx timeout [ 1024.609558][T14213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.617843][T14213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.645738][T24317] EXT4-fs error: 19 callbacks suppressed [ 1024.645761][T24317] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1024.882645][ T30] audit: type=1800 audit(4294968389.118:25): pid=24323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5001" name="discovery_nqn" dev="configfs" ino=98126 res=0 errno=0 [ 1026.067651][T24354] openvswitch: netlink: IP tunnel dst address not specified [ 1026.652507][ T5147] Bluetooth: hci1: command tx timeout [ 1026.757055][T24368] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1026.774824][T24369] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1027.604279][T24387] : Can't lookup blockdev [ 1027.616166][T24387] ovsóãƒõ9Ûõ: entered promiscuous mode [ 1028.244484][T24394] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5020'. [ 1028.290507][T24390] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5019'. [ 1028.397103][T24394] veth0_macvtap: left promiscuous mode [ 1028.732527][ T5147] Bluetooth: hci1: command tx timeout [ 1028.983064][T24405] FAULT_INJECTION: forcing a failure. [ 1028.983064][T24405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.020959][T24405] CPU: 1 UID: 0 PID: 24405 Comm: syz.7.5024 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1029.021006][T24405] Tainted: [U]=USER [ 1029.021017][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1029.021033][T24405] Call Trace: [ 1029.021042][T24405] [ 1029.021053][T24405] dump_stack_lvl+0x16c/0x1f0 [ 1029.021102][T24405] should_fail_ex+0x50a/0x650 [ 1029.021135][T24405] _copy_from_iter+0x2a1/0x1560 [ 1029.021202][T24405] ? trace_lock_acquire+0x14e/0x1f0 [ 1029.021243][T24405] ? __alloc_skb+0x1fe/0x380 [ 1029.021291][T24405] ? __virt_addr_valid+0x1a4/0x590 [ 1029.021323][T24405] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.021359][T24405] ? __virt_addr_valid+0x1a4/0x590 [ 1029.021407][T24405] ? __virt_addr_valid+0x5e/0x590 [ 1029.021437][T24405] ? __phys_addr_symbol+0x30/0x80 [ 1029.021470][T24405] ? __check_object_size+0x488/0x710 [ 1029.021507][T24405] netlink_sendmsg+0x813/0xd70 [ 1029.021558][T24405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.021612][T24405] ____sys_sendmsg+0xaaf/0xc90 [ 1029.021645][T24405] ? copy_msghdr_from_user+0x10b/0x160 [ 1029.021716][T24405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.021761][T24405] ? rcu_is_watching+0x12/0xc0 [ 1029.021792][T24405] ? lock_release+0x4e2/0x6f0 [ 1029.021839][T24405] ? get_pid_task+0xfc/0x250 [ 1029.021882][T24405] ___sys_sendmsg+0x135/0x1e0 [ 1029.021926][T24405] ? get_pid_task+0x35/0x250 [ 1029.021979][T24405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.022028][T24405] ? lock_release+0x4e2/0x6f0 [ 1029.022074][T24405] ? __pfx_lock_release+0x10/0x10 [ 1029.022115][T24405] ? trace_lock_acquire+0x14e/0x1f0 [ 1029.022158][T24405] ? __fget_files+0x206/0x3a0 [ 1029.022206][T24405] __sys_sendmsg+0x16e/0x220 [ 1029.022254][T24405] ? __pfx___sys_sendmsg+0x10/0x10 [ 1029.022310][T24405] ? rcu_is_watching+0x12/0xc0 [ 1029.022346][T24405] ? rcu_is_watching+0x12/0xc0 [ 1029.022379][T24405] do_syscall_64+0xcd/0x250 [ 1029.022424][T24405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.022466][T24405] RIP: 0033:0x7fc3da18d169 [ 1029.022490][T24405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.022520][T24405] RSP: 002b:00007fc3dafc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.022549][T24405] RAX: ffffffffffffffda RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1029.022570][T24405] RDX: 0000000020008000 RSI: 0000400000001440 RDI: 0000000000000003 [ 1029.022590][T24405] RBP: 00007fc3dafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.022610][T24405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.022629][T24405] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1029.022658][T24405] [ 1030.027218][T24423] FAULT_INJECTION: forcing a failure. [ 1030.027218][T24423] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.097470][T24423] CPU: 1 UID: 0 PID: 24423 Comm: syz.7.5031 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1030.097518][T24423] Tainted: [U]=USER [ 1030.097529][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1030.097548][T24423] Call Trace: [ 1030.097558][T24423] [ 1030.097570][T24423] dump_stack_lvl+0x16c/0x1f0 [ 1030.097616][T24423] should_fail_ex+0x50a/0x650 [ 1030.097645][T24423] ? fs_reclaim_acquire+0xae/0x150 [ 1030.097688][T24423] ? seg6_genl_sethmac+0x37f/0x590 [ 1030.097719][T24423] should_failslab+0xc2/0x120 [ 1030.097748][T24423] __kmalloc_cache_noprof+0x68/0x410 [ 1030.097808][T24423] seg6_genl_sethmac+0x37f/0x590 [ 1030.097849][T24423] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1030.097880][T24423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1030.097928][T24423] ? trace_cap_capable+0x1a2/0x210 [ 1030.097965][T24423] ? bpf_lsm_capable+0x9/0x10 [ 1030.097994][T24423] ? security_capable+0x7e/0x260 [ 1030.098025][T24423] genl_rcv_msg+0x565/0x800 [ 1030.098053][T24423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.098080][T24423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1030.098140][T24423] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 1030.098178][T24423] netlink_rcv_skb+0x16b/0x440 [ 1030.098222][T24423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.098251][T24423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.098302][T24423] ? down_read+0xc9/0x330 [ 1030.098346][T24423] ? __pfx_down_read+0x10/0x10 [ 1030.098392][T24423] ? netlink_deliver_tap+0x1ae/0xd30 [ 1030.098435][T24423] genl_rcv+0x28/0x40 [ 1030.098478][T24423] netlink_unicast+0x53c/0x7f0 [ 1030.098524][T24423] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.098569][T24423] ? __phys_addr_symbol+0x30/0x80 [ 1030.098601][T24423] ? __check_object_size+0x488/0x710 [ 1030.098633][T24423] netlink_sendmsg+0x8b8/0xd70 [ 1030.098680][T24423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.098732][T24423] ____sys_sendmsg+0xaaf/0xc90 [ 1030.098767][T24423] ? copy_msghdr_from_user+0x10b/0x160 [ 1030.098813][T24423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.098856][T24423] ? rcu_is_watching+0x12/0xc0 [ 1030.098887][T24423] ? lock_release+0x4e2/0x6f0 [ 1030.098928][T24423] ? get_pid_task+0xfc/0x250 [ 1030.098963][T24423] ___sys_sendmsg+0x135/0x1e0 [ 1030.099006][T24423] ? get_pid_task+0x35/0x250 [ 1030.099040][T24423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.099086][T24423] ? lock_release+0x4e2/0x6f0 [ 1030.099131][T24423] ? __pfx_lock_release+0x10/0x10 [ 1030.099174][T24423] ? trace_lock_acquire+0x14e/0x1f0 [ 1030.099215][T24423] ? __fget_files+0x206/0x3a0 [ 1030.099264][T24423] __sys_sendmsg+0x16e/0x220 [ 1030.099311][T24423] ? __pfx___sys_sendmsg+0x10/0x10 [ 1030.099365][T24423] ? rcu_is_watching+0x12/0xc0 [ 1030.099397][T24423] ? rcu_is_watching+0x12/0xc0 [ 1030.099431][T24423] do_syscall_64+0xcd/0x250 [ 1030.099475][T24423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.099518][T24423] RIP: 0033:0x7fc3da18d169 [ 1030.099541][T24423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.099572][T24423] RSP: 002b:00007fc3dafc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.099602][T24423] RAX: ffffffffffffffda RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1030.099623][T24423] RDX: 0000000020008000 RSI: 0000400000001440 RDI: 0000000000000003 [ 1030.099643][T24423] RBP: 00007fc3dafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.099663][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.099681][T24423] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1030.099710][T24423] [ 1030.605035][T24436] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1030.646784][T24431] Line length is too long: Should be less than 4094 [ 1030.981000][T24444] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1031.158462][T24450] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1031.292912][T24453] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1032.264856][T24470] svc: failed to register nfsdv3 RPC service (errno 111). [ 1032.284502][T24470] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1032.655425][T24482] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5047'. [ 1032.666294][T24482] macvlan1: entered allmulticast mode [ 1032.671718][T24482] veth1_vlan: entered allmulticast mode [ 1033.504825][T24513] bridge0: port 3(team0) entered blocking state [ 1033.511159][T24513] bridge0: port 3(team0) entered disabled state [ 1033.520458][T24513] team0: entered allmulticast mode [ 1033.526434][T24513] team_slave_0: entered allmulticast mode [ 1033.534307][T24513] team_slave_1: entered allmulticast mode [ 1033.541072][T24513] team0: entered promiscuous mode [ 1033.547342][T24513] team_slave_0: entered promiscuous mode [ 1033.565222][T24513] team_slave_1: entered promiscuous mode [ 1033.580241][T24513] bridge0: port 3(team0) entered blocking state [ 1033.586627][T24513] bridge0: port 3(team0) entered forwarding state [ 1033.720243][T24524] cougar: G6 mapped to space [ 1033.944874][T24528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5063'. [ 1033.954103][T24528] FAULT_INJECTION: forcing a failure. [ 1033.954103][T24528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.970239][T24528] CPU: 1 UID: 0 PID: 24528 Comm: syz.8.5063 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1033.970296][T24528] Tainted: [U]=USER [ 1033.970306][T24528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1033.970326][T24528] Call Trace: [ 1033.970336][T24528] [ 1033.970348][T24528] dump_stack_lvl+0x16c/0x1f0 [ 1033.970396][T24528] should_fail_ex+0x50a/0x650 [ 1033.970429][T24528] _copy_to_user+0x32/0xd0 [ 1033.970466][T24528] simple_read_from_buffer+0xd0/0x160 [ 1033.970511][T24528] proc_fail_nth_read+0x198/0x270 [ 1033.970549][T24528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1033.970588][T24528] ? security_file_permission+0x71/0x210 [ 1033.970633][T24528] ? rw_verify_area+0xcf/0x680 [ 1033.970671][T24528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1033.970711][T24528] vfs_read+0x1df/0xbf0 [ 1033.970757][T24528] ? __pfx_vfs_read+0x10/0x10 [ 1033.970801][T24528] ? do_sys_openat2+0xb1/0x1e0 [ 1033.970836][T24528] ? __sys_sendmsg+0x19a/0x220 [ 1033.970888][T24528] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.970946][T24528] ksys_read+0x12b/0x250 [ 1033.970990][T24528] ? __pfx_ksys_read+0x10/0x10 [ 1033.971034][T24528] ? rcu_is_watching+0x12/0xc0 [ 1033.971068][T24528] ? rcu_is_watching+0x12/0xc0 [ 1033.971104][T24528] do_syscall_64+0xcd/0x250 [ 1033.971152][T24528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.971199][T24528] RIP: 0033:0x7f8a1b98bb7c [ 1033.971222][T24528] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1033.971260][T24528] RSP: 002b:00007f8a1c789030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1033.971290][T24528] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98bb7c [ 1033.971311][T24528] RDX: 000000000000000f RSI: 00007f8a1c7890a0 RDI: 0000000000000002 [ 1033.971331][T24528] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.971350][T24528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.971370][T24528] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1033.971400][T24528] [ 1034.582546][T24543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1034.602956][T24543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1034.769323][T24553] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1034.855221][ T5147] Bluetooth: hci4: Malformed Event: 0x13 [ 1034.861867][T24561] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1035.056363][T24566] FAULT_INJECTION: forcing a failure. [ 1035.056363][T24566] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.072547][T24566] CPU: 1 UID: 0 PID: 24566 Comm: syz.6.5073 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1035.072595][T24566] Tainted: [U]=USER [ 1035.072605][T24566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1035.072624][T24566] Call Trace: [ 1035.072634][T24566] [ 1035.072645][T24566] dump_stack_lvl+0x16c/0x1f0 [ 1035.072693][T24566] should_fail_ex+0x50a/0x650 [ 1035.072721][T24566] ? netlink_unicast+0x53c/0x7f0 [ 1035.072767][T24566] ? netlink_sendmsg+0x8b8/0xd70 [ 1035.072818][T24566] should_failslab+0xc2/0x120 [ 1035.072847][T24566] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1035.072895][T24566] ? __alloc_skb+0x2b1/0x380 [ 1035.072944][T24566] __alloc_skb+0x2b1/0x380 [ 1035.072988][T24566] ? __pfx___alloc_skb+0x10/0x10 [ 1035.073033][T24566] ? trace_lock_acquire+0x14e/0x1f0 [ 1035.073070][T24566] ? __nla_validate_parse+0x601/0x2880 [ 1035.073110][T24566] ? lock_acquire+0x2f/0xb0 [ 1035.073152][T24566] ? hsr_get_node_status+0x17c/0xd70 [ 1035.073185][T24566] hsr_get_node_status+0x363/0xd70 [ 1035.073216][T24566] ? __pfx_hsr_get_node_status+0x10/0x10 [ 1035.073280][T24566] ? srcu_torture_stats_print+0x540/0x6c0 [ 1035.073339][T24566] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1035.073394][T24566] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1035.073454][T24566] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1035.073485][T24566] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1035.073537][T24566] ? genl_get_cmd+0x195/0x580 [ 1035.073585][T24566] ? __kasan_slab_alloc+0x89/0x90 [ 1035.073632][T24566] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 1035.073679][T24566] ? __radix_tree_lookup+0x21f/0x2c0 [ 1035.073719][T24566] genl_rcv_msg+0x565/0x800 [ 1035.073751][T24566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.073780][T24566] ? __pfx_hsr_get_node_status+0x10/0x10 [ 1035.073838][T24566] netlink_rcv_skb+0x16b/0x440 [ 1035.073883][T24566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1035.073912][T24566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1035.073962][T24566] ? down_read+0xc9/0x330 [ 1035.074005][T24566] ? __pfx_down_read+0x10/0x10 [ 1035.074050][T24566] ? netlink_deliver_tap+0x1ae/0xd30 [ 1035.074096][T24566] genl_rcv+0x28/0x40 [ 1035.074140][T24566] netlink_unicast+0x53c/0x7f0 [ 1035.074186][T24566] ? __pfx_netlink_unicast+0x10/0x10 [ 1035.074231][T24566] ? __phys_addr_symbol+0x30/0x80 [ 1035.074263][T24566] ? __check_object_size+0x488/0x710 [ 1035.074295][T24566] netlink_sendmsg+0x8b8/0xd70 [ 1035.074348][T24566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.074400][T24566] ____sys_sendmsg+0xaaf/0xc90 [ 1035.074436][T24566] ? copy_msghdr_from_user+0x10b/0x160 [ 1035.074484][T24566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.074522][T24566] ? rcu_is_watching+0x12/0xc0 [ 1035.074554][T24566] ? lock_release+0x4e2/0x6f0 [ 1035.074595][T24566] ? get_pid_task+0xfc/0x250 [ 1035.074631][T24566] ___sys_sendmsg+0x135/0x1e0 [ 1035.074677][T24566] ? get_pid_task+0x35/0x250 [ 1035.074713][T24566] ? __pfx____sys_sendmsg+0x10/0x10 [ 1035.074762][T24566] ? lock_release+0x4e2/0x6f0 [ 1035.074808][T24566] ? __pfx_lock_release+0x10/0x10 [ 1035.074850][T24566] ? trace_lock_acquire+0x14e/0x1f0 [ 1035.074891][T24566] ? __fget_files+0x206/0x3a0 [ 1035.074940][T24566] __sys_sendmsg+0x16e/0x220 [ 1035.074987][T24566] ? __pfx___sys_sendmsg+0x10/0x10 [ 1035.075042][T24566] ? rcu_is_watching+0x12/0xc0 [ 1035.075076][T24566] ? rcu_is_watching+0x12/0xc0 [ 1035.075109][T24566] do_syscall_64+0xcd/0x250 [ 1035.075153][T24566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.075197][T24566] RIP: 0033:0x7f78e418d169 [ 1035.075221][T24566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.075252][T24566] RSP: 002b:00007f78e4f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.075280][T24566] RAX: ffffffffffffffda RBX: 00007f78e43a5fa0 RCX: 00007f78e418d169 [ 1035.075300][T24566] RDX: 00000000000000c0 RSI: 0000400000001340 RDI: 0000000000000003 [ 1035.075323][T24566] RBP: 00007f78e4f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.075343][T24566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.075362][T24566] R13: 0000000000000000 R14: 00007f78e43a5fa0 R15: 00007fff14863ab8 [ 1035.075390][T24566] [ 1035.683117][T24571] Invalid ELF header magic: != ELF [ 1036.000784][T24585] FAULT_INJECTION: forcing a failure. [ 1036.000784][T24585] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.032806][T24585] CPU: 1 UID: 0 PID: 24585 Comm: syz.2.5076 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1036.032859][T24585] Tainted: [U]=USER [ 1036.032870][T24585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1036.032889][T24585] Call Trace: [ 1036.032898][T24585] [ 1036.032909][T24585] dump_stack_lvl+0x16c/0x1f0 [ 1036.032955][T24585] should_fail_ex+0x50a/0x650 [ 1036.032988][T24585] should_failslab+0xc2/0x120 [ 1036.033019][T24585] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1036.033068][T24585] ? skb_clone+0x190/0x3f0 [ 1036.033099][T24585] skb_clone+0x190/0x3f0 [ 1036.033127][T24585] netlink_deliver_tap+0xabd/0xd30 [ 1036.033176][T24585] netlink_dump+0xb60/0xd00 [ 1036.033227][T24585] ? __pfx_netlink_dump+0x10/0x10 [ 1036.033279][T24585] ? __asan_memset+0x23/0x50 [ 1036.033319][T24585] ? genl_start+0x67d/0x960 [ 1036.033350][T24585] __netlink_dump_start+0x6ca/0x970 [ 1036.033398][T24585] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 1036.033433][T24585] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1036.033467][T24585] ? rcu_is_watching+0x12/0xc0 [ 1036.033503][T24585] ? __pfx_genl_start+0x10/0x10 [ 1036.033529][T24585] ? __pfx_genl_dumpit+0x10/0x10 [ 1036.033558][T24585] ? __pfx_genl_done+0x10/0x10 [ 1036.033588][T24585] ? bpf_lsm_capable+0x9/0x10 [ 1036.033622][T24585] ? security_capable+0x7e/0x260 [ 1036.033654][T24585] ? ns_capable+0xd7/0x110 [ 1036.033699][T24585] genl_rcv_msg+0x470/0x800 [ 1036.033731][T24585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1036.033761][T24585] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1036.033803][T24585] ? __pfx_l2tp_nl_cmd_session_dump+0x10/0x10 [ 1036.033855][T24585] netlink_rcv_skb+0x16b/0x440 [ 1036.033902][T24585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1036.033931][T24585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1036.033987][T24585] ? down_read+0xc9/0x330 [ 1036.034034][T24585] ? __pfx_down_read+0x10/0x10 [ 1036.034074][T24585] ? netlink_deliver_tap+0x1ae/0xd30 [ 1036.034113][T24585] genl_rcv+0x28/0x40 [ 1036.034153][T24585] netlink_unicast+0x53c/0x7f0 [ 1036.034199][T24585] ? __pfx_netlink_unicast+0x10/0x10 [ 1036.034239][T24585] ? __phys_addr_symbol+0x30/0x80 [ 1036.034266][T24585] ? __check_object_size+0x488/0x710 [ 1036.034294][T24585] netlink_sendmsg+0x8b8/0xd70 [ 1036.034335][T24585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.034380][T24585] ____sys_sendmsg+0xaaf/0xc90 [ 1036.034412][T24585] ? copy_msghdr_from_user+0x10b/0x160 [ 1036.034454][T24585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.034488][T24585] ? rcu_is_watching+0x12/0xc0 [ 1036.034518][T24585] ? lock_release+0x4e2/0x6f0 [ 1036.034555][T24585] ? get_pid_task+0xfc/0x250 [ 1036.034587][T24585] ___sys_sendmsg+0x135/0x1e0 [ 1036.034627][T24585] ? get_pid_task+0x35/0x250 [ 1036.034657][T24585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.034698][T24585] ? lock_release+0x4e2/0x6f0 [ 1036.034739][T24585] ? __pfx_lock_release+0x10/0x10 [ 1036.034775][T24585] ? trace_lock_acquire+0x14e/0x1f0 [ 1036.034810][T24585] ? __fget_files+0x206/0x3a0 [ 1036.034851][T24585] __sys_sendmsg+0x16e/0x220 [ 1036.034892][T24585] ? __pfx___sys_sendmsg+0x10/0x10 [ 1036.034939][T24585] ? rcu_is_watching+0x12/0xc0 [ 1036.034967][T24585] ? rcu_is_watching+0x12/0xc0 [ 1036.034995][T24585] do_syscall_64+0xcd/0x250 [ 1036.035034][T24585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.035072][T24585] RIP: 0033:0x7f25fd58d169 [ 1036.035092][T24585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.035118][T24585] RSP: 002b:00007f25fe4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.035142][T24585] RAX: ffffffffffffffda RBX: 00007f25fd7a5fa0 RCX: 00007f25fd58d169 [ 1036.035160][T24585] RDX: 0000000024008000 RSI: 00004000000002c0 RDI: 0000000000000003 [ 1036.035177][T24585] RBP: 00007f25fe4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.035199][T24585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.035215][T24585] R13: 0000000000000000 R14: 00007f25fd7a5fa0 R15: 00007ffcdbfc1108 [ 1036.035239][T24585] [ 1036.596608][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5079'. [ 1037.125840][T24612] uinput: write device info first [ 1037.415969][T24625] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1037.617604][T24630] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1037.714888][T24629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1037.721022][T24629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1037.727142][T24629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1037.733211][T24629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1037.739226][T24629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1037.745895][T24629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1038.229652][T24651] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1038.848141][T24666] netlink: 93 bytes leftover after parsing attributes in process `syz.7.5100'. [ 1039.611485][T24688] FAULT_INJECTION: forcing a failure. [ 1039.611485][T24688] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.659505][T24688] CPU: 1 UID: 0 PID: 24688 Comm: syz.8.5109 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1039.659554][T24688] Tainted: [U]=USER [ 1039.659565][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1039.659584][T24688] Call Trace: [ 1039.659593][T24688] [ 1039.659605][T24688] dump_stack_lvl+0x16c/0x1f0 [ 1039.659652][T24688] should_fail_ex+0x50a/0x650 [ 1039.659678][T24688] ? netlink_unicast+0x53c/0x7f0 [ 1039.659721][T24688] ? netlink_sendmsg+0x8b8/0xd70 [ 1039.659768][T24688] should_failslab+0xc2/0x120 [ 1039.659797][T24688] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1039.659847][T24688] ? __alloc_skb+0x2b1/0x380 [ 1039.659902][T24688] __alloc_skb+0x2b1/0x380 [ 1039.659947][T24688] ? __pfx___alloc_skb+0x10/0x10 [ 1039.659992][T24688] ? trace_lock_acquire+0x14e/0x1f0 [ 1039.660028][T24688] ? __nla_validate_parse+0x601/0x2880 [ 1039.660068][T24688] ? lock_acquire+0x2f/0xb0 [ 1039.660110][T24688] ? hsr_get_node_status+0x17c/0xd70 [ 1039.660143][T24688] hsr_get_node_status+0x363/0xd70 [ 1039.660173][T24688] ? __pfx_hsr_get_node_status+0x10/0x10 [ 1039.660225][T24688] ? srcu_torture_stats_print+0x540/0x6c0 [ 1039.660278][T24688] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1039.660333][T24688] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1039.660390][T24688] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1039.660422][T24688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.660473][T24688] ? genl_get_cmd+0x195/0x580 [ 1039.660527][T24688] ? __local_bh_enable_ip+0xa4/0x120 [ 1039.660574][T24688] ? __dev_queue_xmit+0x89b/0x43e0 [ 1039.660612][T24688] ? __radix_tree_lookup+0x21f/0x2c0 [ 1039.660653][T24688] genl_rcv_msg+0x565/0x800 [ 1039.660681][T24688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.660707][T24688] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1039.660745][T24688] ? __pfx_hsr_get_node_status+0x10/0x10 [ 1039.660799][T24688] netlink_rcv_skb+0x16b/0x440 [ 1039.660842][T24688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.660871][T24688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.660929][T24688] ? down_read+0xc9/0x330 [ 1039.660973][T24688] ? __pfx_down_read+0x10/0x10 [ 1039.661017][T24688] ? netlink_deliver_tap+0x1ae/0xd30 [ 1039.661061][T24688] genl_rcv+0x28/0x40 [ 1039.661105][T24688] netlink_unicast+0x53c/0x7f0 [ 1039.661151][T24688] ? __pfx_netlink_unicast+0x10/0x10 [ 1039.661196][T24688] ? __phys_addr_symbol+0x30/0x80 [ 1039.661228][T24688] ? __check_object_size+0x488/0x710 [ 1039.661260][T24688] netlink_sendmsg+0x8b8/0xd70 [ 1039.661309][T24688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.661362][T24688] ____sys_sendmsg+0xaaf/0xc90 [ 1039.661400][T24688] ? copy_msghdr_from_user+0x10b/0x160 [ 1039.661447][T24688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.661486][T24688] ? rcu_is_watching+0x12/0xc0 [ 1039.661519][T24688] ? lock_release+0x4e2/0x6f0 [ 1039.661560][T24688] ? get_pid_task+0xfc/0x250 [ 1039.661598][T24688] ___sys_sendmsg+0x135/0x1e0 [ 1039.661646][T24688] ? get_pid_task+0x35/0x250 [ 1039.661683][T24688] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.661732][T24688] ? lock_release+0x4e2/0x6f0 [ 1039.661781][T24688] ? __pfx_lock_release+0x10/0x10 [ 1039.661824][T24688] ? trace_lock_acquire+0x14e/0x1f0 [ 1039.661867][T24688] ? __fget_files+0x206/0x3a0 [ 1039.661924][T24688] __sys_sendmsg+0x16e/0x220 [ 1039.661973][T24688] ? __pfx___sys_sendmsg+0x10/0x10 [ 1039.662030][T24688] ? rcu_is_watching+0x12/0xc0 [ 1039.662063][T24688] ? rcu_is_watching+0x12/0xc0 [ 1039.662098][T24688] do_syscall_64+0xcd/0x250 [ 1039.662145][T24688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.662190][T24688] RIP: 0033:0x7f8a1b98d169 [ 1039.662214][T24688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.662245][T24688] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.662274][T24688] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1039.662295][T24688] RDX: 00000000000000c0 RSI: 0000400000001340 RDI: 0000000000000003 [ 1039.662315][T24688] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.662334][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.662353][T24688] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1039.662382][T24688] [ 1040.074820][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 1040.080880][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.087003][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 1040.093237][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 1040.289622][T24696] FAULT_INJECTION: forcing a failure. [ 1040.289622][T24696] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1040.565809][T24696] CPU: 1 UID: 0 PID: 24696 Comm: syz.2.5111 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1040.565859][T24696] Tainted: [U]=USER [ 1040.565871][T24696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1040.565890][T24696] Call Trace: [ 1040.565900][T24696] [ 1040.565912][T24696] dump_stack_lvl+0x16c/0x1f0 [ 1040.565964][T24696] should_fail_ex+0x50a/0x650 [ 1040.565994][T24696] ? lock_release+0x4e2/0x6f0 [ 1040.566042][T24696] get_futex_key+0x4a3/0x1000 [ 1040.566079][T24696] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1040.566113][T24696] ? __pfx_get_futex_key+0x10/0x10 [ 1040.566150][T24696] ? do_raw_spin_unlock+0x172/0x230 [ 1040.566182][T24696] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1040.566222][T24696] ? trace_pid_list_is_set+0x100/0x150 [ 1040.566268][T24696] futex_wait_setup+0x78/0x290 [ 1040.566320][T24696] __futex_wait+0x267/0x3c0 [ 1040.566369][T24696] ? __pfx___futex_wait+0x10/0x10 [ 1040.566418][T24696] ? try_to_wake_up+0x158/0x1490 [ 1040.566466][T24696] ? __pfx_futex_wake_mark+0x10/0x10 [ 1040.566533][T24696] futex_wait+0xe9/0x380 [ 1040.566581][T24696] ? __pfx_futex_wait+0x10/0x10 [ 1040.566637][T24696] do_futex+0x22b/0x350 [ 1040.566677][T24696] ? __pfx_do_futex+0x10/0x10 [ 1040.566722][T24696] __x64_sys_futex+0x1e1/0x4c0 [ 1040.566767][T24696] ? __pfx___x64_sys_futex+0x10/0x10 [ 1040.566808][T24696] ? rcu_is_watching+0x12/0xc0 [ 1040.566841][T24696] ? rcu_is_watching+0x12/0xc0 [ 1040.566875][T24696] ? rcu_is_watching+0x12/0xc0 [ 1040.566922][T24696] do_syscall_64+0xcd/0x250 [ 1040.566967][T24696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.567011][T24696] RIP: 0033:0x7f25fd58d169 [ 1040.567036][T24696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.567068][T24696] RSP: 002b:00007f25fe4ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1040.567099][T24696] RAX: ffffffffffffffda RBX: 00007f25fd7a6088 RCX: 00007f25fd58d169 [ 1040.567120][T24696] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25fd7a6088 [ 1040.567139][T24696] RBP: 00007f25fd7a6080 R08: 0000000000000000 R09: 0000000000000000 [ 1040.567157][T24696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25fd7a608c [ 1040.567177][T24696] R13: 0000000000000000 R14: 00007ffcdbfc1020 R15: 00007ffcdbfc1108 [ 1040.567205][T24696] [ 1040.859371][T24703] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1040.910760][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5113'. [ 1041.011774][T24706] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1041.016748][T24701] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1041.445649][T24727] FAULT_INJECTION: forcing a failure. [ 1041.445649][T24727] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.461206][T24727] CPU: 1 UID: 0 PID: 24727 Comm: syz.7.5118 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1041.461254][T24727] Tainted: [U]=USER [ 1041.461265][T24727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1041.461284][T24727] Call Trace: [ 1041.461294][T24727] [ 1041.461305][T24727] dump_stack_lvl+0x16c/0x1f0 [ 1041.461352][T24727] should_fail_ex+0x50a/0x650 [ 1041.461385][T24727] should_failslab+0xc2/0x120 [ 1041.461415][T24727] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1041.461466][T24727] ? __alloc_skb+0x2b1/0x380 [ 1041.461514][T24727] __alloc_skb+0x2b1/0x380 [ 1041.461557][T24727] ? __pfx___alloc_skb+0x10/0x10 [ 1041.461609][T24727] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 1041.461653][T24727] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1041.461706][T24727] __pskb_copy_fclone+0xef/0xdf0 [ 1041.461737][T24727] ? tipc_dest_pop+0x223/0x2d0 [ 1041.461782][T24727] tipc_sk_mcast_rcv+0x52e/0xf80 [ 1041.461834][T24727] ? __pfx_skb_copy_header+0x10/0x10 [ 1041.461882][T24727] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1041.461931][T24727] ? __pskb_copy_fclone+0x496/0xdf0 [ 1041.461966][T24727] ? __might_fault+0xe3/0x190 [ 1041.462009][T24727] tipc_mcast_xmit+0x665/0xdc0 [ 1041.462065][T24727] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1041.462112][T24727] ? __check_object_size+0x31/0x710 [ 1041.462149][T24727] ? net_generic+0xea/0x2a0 [ 1041.462203][T24727] tipc_send_group_bcast+0x805/0xa60 [ 1041.462249][T24727] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1041.462289][T24727] ? lock_acquire+0x2f/0xb0 [ 1041.462335][T24727] ? process_measurement+0x39c/0x2370 [ 1041.462385][T24727] ? __pfx_woken_wake_function+0x10/0x10 [ 1041.462428][T24727] ? process_measurement+0x1e8/0x2370 [ 1041.462477][T24727] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1041.462515][T24727] __tipc_sendmsg+0x4a5/0x1990 [ 1041.462560][T24727] ? __pfx_process_measurement+0x10/0x10 [ 1041.462604][T24727] ? tomoyo_check_open_permission+0x20f/0x3c0 [ 1041.462653][T24727] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1041.462698][T24727] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1041.462745][T24727] ? rcu_is_watching+0x12/0xc0 [ 1041.462778][T24727] ? is_bpf_text_address+0x8a/0x1a0 [ 1041.462823][T24727] ? __pfx_lock_release+0x10/0x10 [ 1041.462866][T24727] ? __pfx___might_resched+0x10/0x10 [ 1041.462914][T24727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1041.462965][T24727] ? rcu_is_watching+0x12/0xc0 [ 1041.463004][T24727] ? rcu_is_watching+0x12/0xc0 [ 1041.463039][T24727] tipc_sendmsg+0x4f/0x70 [ 1041.463085][T24727] ____sys_sendmsg+0xaaf/0xc90 [ 1041.463122][T24727] ? copy_msghdr_from_user+0x10b/0x160 [ 1041.463170][T24727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1041.463210][T24727] ? _kstrtoull+0x146/0x200 [ 1041.463252][T24727] ? __pfx__kstrtoull+0x10/0x10 [ 1041.463294][T24727] ? lock_release+0x4e2/0x6f0 [ 1041.463340][T24727] ___sys_sendmsg+0x135/0x1e0 [ 1041.463391][T24727] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.463441][T24727] ? __pfx_kstrtouint+0x10/0x10 [ 1041.463491][T24727] ? trace_lock_acquire+0x14e/0x1f0 [ 1041.463540][T24727] __sys_sendmmsg+0x201/0x420 [ 1041.463591][T24727] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1041.463665][T24727] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1041.463718][T24727] ? fput+0x67/0x440 [ 1041.463748][T24727] ? ksys_write+0x1ba/0x250 [ 1041.463790][T24727] ? __pfx_ksys_write+0x10/0x10 [ 1041.463837][T24727] __x64_sys_sendmmsg+0x9c/0x100 [ 1041.463887][T24727] do_syscall_64+0xcd/0x250 [ 1041.463933][T24727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.463977][T24727] RIP: 0033:0x7fc3da18d169 [ 1041.464002][T24727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.464033][T24727] RSP: 002b:00007fc3daf9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1041.464063][T24727] RAX: ffffffffffffffda RBX: 00007fc3da3a6080 RCX: 00007fc3da18d169 [ 1041.464086][T24727] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 1041.464106][T24727] RBP: 00007fc3daf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.464127][T24727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.464145][T24727] R13: 0000000000000000 R14: 00007fc3da3a6080 R15: 00007ffeaddd4f28 [ 1041.464175][T24727] [ 1041.887073][T24727] tipc: Failed to clone mcast rcv buffer [ 1041.995925][T24729] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1042.026989][T24728] sp0: Synchronizing with TNC [ 1042.172769][T11410] Bluetooth: hci1: command 0x0c1a tx timeout [ 1042.234069][T24739] FAULT_INJECTION: forcing a failure. [ 1042.234069][T24739] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.269771][T24739] CPU: 0 UID: 0 PID: 24739 Comm: syz.8.5123 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1042.269819][T24739] Tainted: [U]=USER [ 1042.269830][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1042.269848][T24739] Call Trace: [ 1042.269858][T24739] [ 1042.269870][T24739] dump_stack_lvl+0x16c/0x1f0 [ 1042.269918][T24739] should_fail_ex+0x50a/0x650 [ 1042.269948][T24739] ? fs_reclaim_acquire+0xae/0x150 [ 1042.269989][T24739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1042.270047][T24739] should_failslab+0xc2/0x120 [ 1042.270077][T24739] __kmalloc_noprof+0xcb/0x510 [ 1042.270125][T24739] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1042.270180][T24739] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1042.270242][T24739] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1042.270274][T24739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1042.270328][T24739] ? trace_cap_capable+0x1a2/0x210 [ 1042.270367][T24739] ? bpf_lsm_capable+0x9/0x10 [ 1042.270400][T24739] ? security_capable+0x7e/0x260 [ 1042.270435][T24739] genl_rcv_msg+0x565/0x800 [ 1042.270467][T24739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.270497][T24739] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1042.270559][T24739] ? __pfx_seg6_genl_sethmac+0x10/0x10 [ 1042.270617][T24739] netlink_rcv_skb+0x16b/0x440 [ 1042.270676][T24739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.270725][T24739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1042.270776][T24739] ? down_read+0xc9/0x330 [ 1042.270820][T24739] ? __pfx_down_read+0x10/0x10 [ 1042.270868][T24739] ? netlink_deliver_tap+0x1ae/0xd30 [ 1042.270913][T24739] genl_rcv+0x28/0x40 [ 1042.270958][T24739] netlink_unicast+0x53c/0x7f0 [ 1042.271004][T24739] ? __pfx_netlink_unicast+0x10/0x10 [ 1042.271051][T24739] ? __phys_addr_symbol+0x30/0x80 [ 1042.271083][T24739] ? __check_object_size+0x488/0x710 [ 1042.271117][T24739] netlink_sendmsg+0x8b8/0xd70 [ 1042.271167][T24739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.271234][T24739] ____sys_sendmsg+0xaaf/0xc90 [ 1042.271269][T24739] ? copy_msghdr_from_user+0x10b/0x160 [ 1042.271318][T24739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.271357][T24739] ? rcu_is_watching+0x12/0xc0 [ 1042.271388][T24739] ? lock_release+0x4e2/0x6f0 [ 1042.271431][T24739] ? get_pid_task+0xfc/0x250 [ 1042.271468][T24739] ___sys_sendmsg+0x135/0x1e0 [ 1042.271512][T24739] ? get_pid_task+0x35/0x250 [ 1042.271555][T24739] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.271601][T24739] ? lock_release+0x4e2/0x6f0 [ 1042.271647][T24739] ? __pfx_lock_release+0x10/0x10 [ 1042.271689][T24739] ? trace_lock_acquire+0x14e/0x1f0 [ 1042.271731][T24739] ? __fget_files+0x206/0x3a0 [ 1042.271791][T24739] __sys_sendmsg+0x16e/0x220 [ 1042.271836][T24739] ? __pfx___sys_sendmsg+0x10/0x10 [ 1042.271886][T24739] ? rcu_is_watching+0x12/0xc0 [ 1042.271916][T24739] ? rcu_is_watching+0x12/0xc0 [ 1042.271947][T24739] do_syscall_64+0xcd/0x250 [ 1042.271989][T24739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.272031][T24739] RIP: 0033:0x7f8a1b98d169 [ 1042.272053][T24739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.272082][T24739] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.272110][T24739] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1042.272128][T24739] RDX: 0000000020008000 RSI: 0000400000001440 RDI: 0000000000000003 [ 1042.272146][T24739] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.272163][T24739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.272181][T24739] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1042.272208][T24739] [ 1042.289957][T24742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1042.690955][T24754] random: crng reseeded on system resumption [ 1042.708535][T24754] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1042.717216][T24754] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1042.726360][T24754] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1043.200322][T24754] PM: hibernation: Basic memory bitmaps created [ 1043.735457][T24752] PM: hibernation: Basic memory bitmaps freed [ 1043.896268][T24764] caif:caif_disconnect_client(): nothing to disconnect [ 1044.144859][T24785] netlink: 93 bytes leftover after parsing attributes in process `syz.7.5137'. [ 1044.205113][T24785] netlink: 342 bytes leftover after parsing attributes in process `syz.7.5137'. [ 1044.223469][T24786] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1044.254164][T11410] Bluetooth: hci1: command 0x0c1a tx timeout [ 1044.354247][T24790] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1044.393115][T24793] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1044.590969][T24791] netlink: zone id is out of range [ 1044.604587][T24791] netlink: zone id is out of range [ 1044.627128][T24791] netlink: zone id is out of range [ 1044.659200][T24791] netlink: zone id is out of range [ 1044.686012][T24791] netlink: zone id is out of range [ 1044.723358][T24791] netlink: zone id is out of range [ 1044.775360][T24791] netlink: zone id is out of range [ 1044.806358][T24799] Invalid ELF header magic: != ELF [ 1044.833494][T24800] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1044.833842][T24791] netlink: zone id is out of range [ 1044.902708][T24791] netlink: zone id is out of range [ 1044.919323][T24791] netlink: zone id is out of range [ 1045.100863][T24811] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1045.386048][T24823] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1045.683277][T24826] block2mtd: illegal erase size [ 1046.207684][T24834] FAULT_INJECTION: forcing a failure. [ 1046.207684][T24834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1046.322563][T24834] CPU: 1 UID: 0 PID: 24834 Comm: syz.8.5151 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1046.322618][T24834] Tainted: [U]=USER [ 1046.322630][T24834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1046.322650][T24834] Call Trace: [ 1046.322660][T24834] [ 1046.322672][T24834] dump_stack_lvl+0x16c/0x1f0 [ 1046.322722][T24834] should_fail_ex+0x50a/0x650 [ 1046.322753][T24834] ? __pfx___might_resched+0x10/0x10 [ 1046.322808][T24834] should_fail_alloc_page+0xe7/0x130 [ 1046.322841][T24834] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1046.322889][T24834] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1046.322943][T24834] ? kmem_cache_alloc_lru_noprof+0x278/0x3d0 [ 1046.322997][T24834] ? rcu_is_watching+0x12/0xc0 [ 1046.323032][T24834] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 1046.323074][T24834] ? __mod_zone_page_state+0xcc/0x1a0 [ 1046.323109][T24834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1046.323172][T24834] ? lock_release+0x4e2/0x6f0 [ 1046.323216][T24834] ? __dquot_alloc_space+0x933/0xde0 [ 1046.323264][T24834] ? __pfx_lock_release+0x10/0x10 [ 1046.323309][T24834] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1046.323340][T24834] ? lock_acquire+0x2f/0xb0 [ 1046.323388][T24834] ? do_raw_spin_unlock+0x172/0x230 [ 1046.323421][T24834] ? _raw_spin_unlock+0x28/0x50 [ 1046.323458][T24834] ? __dquot_alloc_space+0x515/0xde0 [ 1046.323506][T24834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1046.323558][T24834] ? policy_nodemask+0xea/0x4e0 [ 1046.323589][T24834] alloc_pages_mpol+0x1fc/0x540 [ 1046.323620][T24834] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1046.323651][T24834] ? __folio_batch_add_and_move+0x689/0xc60 [ 1046.323696][T24834] ? rcu_is_watching+0x12/0xc0 [ 1046.323732][T24834] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1046.323770][T24834] shmem_alloc_folio+0x135/0x160 [ 1046.323825][T24834] shmem_alloc_and_add_folio+0x48e/0xc10 [ 1046.323866][T24834] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1046.323901][T24834] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1046.323940][T24834] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1046.323983][T24834] shmem_get_folio_gfp+0x689/0x1530 [ 1046.324025][T24834] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1046.324063][T24834] ? wake_up_q+0xb0/0x160 [ 1046.324111][T24834] shmem_fault+0x200/0xae0 [ 1046.324156][T24834] ? __pfx_shmem_fault+0x10/0x10 [ 1046.324194][T24834] ? __up_read+0x1fb/0x760 [ 1046.324243][T24834] ? __pfx___up_read+0x10/0x10 [ 1046.324293][T24834] ? inode_to_bdi+0x9e/0x160 [ 1046.324333][T24834] ? inode_needs_update_time.part.0+0x191/0x270 [ 1046.324389][T24834] ? rcu_is_watching+0x12/0xc0 [ 1046.324424][T24834] ? __pfx_filemap_map_pages+0x10/0x10 [ 1046.324465][T24834] __do_fault+0x10a/0x490 [ 1046.324500][T24834] ? __pfx_filemap_map_pages+0x10/0x10 [ 1046.324539][T24834] do_pte_missing+0x1a8/0x3e10 [ 1046.324588][T24834] ? ___pte_offset_map+0x1b9/0x540 [ 1046.324630][T24834] __handle_mm_fault+0x103c/0x2a40 [ 1046.324684][T24834] ? __pfx___handle_mm_fault+0x10/0x10 [ 1046.324743][T24834] ? find_vma+0xc0/0x140 [ 1046.324782][T24834] ? __pfx_find_vma+0x10/0x10 [ 1046.324819][T24834] ? rep_stos_alternative+0x40/0x80 [ 1046.324853][T24834] handle_mm_fault+0x3fa/0xaa0 [ 1046.324906][T24834] do_user_addr_fault+0x7a3/0x13f0 [ 1046.324955][T24834] exc_page_fault+0x5c/0xc0 [ 1046.324998][T24834] asm_exc_page_fault+0x26/0x30 [ 1046.325041][T24834] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 1046.325075][T24834] Code: ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 1046.325107][T24834] RSP: 0018:ffffc90005377bb0 EFLAGS: 00050206 [ 1046.325140][T24834] RAX: 0000000000000000 RBX: 00000000003b9000 RCX: 0000000000001000 [ 1046.325160][T24834] RDX: 0000000000080000 RSI: ffffffff84c0a667 RDI: 00000000003b9000 [ 1046.325181][T24834] RBP: 000000007fc46000 R08: 0000000000000000 R09: fffffbfff20c50e2 [ 1046.325201][T24834] R10: ffffffff90628717 R11: 0000000000000000 R12: 0000000000000000 [ 1046.325221][T24834] R13: 0000000000001000 R14: 00000000003b9000 R15: 00000000003ba000 [ 1046.325247][T24834] ? iov_iter_zero+0x267/0x1430 [ 1046.325286][T24834] iov_iter_zero+0x277/0x1430 [ 1046.325322][T24834] ? __pfx_lock_release+0x10/0x10 [ 1046.325367][T24834] ? plist_check_head+0xa3/0x150 [ 1046.325402][T24834] ? __pfx_iov_iter_zero+0x10/0x10 [ 1046.325439][T24834] ? wake_up_q+0xb0/0x160 [ 1046.325481][T24834] ? do_raw_spin_unlock+0x172/0x230 [ 1046.325516][T24834] read_iter_zero+0x138/0x340 [ 1046.325563][T24834] ? rw_verify_area+0xcf/0x680 [ 1046.325604][T24834] vfs_read+0x886/0xbf0 [ 1046.325652][T24834] ? __pfx_vfs_read+0x10/0x10 [ 1046.325694][T24834] ? do_futex+0x123/0x350 [ 1046.325733][T24834] ? __fget_files+0x40/0x3a0 [ 1046.325787][T24834] ksys_read+0x12b/0x250 [ 1046.325831][T24834] ? __pfx_ksys_read+0x10/0x10 [ 1046.325876][T24834] ? rcu_is_watching+0x12/0xc0 [ 1046.325911][T24834] ? rcu_is_watching+0x12/0xc0 [ 1046.325945][T24834] do_syscall_64+0xcd/0x250 [ 1046.325992][T24834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.326038][T24834] RIP: 0033:0x7f8a1b98d169 [ 1046.326062][T24834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.326094][T24834] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1046.326123][T24834] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1046.326154][T24834] RDX: 0000004000000081 RSI: 0000000000000000 RDI: 000000000000000a [ 1046.326174][T24834] RBP: 00007f8a1ba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.326195][T24834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.326214][T24834] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1046.326245][T24834] [ 1046.900986][T24845] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1047.094648][T24849] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1047.725962][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5157'. [ 1047.921246][T24858] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1048.979788][T24874] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1049.334956][T24881] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1049.618400][T24883] Process accounting resumed [ 1049.726450][T24889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1049.752539][T24889] macsec0: entered promiscuous mode [ 1049.757950][T24889] macsec0: entered allmulticast mode [ 1049.772947][T24889] veth1_macvtap: entered allmulticast mode [ 1049.887107][T24894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5168'. [ 1049.951446][T24894] veth0_macvtap: left promiscuous mode [ 1050.056615][T24899] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1050.534554][T24915] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 1050.673481][T24927] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1051.122709][T24941] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 1051.353448][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5184'. [ 1052.179868][T24956] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1052.454979][T24957] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1052.511969][T24958] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1052.613070][T24959] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1052.654794][T24963] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1052.830934][T24972] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 1054.077369][T24994] tipc: Started in network mode [ 1054.101925][T24994] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 1054.178016][T24994] tipc: Node number set to 2387504917 can't run '/sbi[ 1054.684900][T25005] bridge0: port 3(hsr_slave_1) entered blocking state [ 1054.691822][T25005] bridge0: port 3(hsr_slave_1) entered disabled state [ 1054.722932][T25005] hsr_slave_1: entered allmulticast mode [ 1054.734344][T25005] hsr_slave_1: left allmulticast mode [ 1054.876653][T25012] warning: `syz.7.5200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1054.963578][T24935] base_sock_release(ffff8880792b1800) sk=ffff88807cbb5000 [ 1055.311664][T25023] EXT4-fs error: 5 callbacks suppressed [ 1055.311688][T25023] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1056.171816][T25034] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5206'. [ 1056.371177][T25040] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1056.948891][T11410] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1057.424343][T25067] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1057.487200][T25070] netlink: 226 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1057.669294][T25074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5220'. [ 1057.680510][T25074] veth0_macvtap: left promiscuous mode [ 1057.727060][T25081] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1057.762616][T25082] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1057.890176][ T30] audit: type=1326 audit(4294970686.397:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.2.5223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25fd58d169 code=0x0 [ 1057.959081][T25091] Invalid ELF header magic: != ELF [ 1058.477669][T25106] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1058.681294][T25113] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1058.961143][T25119] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5233'. [ 1059.036453][T25125] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1059.054245][T25126] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1059.378523][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.385256][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.507001][T25137] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1060.570546][T25174] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1060.868798][T25184] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1060.906533][T25185] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.142509][T25196] sp0: Synchronizing with TNC [ 1061.190366][ T30] audit: type=1800 audit(4294970689.697:27): pid=25199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5259" name="dummy_udc" dev="gadgetfs" ino=6593 res=0 errno=0 [ 1061.252222][T25202] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.465964][T25203] can0: slcan on ttyS2. [ 1061.537444][T25211] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.562274][T25213] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.593186][T25203] can0 (unregistered): slcan off ttyS2. [ 1061.631746][T25215] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.665026][T25217] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.688236][T25218] ubi4: attaching mtd0 [ 1061.688753][T25219] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1061.731919][T25220] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1061.737792][T25219] udevd[25219]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 1061.875278][T25189] [U] è [ 1062.201909][T25226] cgroup: fork rejected by pids controller in /syz7 [ 1062.500455][T25292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5273'. [ 1062.540759][T25292] bridge_slave_1: left allmulticast mode [ 1062.564509][T25292] bridge_slave_1: left promiscuous mode [ 1062.591197][T25292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.673093][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1062.718593][T25292] bridge_slave_0: left allmulticast mode [ 1062.724667][T25292] bridge_slave_0: left promiscuous mode [ 1062.730796][T25292] bridge0: port 1(bridge_slave_0) entered disabled state can't run '/sbi[ 1063.196822][T25311] udevd[25311]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 1063.498467][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5279'. can't run '/sbi[ 1064.363428][T25343] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5285'. [ 1064.579760][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5289'. [ 1064.677090][T25350] FAULT_INJECTION: forcing a failure. [ 1064.677090][T25350] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.722433][T25350] CPU: 0 UID: 0 PID: 25350 Comm: syz.2.5289 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1064.722487][T25350] Tainted: [U]=USER [ 1064.722500][T25350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1064.722520][T25350] Call Trace: [ 1064.722531][T25350] [ 1064.722543][T25350] dump_stack_lvl+0x16c/0x1f0 [ 1064.722593][T25350] should_fail_ex+0x50a/0x650 [ 1064.722622][T25350] ? fs_reclaim_acquire+0xae/0x150 [ 1064.722664][T25350] ? __register_sysctl_table+0xb4/0x1910 [ 1064.722716][T25350] should_failslab+0xc2/0x120 [ 1064.722757][T25350] __kmalloc_noprof+0xcb/0x510 [ 1064.722804][T25350] __register_sysctl_table+0xb4/0x1910 [ 1064.722853][T25350] ? rcu_is_watching+0x12/0xc0 [ 1064.722886][T25350] ? __pfx___register_sysctl_table+0x10/0x10 [ 1064.722933][T25350] ? is_module_address+0x2a/0x50 [ 1064.722974][T25350] ? register_net_sysctl_sz+0x228/0x3e0 [ 1064.723032][T25350] ? __asan_memcpy+0x3c/0x60 [ 1064.723073][T25350] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1064.723118][T25350] nf_lwtunnel_net_init+0x60/0xf0 [ 1064.723163][T25350] ops_init+0x1df/0x5f0 [ 1064.723203][T25350] setup_net+0x21f/0x860 [ 1064.723233][T25350] ? __pfx_setup_net+0x10/0x10 [ 1064.723262][T25350] ? down_read_killable+0xcc/0x380 [ 1064.723309][T25350] ? __pfx_down_read_killable+0x10/0x10 [ 1064.723356][T25350] ? __raw_spin_lock_init+0x3a/0x110 [ 1064.723387][T25350] ? debug_mutex_init+0x37/0x70 [ 1064.723421][T25350] copy_net_ns+0x2a6/0x5f0 [ 1064.723457][T25350] create_new_namespaces+0x3ea/0xad0 [ 1064.723511][T25350] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1064.723574][T25350] ksys_unshare+0x45d/0xa40 [ 1064.723605][T25350] ? __pfx_ksys_unshare+0x10/0x10 [ 1064.723634][T25350] ? xfd_validate_state+0x5d/0x180 [ 1064.723675][T25350] ? rcu_is_watching+0x12/0xc0 [ 1064.723733][T25350] __x64_sys_unshare+0x31/0x40 [ 1064.723766][T25350] do_syscall_64+0xcd/0x250 [ 1064.723810][T25350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.723856][T25350] RIP: 0033:0x7f25fd58d169 [ 1064.723881][T25350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.723913][T25350] RSP: 002b:00007f25fe4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1064.723945][T25350] RAX: ffffffffffffffda RBX: 00007f25fd7a5fa0 RCX: 00007f25fd58d169 [ 1064.723966][T25350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1064.723984][T25350] RBP: 00007f25fd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1064.724003][T25350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.724020][T25350] R13: 0000000000000000 R14: 00007f25fd7a5fa0 R15: 00007ffcdbfc1108 [ 1064.724048][T25350] can't run '/sbi[ 1065.458496][T25368] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5292'. [ 1065.537438][T25369] caif:caif_disconnect_client(): nothing to disconnect [ 1065.847685][T25372] netlink: 'syz.6.5294': attribute type 2 has an invalid length. [ 1066.364251][T25385] EXT4-fs error: 9 callbacks suppressed [ 1066.364274][T25385] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1066.707856][T25395] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1067.438676][T25411] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1067.952552][T25421] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1068.100840][T25423] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1068.550087][T25426] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1069.355048][T25447] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1069.405262][T25441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 1069.429527][T25450] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1069.489648][T25441] nbd: must specify at least one socket [ 1069.527631][T25440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5309'. [ 1069.614188][T25453] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1069.956138][T25458] batman_adv: Routing algorithm '' is not supported [ 1070.006459][T25459] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1070.065608][T25458] bridge0: port 4(hsr_slave_1) entered blocking state [ 1070.084701][T25458] bridge0: port 4(hsr_slave_1) entered disabled state [ 1070.114467][T25458] hsr_slave_1: entered allmulticast mode [ 1070.127503][T25458] hsr_slave_1: left allmulticast mode [ 1070.365218][T25457] netlink: 186 bytes leftover after parsing attributes in process `syz.2.5315'. can't run '/sbi[ 1070.966689][T25476] Invalid ELF header magic: != ELF [ 1071.650881][T25489] Invalid ELF header magic: != ELF [ 1071.664889][T25488] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5323'. [ 1071.711616][T25491] EXT4-fs error: 5 callbacks suppressed [ 1071.711638][T25491] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1072.269097][T25499] IPVS: length: 24 != 25769803800 [ 1072.310929][T25503] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1072.636346][T25513] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1072.679442][T25513] udevd[25513]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 1072.797796][T25520] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1073.704366][T25254] syz.7.5266 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1073.845380][T25254] CPU: 1 UID: 0 PID: 25254 Comm: syz.7.5266 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1073.845435][T25254] Tainted: [U]=USER [ 1073.845447][T25254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1073.845466][T25254] Call Trace: [ 1073.845476][T25254] [ 1073.845488][T25254] dump_stack_lvl+0x16c/0x1f0 [ 1073.845534][T25254] dump_header+0x101/0x930 [ 1073.845576][T25254] oom_kill_process+0x270/0xa60 [ 1073.845618][T25254] out_of_memory+0x351/0x1700 [ 1073.845662][T25254] ? __pfx_out_of_memory+0x10/0x10 [ 1073.845700][T25254] ? rcu_read_unlock+0x17/0x60 [ 1073.845729][T25254] ? __pfx_lock_release+0x10/0x10 [ 1073.845778][T25254] mem_cgroup_out_of_memory+0x207/0x270 [ 1073.845817][T25254] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1073.845860][T25254] ? do_raw_spin_unlock+0x172/0x230 [ 1073.845894][T25254] try_charge_memcg+0x54c/0xaf0 [ 1073.845946][T25254] ? __pfx_try_charge_memcg+0x10/0x10 [ 1073.846018][T25254] ? trace_lock_acquire+0x14e/0x1f0 [ 1073.846055][T25254] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1073.846097][T25254] ? lock_acquire+0x2f/0xb0 [ 1073.846139][T25254] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1073.846184][T25254] charge_memcg+0x8a/0x310 [ 1073.846233][T25254] __mem_cgroup_charge+0x2b/0x1e0 [ 1073.846275][T25254] shmem_alloc_and_add_folio+0x50a/0xc10 [ 1073.846314][T25254] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1073.846349][T25254] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1073.846387][T25254] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1073.846429][T25254] shmem_get_folio_gfp+0x689/0x1530 [ 1073.846468][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.846502][T25254] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1073.846538][T25254] ? follow_page_pte+0x35d/0x1490 [ 1073.846585][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.846621][T25254] shmem_write_begin+0x161/0x300 [ 1073.846660][T25254] ? __pfx_shmem_write_begin+0x10/0x10 [ 1073.846698][T25254] ? timestamp_truncate+0x21f/0x2e0 [ 1073.846749][T25254] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 1073.846805][T25254] generic_perform_write+0x2ba/0x920 [ 1073.846840][T25254] ? __pfx_generic_perform_write+0x10/0x10 [ 1073.846873][T25254] ? inode_needs_update_time.part.0+0x191/0x270 [ 1073.846923][T25254] shmem_file_write_iter+0x10e/0x140 [ 1073.846964][T25254] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1073.847004][T25254] __kernel_write_iter+0x318/0xa90 [ 1073.847044][T25254] ? __pfx___kernel_write_iter+0x10/0x10 [ 1073.847083][T25254] ? get_dump_page+0x15b/0x230 [ 1073.847127][T25254] ? __pfx___might_resched+0x10/0x10 [ 1073.847183][T25254] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 1073.847214][T25254] dump_user_range+0x389/0x8c0 [ 1073.847255][T25254] ? __pfx_dump_user_range+0x10/0x10 [ 1073.847288][T25254] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1073.847332][T25254] ? __pfx_writenote+0x10/0x10 [ 1073.847369][T25254] elf_core_dump+0x287c/0x3a50 [ 1073.847412][T25254] ? __pfx_elf_core_dump+0x10/0x10 [ 1073.847447][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.847474][T25254] ? lock_release+0x4e2/0x6f0 [ 1073.847509][T25254] ? try_to_wake_up+0x949/0x1490 [ 1073.847546][T25254] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 1073.847589][T25254] ? 0xffffffffff600000 [ 1073.847609][T25254] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1073.847655][T25254] ? rwsem_wake.isra.0+0xbe/0x120 [ 1073.847707][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.847735][T25254] ? trace_lock_acquire+0x14e/0x1f0 [ 1073.847766][T25254] ? get_signal+0x230b/0x26c0 [ 1073.847807][T25254] ? lock_acquire+0x2f/0xb0 [ 1073.847846][T25254] ? do_coredump+0x3166/0x4410 [ 1073.847875][T25254] do_coredump+0x3166/0x4410 [ 1073.847911][T25254] ? __pfx_do_coredump+0x10/0x10 [ 1073.847944][T25254] ? stack_trace_save+0x95/0xd0 [ 1073.847973][T25254] ? __pfx_stack_trace_save+0x10/0x10 [ 1073.848005][T25254] ? stack_depot_save_flags+0x28/0x9c0 [ 1073.848055][T25254] ? kmem_cache_free+0x2e2/0x4d0 [ 1073.848093][T25254] ? __sigqueue_free+0xba/0x2a0 [ 1073.848121][T25254] ? get_signal+0xcbc/0x26c0 [ 1073.848165][T25254] ? arch_do_signal_or_restart+0x90/0x7e0 [ 1073.848197][T25254] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1073.848262][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.848294][T25254] ? proc_coredump_connector+0x2d2/0x4f0 [ 1073.848343][T25254] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1073.848394][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.848425][T25254] get_signal+0x230b/0x26c0 [ 1073.848470][T25254] ? force_sig_fault+0xc5/0x110 [ 1073.848511][T25254] ? __pfx_get_signal+0x10/0x10 [ 1073.848556][T25254] arch_do_signal_or_restart+0x90/0x7e0 [ 1073.848586][T25254] ? trace_irq_disable.constprop.0+0xea/0x140 [ 1073.848628][T25254] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1073.848658][T25254] ? __bad_area_nosemaphore+0x334/0x6a0 [ 1073.848699][T25254] ? do_user_addr_fault+0x920/0x13f0 [ 1073.848737][T25254] ? rcu_is_watching+0x12/0xc0 [ 1073.848766][T25254] irqentry_exit_to_user_mode+0x13f/0x280 [ 1073.848804][T25254] asm_exc_page_fault+0x26/0x30 [ 1073.848841][T25254] RIP: 0033:0x400fff [ 1073.848865][T25254] Code: Unable to access opcode bytes at 0x400fd5. [ 1073.848878][T25254] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 1073.848899][T25254] RAX: 0000000000000000 RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1073.848916][T25254] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1073.848933][T25254] RBP: 00007fc3da20e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 1073.848949][T25254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.848966][T25254] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1073.848991][T25254] [ 1074.390510][T25526] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1074.490068][T25254] memory: usage 307200kB, limit 307200kB, failcnt 17173 [ 1074.554606][T25254] memory+swap: usage 429796kB, limit 9007199254740988kB, failcnt 0 [ 1074.628875][T25254] kmem: usage 2960kB, limit 9007199254740988kB, failcnt 0 [ 1074.714576][T25254] Memory cgroup stats for /syz7: [ 1074.714797][T25254] cache 306966528 [ 1074.899557][T25254] rss 4268032 [ 1074.903219][T25254] rss_huge 0 [ 1074.906457][T25254] shmem 306954240 [ 1074.910115][T25254] mapped_file 0 [ 1074.914136][T25254] dirty 0 [ 1074.917122][T25254] writeback 0 [ 1074.920438][T25254] workingset_refault_anon 6665 [ 1074.925754][T25254] workingset_refault_file 124 [ 1074.930462][T25254] swap 125575168 [ 1074.934647][T25254] swapcached 307200 [ 1074.939219][T25254] pgpgin 1195321 [ 1074.943406][T25254] pgpgout 1121305 [ 1074.947092][T25254] pgfault 717394 [ 1074.950948][T25254] pgmajfault 1619 [ 1074.955392][T25254] inactive_anon 175763456 [ 1074.959760][T25254] active_anon 135155712 [ 1074.964362][T25254] inactive_file 4096 [ 1074.968392][T25254] active_file 8192 [ 1074.972126][T25254] unevictable 0 [ 1074.976345][T25254] hierarchical_memory_limit 314572800 [ 1074.981756][T25254] hierarchical_memsw_limit 9223372036854771712 [ 1074.989645][T25254] total_cache 306966528 [ 1074.994103][T25254] total_rss 4268032 [ 1074.997945][T25254] total_rss_huge 0 [ 1075.002130][T25254] total_shmem 306954240 [ 1075.007686][T25254] total_mapped_file 0 [ 1075.011713][T25254] total_dirty 0 [ 1075.017387][T25254] total_writeback 0 [ 1075.021243][T25254] total_workingset_refault_anon 6665 [ 1075.088465][T25254] total_workingset_refault_file 124 [ 1075.108480][T25254] total_swap 125575168 [ 1075.145343][T25254] total_swapcached 307200 [ 1075.162761][T25254] total_pgpgin 1195321 [ 1075.166924][T25254] total_pgpgout 1121305 [ 1075.171103][T25254] total_pgfault 717394 [ 1075.292468][T25254] total_pgmajfault 1619 [ 1075.296683][T25254] total_inactive_anon 175763456 [ 1075.301568][T25254] total_active_anon 135155712 [ 1075.354765][T25254] total_inactive_file 4096 [ 1075.359251][T25254] total_active_file 8192 [ 1075.421692][T25550] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1075.425191][T25254] total_unevictable 0 [ 1075.461158][T25254] anon_cost 0 [ 1075.469051][T25254] file_cost 0 [ 1075.486163][T25254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.5266,pid=25274,uid=0 can't run '/sbi[ 1075.522489][T25254] Memory cgroup out of memory: Killed process 25274 (syz.7.5266) total-vm:102828kB, anon-rss:3180kB, file-rss:53528kB, shmem-rss:128kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 1075.776341][T25555] Invalid ELF header magic: != ELF [ 1076.628631][T25566] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1077.726719][ T32] oom_reaper: reaped process 25274 (syz.7.5266), now anon-rss:212kB, file-rss:52356kB, shmem-rss:128kB [ 1077.732795][T25586] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1078.480956][T25597] netlink: 326 bytes leftover after parsing attributes in process `syz.8.5350'. [ 1078.503832][T25599] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1079.054016][T25603] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1079.635452][T25613] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1079.726037][T25611] Process accounting paused [ 1079.994548][T25621] netlink: 'syz.8.5357': attribute type 11 has an invalid length. [ 1080.075297][T25623] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1080.137833][T25626] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1080.188255][T25629] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1080.314748][T25630] svc: failed to register nfsdv3 RPC service (errno 111). [ 1080.350185][T25630] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1080.409964][T25631] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1080.714328][T25636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5361'. [ 1080.947116][T25642] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1081.109936][T25651] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1081.495667][T25662] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5369'. [ 1081.521622][T25662] veth1_macvtap: left promiscuous mode [ 1081.905187][T25668] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5372'. [ 1082.052083][T25673] FAULT_INJECTION: forcing a failure. [ 1082.052083][T25673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.073403][T25673] CPU: 1 UID: 0 PID: 25673 Comm: syz.2.5374 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1082.073450][T25673] Tainted: [U]=USER [ 1082.073460][T25673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1082.073478][T25673] Call Trace: [ 1082.073487][T25673] [ 1082.073499][T25673] dump_stack_lvl+0x16c/0x1f0 [ 1082.073546][T25673] should_fail_ex+0x50a/0x650 [ 1082.073577][T25673] _copy_from_user+0x2e/0xd0 [ 1082.073610][T25673] copy_msghdr_from_user+0x99/0x160 [ 1082.073658][T25673] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1082.073718][T25673] ? kfree+0x260/0x4d0 [ 1082.073762][T25673] ___sys_recvmsg+0xdc/0x1a0 [ 1082.073808][T25673] ? __pfx____sys_recvmsg+0x10/0x10 [ 1082.073856][T25673] ? rcu_is_watching+0x12/0xc0 [ 1082.073896][T25673] ? __pfx___might_resched+0x10/0x10 [ 1082.073944][T25673] ? __might_fault+0xe3/0x190 [ 1082.073978][T25673] do_recvmmsg+0x2f8/0x740 [ 1082.074028][T25673] ? __pfx_do_recvmmsg+0x10/0x10 [ 1082.074073][T25673] ? vfs_write+0x306/0x1150 [ 1082.074126][T25673] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1082.074173][T25673] ? __fget_files+0x206/0x3a0 [ 1082.074222][T25673] __x64_sys_recvmmsg+0x239/0x290 [ 1082.074253][T25673] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1082.074283][T25673] ? rcu_is_watching+0x12/0xc0 [ 1082.074332][T25673] ? rcu_is_watching+0x12/0xc0 [ 1082.074366][T25673] do_syscall_64+0xcd/0x250 [ 1082.074410][T25673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.074467][T25673] RIP: 0033:0x7f25fd58d169 [ 1082.074490][T25673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.074520][T25673] RSP: 002b:00007f25fe4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1082.074557][T25673] RAX: ffffffffffffffda RBX: 00007f25fd7a5fa0 RCX: 00007f25fd58d169 [ 1082.074578][T25673] RDX: 0000000000000007 RSI: 0000400000000100 RDI: 0000000000000003 [ 1082.074598][T25673] RBP: 00007f25fe4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.074618][T25673] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 1082.074638][T25673] R13: 0000000000000000 R14: 00007f25fd7a5fa0 R15: 00007ffcdbfc1108 [ 1082.074666][T25673] [ 1082.298467][ C1] vkms_vblank_simulate: vblank timer overrun can't run '/sbi[ 1082.929879][T25687] EXT4-fs error: 3 callbacks suppressed [ 1082.929901][T25687] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1082.977308][T25690] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1083.058667][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1083.082104][T25695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5380'. [ 1083.258118][T25700] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1083.302864][T25702] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1083.373519][T25703] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1083.618348][T25709] netlink: 'syz.6.5383': attribute type 19 has an invalid length. [ 1083.626443][T25709] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5383'. [ 1084.420315][T25724] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1085.239808][T25736] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1085.305486][T25739] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1085.471587][T25743] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1085.861586][T25750] netlink: 'syz.8.5392': attribute type 3 has an invalid length. [ 1085.913195][T25752] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1086.096435][T25749] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5393'. can't run '/sbin/getty': Struct[ 1087.358834][T25777] HfR: entered promiscuous mode [ 1087.395707][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5399'. [ 1087.425033][T25777] HfR: left promiscuous mode can't run '/sbi[ 1088.024769][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5403'. [ 1088.592013][T25803] EXT4-fs error: 7 callbacks suppressed [ 1088.592033][T25803] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1089.676998][T25816] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1090.090405][T11410] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 1090.571976][T25833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1090.601318][T25833] veth0_macvtap: left promiscuous mode [ 1090.714009][T25837] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1091.347885][T25856] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1091.388999][T25857] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1091.745817][T25864] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1091.865071][T25866] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1092.041535][T25869] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1092.063244][T25870] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1092.310405][T25880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1092.483039][T25886] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1093.142080][T25911] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5434'. [ 1093.235832][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5435'. [ 1093.774167][T25924] EXT4-fs error: 3 callbacks suppressed [ 1093.774190][T25924] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1093.823362][T25924] udevd[25924]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 1093.856388][T25927] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1093.953639][T25931] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1094.133610][T25939] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1094.175204][T25942] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1094.223448][T25941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5443'. [ 1094.228585][T25943] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1094.880334][T25965] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1095.746055][T25981] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1095.783033][T25980] lo: entered allmulticast mode [ 1095.900283][T25980] lo: left allmulticast mode [ 1095.974812][T25990] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1096.460011][T26004] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5465'. [ 1096.582439][T26010] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1096.619873][T26010] udevd[26010]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning can't run '/sbin/getty': Struct[ 1097.295070][T26031] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5474'. can't run '/sbi[ 1098.257625][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5476'. [ 1098.464472][T26041] caif:caif_disconnect_client(): nothing to disconnect [ 1098.630597][T26052] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5480'. [ 1098.747518][T26054] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5481'. [ 1099.027645][T26066] EXT4-fs error: 4 callbacks suppressed [ 1099.027668][T26066] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1099.613834][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5492'. [ 1099.834483][T26091] Invalid ELF header magic: != ELF [ 1100.110738][T26095] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1100.307534][T26108] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1100.349173][T26104] nbd: must specify an index to disconnect [ 1100.706688][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5500'. [ 1101.170960][T26125] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1101.544211][T26131] netlink: 338 bytes leftover after parsing attributes in process `syz.6.5503'. [ 1101.888078][T26152] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1102.365995][T26165] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1102.625432][T26175] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1102.755920][T26181] Device name cannot be null; rc = [-22] [ 1102.833564][T26186] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1102.872978][T26188] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1102.890582][T26184] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5514'. [ 1102.959899][T26191] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1103.006743][T26192] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1103.233021][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5519'. can't run '/sbin/getty': Struct[ 1103.745977][T26220] FAULT_INJECTION: forcing a failure. [ 1103.745977][T26220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.833615][T26220] CPU: 0 UID: 0 PID: 26220 Comm: syz.8.5529 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1103.833664][T26220] Tainted: [U]=USER [ 1103.833675][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.833694][T26220] Call Trace: [ 1103.833703][T26220] [ 1103.833714][T26220] dump_stack_lvl+0x16c/0x1f0 [ 1103.833761][T26220] should_fail_ex+0x50a/0x650 [ 1103.833794][T26220] _copy_from_user+0x2e/0xd0 [ 1103.833828][T26220] copy_msghdr_from_user+0x99/0x160 [ 1103.833886][T26220] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1103.833938][T26220] ? kfree+0x260/0x4d0 [ 1103.833977][T26220] ? __pfx__kstrtoull+0x10/0x10 [ 1103.834018][T26220] ? lock_release+0x4e2/0x6f0 [ 1103.834063][T26220] ___sys_sendmsg+0xff/0x1e0 [ 1103.834112][T26220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.834160][T26220] ? __pfx_kstrtouint+0x10/0x10 [ 1103.834209][T26220] ? rcu_is_watching+0x12/0xc0 [ 1103.834249][T26220] ? __pfx___might_resched+0x10/0x10 [ 1103.834298][T26220] ? __might_fault+0xe3/0x190 [ 1103.834332][T26220] __sys_sendmmsg+0x201/0x420 [ 1103.834383][T26220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1103.834438][T26220] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1103.834489][T26220] ? fput+0x67/0x440 [ 1103.834518][T26220] ? ksys_write+0x1ba/0x250 [ 1103.834560][T26220] ? __pfx_ksys_write+0x10/0x10 [ 1103.834606][T26220] __x64_sys_sendmmsg+0x9c/0x100 [ 1103.834668][T26220] do_syscall_64+0xcd/0x250 [ 1103.834710][T26220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.834750][T26220] RIP: 0033:0x7f8a1b98d169 [ 1103.834788][T26220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.834818][T26220] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1103.834852][T26220] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1103.834872][T26220] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 1103.834890][T26220] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.834908][T26220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.834926][T26220] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1103.834953][T26220] [ 1104.062311][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.435530][T26238] EXT4-fs error: 2 callbacks suppressed [ 1104.435554][T26238] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1104.561608][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5538'. [ 1104.634235][T26250] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1104.683710][T26253] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1105.513490][T26284] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1105.531931][T26286] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1105.558008][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5548'. [ 1105.571454][T26281] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1106.102528][T26295] nbd1: detected capacity change from 0 to 68719476736 [ 1106.111307][T21710] block nbd1: Send control failed (result -22) [ 1106.117670][T21710] block nbd1: Request send failed, requeueing [ 1106.142938][T11410] block nbd1: Receive control failed (result -32) [ 1106.143053][ T5998] block nbd1: Dead connection, failed to find a fallback [ 1106.156839][ T5998] block nbd1: shutting down sockets [ 1106.162083][ T5998] blk_print_req_error: 6 callbacks suppressed [ 1106.162114][ T5998] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.178757][ T5998] buffer_io_error: 6 callbacks suppressed [ 1106.178777][ T5998] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.202885][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.212247][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.220487][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.229663][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.238487][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.248295][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.257144][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.266417][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.275089][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.288270][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.296265][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.305723][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.313976][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.323230][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.331052][T21710] ldm_validate_partition_table(): Disk read failed. [ 1106.338112][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.347252][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.355181][T21710] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1106.364297][T21710] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1106.373803][T21710] Dev nbd1: unable to read RDB block 0 [ 1106.380410][T21710] nbd1: unable to read partition table [ 1106.388598][T21710] ldm_validate_partition_table(): Disk read failed. [ 1106.396752][T21710] Dev nbd1: unable to read RDB block 0 [ 1106.406762][T21710] nbd1: unable to read partition table [ 1106.447132][T26308] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1106.551563][T26312] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1106.991808][T26325] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1107.545805][T26348] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1107.659561][T26350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5571'. [ 1107.666212][T26354] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1108.043772][T26377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1108.426884][T26392] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1108.491196][T26392] CIFS mount error: No usable UNC path provided in device string! [ 1108.491196][T26392] [ 1108.516415][T26392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1108.565824][T26399] net_ratelimit: 21 callbacks suppressed [ 1108.565853][T26399] netlink: ct family unspecified [ 1108.681830][T26405] Invalid ELF header magic: != ELF can't run '/sbi[ 1108.930201][T26413] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5593'. [ 1108.980860][T26415] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1109.803201][T26439] EXT4-fs error: 3 callbacks suppressed [ 1109.803223][T26439] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1109.845815][T26440] Process accounting resumed can't run '/sbi[ 1110.032174][T26451] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1110.677615][T26461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1110.962164][T26465] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1111.103443][T26468] vivid-003: ================= START STATUS ================= [ 1111.111254][T26468] vivid-003: Radio HW Seek Mode: Bounded [ 1111.117104][T26468] vivid-003: Radio Programmable HW Seek: false [ 1111.123885][T26468] vivid-003: RDS Rx I/O Mode: Block I/O [ 1111.129507][T26468] vivid-003: Generate RBDS Instead of RDS: false [ 1111.137481][T26468] vivid-003: RDS Reception: true [ 1111.142723][T26468] vivid-003: RDS Program Type: 0 inactive [ 1111.148832][T26468] vivid-003: RDS PS Name: inactive [ 1111.154352][T26468] vivid-003: RDS Radio Text: inactive [ 1111.159964][T26468] vivid-003: RDS Traffic Announcement: false inactive [ 1111.167736][T26468] vivid-003: RDS Traffic Program: false inactive [ 1111.174291][T26468] vivid-003: RDS Music: false inactive [ 1111.179827][T26468] vivid-003: ================== END STATUS ================== [ 1112.029154][T26493] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 1112.466464][T26509] FAULT_INJECTION: forcing a failure. [ 1112.466464][T26509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.568522][T26509] CPU: 0 UID: 0 PID: 26509 Comm: syz.7.5623 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1112.568570][T26509] Tainted: [U]=USER [ 1112.568581][T26509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1112.568599][T26509] Call Trace: [ 1112.568609][T26509] [ 1112.568620][T26509] dump_stack_lvl+0x16c/0x1f0 [ 1112.568668][T26509] should_fail_ex+0x50a/0x650 [ 1112.568701][T26509] _copy_from_user+0x2e/0xd0 [ 1112.568734][T26509] move_addr_to_kernel+0x68/0x160 [ 1112.568774][T26509] __copy_msghdr+0x386/0x470 [ 1112.568821][T26509] copy_msghdr_from_user+0xc2/0x160 [ 1112.568868][T26509] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1112.568926][T26509] ? kfree+0x260/0x4d0 [ 1112.568966][T26509] ? __pfx__kstrtoull+0x10/0x10 [ 1112.569006][T26509] ? lock_release+0x4e2/0x6f0 [ 1112.569052][T26509] ___sys_sendmsg+0xff/0x1e0 [ 1112.569100][T26509] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.569146][T26509] ? __pfx_kstrtouint+0x10/0x10 [ 1112.569194][T26509] ? rcu_is_watching+0x12/0xc0 [ 1112.569233][T26509] ? __pfx___might_resched+0x10/0x10 [ 1112.569282][T26509] ? __might_fault+0xe3/0x190 [ 1112.569316][T26509] __sys_sendmmsg+0x201/0x420 [ 1112.569365][T26509] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1112.569419][T26509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1112.569470][T26509] ? fput+0x67/0x440 [ 1112.569499][T26509] ? ksys_write+0x1ba/0x250 [ 1112.569546][T26509] ? __pfx_ksys_write+0x10/0x10 [ 1112.569603][T26509] __x64_sys_sendmmsg+0x9c/0x100 [ 1112.569649][T26509] do_syscall_64+0xcd/0x250 [ 1112.569691][T26509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.569733][T26509] RIP: 0033:0x7fc3da18d169 [ 1112.569754][T26509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.569782][T26509] RSP: 002b:00007fc3dafc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1112.569809][T26509] RAX: ffffffffffffffda RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1112.569828][T26509] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 1112.569846][T26509] RBP: 00007fc3dafc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.569864][T26509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.569881][T26509] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1112.569917][T26509] [ 1113.079731][T26514] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1113.144447][T26522] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1113.170785][T26524] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1113.195614][T26525] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1113.199054][T26526] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1114.128332][T26549] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1114.808781][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5641'. [ 1115.167705][T26579] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1115.923625][T26601] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:25: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1116.059979][T26606] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1116.087159][T26606] udevd[26606]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 1116.207335][T26610] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1116.885759][T26638] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5664'. [ 1117.244836][T26655] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1117.754830][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1118.071517][T26679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5678'. [ 1118.284076][T26693] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1118.743408][T26710] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5689'. [ 1119.346738][T26725] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1119.714421][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1119.955862][T26750] FAULT_INJECTION: forcing a failure. [ 1119.955862][T26750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.976254][T26750] CPU: 1 UID: 0 PID: 26750 Comm: syz.8.5703 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1119.976303][T26750] Tainted: [U]=USER [ 1119.976314][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1119.976334][T26750] Call Trace: [ 1119.976343][T26750] [ 1119.976355][T26750] dump_stack_lvl+0x16c/0x1f0 [ 1119.976403][T26750] should_fail_ex+0x50a/0x650 [ 1119.976436][T26750] _copy_from_user+0x2e/0xd0 [ 1119.976470][T26750] copy_msghdr_from_user+0x99/0x160 [ 1119.976519][T26750] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1119.976572][T26750] ? trace_lock_acquire+0x14e/0x1f0 [ 1119.976614][T26750] ___sys_recvmsg+0xdc/0x1a0 [ 1119.976662][T26750] ? __pfx____sys_recvmsg+0x10/0x10 [ 1119.976712][T26750] ? __pfx_lock_release+0x10/0x10 [ 1119.976756][T26750] ? trace_lock_acquire+0x14e/0x1f0 [ 1119.976805][T26750] do_recvmmsg+0x2f8/0x740 [ 1119.976857][T26750] ? __pfx_do_recvmmsg+0x10/0x10 [ 1119.976906][T26750] ? vfs_write+0x306/0x1150 [ 1119.976953][T26750] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1119.977005][T26750] ? __fget_files+0x206/0x3a0 [ 1119.977056][T26750] __x64_sys_recvmmsg+0x239/0x290 [ 1119.977088][T26750] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1119.977120][T26750] ? rcu_is_watching+0x12/0xc0 [ 1119.977154][T26750] ? rcu_is_watching+0x12/0xc0 [ 1119.977192][T26750] do_syscall_64+0xcd/0x250 [ 1119.977237][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.977281][T26750] RIP: 0033:0x7f8a1b98d169 [ 1119.977304][T26750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.977334][T26750] RSP: 002b:00007f8a1c789038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1119.977364][T26750] RAX: ffffffffffffffda RBX: 00007f8a1bba5fa0 RCX: 00007f8a1b98d169 [ 1119.977386][T26750] RDX: 0000000000000005 RSI: 0000400000000180 RDI: 0000000000000003 [ 1119.977406][T26750] RBP: 00007f8a1c789090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.977425][T26750] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000001 [ 1119.977446][T26750] R13: 0000000000000000 R14: 00007f8a1bba5fa0 R15: 00007ffc2a965068 [ 1119.977476][T26750] [ 1120.424222][T26757] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1120.758469][T26769] netlink: 146 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1120.798811][T26772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5710'. [ 1120.827567][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.834631][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.966189][T26779] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1120.994779][T26780] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:65: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1121.323823][T26784] base_sock_release(ffff888046289e00) sk=ffff88805c420000 [ 1121.461440][T26794] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1121.920044][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5721'. [ 1122.525370][T26820] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1122.843901][T26806] ima: policy update failed [ 1122.853148][ T30] audit: type=1802 audit(4294967309.790:28): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.5722" res=0 errno=0 [ 1123.514100][T26837] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:41: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1123.564828][T26838] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1123.723039][T26841] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5727'. [ 1123.752629][T26841] veth1_macvtap: left promiscuous mode [ 1124.613345][T26857] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1125.333181][T26869] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:52: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1125.359092][T26865] ubi0: attaching mtd0 [ 1125.368866][T26865] ubi0: scanning is finished [ 1125.381140][T26865] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1125.502497][T26865] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1125.658429][T26876] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1125.955107][T26885] FAULT_INJECTION: forcing a failure. [ 1125.955107][T26885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.002431][T26885] CPU: 0 UID: 0 PID: 26885 Comm: syz.2.5734 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1126.002480][T26885] Tainted: [U]=USER [ 1126.002490][T26885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1126.002509][T26885] Call Trace: [ 1126.002518][T26885] [ 1126.002529][T26885] dump_stack_lvl+0x16c/0x1f0 [ 1126.002576][T26885] should_fail_ex+0x50a/0x650 [ 1126.002608][T26885] _copy_to_user+0x32/0xd0 [ 1126.002643][T26885] simple_read_from_buffer+0xd0/0x160 [ 1126.002686][T26885] proc_fail_nth_read+0x198/0x270 [ 1126.002724][T26885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1126.002762][T26885] ? security_file_permission+0x71/0x210 [ 1126.002804][T26885] ? rw_verify_area+0xcf/0x680 [ 1126.002849][T26885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1126.002888][T26885] vfs_read+0x1df/0xbf0 [ 1126.002931][T26885] ? __fget_files+0x1fc/0x3a0 [ 1126.002977][T26885] ? __pfx___mutex_lock+0x10/0x10 [ 1126.003021][T26885] ? __pfx_vfs_read+0x10/0x10 [ 1126.003068][T26885] ? __fget_files+0x206/0x3a0 [ 1126.003122][T26885] ksys_read+0x12b/0x250 [ 1126.003164][T26885] ? __pfx_ksys_read+0x10/0x10 [ 1126.003208][T26885] ? rcu_is_watching+0x12/0xc0 [ 1126.003243][T26885] ? rcu_is_watching+0x12/0xc0 [ 1126.003278][T26885] do_syscall_64+0xcd/0x250 [ 1126.003323][T26885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.003370][T26885] RIP: 0033:0x7f25fd58bb7c [ 1126.003394][T26885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1126.003427][T26885] RSP: 002b:00007f25fe4cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1126.003457][T26885] RAX: ffffffffffffffda RBX: 00007f25fd7a5fa0 RCX: 00007f25fd58bb7c [ 1126.003478][T26885] RDX: 000000000000000f RSI: 00007f25fe4cf0a0 RDI: 0000000000000004 [ 1126.003497][T26885] RBP: 00007f25fe4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.003516][T26885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.003535][T26885] R13: 0000000000000000 R14: 00007f25fd7a5fa0 R15: 00007ffcdbfc1108 [ 1126.003565][T26885] [ 1126.023353][T26887] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1126.044557][T26882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5740'. [ 1126.301341][T26891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1126.751777][T26901] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1127.302500][T26894] caif:caif_disconnect_client(): nothing to disconnect [ 1127.786184][T26921] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1127.824149][T26922] netlink: 346 bytes leftover after parsing attributes in process `syz.7.5748'. can't run '/sbi[ 1128.292821][T26928] ================================================================== [ 1128.300953][T26928] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 [ 1128.308927][T26928] Read of size 8 at addr ffff888067de8800 by task syz.7.5750/26928 [ 1128.316864][T26928] [ 1128.319240][T26928] CPU: 0 UID: 0 PID: 26928 Comm: syz.7.5750 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1128.319290][T26928] Tainted: [U]=USER [ 1128.319303][T26928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1128.319324][T26928] Call Trace: [ 1128.319335][T26928] [ 1128.319348][T26928] dump_stack_lvl+0x116/0x1f0 [ 1128.319399][T26928] print_report+0xc3/0x670 [ 1128.319429][T26928] ? __virt_addr_valid+0x5e/0x590 [ 1128.319463][T26928] ? __phys_addr+0xc6/0x150 [ 1128.319498][T26928] kasan_report+0xd9/0x110 [ 1128.319529][T26928] ? force_devcd_write+0x317/0x330 [ 1128.319583][T26928] ? force_devcd_write+0x317/0x330 [ 1128.319633][T26928] force_devcd_write+0x317/0x330 [ 1128.319680][T26928] ? __pfx_force_devcd_write+0x10/0x10 [ 1128.319728][T26928] ? __debugfs_file_get+0x1ff/0x850 [ 1128.319773][T26928] ? __pfx___debugfs_file_get+0x10/0x10 [ 1128.319818][T26928] ? rcu_is_watching+0x12/0xc0 [ 1128.319853][T26928] ? trace_lock_acquire+0x14e/0x1f0 [ 1128.319894][T26928] full_proxy_write+0x13c/0x200 [ 1128.319939][T26928] ? __pfx_full_proxy_write+0x10/0x10 [ 1128.319984][T26928] vfs_write+0x24c/0x1150 [ 1128.320031][T26928] ? __fget_files+0x1fc/0x3a0 [ 1128.320080][T26928] ? __pfx___mutex_lock+0x10/0x10 [ 1128.320127][T26928] ? __pfx_vfs_write+0x10/0x10 [ 1128.320178][T26928] ? __fget_files+0x206/0x3a0 [ 1128.320246][T26928] ksys_write+0x12b/0x250 [ 1128.320294][T26928] ? __pfx_ksys_write+0x10/0x10 [ 1128.320342][T26928] ? rcu_is_watching+0x12/0xc0 [ 1128.320377][T26928] ? rcu_is_watching+0x12/0xc0 [ 1128.320415][T26928] do_syscall_64+0xcd/0x250 [ 1128.320463][T26928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.320512][T26928] RIP: 0033:0x7fc3da18d169 [ 1128.320537][T26928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.320578][T26928] RSP: 002b:00007fc3dafc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1128.320610][T26928] RAX: ffffffffffffffda RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1128.320633][T26928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1128.320654][T26928] RBP: 00007fc3da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1128.320677][T26928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.320698][T26928] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1128.320731][T26928] [ 1128.320743][T26928] [ 1128.557914][T26928] Allocated by task 26628: [ 1128.562344][T26928] kasan_save_stack+0x33/0x60 [ 1128.567072][T26928] kasan_save_track+0x14/0x30 [ 1128.571952][T26928] __kasan_kmalloc+0xaa/0xb0 [ 1128.576574][T26928] __kmalloc_noprof+0x21c/0x510 [ 1128.581467][T26928] ops_init+0x77/0x5f0 [ 1128.585556][T26928] setup_net+0x21f/0x860 [ 1128.589862][T26928] copy_net_ns+0x2a6/0x5f0 [ 1128.594300][T26928] create_new_namespaces+0x3ea/0xad0 [ 1128.599627][T26928] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1128.605300][T26928] ksys_unshare+0x45d/0xa40 [ 1128.609823][T26928] __x64_sys_unshare+0x31/0x40 [ 1128.614608][T26928] do_syscall_64+0xcd/0x250 [ 1128.619144][T26928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.625068][T26928] [ 1128.627404][T26928] Freed by task 14197: [ 1128.631479][T26928] kasan_save_stack+0x33/0x60 [ 1128.636195][T26928] kasan_save_track+0x14/0x30 [ 1128.640947][T26928] kasan_save_free_info+0x3b/0x60 [ 1128.646022][T26928] __kasan_slab_free+0x51/0x70 [ 1128.650832][T26928] kfree+0x2c4/0x4d0 [ 1128.654843][T26928] ops_free_list+0x14e/0x410 [ 1128.659456][T26928] cleanup_net+0x619/0xb30 [ 1128.663901][T26928] process_one_work+0x9c5/0x1ba0 [ 1128.668869][T26928] worker_thread+0x6c8/0xf00 [ 1128.673492][T26928] kthread+0x3af/0x750 [ 1128.677610][T26928] ret_from_fork+0x45/0x80 [ 1128.682055][T26928] ret_from_fork_asm+0x1a/0x30 [ 1128.686843][T26928] [ 1128.689187][T26928] The buggy address belongs to the object at ffff888067de8800 [ 1128.689187][T26928] which belongs to the cache kmalloc-1k of size 1024 [ 1128.703261][T26928] The buggy address is located 0 bytes inside of [ 1128.703261][T26928] freed 1024-byte region [ffff888067de8800, ffff888067de8c00) [ 1128.716991][T26928] [ 1128.719334][T26928] The buggy address belongs to the physical page: [ 1128.725761][T26928] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67de8 [ 1128.734537][T26928] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1128.743059][T26928] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1128.750628][T26928] page_type: f5(slab) [ 1128.754628][T26928] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 1128.763250][T26928] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1128.771870][T26928] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 1128.780558][T26928] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1128.789270][T26928] head: 00fff00000000003 ffffea00019f7a01 ffffffffffffffff 0000000000000000 [ 1128.797990][T26928] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1128.806688][T26928] page dumped because: kasan: bad access detected [ 1128.813113][T26928] page_owner tracks the page as allocated [ 1128.818836][T26928] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5128, tgid 5128 (kworker/u8:8), ts 634296823956, free_ts 633991358322 [ 1128.838316][T26928] post_alloc_hook+0x181/0x1b0 [ 1128.843115][T26928] get_page_from_freelist+0xfce/0x2f80 [ 1128.848607][T26928] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1128.854587][T26928] alloc_pages_mpol+0x1fc/0x540 [ 1128.859462][T26928] new_slab+0x23d/0x330 [ 1128.863642][T26928] ___slab_alloc+0xc5d/0x1720 [ 1128.868342][T26928] __slab_alloc.constprop.0+0x56/0xb0 [ 1128.873740][T26928] __kmalloc_noprof+0x2ec/0x510 [ 1128.878625][T26928] ieee802_11_parse_elems_full+0x1d0/0x3240 [ 1128.884800][T26928] ieee80211_inform_bss+0xfd/0x1100 [ 1128.890015][T26928] cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 1128.896285][T26928] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1128.901951][T26928] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1128.908049][T26928] ieee80211_bss_info_update+0x311/0xab0 [ 1128.913703][T26928] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 1128.919894][T26928] ieee80211_iface_work+0xc15/0xf50 [ 1128.925111][T26928] page last free pid 16038 tgid 16038 stack trace: [ 1128.931620][T26928] free_frozen_pages+0x6db/0xfb0 [ 1128.936592][T26928] __put_partials+0x14c/0x170 [ 1128.941296][T26928] qlist_free_all+0x4e/0x120 [ 1128.945939][T26928] kasan_quarantine_reduce+0x195/0x1e0 [ 1128.951431][T26928] __kasan_slab_alloc+0x69/0x90 [ 1128.956320][T26928] kmem_cache_alloc_noprof+0x226/0x3d0 [ 1128.961813][T26928] ptlock_alloc+0x1f/0x70 [ 1128.966173][T26928] pte_alloc_one+0x74/0x390 [ 1128.970716][T26928] do_pte_missing+0x1aff/0x3e10 [ 1128.975623][T26928] __handle_mm_fault+0x103c/0x2a40 [ 1128.980766][T26928] handle_mm_fault+0x3fa/0xaa0 [ 1128.985561][T26928] __get_user_pages+0x773/0x36f0 [ 1128.990528][T26928] get_dump_page+0xff/0x230 [ 1128.995083][T26928] dump_user_range+0x135/0x8c0 [ 1128.999871][T26928] elf_core_dump+0x287c/0x3a50 [ 1129.004660][T26928] do_coredump+0x3166/0x4410 [ 1129.009277][T26928] [ 1129.011607][T26928] Memory state around the buggy address: [ 1129.017330][T26928] ffff888067de8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1129.025410][T26928] ffff888067de8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1129.033504][T26928] >ffff888067de8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.041575][T26928] ^ [ 1129.045779][T26928] ffff888067de8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.053855][T26928] ffff888067de8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1129.061928][T26928] ================================================================== [ 1129.142524][T26928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1129.149797][T26928] CPU: 1 UID: 0 PID: 26928 Comm: syz.7.5750 Tainted: G U 6.14.0-rc6-syzkaller-00212-geb88e6bfbc0a #0 [ 1129.162095][T26928] Tainted: [U]=USER [ 1129.165930][T26928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1129.176020][T26928] Call Trace: [ 1129.179329][T26928] [ 1129.182290][T26928] dump_stack_lvl+0x3d/0x1f0 [ 1129.186937][T26928] panic+0x71d/0x800 [ 1129.190874][T26928] ? __pfx_panic+0x10/0x10 [ 1129.195335][T26928] ? rcu_is_watching+0x12/0xc0 [ 1129.200155][T26928] ? preempt_schedule_thunk+0x1a/0x30 [ 1129.205738][T26928] ? preempt_schedule_common+0x44/0xc0 [ 1129.211270][T26928] check_panic_on_warn+0xab/0xb0 [ 1129.216268][T26928] end_report+0x117/0x180 [ 1129.220640][T26928] kasan_report+0xe9/0x110 [ 1129.225105][T26928] ? force_devcd_write+0x317/0x330 [ 1129.230292][T26928] ? force_devcd_write+0x317/0x330 [ 1129.235482][T26928] force_devcd_write+0x317/0x330 [ 1129.240485][T26928] ? __pfx_force_devcd_write+0x10/0x10 [ 1129.246005][T26928] ? __debugfs_file_get+0x1ff/0x850 [ 1129.251257][T26928] ? __pfx___debugfs_file_get+0x10/0x10 [ 1129.256858][T26928] ? rcu_is_watching+0x12/0xc0 [ 1129.261671][T26928] ? trace_lock_acquire+0x14e/0x1f0 [ 1129.266924][T26928] full_proxy_write+0x13c/0x200 [ 1129.271836][T26928] ? __pfx_full_proxy_write+0x10/0x10 [ 1129.277261][T26928] vfs_write+0x24c/0x1150 [ 1129.281641][T26928] ? __fget_files+0x1fc/0x3a0 [ 1129.286373][T26928] ? __pfx___mutex_lock+0x10/0x10 [ 1129.291548][T26928] ? __pfx_vfs_write+0x10/0x10 [ 1129.296375][T26928] ? __fget_files+0x206/0x3a0 [ 1129.301121][T26928] ksys_write+0x12b/0x250 [ 1129.305504][T26928] ? __pfx_ksys_write+0x10/0x10 [ 1129.310499][T26928] ? rcu_is_watching+0x12/0xc0 [ 1129.315307][T26928] ? rcu_is_watching+0x12/0xc0 [ 1129.320117][T26928] do_syscall_64+0xcd/0x250 [ 1129.324695][T26928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.330653][T26928] RIP: 0033:0x7fc3da18d169 [ 1129.335112][T26928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.354771][T26928] RSP: 002b:00007fc3dafc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.363228][T26928] RAX: ffffffffffffffda RBX: 00007fc3da3a5fa0 RCX: 00007fc3da18d169 [ 1129.371245][T26928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1129.379253][T26928] RBP: 00007fc3da20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.387285][T26928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.395298][T26928] R13: 0000000000000000 R14: 00007fc3da3a5fa0 R15: 00007ffeaddd4f28 [ 1129.403314][T26928] [ 1129.406613][T26928] Kernel Offset: disabled [ 1129.410950][T26928] Rebooting in 86400 seconds..