last executing test programs: 20m25.1036295s ago: executing program 2 (id=291): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) msync$auto(0x3, 0x8, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) getpeername$auto(0x3, 0x0, 0x0) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) mmap$auto(0x400, 0x4, 0x3, 0xeb5, 0xfffffffffffffffa, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0xffffffff, r0) ioctl$auto_SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000000c0)="c179bcd26f240d36c4606fdb6d4cd0023d69f6cd89b2343cc2c175a82bcc8ff21c8f11eb3e5e1363c5ca2fd821035f1a31664397400cc162b5743ddaa40bffa060d92fd45cdd4aca2a3bba06133e37b71bed847a0230d4cbf198291dc6df0d35bbc11fe0b717ad4d46ef6f290254fafce58fe0bad228199185534d84c375af8c5076d50849c9572eaa43ab4d07f7310bc3d8397048df76") epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x80) read$auto(0xffffffffffffffff, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x5, 0x29, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xfdf3) socket(0x10, 0x2, 0x0) 20m24.871859706s ago: executing program 2 (id=294): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mq_notify$auto(0x2, &(0x7f0000000040)={@sival_ptr=&(0x7f0000000140), @inferred, 0x2, @_tid}) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8a802, 0x0) ioctl$auto(r0, 0x2288, r0) 20m24.611707214s ago: executing program 2 (id=295): mmap$auto(0x0, 0x2020009, 0x8000000003, 0x100000010, 0xfffffffffffffffa, 0x9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.read_iops_device\x00', 0x143680, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0x4004743d, 0x0) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x303002, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000100)={@raw=0x8, "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"}) 20m24.460298554s ago: executing program 2 (id=296): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 20m23.993508215s ago: executing program 2 (id=300): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x2, 0x2, 0x1) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80001, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000240)={{@raw=0x1, 0x803, 0x5, 0x1, "e2713766923f0bb5ea65c8ff9154777dbbc1699f74130bd0dc179405277add917f245487e0c024a1a6338151"}, 0x1, @integer64=@value_ptr=0x0, "13a426882c9f1b16d0d907ab3316291db1e0bcdf90e9579174957dd130432549b8b2dfada0dde522013a237bf4a6b9ed1460a23322861c46e68512fb675ea9649ccd43b8ae7cbac7ba49648a2a5f2e56b968add12d2d266904acb83ae131f2ff2128c0ed4c22905da648a5d2df5d1d97025358470e117ef561a38e4707ea0871"}) poll$auto(&(0x7f0000000000)={r0, 0xd58, 0x992a}, 0x100, 0x6) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) ioctl$auto(r3, 0x540a, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r4, 0x540a, r2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 20m22.851719799s ago: executing program 2 (id=306): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x43800) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 20m22.51976058s ago: executing program 32 (id=306): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x43800) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 18m30.092819219s ago: executing program 1 (id=948): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 18m29.747531883s ago: executing program 1 (id=950): r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) ioctl$auto_XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000680)={0x2, 0x4d2, 0x7798, 0x101, 0x1, 0xfff, 0x5, 0x8, 0x800000000000000, 0x3ff, 0x10001, 0xfff, "d02020f143c8bed1852183e712ae77f6", 0x7fff, 0x1, 0x5, 0x9, 0x5, 0xf, 0x7, 0x101, 0x1000, 0x9, 0x7ff, 0x80, [0x2, 0x6, 0x8, 0x89, 0x2, 0x8d, 0x9, 0x8, 0xeb70, 0x3ff, 0x6, 0x20, 0x5f27, 0x3, 0x7000000000, 0x4]}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b41", 0x46) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi12\x00', 0x44c040, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000, 0x0) r4 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x210080, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bus/usb/036/001\x00', 0x8040, 0x0) fremovexattr$auto(r4, &(0x7f0000000280)='*-{\x00') r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000240)=""/194, 0xc2) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r3, 0x80044dfb, &(0x7f0000000100)="e3880d4203bc96dd4f61104797e421ba223061d76d1e64db39f2e29beecd97118756becf497dab2115a85650b267c329ceccd7ba0da4bbb974b041d2335c35cd1785baab97d4e5a42c68d09c1204a181d9346751333fe8f195a75de8d25a468e53ff5dbf10e588ece0cd91121a3ff218b51ee6753bcd836783122b6bbfa64a17cf5a0bf3acacd3821b81a186c44156392266155c8d57f76b68220182379ce46c1383f26ea16bbc65cb44418c490e0f297e64063c40bf705922819dec2ddffa5d87a9d85294e7035dde3b2ce3eb86b66c3b6717d38938ffa9b86274295328499b9b4ba93e5dd5d5cfc441bb4590f6fb2505b6") acct$auto(&(0x7f0000000200)='/dev/tty0\x00') r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) mmap$auto_v4l2_fops_v4l2_dev(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x4010, r2, 0x400) r8 = socket(0x1d, 0x2, 0x6) bind$auto(r8, &(0x7f0000000780)=@rc={0x1f, @none, 0x9}, 0x11) sendmmsg$auto(r7, &(0x7f00000005c0)={{&(0x7f0000000340)="9b3fc457437fdd2c63176f76519110176ce051f9b6a05ba4e2860070f7439a9a528b9061232f309aa38915442c91bb09a744ea65fc2a7eeae365867a12b8317dd3c582dfb3d156c4d96564bd8a4e12236df0687f5cf000aa3129e01a1718799a091f7fe99b3e2830bc71c745d0ee864210c0673a345246ef8c9a1306ac60f806ac0f24378b1554dde4b9fcde93e2da0fb44f1d6491535dd698a5aa374cb93b6afe2ae62196ab26fe84b9730884af8da0098400fc7f678b49be36f95b650e02261ef36d182a30602d3de89ce103db1b10a4b42d589d5fcf7fd3d131f6f927eea80d54837e619ee557aba0", 0x3, &(0x7f0000000500)={&(0x7f0000000440)="cebe2d2555270c6e51d9d2003349f1f1878833a03091e90a5af2d23a8575a6321d14b853c7741184d191a7b3687d35d0bc8beb983b4a72799788c6b512e417feada6097a7fe20166b2e410034bc9ad63fd5e153efcb24718339effcc64c851b96aae48846e69c87ae73df1f19f456356e2fe27b9d8d30577b7331974d88a7f920c60b62d51426faf897d63b664c1", 0x6413}, 0xa, &(0x7f0000000540)="f21e45a83f6867abba858793d594727c12beba3f27ddd5bb8fb265d7386f0d94e3f16d8aecce5f79dd237d1c54b829b89481053e61970d22514b", 0x4, 0x22}, 0xa03}, 0x2, 0x3) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xffffffa4, &(0x7f0000000180)="147808f7da8c4c49940e2f6bc1495c70790597be34a21bddaea16f3cba23428673ae142f51c3ab05e5312fc4ee6a5901eb273aa820354dca344f9f492d463cf521de70743ef9e99e8d25786bba004e52bd4acb1d223767b0e6b56027c1c0816a6eee80bd07152b36aacad5f54626cb94a7d02f9ed1cd707d15f3567cca599f71c1721a8260563aa725e62bc41a7cc19b2e0376a15f03c772ebb4884bf9cd18f94de27815feefde5a5fb8711c2a8b86d8ca87f6f1e68501d543b38f") sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, 0x0, 0x10) fsopen$auto(0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) close_range$auto(r3, 0xffffffffffffffff, 0x0) 18m29.481573303s ago: executing program 1 (id=951): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_OTPSELECT(r0, 0x80044d0d, &(0x7f0000000140)=0x4) fcntl$auto_F_SETLEASE(r0, 0x400, 0x0) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000440)="df", 0x1) 18m29.198937533s ago: executing program 1 (id=954): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_batadv(0x0, r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80f5ffffff00"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) 18m28.887501461s ago: executing program 1 (id=956): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) msgsnd$auto(0xc70, &(0x7f0000000000)={0x3, 0x5}, 0x2, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x1}, 0x10) 18m28.619564689s ago: executing program 1 (id=958): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x800, 0x0) (async) socket(0x27, 0x800, 0x0) memfd_secret$auto(0x0) (async) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x72, 0x0, &(0x7f0000000080)=0x9c8) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) (async) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) mmap$auto(0x0, 0x8, 0xe0, 0x9b73, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffea}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c884) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb82c) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '\xdc^%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0xe6d4}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) (async) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400fa00", @ANYRES16=r2, @ANYBLOB="08002cbd7000ffdbdf250b00000008002c00050000000600250055f0000005002f000000000008001c00f661000005002d000100000008003b0009770000"], 0x44}, 0x1, 0x0, 0x0, 0x20040880}, 0x810) 18m13.536562512s ago: executing program 33 (id=958): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x800, 0x0) (async) socket(0x27, 0x800, 0x0) memfd_secret$auto(0x0) (async) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x72, 0x0, &(0x7f0000000080)=0x9c8) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) (async) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0) mmap$auto(0x0, 0x8, 0xe0, 0x9b73, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffea}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c884) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb82c) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '\xdc^%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0xe6d4}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) (async) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400fa00", @ANYRES16=r2, @ANYBLOB="08002cbd7000ffdbdf250b00000008002c00050000000600250055f0000005002f000000000008001c00f661000005002d000100000008003b0009770000"], 0x44}, 0x1, 0x0, 0x0, 0x20040880}, 0x810) 16m59.115710752s ago: executing program 4 (id=1400): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4a, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x25, 0xa, 0x40) r0 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, &(0x7f0000000700)='/sys/\xeber\"e\xd2\xe5\xaa\v\x1a\xbb\xc1\xa1Y\xed\xa3\xbdw\t\x1el/debug/tracing/even\x181\x96N\x06l\xe3\xa7\x19\xec\xd9W\xe7\x00\x00\x00\x80mallwc/Hi_3i\xfa9\xa8g\xbd\x8a\x80\xcc\x99\xc3\xdflter\x00\xca5\x97\x16=k\x94\x91K\n:\x16u\xbb\xd7\x10t\xffL\xfb\a\xad\xc1\xa7\xcf\x01r\xb3\xc0\x1c\x98\x97?\x87\x86:q!\f\x05\x9d\x10\xa7\x04\xd3u}\xf5|\x97\xbb\x18\x7f\xa4\xc5\xa7>\xe9\xdb\\;\x1b\x8aQ\x9e\xae\xb0h\x01\x80\xcf9\xd8\xe5B\xb0\xa2h\xbc\xaf_\x9bM\x9f\xaaQ;~\x06\x00\x1f\t\xa7`i\xb1\xd0\xa7\xf6?tA\xf6\xa6\xa7\xd5\xd2\xbd\x80\x9eE$\xdf\xd6\x1e\xd0\x92\xe2\xd4 \xcc\x86\xf5j\xe6K0$\bH\x99|\xce\x18\x87F;\xbb\x94\xef\xacx\xdca7\x7f\xb6\xb2?K:\v\x88d\xf8Q\x99\xedgO\xf5\x81\x98C\bQ\x011Y\x1b\xc6\x9a\xef2\xf5Nq@\"\xcbT\x99)\xdd\xbdH\x0f\xa0;\xa4\xc3CtH\xad\xc8\x91zs\x94\x84\x13\xc7t.\x95\x00\x91X\xc7\xd8t1\xff\xd74{\xb4!o\xd4\xfe\xe3W\x80\xe3R\rJ@\xe19\xaa\xf2dY\xdf\'L\xcajQM\xfbQ~\xef\x8c+\xba\x04\xb9\x02m\x00\xf6\xc5*E\xa3\x84m\xb6\f\x9d\x1fV\xbaI\x87lGT\xaf\x1c\x13Ba\xa0\x1bc\x8e1&\x01\xfd7<\xba\xdc', 0x1) mmap$auto(0xcb400, 0x7ff, 0x42, 0x210, r0, 0x7) r2 = socket(0xa, 0x1, 0x84) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) getsockopt$auto(r2, 0x84, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x28, 0x801, 0x100) getsockopt$auto(r3, 0x400029, 0x10, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x8, 0x3, 0x26, 0x940, 0x1ffde, 0x3, 0x6, 0x902c, 0xfffffff6, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xceb, 0x0, 0xfffffffffffffffc, 0x16bdca5d, 0x4, 0x0, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xfffff7fffffffffa, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) seccomp$auto(0xfffffffb, 0xfffffff8, 0x0) io_setup$auto(0xfff8, &(0x7f0000000580)=0x6) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa101, 0x0) select$auto(0x7ff, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x10001, 0x80000000, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x1, 0x2, 0x9]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.1/usb2/authorized\x00', 0x8481, 0x0) 16m58.474867549s ago: executing program 4 (id=1402): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket(0xa, 0x3, 0x5) socket(0x11, 0x3, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x940, 0x1ffde, 0x3, 0x6, 0x3, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x7, 0x2, 0x1, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="281700007ea53b548b29c0e5b509d0092c5788ce89c90082be5d7f2ab751baa59d10eb4cfd40b2fb7920e0b398beebe23d201a7ae2e6d50dedc6f8145315fa3c58f965f2305678ab4a0f15968cfd642567b8c703f926ab557760ecafb9440420d9798b52ea7d522ddc8e42e754c2c04418ec99dbb12c1be22691d59aff823ca11d6dff53cf3112035ec7c32fda4766017f6cf973e8abc63e92134d2cb7", @ANYRES16=r1, @ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f00000000c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2, "ec14a54b350f0a0441e5ffca60d30cd63a5c7fb9c6ee221991"}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) 16m56.964869032s ago: executing program 4 (id=1411): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r2) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x28, r3, 0xa2d601c1e7b11e31, 0x70bd27, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x804, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x24000000) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x7}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x8}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x1}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x151}, 0x48854) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2c, 0x4, 0x80) read$auto(0x4, 0x0, 0xfdef) r10 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r10, 0x10010f, 0x8b, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) 16m56.63069804s ago: executing program 4 (id=1413): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/version\x00', 0x8080, 0x0) lseek$auto(r1, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) setrlimit$auto(0x1000000007, 0x0) r2 = clone$auto(0x7, 0x6, &(0x7f0000000000)=0xc2ef, &(0x7f0000000080)=0x4, 0x3) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) fcntl$auto(r0, 0x9, r2) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 16m55.417946438s ago: executing program 4 (id=1423): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 16m54.785835862s ago: executing program 4 (id=1426): socket(0x10, 0x2, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0) (async) r0 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0) mmap$auto(0xcb400, 0x7ff, 0x42, 0x210, r0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x10400, 0x0) socket(0xa, 0x1, 0x84) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) (async) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x100) r3 = getsockopt$auto(r2, 0x40000000029, 0x10, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r3, &(0x7f00000000c0)=""/103, 0x67) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r4, 0x7) (async) tkill$auto(r4, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa101, 0x0) select$auto(0x7ff, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0x7ff, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20402000a, 0x3ca5, 0xeb1, r5, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x5) madvise$auto(0x7, 0xffffffffffff0005, 0x8000) (async) madvise$auto(0x7, 0xffffffffffff0005, 0x8000) mlock$auto(0x4, 0x8) (async) mlock$auto(0x4, 0x8) 16m39.275993741s ago: executing program 34 (id=1426): socket(0x10, 0x2, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0) (async) r0 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_on\x00', 0x40001, 0x0) mmap$auto(0xcb400, 0x7ff, 0x42, 0x210, r0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x10400, 0x0) socket(0xa, 0x1, 0x84) (async) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) (async) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x100) r3 = getsockopt$auto(r2, 0x40000000029, 0x10, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r3, &(0x7f00000000c0)=""/103, 0x67) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r4, 0x7) (async) tkill$auto(r4, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa101, 0x0) select$auto(0x7ff, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0x7ff, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20402000a, 0x3ca5, 0xeb1, r5, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x5) madvise$auto(0x7, 0xffffffffffff0005, 0x8000) (async) madvise$auto(0x7, 0xffffffffffff0005, 0x8000) mlock$auto(0x4, 0x8) (async) mlock$auto(0x4, 0x8) 9.573890111s ago: executing program 0 (id=6562): mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) remap_file_pages$auto(0x4, 0x200000000000002, 0x0, 0x58, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7076c46d87cd3db0540008000300", @ANYRESOCT=r0], 0x24}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="330329bd7000fcdbdd250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x2000c800) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x20001, 0x0) sendmsg$auto_IEEE802154_LIST_IFACE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008886}, 0x4008841) pwritev$auto(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0), 0x19}, 0xb, 0x9, 0x1fdc) ioperm$auto(0x7, 0x6, 0x2) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) semctl$auto(0x80001ff, 0x804, 0x3, 0x7) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(r5, &(0x7f00000000c0)={&(0x7f0000000200)="681e2938c0513fc303d6eaae277c7344fded94b5e5e82ea45b1299265a25455854a55cc291ee17dd0eac06e157dd96b28a16f764ab287df2f77616900615891b2a2177c3e7d5562bbfcafa30122a4ffc51589e7bfa42fd334299770882c5e252f32c9f78409f1e84e1c04b6ba577409814d9e0ddb81ad31ce52189055d8a11306354289b186a4ee8a7114340943aae79b5da81a072b8e412c41630035e80b0ce1e19dea446c74895ed75d8b4eec8b3eaeca8e7d0", 0x10001}, 0x4) close_range$auto(r2, 0x8, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) 7.321334493s ago: executing program 0 (id=6567): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x1a, 0xfffffffffffffffc, 0x0) fcntl$auto_F_WRLCK(r0, 0x6, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, 0xffffffffffffffff, 0x9, 0x2) (async) r2 = prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, 0xffffffffffffffff, 0x9, 0x2) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, r2, 0x100000001) (async) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, r2, 0x100000001) io_uring_register$auto(r2, 0x101, &(0x7f0000000080)="7a2eace733cf4fabd791fa231c27a562c3b6f92cce36cb16b9599cd194c820fb25e89f32306fd6e13ebec21c43b6f72df65508b5d9f0de8b1b644fdfd42627c9f0ac5d1f7a0f8e15cdcb4dcdf31d427db0781d95857e5a0502f6bc7ded0ac46c5c00ab931152f2d2290f4da8348434992d9c2c1e199164a0078e7793c1f227b85020d16acd6b3d9c320dc390ff23a5018021a4e33fa010019317e8a48be2a91e3af593f93365c930175306da40040a3eab40e40a3e22634edd4a296e7d86e9c6eef102efac98928f0b5396cbbfac366c84e63217a6f2d7d3770bba7d620baabf3f", 0x2) (async) io_uring_register$auto(r2, 0x101, &(0x7f0000000080)="7a2eace733cf4fabd791fa231c27a562c3b6f92cce36cb16b9599cd194c820fb25e89f32306fd6e13ebec21c43b6f72df65508b5d9f0de8b1b644fdfd42627c9f0ac5d1f7a0f8e15cdcb4dcdf31d427db0781d95857e5a0502f6bc7ded0ac46c5c00ab931152f2d2290f4da8348434992d9c2c1e199164a0078e7793c1f227b85020d16acd6b3d9c320dc390ff23a5018021a4e33fa010019317e8a48be2a91e3af593f93365c930175306da40040a3eab40e40a3e22634edd4a296e7d86e9c6eef102efac98928f0b5396cbbfac366c84e63217a6f2d7d3770bba7d620baabf3f", 0x2) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000008, 0x8) socket(0x27, 0xa, 0x6) (async) socket(0x27, 0xa, 0x6) writev$auto(r0, 0x0, 0x1) (async) writev$auto(r0, 0x0, 0x1) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40002020009, 0x800b, 0x3a489cd7, r1, 0x8003) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x408e1) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0xff], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfffffff9, 0xa}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc46, 0x7}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) 5.743950078s ago: executing program 5 (id=6573): mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x80000000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r3, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$auto(r1, 0x80045105, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x1000009, 0x3, 0xffffff36, 0x941, 0xffde, 0x3, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xceb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000000000000, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3]}, 0xfffff7fffffffffa, 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r4) 5.64902464s ago: executing program 3 (id=6574): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) madvise$auto(0x108000, 0x800034, 0x9) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250900000008100300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000018008000100000000bf8406efe56f7124c400", @ANYRES32=r7, @ANYBLOB="0c0002800800550007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="59a412ce8512f550b03727c19bd58f3391b4b1704a9438de267881c3468679a3b15673250b1ff342e65e4d3db13c885672197d80cb63a6601d78474412edc8d317dd5d01620334a611aab3366e867bbaec7f9981a61975bae1ebb3d3a3ce91c0", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000000800030068060000140002006772653000000000000000000000000008000300000000000800090009000000380001800800030008000000140002007767300000000000000000000000000008000300ff010000080003008b8900000800030003000000"], 0x3ac}, 0x1, 0x0, 0x0, 0x8010}, 0x814) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 5.23183478s ago: executing program 0 (id=6575): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_batadv(0x0, r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000000000ff"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) 5.022629468s ago: executing program 5 (id=6576): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/available_tracers\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xc, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x5, 0x2, 0x63, 0xce, 0x6c35, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) bpf$auto(0x3, &(0x7f0000000280)=@enable_stats={0x8}, 0x2) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rxrpc/peers\x00', 0x880, 0x0) pread64$auto(r2, 0x0, 0x200800000003, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x5) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x59f, 0x0, 0x20}, 0x5b3}, 0x40, 0x100) mmap$auto(0x0, 0xc9, 0x0, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 4.613013345s ago: executing program 6 (id=6577): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/bus/usb/028/001\x00', 0x80801, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x2b, 0x6, 0x7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251f0000000500060009000000080003000700000005000400e900000008000200ff000000180001801400020076657468305f766972745f7769666900"], 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) r5 = getpgrp(0xffffffffffffffff) move_pages$auto(r5, 0x466, &(0x7f00000000c0)=&(0x7f0000000200)="37b8aeb131ff6562d2868253bb75624eff29b6b6659129dde086682a2f9d4291dbcc42", &(0x7f0000000180)=0xcdc, &(0x7f0000000240)=0x9, 0x7c) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) 4.315750529s ago: executing program 5 (id=6578): openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x21c0, 0x0) 4.273141279s ago: executing program 0 (id=6579): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x3, 0x15) seccomp$auto_SECCOMP_GET_NOTIF_SIZES(0x3, 0x800, 0x0) (fail_nth: 1) 4.024554648s ago: executing program 6 (id=6580): mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x7ffc) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socketpair$auto(0x1, 0x2, 0x5, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8008000) socket(0x10, 0x2, 0x0) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) readv$auto(r2, 0x0, 0x6) getrandom$auto(0x0, 0xfffffffffffffffc, 0x7) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x2, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) sendmsg$auto_TIPC_NL_SOCK_GET(r1, 0x0, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) 3.859357421s ago: executing program 5 (id=6581): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x80000000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) writev$auto(r1, &(0x7f0000000480)={0x0, 0x3}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 3.40780025s ago: executing program 0 (id=6582): statmount$auto(0x0, &(0x7f0000000380)={0x8, 0xa, 0x1ff, 0xcc, 0x8, 0x4909b6f8, 0x1ffdf, 0x9, 0x9, 0x7, 0xa121, 0x3, 0x0, 0x8004, 0x3, 0xa, 0x2, 0x10001, 0x2, 0x100000000, 0xe, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x4000000000, 0x8, 0x0, 0x50100000000000, 0xa, 0x4000002000, 0x0, 0x6, 0x70624ce7, 0xff, 0x4, 0xffffffffffffffff, 0x0, 0x80001, 0xb, 0x801, 0xffffffffffffbfff, 0xf31, 0xf7fffffffffffffe, 0x0, 0xffffffffffffffff, 0x800000000000007, 0x10000000004, 0x2000000000000000, 0x0, 0x4, 0x400000000005b8, 0xc, 0x0, 0x0, 0x8000000000000001, 0x6, 0xfffffffbfffffffc, 0x88e, 0x8000000000008, 0xfffffffffffffffb, 0x9, 0xa38, 0x6, 0x3, 0xffffffffffffffed, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xe) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r0, &(0x7f0000000000)='/\x00'/18, 0x7fe) 3.165171707s ago: executing program 0 (id=6583): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc040804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x58, 0x4000000000de, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x604c837}, 0x4001) getrandom$auto(0x0, 0x6000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video3\x00', 0x80000, 0x0) r1 = open(0x0, 0x22240, 0x0) fcntl$auto(r0, 0xf943, 0x0) ioctl$auto_COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000040)={0x6, 0x71, 0x9, 0x8b, 0x6, 0x0, 0x30000000}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) prctl$auto(0x25, 0x8000, 0x5, 0x7, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x8000) sendmsg$auto_TIPC_NL_NET_GET(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250f0000009078fd9b63ff511662a453788c5540dbd661d8d6a122"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) acct$auto(&(0x7f0000000000)='/dev/video3\x00') r3 = socket(0xa, 0x2, 0xfffffffd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) socket(0x2, 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x7, 0x15, 0xffd, 0x100000001, 0x20000000000004, 0xf, 0x0, 0x0, 0xe, 0x2, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x4008) 3.031757152s ago: executing program 3 (id=6584): mmap$auto(0x48, 0x20006, 0x6, 0xe72, 0x401, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x6}, 0xf7, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 2.983792429s ago: executing program 6 (id=6585): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x4000, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000003980), 0x1, 0x0) keyctl$auto(0x13, 0x4, 0x2, 0x204, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) sendmmsg$auto(r1, &(0x7f0000000240)={{&(0x7f0000000040)="4e0797dc9d331f2dc6c4d61c3b0c63d4c23dcf70e403216ad253e12df3fdd78665bc8ca5bef356fcb0ae8f469037360c1d2acf39f462ab13e498843f41eb", 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)="078c8ac308aae2355cf2e3b5b02ea002223df1f8f009171dce5b3d3bfbc2a957cb705923703b910276c642c6324e535f1e86dbb8c8ee030d1fb7e59c24d995ca63e68723b0ca0d8f093c7ae5aff65a8ff9756ae28c3cbd926a7c5c6cd510358726ac13f4b4b51fd8b543e36309029fd1b2074e4dbbd96c40bc693e588a5c1e61aa7a22c8ab1220c7f5709aa9c268eb6a893a396120d1f90aafac29d89959141c1767f468b98660b5db87", 0x6}, 0x3, &(0x7f00000002c0)="eb67e3ad9aa54a7785f66e17e2e20ac52c802fdd0c1a6ca5f13f99ce9927eb9b3b8db079d815705306af8e59b83bcf8ba37773f2bac4498e3599ebbf72f195b2bcf8cd30550d0778b224eaa1a4e0debf8213babd9db70d777cc4656c0a05b9e4fd168b93ac46105060329ebc41cef2db761717ce4e510f", 0x1, 0x2a5}, 0x7fff}, 0x400, 0x6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/ports/2/udp_ports_table1\x00', 0x228082, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cpuset\x00', 0x80740, 0x0) semctl$auto(0x8, 0xd, 0x1, 0xffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x40202, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0xc0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x20c880, 0x0) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r5, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0xd85b, 0x78, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) 2.859234883s ago: executing program 5 (id=6586): mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x80000000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x18, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = io_uring_setup$auto(0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 2.371295394s ago: executing program 6 (id=6587): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vimc.0/video4linux/v4l-subdev2/index\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x6) write$auto(r0, 0x0, 0x1) 2.347798589s ago: executing program 3 (id=6588): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyee\x00', 0x80, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3c1d}, 0x1, 0xa9, 0x7fff, 0x101) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) move_pages$auto(0x1, 0x8f0, 0x0, 0x0, 0x0, 0x8000000000000000) read$auto(0x3, 0x0, 0x80) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5404, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4000000401, 0x8000) mmap$auto(0x0, 0xee7, 0xdf, 0x80000009b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x8}, 0x9) r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x7fb, 0x4000009, 0xa, 0x100000d, 0x5f, 0x2, 0x2}, 0x6f3) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'netdevsim0\x00'}) 2.004337065s ago: executing program 6 (id=6589): setregid$auto(0x5, 0x6) ioperm$auto(0x3, 0xe, 0x2000000000000149) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0xba840700, &(0x7f0000000180)="ea8124cf29a7221d24f21f1ee48d4248ff9698fa", 0x14, 0x0, &(0x7f0000000280), &(0x7f0000000340)="9fe08272e4e5b619a64988e03ec5388aee009bbb761194f214a49b136efa32c4025890628ecb5aba4583a5e4652b16034f584e0f2932cdd021c6cc8215e8b45a799fff2270b747f779cffd883d506851aa5c38ee364f690e678f9f77f1813a44ebef187d4bd19512904ecf6daaa26c31ec934287d09a16a8e266022d2e1e7c8e7075739e31abc64e7cf54ae2641756ae6278d61e17ffd813528638cc5039076c") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2504000000bcfec1"], 0x6e}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 650.778401ms ago: executing program 3 (id=6590): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop3/queue/max_segments\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x20) 404.627531ms ago: executing program 3 (id=6591): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mmap$auto(0x4000000000000000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000000000000000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x11) write$auto(0x3, 0x0, 0xfdf1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x2) r3 = prctl$auto(0xf, 0x2, 0x7, 0x2, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r3) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) socket(0x2, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000dde0fdde7dea1bb0ffff7442d09d3bf8d54a18ad02341da4360000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf25010000000c0008000080000000000000040007800c0002000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) syz_clone(0x8a020200, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$auto(0x6, 0x4, 0x3) mmap$auto(0xd0000, 0x7, 0x52, 0xeb1, 0xc18, 0x80) close_range$auto(0x2, 0x8, 0x0) 386.830894ms ago: executing program 6 (id=6592): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x1ff, 0x2, 0x13, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x1d, 0x2, 0x6) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, r1, 0x8000) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r2 = io_uring_setup$auto(0x2, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x80801, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/usb/usbmon/4t\x00', 0x200000, 0x0) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0x8, 0x0, 0x2000400) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) 274.994042ms ago: executing program 5 (id=6593): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000680)=""/227, 0xe3) 0s ago: executing program 3 (id=6594): mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x80000000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r3, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$auto(r1, 0x80045105, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x1000009, 0x3, 0xffffff36, 0x941, 0xffde, 0x3, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xceb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000000000000, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3]}, 0xfffff7fffffffffa, 0x81) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r4) kernel console output (not intermixed with test programs): 0 [ 1292.338023][T26392] ? ns_capable+0xd7/0x110 [ 1292.338069][T26392] genl_rcv_msg+0x565/0x800 [ 1292.338116][T26392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1292.338159][T26392] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1292.338211][T26392] netlink_rcv_skb+0x16b/0x440 [ 1292.338248][T26392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1292.338292][T26392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1292.338345][T26392] ? down_read+0xc9/0x330 [ 1292.338381][T26392] ? __pfx_down_read+0x10/0x10 [ 1292.338418][T26392] ? netlink_deliver_tap+0x1ae/0xd30 [ 1292.338458][T26392] genl_rcv+0x28/0x40 [ 1292.338494][T26392] netlink_unicast+0x53c/0x7f0 [ 1292.338536][T26392] ? __pfx_netlink_unicast+0x10/0x10 [ 1292.338573][T26392] ? __phys_addr_symbol+0x30/0x80 [ 1292.338602][T26392] ? __check_object_size+0x488/0x710 [ 1292.338636][T26392] netlink_sendmsg+0x8b8/0xd70 [ 1292.338679][T26392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.338730][T26392] ____sys_sendmsg+0xaaf/0xc90 [ 1292.338760][T26392] ? copy_msghdr_from_user+0x10b/0x160 [ 1292.338800][T26392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1292.338848][T26392] ___sys_sendmsg+0x135/0x1e0 [ 1292.338890][T26392] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.338946][T26392] ? __pfx_lock_release+0x10/0x10 [ 1292.338985][T26392] ? trace_lock_acquire+0x14e/0x1f0 [ 1292.339071][T26392] ? __fget_files+0x206/0x3a0 [ 1292.339124][T26392] __sys_sendmsg+0x16e/0x220 [ 1292.339164][T26392] ? __pfx___sys_sendmsg+0x10/0x10 [ 1292.339204][T26392] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1292.339272][T26392] do_syscall_64+0xcd/0x250 [ 1292.339309][T26392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.339349][T26392] RIP: 0033:0x7fcc4898cde9 [ 1292.339372][T26392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.339401][T26392] RSP: 002b:00007fcc497c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.339428][T26392] RAX: ffffffffffffffda RBX: 00007fcc48ba5fa0 RCX: 00007fcc4898cde9 [ 1292.339448][T26392] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1292.339466][T26392] RBP: 00007fcc48a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.339485][T26392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.339503][T26392] R13: 0000000000000000 R14: 00007fcc48ba5fa0 R15: 00007ffcd55cbe98 [ 1292.339542][T26392] can't run '/sbi[ 1292.995247][T26397] input: f¬Îú0?\âhÕëJL­§'$d)K‘ƒžïLšÜÈìÆoÝ1oN½‰0«´À»Ã¸.›m)$­cÕâ½Ûj¯@ÍÜqwRÀ=æX as /devices/virtual/input/input24 [ 1293.822719][T26400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1293.851409][T26400] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1293.899116][T26400] Bluetooth: hci0: Opcode 0x0406 failed: -4 can't run '/sbi[ 1293.973043][T26400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1293.986086][T26400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1294.011322][T26400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1294.059979][T26400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1294.094100][T26400] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1294.169768][T26400] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1294.212388][T26400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1294.244835][T26400] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1294.288273][T26400] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1294.408450][T26408] EXT4-fs error: 8 callbacks suppressed [ 1294.408471][T26408] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1294.590564][T26412] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6361'. [ 1294.618850][T26412] netlink: 'syz.0.6361': attribute type 2 has an invalid length. [ 1294.640948][T26412] netlink: 'syz.0.6361': attribute type 3 has an invalid length. [ 1294.660058][T26412] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6361'. [ 1294.969276][T26427] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1295.062045][T26432] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1295.105538][T26433] FAULT_INJECTION: forcing a failure. [ 1295.105538][T26433] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.172935][T26433] CPU: 1 UID: 0 PID: 26433 Comm: syz.0.6367 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1295.172979][T26433] Tainted: [U]=USER [ 1295.172991][T26433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1295.173006][T26433] Call Trace: [ 1295.173014][T26433] [ 1295.173025][T26433] dump_stack_lvl+0x16c/0x1f0 [ 1295.173065][T26433] should_fail_ex+0x50a/0x650 [ 1295.173108][T26433] ? fs_reclaim_acquire+0xae/0x150 [ 1295.173147][T26433] ? mr_table_alloc+0x5f/0x2e0 [ 1295.173178][T26433] should_failslab+0xc2/0x120 [ 1295.173224][T26433] __kmalloc_cache_noprof+0x68/0x410 [ 1295.173271][T26433] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 1295.173317][T26433] mr_table_alloc+0x5f/0x2e0 [ 1295.173347][T26433] ? __pfx_ipmr_expire_process+0x10/0x10 [ 1295.173377][T26433] ? __pfx_ipmr_net_init+0x10/0x10 [ 1295.173408][T26433] ipmr_net_init+0x3c4/0x4e0 [ 1295.173437][T26433] ? __pfx_ipmr_net_init+0x10/0x10 [ 1295.173466][T26433] ops_init+0x1df/0x5f0 [ 1295.173511][T26433] setup_net+0x21f/0x860 [ 1295.173555][T26433] ? __pfx_setup_net+0x10/0x10 [ 1295.173595][T26433] ? down_read_killable+0xcc/0x380 [ 1295.173633][T26433] ? __pfx_down_read_killable+0x10/0x10 [ 1295.173670][T26433] ? __raw_spin_lock_init+0x3a/0x110 [ 1295.173718][T26433] ? debug_mutex_init+0x37/0x70 [ 1295.173752][T26433] copy_net_ns+0x2b4/0x6c0 [ 1295.173811][T26433] create_new_namespaces+0x3ea/0xad0 [ 1295.173865][T26433] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1295.173916][T26433] ksys_unshare+0x45d/0xa40 [ 1295.173947][T26433] ? __pfx_ksys_unshare+0x10/0x10 [ 1295.173975][T26433] ? xfd_validate_state+0x5d/0x180 [ 1295.174027][T26433] __x64_sys_unshare+0x31/0x40 [ 1295.174056][T26433] do_syscall_64+0xcd/0x250 [ 1295.174092][T26433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.174132][T26433] RIP: 0033:0x7fd77cb8cde9 [ 1295.174155][T26433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.174184][T26433] RSP: 002b:00007fd77da97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1295.174210][T26433] RAX: ffffffffffffffda RBX: 00007fd77cda6080 RCX: 00007fd77cb8cde9 [ 1295.174229][T26433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1295.174246][T26433] RBP: 00007fd77cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.174263][T26433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.174279][T26433] R13: 0000000000000000 R14: 00007fd77cda6080 R15: 00007ffc19a69988 [ 1295.174313][T26433] [ 1295.601525][T26441] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1295.655717][T26440] FAULT_INJECTION: forcing a failure. [ 1295.655717][T26440] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.731782][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 1295.756694][T26440] CPU: 1 UID: 0 PID: 26440 Comm: syz.3.6368 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1295.756751][T26440] Tainted: [U]=USER [ 1295.756761][T26440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1295.756777][T26440] Call Trace: [ 1295.756785][T26440] [ 1295.756797][T26440] dump_stack_lvl+0x16c/0x1f0 [ 1295.756834][T26440] should_fail_ex+0x50a/0x650 [ 1295.756877][T26440] ? fs_reclaim_acquire+0xae/0x150 [ 1295.756916][T26440] ? constrain_params_by_rules+0x176/0xca0 [ 1295.756947][T26440] should_failslab+0xc2/0x120 [ 1295.756994][T26440] __kmalloc_noprof+0xcb/0x510 [ 1295.757036][T26440] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1295.757076][T26440] constrain_params_by_rules+0x176/0xca0 [ 1295.757107][T26440] ? arch_stack_walk+0xa7/0x100 [ 1295.757143][T26440] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1295.757176][T26440] ? stack_trace_save+0x95/0xd0 [ 1295.757207][T26440] ? __pfx_stack_trace_save+0x10/0x10 [ 1295.757251][T26440] ? snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 1295.757281][T26440] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1295.757307][T26440] ? snd_pcm_oss_sync+0x1d7/0x7f0 [ 1295.757333][T26440] ? snd_pcm_oss_release+0x28b/0x310 [ 1295.757368][T26440] ? __fput+0x3ff/0xb70 [ 1295.757393][T26440] ? task_work_run+0x14e/0x250 [ 1295.757429][T26440] ? snd_interval_refine+0x2fa/0x580 [ 1295.757471][T26440] snd_pcm_hw_refine+0x7e8/0xad0 [ 1295.757507][T26440] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1295.757560][T26440] snd_pcm_hw_param_last+0x32d/0x710 [ 1295.757596][T26440] snd_pcm_hw_param_near.constprop.0+0x57d/0x8f0 [ 1295.757630][T26440] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1295.757661][T26440] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1295.757698][T26440] snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 1295.757752][T26440] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1295.757786][T26440] ? __pfx___mutex_lock+0x10/0x10 [ 1295.757840][T26440] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1295.757870][T26440] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1295.757902][T26440] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1295.757932][T26440] snd_pcm_oss_release+0x28b/0x310 [ 1295.757963][T26440] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1295.757991][T26440] __fput+0x3ff/0xb70 [ 1295.758027][T26440] task_work_run+0x14e/0x250 [ 1295.758065][T26440] ? __pfx_task_work_run+0x10/0x10 [ 1295.758104][T26440] ? __pfx___do_sys_close_range+0x10/0x10 [ 1295.758154][T26440] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1295.758190][T26440] do_syscall_64+0xda/0x250 [ 1295.758226][T26440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.758265][T26440] RIP: 0033:0x7f2d1f78cde9 [ 1295.758288][T26440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.758315][T26440] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1295.758342][T26440] RAX: 0000000000000000 RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1295.758361][T26440] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1295.758378][T26440] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.758395][T26440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.758412][T26440] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1295.758447][T26440] [ 1296.296050][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 1296.306207][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 1296.313450][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 1296.444007][T26447] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1296.860574][T26457] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1296.917988][T26461] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1297.007390][T26456] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1297.312155][T26465] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1297.529828][T26472] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1297.790427][T26478] FAULT_INJECTION: forcing a failure. [ 1297.790427][T26478] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.834633][T20748] Bluetooth: hci0: command 0x0c1a tx timeout [ 1297.901741][T26479] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1297.923052][T26478] CPU: 1 UID: 0 PID: 26478 Comm: syz.3.6377 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1297.923111][T26478] Tainted: [U]=USER [ 1297.923123][T26478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1297.923140][T26478] Call Trace: [ 1297.923150][T26478] [ 1297.923162][T26478] dump_stack_lvl+0x16c/0x1f0 [ 1297.923214][T26478] should_fail_ex+0x50a/0x650 [ 1297.923259][T26478] ? fs_reclaim_acquire+0xae/0x150 [ 1297.923299][T26478] should_failslab+0xc2/0x120 [ 1297.923345][T26478] __kmalloc_cache_node_noprof+0x6e/0x420 [ 1297.923386][T26478] ? lockdep_init_map_type+0x16d/0x7d0 [ 1297.923427][T26478] ? __raw_spin_lock_init+0x3a/0x110 [ 1297.923469][T26478] ? __alloc_workqueue+0x506/0x1810 [ 1297.923507][T26478] __alloc_workqueue+0x506/0x1810 [ 1297.923549][T26478] alloc_workqueue+0xd3/0x200 [ 1297.923579][T26478] ? __pfx_alloc_workqueue+0x10/0x10 [ 1297.923615][T26478] ? rcu_is_watching+0x12/0xc0 [ 1297.923645][T26478] ? trace_kmalloc+0x2d/0xd0 [ 1297.923675][T26478] ? __kmalloc_noprof+0x23b/0x510 [ 1297.923716][T26478] ? __pfx_lock_release+0x10/0x10 [ 1297.923753][T26478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1297.923811][T26478] ieee80211_register_hw+0x1e3b/0x4060 [ 1297.923862][T26478] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1297.923896][T26478] ? net_generic+0xea/0x2a0 [ 1297.923930][T26478] ? lockdep_init_map_type+0x16d/0x7d0 [ 1297.923975][T26478] ? __asan_memset+0x23/0x50 [ 1297.924012][T26478] ? __hrtimer_init+0x106/0x2c0 [ 1297.924061][T26478] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1297.924123][T26478] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1297.924173][T26478] hwsim_new_radio_nl+0xb42/0x12b0 [ 1297.924215][T26478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1297.924263][T26478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1297.924307][T26478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1297.924359][T26478] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1297.924402][T26478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1297.924443][T26478] ? trace_cap_capable+0x1a2/0x210 [ 1297.924481][T26478] ? bpf_lsm_capable+0x9/0x10 [ 1297.924510][T26478] ? security_capable+0x7e/0x260 [ 1297.924558][T26478] ? ns_capable+0xd7/0x110 [ 1297.924600][T26478] genl_rcv_msg+0x565/0x800 [ 1297.924645][T26478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1297.924687][T26478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1297.924738][T26478] netlink_rcv_skb+0x16b/0x440 [ 1297.924782][T26478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1297.924826][T26478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1297.924878][T26478] ? down_read+0xc9/0x330 [ 1297.924914][T26478] ? __pfx_down_read+0x10/0x10 [ 1297.924953][T26478] ? netlink_deliver_tap+0x1ae/0xd30 [ 1297.924993][T26478] genl_rcv+0x28/0x40 [ 1297.925029][T26478] netlink_unicast+0x53c/0x7f0 [ 1297.925076][T26478] ? __pfx_netlink_unicast+0x10/0x10 [ 1297.925115][T26478] ? __phys_addr_symbol+0x30/0x80 [ 1297.925144][T26478] ? __check_object_size+0x488/0x710 [ 1297.925177][T26478] netlink_sendmsg+0x8b8/0xd70 [ 1297.925223][T26478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1297.925273][T26478] ____sys_sendmsg+0xaaf/0xc90 [ 1297.925302][T26478] ? copy_msghdr_from_user+0x10b/0x160 [ 1297.925341][T26478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1297.925387][T26478] ___sys_sendmsg+0x135/0x1e0 [ 1297.925427][T26478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1297.925478][T26478] ? __pfx_lock_release+0x10/0x10 [ 1297.925516][T26478] ? trace_lock_acquire+0x14e/0x1f0 [ 1297.925559][T26478] ? __fget_files+0x206/0x3a0 [ 1297.925608][T26478] __sys_sendmsg+0x16e/0x220 [ 1297.925648][T26478] ? __pfx___sys_sendmsg+0x10/0x10 [ 1297.925686][T26478] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1297.925747][T26478] do_syscall_64+0xcd/0x250 [ 1297.925791][T26478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.925832][T26478] RIP: 0033:0x7f2d1f78cde9 [ 1297.925855][T26478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.925883][T26478] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1297.925910][T26478] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1297.925930][T26478] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1297.925948][T26478] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.925965][T26478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.925982][T26478] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1297.926018][T26478] [ 1298.615880][T20748] Bluetooth: hci2: command 0x0c1a tx timeout [ 1298.623222][T20748] Bluetooth: hci1: command 0x0c1a tx timeout [ 1298.631060][T20748] Bluetooth: hci3: command 0x0c1a tx timeout can't run '/sbi[ 1299.501535][T26501] EXT4-fs error: 2 callbacks suppressed [ 1299.501558][T26501] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1299.614535][T26497] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1299.635351][T26504] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1299.660182][T26505] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1299.686880][T26496] zswap: compressor not available [ 1299.866753][T26507] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1299.914852][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout can't run '/sbi[ 1300.341276][T26508] Invalid ELF header magic: != ELF [ 1300.487778][T26522] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1300.696820][T26527] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1300.697881][T26526] FAULT_INJECTION: forcing a failure. [ 1300.697881][T26526] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.725871][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 1300.739405][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 1300.746697][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 1300.886583][T26526] CPU: 0 UID: 0 PID: 26526 Comm: syz.5.6387 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1300.886631][T26526] Tainted: [U]=USER [ 1300.886642][T26526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1300.886661][T26526] Call Trace: [ 1300.886670][T26526] [ 1300.886683][T26526] dump_stack_lvl+0x16c/0x1f0 [ 1300.886727][T26526] should_fail_ex+0x50a/0x650 [ 1300.886775][T26526] ? fs_reclaim_acquire+0xae/0x150 [ 1300.886826][T26526] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1300.886859][T26526] should_failslab+0xc2/0x120 [ 1300.886909][T26526] __kmalloc_cache_noprof+0x68/0x410 [ 1300.886962][T26526] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1300.886999][T26526] devlink_fmsg_u8_pair_put+0x272/0x2f0 [ 1300.887033][T26526] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 1300.887067][T26526] ? __kasan_kmalloc+0x60/0xb0 [ 1300.887113][T26526] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 1300.887152][T26526] nsim_dev_dummy_fmsg_put+0xf8/0x1e0 [ 1300.887203][T26526] devlink_health_do_dump+0x240/0x620 [ 1300.887245][T26526] devlink_health_report+0x3d4/0x9d0 [ 1300.887308][T26526] ? __pfx_devlink_health_report+0x10/0x10 [ 1300.887344][T26526] ? _copy_from_user+0x59/0xd0 [ 1300.887377][T26526] nsim_dev_health_break_write+0x167/0x210 [ 1300.887426][T26526] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1300.887473][T26526] ? rcu_is_watching+0x12/0xc0 [ 1300.887503][T26526] ? trace_lock_acquire+0x14e/0x1f0 [ 1300.887543][T26526] full_proxy_write+0x13c/0x200 [ 1300.887584][T26526] ? __pfx_full_proxy_write+0x10/0x10 [ 1300.887619][T26526] vfs_write+0x24c/0x1150 [ 1300.887659][T26526] ? __fget_files+0x1fc/0x3a0 [ 1300.887698][T26526] ? __pfx___mutex_lock+0x10/0x10 [ 1300.887732][T26526] ? __pfx_vfs_write+0x10/0x10 [ 1300.887782][T26526] ? __fget_files+0x206/0x3a0 [ 1300.887832][T26526] ksys_write+0x12b/0x250 [ 1300.887870][T26526] ? __pfx_ksys_write+0x10/0x10 [ 1300.887920][T26526] do_syscall_64+0xcd/0x250 [ 1300.887957][T26526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.887997][T26526] RIP: 0033:0x7f83aef8cde9 [ 1300.888020][T26526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.888048][T26526] RSP: 002b:00007f83acdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1300.888075][T26526] RAX: ffffffffffffffda RBX: 00007f83af1a6160 RCX: 00007f83aef8cde9 [ 1300.888094][T26526] RDX: 00000000000000ef RSI: 0000400000000000 RDI: 0000000000000007 [ 1300.888112][T26526] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1300.888129][T26526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.888147][T26526] R13: 0000000000000000 R14: 00007f83af1a6160 R15: 00007ffce05ae928 [ 1300.888184][T26526] [ 1301.225153][T26524] netlink: 338 bytes leftover after parsing attributes in process `syz.5.6387'. [ 1301.266022][T26529] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1301.290910][T26525] netlink: 338 bytes leftover after parsing attributes in process `syz.5.6387'. [ 1301.586707][T26532] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1301.862924][T26537] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1303.166428][T26553] FAULT_INJECTION: forcing a failure. [ 1303.166428][T26553] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.185708][T26553] CPU: 1 UID: 0 PID: 26553 Comm: syz.3.6393 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1303.185754][T26553] Tainted: [U]=USER [ 1303.185764][T26553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1303.185781][T26553] Call Trace: [ 1303.185790][T26553] [ 1303.185801][T26553] dump_stack_lvl+0x16c/0x1f0 [ 1303.185841][T26553] should_fail_ex+0x50a/0x650 [ 1303.185885][T26553] ? fs_reclaim_acquire+0xae/0x150 [ 1303.185939][T26553] should_failslab+0xc2/0x120 [ 1303.185984][T26553] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1303.186034][T26553] ? kstrdup_const+0x63/0x80 [ 1303.186102][T26553] kstrdup+0x53/0x100 [ 1303.186142][T26553] kstrdup_const+0x63/0x80 [ 1303.186178][T26553] __kernfs_new_node+0x9c/0x890 [ 1303.186225][T26553] ? __pfx___kernfs_new_node+0x10/0x10 [ 1303.186265][T26553] ? __pfx_lock_release+0x10/0x10 [ 1303.186308][T26553] ? kernfs_add_one+0x39d/0x520 [ 1303.186359][T26553] ? lock_acquire.part.0+0x11b/0x380 [ 1303.186402][T26553] ? find_held_lock+0x2d/0x110 [ 1303.186445][T26553] kernfs_new_node+0x186/0x240 [ 1303.186497][T26553] kernfs_create_link+0xcc/0x240 [ 1303.186532][T26553] sysfs_do_create_link_sd+0x90/0x140 [ 1303.186572][T26553] sysfs_create_link+0x61/0xc0 [ 1303.186611][T26553] device_add+0x62e/0x1a70 [ 1303.186654][T26553] ? __pfx_device_add+0x10/0x10 [ 1303.186692][T26553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1303.186750][T26553] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1303.186807][T26553] wiphy_register+0x1cab/0x2860 [ 1303.186847][T26553] ? __pfx__dev_printk+0x10/0x10 [ 1303.186899][T26553] ? __pfx_wiphy_register+0x10/0x10 [ 1303.186947][T26553] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1303.186986][T26553] ieee80211_register_hw+0x2455/0x4060 [ 1303.187037][T26553] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1303.187103][T26553] ? net_generic+0xea/0x2a0 [ 1303.187136][T26553] ? lockdep_init_map_type+0x16d/0x7d0 [ 1303.187182][T26553] ? __asan_memset+0x23/0x50 [ 1303.187218][T26553] ? __hrtimer_init+0x106/0x2c0 [ 1303.187263][T26553] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1303.187321][T26553] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1303.187372][T26553] hwsim_new_radio_nl+0xb42/0x12b0 [ 1303.187414][T26553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1303.187464][T26553] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1303.187509][T26553] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1303.187561][T26553] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1303.187605][T26553] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1303.187646][T26553] ? trace_cap_capable+0x1a2/0x210 [ 1303.187686][T26553] ? bpf_lsm_capable+0x9/0x10 [ 1303.187715][T26553] ? security_capable+0x7e/0x260 [ 1303.187762][T26553] ? ns_capable+0xd7/0x110 [ 1303.187806][T26553] genl_rcv_msg+0x565/0x800 [ 1303.187851][T26553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1303.187893][T26553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1303.187944][T26553] netlink_rcv_skb+0x16b/0x440 [ 1303.187980][T26553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1303.188023][T26553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1303.188085][T26553] ? down_read+0xc9/0x330 [ 1303.188121][T26553] ? __pfx_down_read+0x10/0x10 [ 1303.188158][T26553] ? netlink_deliver_tap+0x1ae/0xd30 [ 1303.188197][T26553] genl_rcv+0x28/0x40 [ 1303.188231][T26553] netlink_unicast+0x53c/0x7f0 [ 1303.188271][T26553] ? __pfx_netlink_unicast+0x10/0x10 [ 1303.188308][T26553] ? __phys_addr_symbol+0x30/0x80 [ 1303.188337][T26553] ? __check_object_size+0x488/0x710 [ 1303.188370][T26553] netlink_sendmsg+0x8b8/0xd70 [ 1303.188412][T26553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1303.188461][T26553] ____sys_sendmsg+0xaaf/0xc90 [ 1303.188491][T26553] ? copy_msghdr_from_user+0x10b/0x160 [ 1303.188529][T26553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1303.188576][T26553] ___sys_sendmsg+0x135/0x1e0 [ 1303.188617][T26553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1303.188672][T26553] ? __pfx_lock_release+0x10/0x10 [ 1303.188711][T26553] ? trace_lock_acquire+0x14e/0x1f0 [ 1303.188756][T26553] ? __fget_files+0x206/0x3a0 [ 1303.188807][T26553] __sys_sendmsg+0x16e/0x220 [ 1303.188847][T26553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1303.188885][T26553] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1303.188950][T26553] do_syscall_64+0xcd/0x250 [ 1303.188987][T26553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.189033][T26553] RIP: 0033:0x7f2d1f78cde9 [ 1303.189062][T26553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1303.189091][T26553] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.189118][T26553] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1303.189137][T26553] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1303.189156][T26553] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1303.189174][T26553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.189192][T26553] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1303.189231][T26553] can't run '/sbi[ 1305.086910][T26570] EXT4-fs error: 4 callbacks suppressed [ 1305.086933][T26570] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1305.114794][T26571] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1305.252411][T26573] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1305.350878][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.359378][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.220139][T26590] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1306.651928][T26594] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1306.818436][T26602] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1306.836771][T26599] FAULT_INJECTION: forcing a failure. [ 1306.836771][T26599] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.899446][T26599] CPU: 0 UID: 0 PID: 26599 Comm: syz.3.6404 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1306.899503][T26599] Tainted: [U]=USER [ 1306.899514][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1306.899531][T26599] Call Trace: [ 1306.899540][T26599] [ 1306.899552][T26599] dump_stack_lvl+0x16c/0x1f0 [ 1306.899592][T26599] should_fail_ex+0x50a/0x650 [ 1306.899636][T26599] ? fs_reclaim_acquire+0xae/0x150 [ 1306.899678][T26599] should_failslab+0xc2/0x120 [ 1306.899723][T26599] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1306.899769][T26599] ? __kernfs_new_node+0xd3/0x890 [ 1306.899816][T26599] __kernfs_new_node+0xd3/0x890 [ 1306.899859][T26599] ? __pfx___kernfs_new_node+0x10/0x10 [ 1306.899899][T26599] ? __pfx___lock_acquire+0x10/0x10 [ 1306.899947][T26599] ? lock_acquire.part.0+0x11b/0x380 [ 1306.899995][T26599] ? find_held_lock+0x2d/0x110 [ 1306.900038][T26599] kernfs_new_node+0x186/0x240 [ 1306.900089][T26599] kernfs_create_link+0xcc/0x240 [ 1306.900125][T26599] sysfs_do_create_link_sd+0x90/0x140 [ 1306.900166][T26599] sysfs_create_link+0x61/0xc0 [ 1306.900203][T26599] device_add+0x50c/0x1a70 [ 1306.900246][T26599] ? __pfx_device_add+0x10/0x10 [ 1306.900283][T26599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1306.900331][T26599] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1306.900372][T26599] wiphy_register+0x1cab/0x2860 [ 1306.900409][T26599] ? __pfx__dev_printk+0x10/0x10 [ 1306.900446][T26599] ? __pfx_wiphy_register+0x10/0x10 [ 1306.900499][T26599] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1306.900557][T26599] ieee80211_register_hw+0x2455/0x4060 [ 1306.900618][T26599] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1306.900660][T26599] ? net_generic+0xea/0x2a0 [ 1306.900700][T26599] ? lockdep_init_map_type+0x16d/0x7d0 [ 1306.900755][T26599] ? __asan_memset+0x23/0x50 [ 1306.900799][T26599] ? __hrtimer_init+0x106/0x2c0 [ 1306.900856][T26599] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1306.900930][T26599] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1306.900998][T26599] hwsim_new_radio_nl+0xb42/0x12b0 [ 1306.901048][T26599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1306.901109][T26599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1306.901161][T26599] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1306.901223][T26599] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1306.901276][T26599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1306.901324][T26599] ? trace_cap_capable+0x1a2/0x210 [ 1306.901370][T26599] ? bpf_lsm_capable+0x9/0x10 [ 1306.901405][T26599] ? security_capable+0x7e/0x260 [ 1306.901463][T26599] ? ns_capable+0xd7/0x110 [ 1306.901516][T26599] genl_rcv_msg+0x565/0x800 [ 1306.901570][T26599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.901621][T26599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1306.901683][T26599] netlink_rcv_skb+0x16b/0x440 [ 1306.901726][T26599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.901792][T26599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1306.901853][T26599] ? down_read+0xc9/0x330 [ 1306.901894][T26599] ? __pfx_down_read+0x10/0x10 [ 1306.901936][T26599] ? netlink_deliver_tap+0x1ae/0xd30 [ 1306.901989][T26599] genl_rcv+0x28/0x40 [ 1306.902039][T26599] netlink_unicast+0x53c/0x7f0 [ 1306.902082][T26599] ? __pfx_netlink_unicast+0x10/0x10 [ 1306.902121][T26599] ? __phys_addr_symbol+0x30/0x80 [ 1306.902152][T26599] ? __check_object_size+0x488/0x710 [ 1306.902188][T26599] netlink_sendmsg+0x8b8/0xd70 [ 1306.902233][T26599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.902287][T26599] ____sys_sendmsg+0xaaf/0xc90 [ 1306.902320][T26599] ? copy_msghdr_from_user+0x10b/0x160 [ 1306.902361][T26599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.902412][T26599] ___sys_sendmsg+0x135/0x1e0 [ 1306.902457][T26599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.902517][T26599] ? __pfx_lock_release+0x10/0x10 [ 1306.902560][T26599] ? trace_lock_acquire+0x14e/0x1f0 [ 1306.902610][T26599] ? __fget_files+0x206/0x3a0 [ 1306.902664][T26599] __sys_sendmsg+0x16e/0x220 [ 1306.902717][T26599] ? __pfx___sys_sendmsg+0x10/0x10 [ 1306.902757][T26599] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1306.902825][T26599] do_syscall_64+0xcd/0x250 [ 1306.902862][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.902903][T26599] RIP: 0033:0x7f2d1f78cde9 [ 1306.902926][T26599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.902955][T26599] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.902988][T26599] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1306.903008][T26599] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1306.903026][T26599] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1306.903045][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.903062][T26599] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1306.903101][T26599] [ 1307.480612][T26604] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1307.563141][T26605] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1307.943656][T26618] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1307.962940][T26619] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1308.200827][T26625] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. can't run '/sbi[ 1309.272005][T26648] zswap: compressor not available [ 1309.576887][T26659] FAULT_INJECTION: forcing a failure. [ 1309.576887][T26659] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.616002][T26659] CPU: 1 UID: 0 PID: 26659 Comm: syz.3.6418 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1309.616046][T26659] Tainted: [U]=USER [ 1309.616056][T26659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1309.616074][T26659] Call Trace: [ 1309.616083][T26659] [ 1309.616095][T26659] dump_stack_lvl+0x16c/0x1f0 [ 1309.616135][T26659] should_fail_ex+0x50a/0x650 [ 1309.616181][T26659] ? fs_reclaim_acquire+0xae/0x150 [ 1309.616222][T26659] should_failslab+0xc2/0x120 [ 1309.616269][T26659] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1309.616315][T26659] ? __kernfs_new_node+0xd3/0x890 [ 1309.616360][T26659] __kernfs_new_node+0xd3/0x890 [ 1309.616405][T26659] ? __pfx___kernfs_new_node+0x10/0x10 [ 1309.616471][T26659] ? __pfx___lock_acquire+0x10/0x10 [ 1309.616522][T26659] kernfs_new_node+0x186/0x240 [ 1309.616574][T26659] __kernfs_create_file+0x53/0x350 [ 1309.616610][T26659] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1309.616656][T26659] sysfs_create_file_ns+0x13e/0x1d0 [ 1309.616693][T26659] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1309.616729][T26659] ? down_read+0xc9/0x330 [ 1309.616764][T26659] ? __pfx___up_read+0x10/0x10 [ 1309.616809][T26659] ? kobject_put+0xab/0x5a0 [ 1309.616851][T26659] device_create_file+0xf2/0x1e0 [ 1309.616897][T26659] device_add+0x2c0/0x1a70 [ 1309.616940][T26659] ? __pfx_device_add+0x10/0x10 [ 1309.616977][T26659] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1309.617025][T26659] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1309.617065][T26659] wiphy_register+0x1cab/0x2860 [ 1309.617103][T26659] ? __pfx__dev_printk+0x10/0x10 [ 1309.617141][T26659] ? __pfx_wiphy_register+0x10/0x10 [ 1309.617192][T26659] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1309.617233][T26659] ieee80211_register_hw+0x2455/0x4060 [ 1309.617285][T26659] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1309.617321][T26659] ? net_generic+0xea/0x2a0 [ 1309.617356][T26659] ? lockdep_init_map_type+0x16d/0x7d0 [ 1309.617402][T26659] ? __asan_memset+0x23/0x50 [ 1309.617441][T26659] ? __hrtimer_init+0x106/0x2c0 [ 1309.617496][T26659] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1309.617559][T26659] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1309.617611][T26659] hwsim_new_radio_nl+0xb42/0x12b0 [ 1309.617654][T26659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1309.617705][T26659] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1309.617751][T26659] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1309.617804][T26659] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1309.617850][T26659] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1309.617892][T26659] ? trace_cap_capable+0x1a2/0x210 [ 1309.617932][T26659] ? bpf_lsm_capable+0x9/0x10 [ 1309.617961][T26659] ? security_capable+0x7e/0x260 [ 1309.618009][T26659] ? ns_capable+0xd7/0x110 [ 1309.618053][T26659] genl_rcv_msg+0x565/0x800 [ 1309.618098][T26659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1309.618142][T26659] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1309.618195][T26659] netlink_rcv_skb+0x16b/0x440 [ 1309.618232][T26659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1309.618274][T26659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1309.618329][T26659] ? down_read+0xc9/0x330 [ 1309.618382][T26659] ? __pfx_down_read+0x10/0x10 [ 1309.618423][T26659] ? netlink_deliver_tap+0x1ae/0xd30 [ 1309.618474][T26659] genl_rcv+0x28/0x40 [ 1309.618513][T26659] netlink_unicast+0x53c/0x7f0 [ 1309.618568][T26659] ? __pfx_netlink_unicast+0x10/0x10 [ 1309.618607][T26659] ? __phys_addr_symbol+0x30/0x80 [ 1309.618636][T26659] ? __check_object_size+0x488/0x710 [ 1309.618671][T26659] netlink_sendmsg+0x8b8/0xd70 [ 1309.618713][T26659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1309.618765][T26659] ____sys_sendmsg+0xaaf/0xc90 [ 1309.618814][T26659] ? copy_msghdr_from_user+0x10b/0x160 [ 1309.618857][T26659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1309.618907][T26659] ___sys_sendmsg+0x135/0x1e0 [ 1309.618952][T26659] ? __pfx____sys_sendmsg+0x10/0x10 [ 1309.619011][T26659] ? __pfx_lock_release+0x10/0x10 [ 1309.619054][T26659] ? trace_lock_acquire+0x14e/0x1f0 [ 1309.619104][T26659] ? __fget_files+0x206/0x3a0 [ 1309.619159][T26659] __sys_sendmsg+0x16e/0x220 [ 1309.619202][T26659] ? __pfx___sys_sendmsg+0x10/0x10 [ 1309.619244][T26659] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1309.619317][T26659] do_syscall_64+0xcd/0x250 [ 1309.619357][T26659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.619411][T26659] RIP: 0033:0x7f2d1f78cde9 [ 1309.619434][T26659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.619469][T26659] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1309.619495][T26659] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1309.619514][T26659] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1309.619530][T26659] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.619546][T26659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.619562][T26659] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1309.619598][T26659] [ 1310.230951][T26660] EXT4-fs error: 10 callbacks suppressed [ 1310.230975][T26660] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1310.366023][T26663] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1311.147531][T26676] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1311.174913][T26676] mac80211_hwsim hwsim267 ›: renamed from wlan0 (while UP) [ 1311.213010][T26682] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1311.274644][T26683] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1311.367525][T26679] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,ëË¿ú&‰ [ 1311.367525][T26679] H}þª6l2Íp(wml5Má:ß÷–¨;aQµÃâ‰×æ쀌æ¸' [ 1311.454237][T26688] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1311.765995][T26672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1311.804534][T26672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1311.826857][T26672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1311.850206][T26672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1311.897888][T26696] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1312.162963][T26699] FAULT_INJECTION: forcing a failure. [ 1312.162963][T26699] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.204321][T26699] CPU: 1 UID: 0 PID: 26699 Comm: syz.3.6429 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1312.204365][T26699] Tainted: [U]=USER [ 1312.204376][T26699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1312.204393][T26699] Call Trace: [ 1312.204402][T26699] [ 1312.204413][T26699] dump_stack_lvl+0x16c/0x1f0 [ 1312.204454][T26699] should_fail_ex+0x50a/0x650 [ 1312.204502][T26699] ? fs_reclaim_acquire+0xae/0x150 [ 1312.204543][T26699] should_failslab+0xc2/0x120 [ 1312.204589][T26699] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1312.204631][T26699] ? bpf_ksym_find+0x124/0x1c0 [ 1312.204660][T26699] ? __kernfs_new_node+0xd3/0x890 [ 1312.204712][T26699] __kernfs_new_node+0xd3/0x890 [ 1312.204754][T26699] ? hlock_class+0x4e/0x130 [ 1312.204786][T26699] ? __pfx___kernfs_new_node+0x10/0x10 [ 1312.204848][T26699] ? __pfx___lock_acquire+0x10/0x10 [ 1312.204887][T26699] ? __pfx_stack_trace_save+0x10/0x10 [ 1312.204919][T26699] ? hlock_class+0x4e/0x130 [ 1312.204949][T26699] ? stack_depot_save_flags+0x28/0x9c0 [ 1312.205000][T26699] kernfs_new_node+0x186/0x240 [ 1312.205044][T26699] ? lock_acquire.part.0+0x11b/0x380 [ 1312.205107][T26699] kernfs_create_dir_ns+0x4c/0x150 [ 1312.205156][T26699] sysfs_create_dir_ns+0x13b/0x2b0 [ 1312.205232][T26699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1312.205271][T26699] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1312.205323][T26699] ? kobject_add_internal+0x12d/0x990 [ 1312.205364][T26699] ? do_raw_spin_unlock+0x172/0x230 [ 1312.205395][T26699] kobject_add_internal+0x2c8/0x990 [ 1312.205444][T26699] kobject_add+0x16f/0x240 [ 1312.205483][T26699] ? __pfx_kobject_add+0x10/0x10 [ 1312.205540][T26699] get_device_parent+0x399/0x4e0 [ 1312.205579][T26699] device_add+0x1ae/0x1a70 [ 1312.205622][T26699] ? __pfx_device_add+0x10/0x10 [ 1312.205657][T26699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1312.205705][T26699] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1312.205745][T26699] wiphy_register+0x1cab/0x2860 [ 1312.205781][T26699] ? __pfx__dev_printk+0x10/0x10 [ 1312.205817][T26699] ? __pfx_wiphy_register+0x10/0x10 [ 1312.205867][T26699] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1312.205905][T26699] ieee80211_register_hw+0x2455/0x4060 [ 1312.205956][T26699] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1312.205991][T26699] ? net_generic+0xea/0x2a0 [ 1312.206025][T26699] ? lockdep_init_map_type+0x16d/0x7d0 [ 1312.206071][T26699] ? __asan_memset+0x23/0x50 [ 1312.206108][T26699] ? __hrtimer_init+0x106/0x2c0 [ 1312.206155][T26699] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1312.206225][T26699] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1312.206278][T26699] hwsim_new_radio_nl+0xb42/0x12b0 [ 1312.206320][T26699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1312.206372][T26699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1312.206417][T26699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1312.206469][T26699] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1312.206514][T26699] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1312.206556][T26699] ? trace_cap_capable+0x1a2/0x210 [ 1312.206596][T26699] ? bpf_lsm_capable+0x9/0x10 [ 1312.206625][T26699] ? security_capable+0x7e/0x260 [ 1312.206673][T26699] ? ns_capable+0xd7/0x110 [ 1312.206718][T26699] genl_rcv_msg+0x565/0x800 [ 1312.206761][T26699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1312.206796][T26699] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1312.206838][T26699] netlink_rcv_skb+0x16b/0x440 [ 1312.206868][T26699] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1312.206903][T26699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1312.206945][T26699] ? down_read+0xc9/0x330 [ 1312.206975][T26699] ? __pfx_down_read+0x10/0x10 [ 1312.207006][T26699] ? netlink_deliver_tap+0x1ae/0xd30 [ 1312.207038][T26699] genl_rcv+0x28/0x40 [ 1312.207067][T26699] netlink_unicast+0x53c/0x7f0 [ 1312.207100][T26699] ? __pfx_netlink_unicast+0x10/0x10 [ 1312.207131][T26699] ? __phys_addr_symbol+0x30/0x80 [ 1312.207155][T26699] ? __check_object_size+0x488/0x710 [ 1312.207182][T26699] netlink_sendmsg+0x8b8/0xd70 [ 1312.207223][T26699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1312.207266][T26699] ____sys_sendmsg+0xaaf/0xc90 [ 1312.207291][T26699] ? copy_msghdr_from_user+0x10b/0x160 [ 1312.207325][T26699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1312.207364][T26699] ___sys_sendmsg+0x135/0x1e0 [ 1312.207399][T26699] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.207444][T26699] ? __pfx_lock_release+0x10/0x10 [ 1312.207478][T26699] ? trace_lock_acquire+0x14e/0x1f0 [ 1312.207515][T26699] ? __fget_files+0x206/0x3a0 [ 1312.207556][T26699] __sys_sendmsg+0x16e/0x220 [ 1312.207589][T26699] ? __pfx___sys_sendmsg+0x10/0x10 [ 1312.207621][T26699] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1312.207675][T26699] do_syscall_64+0xcd/0x250 [ 1312.207706][T26699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.207739][T26699] RIP: 0033:0x7f2d1f78cde9 [ 1312.207758][T26699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.207780][T26699] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.207803][T26699] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1312.207818][T26699] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1312.207832][T26699] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.207847][T26699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.207861][T26699] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1312.207892][T26699] [ 1312.881735][T26703] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1312.935900][T20748] Bluetooth: hci0: command 0x0c1a tx timeout can't run '/sbi[ 1312.971263][T26705] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1313.030342][T26699] kobject: kobject_add_internal failed for ieee80211 (error: -12 parent: hwsim280) [ 1313.421642][T26708] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1313.626831][T26713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6431'. [ 1313.826486][T20748] Bluetooth: hci1: command 0x0c1a tx timeout [ 1313.842625][T26719] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6434'. [ 1313.899587][T26720] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1313.924357][T20748] Bluetooth: hci2: command 0x0c1a tx timeout [ 1313.931914][T20748] Bluetooth: hci3: command 0x0c1a tx timeout can't run '/sbi[ 1314.227192][T26730] FAULT_INJECTION: forcing a failure. [ 1314.227192][T26730] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.363086][T26730] CPU: 0 UID: 0 PID: 26730 Comm: syz.6.6437 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1314.363133][T26730] Tainted: [U]=USER [ 1314.363143][T26730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1314.363161][T26730] Call Trace: [ 1314.363170][T26730] [ 1314.363182][T26730] dump_stack_lvl+0x16c/0x1f0 [ 1314.363222][T26730] should_fail_ex+0x50a/0x650 [ 1314.363267][T26730] ? fs_reclaim_acquire+0xae/0x150 [ 1314.363315][T26730] should_failslab+0xc2/0x120 [ 1314.363363][T26730] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1314.363409][T26730] ? __alloc_skb+0x2b1/0x380 [ 1314.363446][T26730] ? find_held_lock+0x2d/0x110 [ 1314.363480][T26730] __alloc_skb+0x2b1/0x380 [ 1314.363516][T26730] ? __pfx___alloc_skb+0x10/0x10 [ 1314.363551][T26730] ? __pfx_lock_release+0x10/0x10 [ 1314.363589][T26730] ? trace_lock_acquire+0x14e/0x1f0 [ 1314.363635][T26730] alloc_uevent_skb+0x7d/0x210 [ 1314.363680][T26730] kobject_uevent_env+0xca3/0x1870 [ 1314.363728][T26730] ? queue_work_on+0xc6/0x140 [ 1314.363765][T26730] ? bus_to_subsys+0x12d/0x160 [ 1314.363812][T26730] driver_bound+0x164/0x230 [ 1314.363846][T26730] device_bind_driver+0x3a/0x70 [ 1314.363878][T26730] mac80211_hwsim_new_radio+0x3e7/0x54e0 [ 1314.363935][T26730] ? __asan_memset+0x23/0x50 [ 1314.363976][T26730] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1314.364026][T26730] hwsim_new_radio_nl+0xb42/0x12b0 [ 1314.364070][T26730] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1314.364124][T26730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1314.364169][T26730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1314.364223][T26730] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1314.364270][T26730] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1314.364318][T26730] ? trace_cap_capable+0x1a2/0x210 [ 1314.364358][T26730] ? bpf_lsm_capable+0x9/0x10 [ 1314.364388][T26730] ? security_capable+0x7e/0x260 [ 1314.364437][T26730] ? ns_capable+0xd7/0x110 [ 1314.364481][T26730] genl_rcv_msg+0x565/0x800 [ 1314.364526][T26730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1314.364570][T26730] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1314.364623][T26730] netlink_rcv_skb+0x16b/0x440 [ 1314.364659][T26730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1314.364703][T26730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1314.364757][T26730] ? down_read+0xc9/0x330 [ 1314.364793][T26730] ? __pfx_down_read+0x10/0x10 [ 1314.364831][T26730] ? netlink_deliver_tap+0x1ae/0xd30 [ 1314.364872][T26730] genl_rcv+0x28/0x40 [ 1314.364921][T26730] netlink_unicast+0x53c/0x7f0 [ 1314.364980][T26730] ? __pfx_netlink_unicast+0x10/0x10 [ 1314.365020][T26730] ? __phys_addr_symbol+0x30/0x80 [ 1314.365055][T26730] ? __check_object_size+0x488/0x710 [ 1314.365092][T26730] netlink_sendmsg+0x8b8/0xd70 [ 1314.365138][T26730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.365193][T26730] ____sys_sendmsg+0xaaf/0xc90 [ 1314.365225][T26730] ? copy_msghdr_from_user+0x10b/0x160 [ 1314.365268][T26730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.365325][T26730] ___sys_sendmsg+0x135/0x1e0 [ 1314.365372][T26730] ? __pfx____sys_sendmsg+0x10/0x10 [ 1314.365431][T26730] ? __pfx_lock_release+0x10/0x10 [ 1314.365473][T26730] ? trace_lock_acquire+0x14e/0x1f0 [ 1314.365523][T26730] ? __fget_files+0x206/0x3a0 [ 1314.365579][T26730] __sys_sendmsg+0x16e/0x220 [ 1314.365623][T26730] ? __pfx___sys_sendmsg+0x10/0x10 [ 1314.365666][T26730] ? __x64_sys_futex+0x1e1/0x4c0 [ 1314.365728][T26730] do_syscall_64+0xcd/0x250 [ 1314.365769][T26730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.365811][T26730] RIP: 0033:0x7fcc4898cde9 [ 1314.365836][T26730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.365866][T26730] RSP: 002b:00007fcc497c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.365893][T26730] RAX: ffffffffffffffda RBX: 00007fcc48ba5fa0 RCX: 00007fcc4898cde9 [ 1314.365920][T26730] RDX: 0000000004044820 RSI: 00004000000002c0 RDI: 0000000000000007 [ 1314.365939][T26730] RBP: 00007fcc48a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.365959][T26730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.365976][T26730] R13: 0000000000000000 R14: 00007fcc48ba5fa0 R15: 00007ffcd55cbe98 [ 1314.366015][T26730] can't run '/sbi[ 1315.305043][T26742] EXT4-fs error: 2 callbacks suppressed [ 1315.305065][T26742] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1315.366968][T26743] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1315.658597][T26734] TCP: TCP_TX_DELAY enabled [ 1316.035286][T26756] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1316.077672][T26755] FAULT_INJECTION: forcing a failure. [ 1316.077672][T26755] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.162377][T26755] CPU: 1 UID: 0 PID: 26755 Comm: syz.0.6445 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1316.162420][T26755] Tainted: [U]=USER [ 1316.162429][T26755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1316.162445][T26755] Call Trace: [ 1316.162453][T26755] [ 1316.162463][T26755] dump_stack_lvl+0x16c/0x1f0 [ 1316.162499][T26755] should_fail_ex+0x50a/0x650 [ 1316.162540][T26755] ? fs_reclaim_acquire+0xae/0x150 [ 1316.162574][T26755] ? constrain_params_by_rules+0x176/0xca0 [ 1316.162602][T26755] should_failslab+0xc2/0x120 [ 1316.162644][T26755] __kmalloc_noprof+0xcb/0x510 [ 1316.162680][T26755] ? mark_lock+0xb5/0xc60 [ 1316.162720][T26755] constrain_params_by_rules+0x176/0xca0 [ 1316.162751][T26755] ? __pfx___lock_acquire+0x10/0x10 [ 1316.162789][T26755] ? stack_trace_save+0x95/0xd0 [ 1316.162821][T26755] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1316.162852][T26755] ? lock_acquire.part.0+0x11b/0x380 [ 1316.162908][T26755] ? hlock_class+0x4e/0x130 [ 1316.162938][T26755] ? mark_lock+0xb5/0xc60 [ 1316.162974][T26755] ? snd_interval_refine+0x2fa/0x580 [ 1316.163019][T26755] snd_pcm_hw_refine+0x7e8/0xad0 [ 1316.163056][T26755] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1316.163091][T26755] ? __pfx_lock_release+0x10/0x10 [ 1316.163144][T26755] ? mark_held_locks+0x9f/0xe0 [ 1316.163190][T26755] snd_pcm_hw_params+0x3e6/0x1b20 [ 1316.163225][T26755] ? snd_pcm_hw_param_last+0x306/0x710 [ 1316.163252][T26755] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 1316.163286][T26755] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1316.163323][T26755] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 1316.163357][T26755] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1316.163393][T26755] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1316.163429][T26755] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 1316.163473][T26755] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1316.163504][T26755] ? __pfx___mutex_lock+0x10/0x10 [ 1316.163558][T26755] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1316.163588][T26755] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1316.163620][T26755] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1316.163648][T26755] snd_pcm_oss_release+0x28b/0x310 [ 1316.163677][T26755] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1316.163704][T26755] __fput+0x3ff/0xb70 [ 1316.163737][T26755] task_work_run+0x14e/0x250 [ 1316.163779][T26755] ? __pfx_task_work_run+0x10/0x10 [ 1316.163812][T26755] ? __pfx___do_sys_close_range+0x10/0x10 [ 1316.163857][T26755] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1316.163889][T26755] do_syscall_64+0xda/0x250 [ 1316.163924][T26755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.163962][T26755] RIP: 0033:0x7fd77cb8cde9 [ 1316.163984][T26755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.164011][T26755] RSP: 002b:00007fd77dab8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1316.164036][T26755] RAX: 0000000000000000 RBX: 00007fd77cda5fa0 RCX: 00007fd77cb8cde9 [ 1316.164054][T26755] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1316.164069][T26755] RBP: 00007fd77cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.164085][T26755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.164101][T26755] R13: 0000000000000000 R14: 00007fd77cda5fa0 R15: 00007ffc19a69988 [ 1316.164146][T26755] [ 1316.791432][T26759] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1316.954679][T26764] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1317.093859][T26767] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1317.321974][T26772] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1317.721980][T26783] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1317.743071][T26784] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1318.216871][T26795] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbican't run '/sbi[ 1319.598324][T26797] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,ëË¿ú&‰ [ 1319.598324][T26797] H}þª6l2Íp(wml5Má:ß÷–¨;aQµÃâ‰×æ쀌æ¸' [ 1319.748072][T26791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1319.758160][T26791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1319.786361][T26791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1319.793812][T26791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 can't run '/sbi[ 1320.497375][T26835] EXT4-fs error: 6 callbacks suppressed [ 1320.497398][T26835] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1320.640747][T26842] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1320.735266][T26844] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1320.866763][T26847] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1320.891866][T20748] Bluetooth: hci0: command 0x0c1a tx timeout [ 1320.906739][T26850] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1321.097331][T26852] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1321.195148][T26854] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1321.216610][T26853] FAULT_INJECTION: forcing a failure. [ 1321.216610][T26853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.308903][T26857] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1321.346116][T26853] CPU: 1 UID: 0 PID: 26853 Comm: syz.6.6466 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1321.346155][T26853] Tainted: [U]=USER [ 1321.346163][T26853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1321.346178][T26853] Call Trace: [ 1321.346186][T26853] [ 1321.346197][T26853] dump_stack_lvl+0x16c/0x1f0 [ 1321.346232][T26853] should_fail_ex+0x50a/0x650 [ 1321.346278][T26853] _copy_to_user+0x32/0xd0 [ 1321.346308][T26853] simple_read_from_buffer+0xd0/0x160 [ 1321.346347][T26853] proc_fail_nth_read+0x198/0x270 [ 1321.346381][T26853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.346427][T26853] ? rw_verify_area+0xcf/0x680 [ 1321.346461][T26853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.346494][T26853] vfs_read+0x1df/0xbf0 [ 1321.346531][T26853] ? __fget_files+0x1fc/0x3a0 [ 1321.346570][T26853] ? __pfx___mutex_lock+0x10/0x10 [ 1321.346602][T26853] ? __pfx_vfs_read+0x10/0x10 [ 1321.346649][T26853] ? __fget_files+0x206/0x3a0 [ 1321.346699][T26853] ksys_read+0x12b/0x250 [ 1321.346736][T26853] ? __pfx_ksys_read+0x10/0x10 [ 1321.346784][T26853] do_syscall_64+0xcd/0x250 [ 1321.346820][T26853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.346858][T26853] RIP: 0033:0x7fcc4898b7fc [ 1321.346880][T26853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1321.346906][T26853] RSP: 002b:00007fcc49781030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1321.346932][T26853] RAX: ffffffffffffffda RBX: 00007fcc48ba6160 RCX: 00007fcc4898b7fc [ 1321.346950][T26853] RDX: 000000000000000f RSI: 00007fcc497810a0 RDI: 0000000000000006 [ 1321.346968][T26853] RBP: 00007fcc49781090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.346985][T26853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.347002][T26853] R13: 0000000000000001 R14: 00007fcc48ba6160 R15: 00007ffcd55cbe98 [ 1321.347036][T26853] [ 1321.656480][T26864] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1321.861146][T20748] Bluetooth: hci2: command 0x0c1a tx timeout [ 1321.861174][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 1321.868532][T20748] Bluetooth: hci1: command 0x0c1a tx timeout [ 1322.202041][T26879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1322.260134][T26879] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1322.480689][T26865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1322.488378][T26865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1322.495585][T26865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1322.506166][T26865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1322.548399][T26868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1322.556115][T26868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1322.566977][T26868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1322.587131][T26868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1322.660207][T26873] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,ëË¿ú&‰ [ 1322.660207][T26873] H}þª6l2Íp(wml5Má:ß÷–¨;aQµÃâ‰×æ쀌æ¸' [ 1322.736953][T26885] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1323.173824][T26871] Process accounting paused [ 1323.180746][T26892] FAULT_INJECTION: forcing a failure. [ 1323.180746][T26892] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.229752][T26892] CPU: 0 UID: 0 PID: 26892 Comm: syz.5.6476 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1323.229801][T26892] Tainted: [U]=USER [ 1323.229811][T26892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1323.229830][T26892] Call Trace: [ 1323.229839][T26892] [ 1323.229851][T26892] dump_stack_lvl+0x16c/0x1f0 [ 1323.229890][T26892] should_fail_ex+0x50a/0x650 [ 1323.229935][T26892] ? fs_reclaim_acquire+0xae/0x150 [ 1323.229975][T26892] should_failslab+0xc2/0x120 [ 1323.230022][T26892] __kmalloc_node_noprof+0xd1/0x510 [ 1323.230066][T26892] ? kfree+0x260/0x4d0 [ 1323.230102][T26892] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1323.230148][T26892] __kvmalloc_node_noprof+0xad/0x1a0 [ 1323.230189][T26892] snd_pcm_oss_change_params_locked+0x1cbd/0x3a60 [ 1323.230237][T26892] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1323.230272][T26892] ? __pfx___mutex_lock+0x10/0x10 [ 1323.230328][T26892] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1323.230361][T26892] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1323.230395][T26892] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1323.230426][T26892] snd_pcm_oss_release+0x28b/0x310 [ 1323.230458][T26892] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1323.230488][T26892] __fput+0x3ff/0xb70 [ 1323.230532][T26892] task_work_run+0x14e/0x250 [ 1323.230595][T26892] ? __pfx_task_work_run+0x10/0x10 [ 1323.230643][T26892] ? __pfx___do_sys_close_range+0x10/0x10 [ 1323.230705][T26892] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1323.230743][T26892] do_syscall_64+0xda/0x250 [ 1323.230784][T26892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.230829][T26892] RIP: 0033:0x7f83aef8cde9 [ 1323.230853][T26892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.230885][T26892] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1323.230915][T26892] RAX: 0000000000000000 RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1323.230933][T26892] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1323.230953][T26892] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.230972][T26892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.230991][T26892] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1323.231032][T26892] [ 1323.520635][T26894] zswap: compressor not available can't run '/sbi[ 1324.244768][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1324.626017][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 1324.633454][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 1324.637771][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 1324.640923][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout can't run '/sbi[ 1325.031828][T26943] FAULT_INJECTION: forcing a failure. [ 1325.031828][T26943] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.047246][T26943] CPU: 0 UID: 0 PID: 26943 Comm: syz.6.6493 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1325.047292][T26943] Tainted: [U]=USER [ 1325.047303][T26943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1325.047321][T26943] Call Trace: [ 1325.047330][T26943] [ 1325.047342][T26943] dump_stack_lvl+0x16c/0x1f0 [ 1325.047384][T26943] should_fail_ex+0x50a/0x650 [ 1325.047431][T26943] ? fs_reclaim_acquire+0xae/0x150 [ 1325.047474][T26943] should_failslab+0xc2/0x120 [ 1325.047522][T26943] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1325.047581][T26943] ? __kernfs_new_node+0xd3/0x890 [ 1325.047626][T26943] __kernfs_new_node+0xd3/0x890 [ 1325.047669][T26943] ? __pfx___kernfs_new_node+0x10/0x10 [ 1325.047724][T26943] ? __pfx___lock_acquire+0x10/0x10 [ 1325.047770][T26943] kernfs_new_node+0x186/0x240 [ 1325.047820][T26943] __kernfs_create_file+0x53/0x350 [ 1325.047874][T26943] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1325.047921][T26943] sysfs_create_file_ns+0x13e/0x1d0 [ 1325.047971][T26943] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1325.048006][T26943] ? down_read+0xc9/0x330 [ 1325.048040][T26943] ? __pfx___up_read+0x10/0x10 [ 1325.048092][T26943] ? kobject_put+0xab/0x5a0 [ 1325.048136][T26943] device_create_file+0xf2/0x1e0 [ 1325.048181][T26943] device_add+0x2c0/0x1a70 [ 1325.048223][T26943] ? __pfx_device_add+0x10/0x10 [ 1325.048259][T26943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1325.048305][T26943] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1325.048346][T26943] wiphy_register+0x1cab/0x2860 [ 1325.048383][T26943] ? __pfx__dev_printk+0x10/0x10 [ 1325.048420][T26943] ? __pfx_wiphy_register+0x10/0x10 [ 1325.048469][T26943] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1325.048509][T26943] ieee80211_register_hw+0x2455/0x4060 [ 1325.048559][T26943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1325.048594][T26943] ? net_generic+0xea/0x2a0 [ 1325.048629][T26943] ? lockdep_init_map_type+0x16d/0x7d0 [ 1325.048674][T26943] ? __asan_memset+0x23/0x50 [ 1325.048711][T26943] ? __hrtimer_init+0x106/0x2c0 [ 1325.048759][T26943] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1325.048820][T26943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1325.048870][T26943] hwsim_new_radio_nl+0xb42/0x12b0 [ 1325.048911][T26943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1325.048961][T26943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1325.049005][T26943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1325.049057][T26943] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1325.049107][T26943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1325.049149][T26943] ? trace_cap_capable+0x1a2/0x210 [ 1325.049189][T26943] ? bpf_lsm_capable+0x9/0x10 [ 1325.049218][T26943] ? security_capable+0x7e/0x260 [ 1325.049266][T26943] ? ns_capable+0xd7/0x110 [ 1325.049309][T26943] genl_rcv_msg+0x565/0x800 [ 1325.049356][T26943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1325.049398][T26943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1325.049450][T26943] netlink_rcv_skb+0x16b/0x440 [ 1325.049486][T26943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1325.049529][T26943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.049581][T26943] ? down_read+0xc9/0x330 [ 1325.049616][T26943] ? __pfx_down_read+0x10/0x10 [ 1325.049653][T26943] ? netlink_deliver_tap+0x1ae/0xd30 [ 1325.049693][T26943] genl_rcv+0x28/0x40 [ 1325.049730][T26943] netlink_unicast+0x53c/0x7f0 [ 1325.049770][T26943] ? __pfx_netlink_unicast+0x10/0x10 [ 1325.049808][T26943] ? __phys_addr_symbol+0x30/0x80 [ 1325.049836][T26943] ? __check_object_size+0x488/0x710 [ 1325.049870][T26943] netlink_sendmsg+0x8b8/0xd70 [ 1325.049912][T26943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.049963][T26943] ____sys_sendmsg+0xaaf/0xc90 [ 1325.049992][T26943] ? copy_msghdr_from_user+0x10b/0x160 [ 1325.050031][T26943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.050086][T26943] ___sys_sendmsg+0x135/0x1e0 [ 1325.050127][T26943] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.050185][T26943] ? __pfx_lock_release+0x10/0x10 [ 1325.050224][T26943] ? trace_lock_acquire+0x14e/0x1f0 [ 1325.050271][T26943] ? __fget_files+0x206/0x3a0 [ 1325.050322][T26943] __sys_sendmsg+0x16e/0x220 [ 1325.050363][T26943] ? __pfx___sys_sendmsg+0x10/0x10 [ 1325.050402][T26943] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1325.050470][T26943] do_syscall_64+0xcd/0x250 [ 1325.050506][T26943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.050563][T26943] RIP: 0033:0x7fcc4898cde9 [ 1325.050589][T26943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.050622][T26943] RSP: 002b:00007fcc497c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.050654][T26943] RAX: ffffffffffffffda RBX: 00007fcc48ba5fa0 RCX: 00007fcc4898cde9 [ 1325.050676][T26943] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1325.050696][T26943] RBP: 00007fcc48a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.050716][T26943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.050736][T26943] R13: 0000000000000000 R14: 00007fcc48ba5fa0 R15: 00007ffcd55cbe98 [ 1325.050779][T26943] [ 1325.837896][T26949] EXT4-fs error: 9 callbacks suppressed [ 1325.837918][T26949] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1326.055686][T26954] netlink: 'syz.6.6495': attribute type 64 has an invalid length. [ 1326.083885][T26954] netlink: 74 bytes leftover after parsing attributes in process `syz.6.6495'. [ 1326.997710][T26966] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1327.086069][T26967] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1327.300194][T26976] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1327.424652][T26978] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:7: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1327.442789][T26980] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1327.739967][T26988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6504'. [ 1327.741025][T26992] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1327.755553][T26987] FAULT_INJECTION: forcing a failure. [ 1327.755553][T26987] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.811979][T26987] CPU: 0 UID: 0 PID: 26987 Comm: syz.5.6506 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1327.812024][T26987] Tainted: [U]=USER [ 1327.812035][T26987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1327.812052][T26987] Call Trace: [ 1327.812061][T26987] [ 1327.812073][T26987] dump_stack_lvl+0x16c/0x1f0 [ 1327.812119][T26987] should_fail_ex+0x50a/0x650 [ 1327.812165][T26987] ? fs_reclaim_acquire+0xae/0x150 [ 1327.812205][T26987] ? vhost_net_open+0xb4/0x8a0 [ 1327.812244][T26987] should_failslab+0xc2/0x120 [ 1327.812291][T26987] __kmalloc_cache_noprof+0x68/0x410 [ 1327.812335][T26987] ? kasan_save_track+0x14/0x30 [ 1327.812381][T26987] vhost_net_open+0xb4/0x8a0 [ 1327.812422][T26987] ? __pfx_vhost_net_open+0x10/0x10 [ 1327.812465][T26987] misc_open+0x35a/0x420 [ 1327.812493][T26987] ? __pfx_misc_open+0x10/0x10 [ 1327.812519][T26987] chrdev_open+0x237/0x6a0 [ 1327.812562][T26987] ? __pfx_apparmor_file_open+0x10/0x10 [ 1327.812597][T26987] ? __pfx_chrdev_open+0x10/0x10 [ 1327.812644][T26987] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1327.812689][T26987] do_dentry_open+0x735/0x1c40 [ 1327.812731][T26987] ? __pfx_chrdev_open+0x10/0x10 [ 1327.812777][T26987] ? inode_permission+0xdd/0x5f0 [ 1327.812812][T26987] vfs_open+0x82/0x3f0 [ 1327.812839][T26987] ? may_open+0x1f2/0x400 [ 1327.812874][T26987] path_openat+0x1e88/0x2d80 [ 1327.812929][T26987] ? __pfx_path_openat+0x10/0x10 [ 1327.812978][T26987] ? __pfx___lock_acquire+0x10/0x10 [ 1327.813018][T26987] ? lock_acquire.part.0+0x11b/0x380 [ 1327.813059][T26987] ? find_held_lock+0x2d/0x110 [ 1327.813110][T26987] do_filp_open+0x20c/0x470 [ 1327.813153][T26987] ? __pfx_do_filp_open+0x10/0x10 [ 1327.813194][T26987] ? find_held_lock+0x2d/0x110 [ 1327.813249][T26987] ? alloc_fd+0x41f/0x760 [ 1327.813299][T26987] do_sys_openat2+0x17a/0x1e0 [ 1327.813329][T26987] ? __pfx_do_sys_openat2+0x10/0x10 [ 1327.813373][T26987] __x64_sys_openat+0x175/0x210 [ 1327.813404][T26987] ? __pfx___x64_sys_openat+0x10/0x10 [ 1327.813450][T26987] do_syscall_64+0xcd/0x250 [ 1327.813488][T26987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.813527][T26987] RIP: 0033:0x7f83aef8cde9 [ 1327.813550][T26987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.813579][T26987] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1327.813605][T26987] RAX: ffffffffffffffda RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1327.813623][T26987] RDX: 0000000000004000 RSI: 0000400000000140 RDI: ffffffffffffff9c [ 1327.813641][T26987] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.813658][T26987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.813692][T26987] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1327.813730][T26987] [ 1328.167856][T26994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6505'. [ 1328.311843][T26998] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Structure needs cleaning [ 1328.760135][T27004] FAULT_INJECTION: forcing a failure. [ 1328.760135][T27004] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.777115][T27004] CPU: 1 UID: 0 PID: 27004 Comm: syz.5.6509 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1328.777156][T27004] Tainted: [U]=USER [ 1328.777165][T27004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1328.777181][T27004] Call Trace: [ 1328.777189][T27004] [ 1328.777200][T27004] dump_stack_lvl+0x16c/0x1f0 [ 1328.777237][T27004] should_fail_ex+0x50a/0x650 [ 1328.777282][T27004] ? fs_reclaim_acquire+0xae/0x150 [ 1328.777320][T27004] ? shrinker_alloc+0xfb/0xbb0 [ 1328.777352][T27004] should_failslab+0xc2/0x120 [ 1328.777397][T27004] __kmalloc_cache_noprof+0x68/0x410 [ 1328.777443][T27004] shrinker_alloc+0xfb/0xbb0 [ 1328.777483][T27004] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1328.777515][T27004] ? rcu_is_watching+0x12/0xc0 [ 1328.777547][T27004] ? __pfx_shrinker_alloc+0x10/0x10 [ 1328.777584][T27004] ? lockdep_init_map_type+0x16d/0x7d0 [ 1328.777624][T27004] ? lockdep_init_map_type+0x16d/0x7d0 [ 1328.777670][T27004] ? __raw_spin_lock_init+0x3a/0x110 [ 1328.777715][T27004] ? __init_rwsem+0x12d/0x1b0 [ 1328.777761][T27004] alloc_super+0x7cc/0xbd0 [ 1328.777807][T27004] sget_fc+0x116/0xc20 [ 1328.777843][T27004] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1328.777878][T27004] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1328.777921][T27004] get_tree_nodev+0x28/0x190 [ 1328.777960][T27004] mqueue_get_tree+0xf1/0x130 [ 1328.778012][T27004] vfs_get_tree+0x8b/0x340 [ 1328.778046][T27004] fc_mount+0x16/0xc0 [ 1328.778077][T27004] mq_init_ns+0x426/0x620 [ 1328.778109][T27004] copy_ipcs+0x383/0x610 [ 1328.778136][T27004] ? copy_utsname+0xab/0x470 [ 1328.778179][T27004] create_new_namespaces+0x20a/0xad0 [ 1328.778225][T27004] ? security_capable+0x7e/0x260 [ 1328.778274][T27004] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1328.778322][T27004] ksys_unshare+0x45d/0xa40 [ 1328.778353][T27004] ? __pfx_ksys_unshare+0x10/0x10 [ 1328.778380][T27004] ? xfd_validate_state+0x5d/0x180 [ 1328.778431][T27004] __x64_sys_unshare+0x31/0x40 [ 1328.778458][T27004] do_syscall_64+0xcd/0x250 [ 1328.778493][T27004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.778532][T27004] RIP: 0033:0x7f83aef8cde9 [ 1328.778554][T27004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.778582][T27004] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1328.778610][T27004] RAX: ffffffffffffffda RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1328.778629][T27004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1328.778646][T27004] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.778663][T27004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.778680][T27004] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1328.778714][T27004] [ 1329.504395][T27013] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1329.701543][T27019] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:34: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1330.761857][T27023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1330.778342][T27023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1330.817127][T27023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1330.824668][T27023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1331.118712][T27041] EXT4-fs error: 3 callbacks suppressed [ 1331.118732][T27041] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1331.582261][T27049] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1332.000202][T27052] FAULT_INJECTION: forcing a failure. [ 1332.000202][T27052] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.036005][T27052] CPU: 1 UID: 0 PID: 27052 Comm: syz.0.6520 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1332.036052][T27052] Tainted: [U]=USER [ 1332.036062][T27052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1332.036079][T27052] Call Trace: [ 1332.036089][T27052] [ 1332.036101][T27052] dump_stack_lvl+0x16c/0x1f0 [ 1332.036140][T27052] should_fail_ex+0x50a/0x650 [ 1332.036183][T27052] ? fs_reclaim_acquire+0xae/0x150 [ 1332.036222][T27052] ? constrain_params_by_rules+0x176/0xca0 [ 1332.036253][T27052] should_failslab+0xc2/0x120 [ 1332.036318][T27052] __kmalloc_noprof+0xcb/0x510 [ 1332.036362][T27052] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1332.036415][T27052] constrain_params_by_rules+0x176/0xca0 [ 1332.036448][T27052] ? arch_stack_walk+0xa7/0x100 [ 1332.036487][T27052] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1332.036520][T27052] ? stack_trace_save+0x95/0xd0 [ 1332.036552][T27052] ? __pfx_stack_trace_save+0x10/0x10 [ 1332.036599][T27052] ? snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 1332.036630][T27052] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1332.036658][T27052] ? snd_pcm_oss_sync+0x1d7/0x7f0 [ 1332.036685][T27052] ? snd_pcm_oss_release+0x28b/0x310 [ 1332.036723][T27052] ? __fput+0x3ff/0xb70 [ 1332.036748][T27052] ? task_work_run+0x14e/0x250 [ 1332.036784][T27052] ? snd_interval_refine+0x2fa/0x580 [ 1332.036828][T27052] snd_pcm_hw_refine+0x7e8/0xad0 [ 1332.036865][T27052] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1332.036919][T27052] snd_pcm_hw_param_first+0x328/0x6e0 [ 1332.036957][T27052] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 1332.036992][T27052] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1332.037024][T27052] ? kfree+0x2c4/0x4d0 [ 1332.037059][T27052] ? snd_pcm_oss_change_params_locked+0x93b/0x3a60 [ 1332.037095][T27052] snd_pcm_oss_change_params_locked+0x9ad/0x3a60 [ 1332.037162][T27052] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1332.037197][T27052] ? __pfx___mutex_lock+0x10/0x10 [ 1332.037257][T27052] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1332.037291][T27052] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1332.037326][T27052] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1332.037358][T27052] snd_pcm_oss_release+0x28b/0x310 [ 1332.037391][T27052] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1332.037422][T27052] __fput+0x3ff/0xb70 [ 1332.037459][T27052] task_work_run+0x14e/0x250 [ 1332.037499][T27052] ? __pfx_task_work_run+0x10/0x10 [ 1332.037540][T27052] ? __pfx___do_sys_close_range+0x10/0x10 [ 1332.037605][T27052] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1332.037640][T27052] do_syscall_64+0xda/0x250 [ 1332.037676][T27052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.037720][T27052] RIP: 0033:0x7fd77cb8cde9 [ 1332.037743][T27052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.037788][T27052] RSP: 002b:00007fd77dab8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1332.037816][T27052] RAX: 0000000000000000 RBX: 00007fd77cda5fa0 RCX: 00007fd77cb8cde9 [ 1332.037848][T27052] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1332.037866][T27052] RBP: 00007fd77cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.037883][T27052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.037900][T27052] R13: 0000000000000000 R14: 00007fd77cda5fa0 R15: 00007ffc19a69988 [ 1332.037935][T27052] [ 1332.612863][T20748] Bluetooth: hci0: command 0x0c1a tx timeout [ 1332.875096][T27059] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1332.892422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1332.934479][T20748] Bluetooth: hci1: command 0x0c1a tx timeout [ 1332.941851][T20748] Bluetooth: hci2: command 0x0c1a tx timeout [ 1332.949959][T20748] Bluetooth: hci3: command 0x0c1a tx timeout can't run '/sbi[ 1333.165930][ T29] audit: type=1800 audit(4294967939.035:21): pid=27062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6523" name="dbroot" dev="configfs" ino=113480 res=0 errno=0 [ 1333.333470][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1333.395249][T27068] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1333.452096][T27065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1333.465122][T27073] Process accounting resumed [ 1333.525581][T27065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1334.017254][T27082] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1334.172239][T27081] Invalid ELF header magic: != ELF [ 1335.126658][T27098] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1335.401861][T27103] FAULT_INJECTION: forcing a failure. [ 1335.401861][T27103] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.495532][T27103] CPU: 0 UID: 0 PID: 27103 Comm: syz.0.6532 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1335.495580][T27103] Tainted: [U]=USER [ 1335.495591][T27103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1335.495608][T27103] Call Trace: [ 1335.495617][T27103] [ 1335.495628][T27103] dump_stack_lvl+0x16c/0x1f0 [ 1335.495669][T27103] should_fail_ex+0x50a/0x650 [ 1335.495714][T27103] ? fs_reclaim_acquire+0xae/0x150 [ 1335.495753][T27103] should_failslab+0xc2/0x120 [ 1335.495804][T27103] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1335.495849][T27103] ? __kernfs_new_node+0xd3/0x890 [ 1335.495893][T27103] __kernfs_new_node+0xd3/0x890 [ 1335.495935][T27103] ? __pfx___kernfs_new_node+0x10/0x10 [ 1335.495972][T27103] ? __pfx_lock_release+0x10/0x10 [ 1335.496010][T27103] ? kernfs_add_one+0x39d/0x520 [ 1335.496061][T27103] ? up_write+0x1b2/0x520 [ 1335.496108][T27103] kernfs_new_node+0x186/0x240 [ 1335.496156][T27103] __kernfs_create_file+0x53/0x350 [ 1335.496191][T27103] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1335.496234][T27103] internal_create_group+0x56c/0xf10 [ 1335.496282][T27103] ? __pfx_internal_create_group+0x10/0x10 [ 1335.496329][T27103] ? kernfs_create_link+0x1bd/0x240 [ 1335.496364][T27103] internal_create_groups+0x9d/0x150 [ 1335.496415][T27103] device_add+0xf33/0x1a70 [ 1335.496458][T27103] ? __pfx_device_add+0x10/0x10 [ 1335.496501][T27103] ? __init_waitqueue_head+0xca/0x150 [ 1335.496540][T27103] netdev_register_kobject+0x183/0x3a0 [ 1335.496584][T27103] register_netdevice+0x147b/0x1eb0 [ 1335.496634][T27103] ? __pfx_register_netdevice+0x10/0x10 [ 1335.496690][T27103] internal_dev_create+0x2d3/0x520 [ 1335.496727][T27103] ovs_vport_add+0x144/0x4d0 [ 1335.496761][T27103] new_vport+0x16/0x1d0 [ 1335.496802][T27103] ovs_dp_cmd_new+0x6b0/0xe50 [ 1335.496855][T27103] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1335.496909][T27103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1335.496953][T27103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1335.497006][T27103] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1335.497050][T27103] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1335.497091][T27103] ? trace_cap_capable+0x1a2/0x210 [ 1335.497130][T27103] ? bpf_lsm_capable+0x9/0x10 [ 1335.497160][T27103] ? security_capable+0x7e/0x260 [ 1335.497208][T27103] ? ns_capable+0xd7/0x110 [ 1335.497252][T27103] genl_rcv_msg+0x565/0x800 [ 1335.497296][T27103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.497340][T27103] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1335.497405][T27103] netlink_rcv_skb+0x16b/0x440 [ 1335.497442][T27103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1335.497485][T27103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1335.497535][T27103] ? down_read+0xc9/0x330 [ 1335.497571][T27103] ? __pfx_down_read+0x10/0x10 [ 1335.497608][T27103] ? netlink_deliver_tap+0x1ae/0xd30 [ 1335.497648][T27103] genl_rcv+0x28/0x40 [ 1335.497682][T27103] netlink_unicast+0x53c/0x7f0 [ 1335.497721][T27103] ? __pfx_netlink_unicast+0x10/0x10 [ 1335.497756][T27103] ? __phys_addr_symbol+0x30/0x80 [ 1335.497785][T27103] ? __check_object_size+0x488/0x710 [ 1335.497817][T27103] netlink_sendmsg+0x8b8/0xd70 [ 1335.497860][T27103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1335.497910][T27103] ____sys_sendmsg+0xaaf/0xc90 [ 1335.497956][T27103] ? copy_msghdr_from_user+0x10b/0x160 [ 1335.497997][T27103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1335.498046][T27103] ___sys_sendmsg+0x135/0x1e0 [ 1335.498089][T27103] ? __pfx____sys_sendmsg+0x10/0x10 [ 1335.498154][T27103] ? __pfx_lock_release+0x10/0x10 [ 1335.498192][T27103] ? trace_lock_acquire+0x14e/0x1f0 [ 1335.498257][T27103] ? __fget_files+0x206/0x3a0 [ 1335.498311][T27103] __sys_sendmsg+0x16e/0x220 [ 1335.498352][T27103] ? __pfx___sys_sendmsg+0x10/0x10 [ 1335.498394][T27103] ? __x64_sys_futex+0x1e1/0x4c0 [ 1335.498461][T27103] do_syscall_64+0xcd/0x250 [ 1335.498501][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.498544][T27103] RIP: 0033:0x7fd77cb8cde9 [ 1335.498567][T27103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1335.498597][T27103] RSP: 002b:00007fd77dab8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1335.498625][T27103] RAX: ffffffffffffffda RBX: 00007fd77cda5fa0 RCX: 00007fd77cb8cde9 [ 1335.498644][T27103] RDX: 0000000002000000 RSI: 0000400000000080 RDI: 0000000000000006 [ 1335.498662][T27103] RBP: 00007fd77cc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.498680][T27103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.498697][T27103] R13: 0000000000000000 R14: 00007fd77cda5fa0 R15: 00007ffc19a69988 [ 1335.498736][T27103] [ 1336.027828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.497941][T27105] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1337.567499][T27122] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1337.654544][T27094] nfs4: Unknown parameter 'nfsd' [ 1337.654913][T27126] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1337.701311][T27127] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1338.336971][T27141] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1338.399088][T27140] FAULT_INJECTION: forcing a failure. [ 1338.399088][T27140] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.434777][T27140] CPU: 1 UID: 0 PID: 27140 Comm: syz.3.6541 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1338.434823][T27140] Tainted: [U]=USER [ 1338.434833][T27140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1338.434850][T27140] Call Trace: [ 1338.434859][T27140] [ 1338.434869][T27140] dump_stack_lvl+0x16c/0x1f0 [ 1338.434911][T27140] should_fail_ex+0x50a/0x650 [ 1338.434955][T27140] ? fs_reclaim_acquire+0xae/0x150 [ 1338.434994][T27140] ? constrain_params_by_rules+0x176/0xca0 [ 1338.435025][T27140] should_failslab+0xc2/0x120 [ 1338.435071][T27140] __kmalloc_noprof+0xcb/0x510 [ 1338.435112][T27140] ? kasan_quarantine_put+0x10a/0x240 [ 1338.435158][T27140] ? lockdep_hardirqs_on+0x7c/0x110 [ 1338.435200][T27140] constrain_params_by_rules+0x176/0xca0 [ 1338.435231][T27140] ? constrain_params_by_rules+0xa0e/0xca0 [ 1338.435269][T27140] ? constrain_params_by_rules+0xa13/0xca0 [ 1338.435305][T27140] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1338.435344][T27140] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1338.435375][T27140] ? lock_acquire.part.0+0x11b/0x380 [ 1338.435436][T27140] snd_pcm_hw_refine+0x7e8/0xad0 [ 1338.435473][T27140] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1338.435512][T27140] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1338.435548][T27140] ? __pfx_lock_release+0x10/0x10 [ 1338.435586][T27140] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1338.435620][T27140] snd_pcm_hw_param_first+0x328/0x6e0 [ 1338.435651][T27140] ? trace_hw_mask_param+0x19e/0x210 [ 1338.435700][T27140] snd_pcm_hw_params+0x5b2/0x1b20 [ 1338.435741][T27140] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1338.435778][T27140] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 1338.435813][T27140] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1338.435852][T27140] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1338.435889][T27140] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 1338.435934][T27140] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1338.435967][T27140] ? __pfx___mutex_lock+0x10/0x10 [ 1338.436023][T27140] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1338.436054][T27140] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1338.436086][T27140] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1338.436115][T27140] snd_pcm_oss_release+0x28b/0x310 [ 1338.436156][T27140] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1338.436183][T27140] __fput+0x3ff/0xb70 [ 1338.436219][T27140] task_work_run+0x14e/0x250 [ 1338.436256][T27140] ? __pfx_task_work_run+0x10/0x10 [ 1338.436295][T27140] ? __pfx___do_sys_close_range+0x10/0x10 [ 1338.436346][T27140] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1338.436379][T27140] do_syscall_64+0xda/0x250 [ 1338.436413][T27140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.436452][T27140] RIP: 0033:0x7f2d1f78cde9 [ 1338.436475][T27140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.436505][T27140] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1338.436530][T27140] RAX: 0000000000000000 RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1338.436549][T27140] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1338.436566][T27140] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.436582][T27140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.436600][T27140] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1338.436635][T27140] [ 1338.849391][T27143] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1338.947696][T27147] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 1339.036990][T27149] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1340.002372][T27164] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1340.507543][T27168] usbip-vudc usbip-vudc.0: gadget not bound [ 1341.136276][T27175] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1341.174563][T27176] FAULT_INJECTION: forcing a failure. [ 1341.174563][T27176] name failslab, interval 1, probability 0, space 0, times 0 can't run '/sbi[ 1341.255924][T27176] CPU: 0 UID: 0 PID: 27176 Comm: syz.3.6548 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1341.255968][T27176] Tainted: [U]=USER [ 1341.255977][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1341.255993][T27176] Call Trace: [ 1341.256001][T27176] [ 1341.256030][T27176] dump_stack_lvl+0x16c/0x1f0 [ 1341.256072][T27176] should_fail_ex+0x50a/0x650 [ 1341.256120][T27176] ? fs_reclaim_acquire+0xae/0x150 [ 1341.256173][T27176] should_failslab+0xc2/0x120 [ 1341.256217][T27176] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1341.256262][T27176] ? __kernfs_new_node+0xd3/0x890 [ 1341.256308][T27176] __kernfs_new_node+0xd3/0x890 [ 1341.256350][T27176] ? __pfx___kernfs_new_node+0x10/0x10 [ 1341.256389][T27176] ? __pfx___lock_acquire+0x10/0x10 [ 1341.256435][T27176] ? lock_acquire.part.0+0x11b/0x380 [ 1341.256475][T27176] ? find_held_lock+0x2d/0x110 [ 1341.256516][T27176] kernfs_new_node+0x186/0x240 [ 1341.256567][T27176] kernfs_create_link+0xcc/0x240 [ 1341.256600][T27176] sysfs_do_create_link_sd+0x90/0x140 [ 1341.256640][T27176] sysfs_create_link+0x61/0xc0 [ 1341.256677][T27176] device_add+0x50c/0x1a70 [ 1341.256720][T27176] ? __pfx_device_add+0x10/0x10 [ 1341.256757][T27176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1341.256803][T27176] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1341.256843][T27176] wiphy_register+0x1cab/0x2860 [ 1341.256879][T27176] ? __pfx__dev_printk+0x10/0x10 [ 1341.256922][T27176] ? __pfx_wiphy_register+0x10/0x10 [ 1341.256976][T27176] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1341.257018][T27176] ieee80211_register_hw+0x2455/0x4060 [ 1341.257081][T27176] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1341.257136][T27176] ? net_generic+0xea/0x2a0 [ 1341.257192][T27176] ? lockdep_init_map_type+0x16d/0x7d0 [ 1341.257245][T27176] ? __asan_memset+0x23/0x50 [ 1341.257307][T27176] ? __hrtimer_init+0x106/0x2c0 [ 1341.257363][T27176] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1341.257435][T27176] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1341.257495][T27176] hwsim_new_radio_nl+0xb42/0x12b0 [ 1341.257543][T27176] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1341.257601][T27176] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1341.257653][T27176] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1341.257714][T27176] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1341.257778][T27176] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1341.257828][T27176] ? trace_cap_capable+0x1a2/0x210 [ 1341.257875][T27176] ? bpf_lsm_capable+0x9/0x10 [ 1341.257910][T27176] ? security_capable+0x7e/0x260 [ 1341.257977][T27176] ? ns_capable+0xd7/0x110 [ 1341.258031][T27176] genl_rcv_msg+0x565/0x800 [ 1341.258085][T27176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.258134][T27176] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1341.258195][T27176] netlink_rcv_skb+0x16b/0x440 [ 1341.258237][T27176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.258287][T27176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1341.258349][T27176] ? down_read+0xc9/0x330 [ 1341.258401][T27176] ? __pfx_down_read+0x10/0x10 [ 1341.258444][T27176] ? netlink_deliver_tap+0x1ae/0xd30 [ 1341.258501][T27176] genl_rcv+0x28/0x40 [ 1341.258538][T27176] netlink_unicast+0x53c/0x7f0 [ 1341.258581][T27176] ? __pfx_netlink_unicast+0x10/0x10 [ 1341.258621][T27176] ? __phys_addr_symbol+0x30/0x80 [ 1341.258652][T27176] ? __check_object_size+0x488/0x710 [ 1341.258688][T27176] netlink_sendmsg+0x8b8/0xd70 [ 1341.258734][T27176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.258790][T27176] ____sys_sendmsg+0xaaf/0xc90 [ 1341.258822][T27176] ? copy_msghdr_from_user+0x10b/0x160 [ 1341.258863][T27176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.258914][T27176] ___sys_sendmsg+0x135/0x1e0 [ 1341.258978][T27176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.259039][T27176] ? __pfx_lock_release+0x10/0x10 [ 1341.259080][T27176] ? trace_lock_acquire+0x14e/0x1f0 [ 1341.259140][T27176] ? __fget_files+0x206/0x3a0 [ 1341.259190][T27176] __sys_sendmsg+0x16e/0x220 [ 1341.259230][T27176] ? __pfx___sys_sendmsg+0x10/0x10 [ 1341.259270][T27176] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1341.259355][T27176] do_syscall_64+0xcd/0x250 [ 1341.259395][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.259437][T27176] RIP: 0033:0x7f2d1f78cde9 [ 1341.259462][T27176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.259491][T27176] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1341.259520][T27176] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1341.259539][T27176] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1341.259558][T27176] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.259575][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.259593][T27176] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1341.259631][T27176] [ 1342.241686][T27179] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1342.681176][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6551'. [ 1343.380834][T27198] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1344.461908][T27216] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbin/getty': Struct[ 1344.541710][T27218] FAULT_INJECTION: forcing a failure. [ 1344.541710][T27218] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.648621][T27218] CPU: 1 UID: 0 PID: 27218 Comm: syz.5.6560 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1344.648664][T27218] Tainted: [U]=USER [ 1344.648674][T27218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1344.648691][T27218] Call Trace: [ 1344.648699][T27218] [ 1344.648711][T27218] dump_stack_lvl+0x16c/0x1f0 [ 1344.648750][T27218] should_fail_ex+0x50a/0x650 [ 1344.648795][T27218] ? fs_reclaim_acquire+0xae/0x150 [ 1344.648835][T27218] should_failslab+0xc2/0x120 [ 1344.648882][T27218] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1344.648927][T27218] ? __kernfs_new_node+0xd3/0x890 [ 1344.648971][T27218] __kernfs_new_node+0xd3/0x890 [ 1344.649014][T27218] ? __pfx___kernfs_new_node+0x10/0x10 [ 1344.649052][T27218] ? __pfx_lock_release+0x10/0x10 [ 1344.649092][T27218] ? kernfs_add_one+0x39d/0x520 [ 1344.649146][T27218] ? up_write+0x1b2/0x520 [ 1344.649194][T27218] kernfs_new_node+0x186/0x240 [ 1344.649244][T27218] __kernfs_create_file+0x53/0x350 [ 1344.649279][T27218] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1344.649333][T27218] internal_create_group+0x56c/0xf10 [ 1344.649383][T27218] ? __pfx_internal_create_group+0x10/0x10 [ 1344.649430][T27218] ? kernfs_create_link+0x1bd/0x240 [ 1344.649468][T27218] internal_create_groups+0x9d/0x150 [ 1344.649510][T27218] device_add+0xf33/0x1a70 [ 1344.649551][T27218] ? __pfx_device_add+0x10/0x10 [ 1344.649592][T27218] ? __init_waitqueue_head+0xca/0x150 [ 1344.649630][T27218] netdev_register_kobject+0x183/0x3a0 [ 1344.649679][T27218] register_netdevice+0x147b/0x1eb0 [ 1344.649729][T27218] ? __pfx_register_netdevice+0x10/0x10 [ 1344.649782][T27218] internal_dev_create+0x2d3/0x520 [ 1344.649819][T27218] ovs_vport_add+0x144/0x4d0 [ 1344.649852][T27218] new_vport+0x16/0x1d0 [ 1344.649894][T27218] ovs_dp_cmd_new+0x6b0/0xe50 [ 1344.649950][T27218] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1344.650004][T27218] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1344.650049][T27218] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1344.650101][T27218] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1344.650145][T27218] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1344.650185][T27218] ? trace_cap_capable+0x1a2/0x210 [ 1344.650224][T27218] ? bpf_lsm_capable+0x9/0x10 [ 1344.650253][T27218] ? security_capable+0x7e/0x260 [ 1344.650300][T27218] ? ns_capable+0xd7/0x110 [ 1344.650355][T27218] genl_rcv_msg+0x565/0x800 [ 1344.650398][T27218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.650438][T27218] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1344.650495][T27218] netlink_rcv_skb+0x16b/0x440 [ 1344.650531][T27218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.650595][T27218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1344.650657][T27218] ? down_read+0xc9/0x330 [ 1344.650699][T27218] ? __pfx_down_read+0x10/0x10 [ 1344.650751][T27218] ? netlink_deliver_tap+0x1ae/0xd30 [ 1344.650798][T27218] genl_rcv+0x28/0x40 [ 1344.650839][T27218] netlink_unicast+0x53c/0x7f0 [ 1344.650887][T27218] ? __pfx_netlink_unicast+0x10/0x10 [ 1344.650931][T27218] ? __phys_addr_symbol+0x30/0x80 [ 1344.650963][T27218] ? __check_object_size+0x488/0x710 [ 1344.651003][T27218] netlink_sendmsg+0x8b8/0xd70 [ 1344.651054][T27218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.651114][T27218] ____sys_sendmsg+0xaaf/0xc90 [ 1344.651149][T27218] ? copy_msghdr_from_user+0x10b/0x160 [ 1344.651196][T27218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.651250][T27218] ___sys_sendmsg+0x135/0x1e0 [ 1344.651300][T27218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.651376][T27218] ? __pfx_lock_release+0x10/0x10 [ 1344.651420][T27218] ? trace_lock_acquire+0x14e/0x1f0 [ 1344.651474][T27218] ? __fget_files+0x206/0x3a0 [ 1344.651534][T27218] __sys_sendmsg+0x16e/0x220 [ 1344.651581][T27218] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.651627][T27218] ? __x64_sys_futex+0x1e1/0x4c0 [ 1344.651694][T27218] do_syscall_64+0xcd/0x250 [ 1344.651738][T27218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.651783][T27218] RIP: 0033:0x7f83aef8cde9 [ 1344.651810][T27218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.651843][T27218] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.651875][T27218] RAX: ffffffffffffffda RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1344.651897][T27218] RDX: 0000000002000000 RSI: 0000400000000080 RDI: 0000000000000006 [ 1344.651918][T27218] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.651938][T27218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.651957][T27218] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1344.652000][T27218] [ 1345.184899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1345.759581][T27224] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1346.282862][T27234] FAULT_INJECTION: forcing a failure. [ 1346.282862][T27234] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.454081][T27234] CPU: 1 UID: 0 PID: 27234 Comm: syz.5.6565 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1346.454129][T27234] Tainted: [U]=USER [ 1346.454140][T27234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1346.454157][T27234] Call Trace: [ 1346.454167][T27234] [ 1346.454178][T27234] dump_stack_lvl+0x16c/0x1f0 [ 1346.454229][T27234] should_fail_ex+0x50a/0x650 [ 1346.454274][T27234] ? fs_reclaim_acquire+0xae/0x150 [ 1346.454313][T27234] ? snd_pcm_plugin_build+0x64/0x650 [ 1346.454346][T27234] should_failslab+0xc2/0x120 [ 1346.454394][T27234] __kmalloc_noprof+0xcb/0x510 [ 1346.454443][T27234] snd_pcm_plugin_build+0x64/0x650 [ 1346.454481][T27234] snd_pcm_plugin_build_mulaw+0x281/0x7a0 [ 1346.454519][T27234] ? __pfx_mulaw_encode+0x10/0x10 [ 1346.454566][T27234] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 1346.454608][T27234] ? snd_pcm_hw_params+0xce/0x1b20 [ 1346.454651][T27234] snd_pcm_plug_format_plugins+0xbeb/0x1440 [ 1346.454690][T27234] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 1346.454729][T27234] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1346.454772][T27234] snd_pcm_oss_change_params_locked+0x2e95/0x3a60 [ 1346.454816][T27234] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1346.454851][T27234] ? __pfx___mutex_lock+0x10/0x10 [ 1346.454905][T27234] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1346.454937][T27234] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1346.454971][T27234] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1346.455002][T27234] snd_pcm_oss_release+0x28b/0x310 [ 1346.455034][T27234] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1346.455064][T27234] __fput+0x3ff/0xb70 [ 1346.455100][T27234] task_work_run+0x14e/0x250 [ 1346.455140][T27234] ? __pfx_task_work_run+0x10/0x10 [ 1346.455180][T27234] ? __pfx___do_sys_close_range+0x10/0x10 [ 1346.455241][T27234] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1346.455277][T27234] do_syscall_64+0xda/0x250 [ 1346.455314][T27234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.455355][T27234] RIP: 0033:0x7f83aef8cde9 [ 1346.455378][T27234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.455406][T27234] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1346.455435][T27234] RAX: 0000000000000000 RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1346.455454][T27234] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1346.455471][T27234] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.455488][T27234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1346.455504][T27234] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1346.455539][T27234] [ 1346.771205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.890754][T27236] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1347.676360][T27246] FAULT_INJECTION: forcing a failure. [ 1347.676360][T27246] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.775982][T27246] CPU: 1 UID: 0 PID: 27246 Comm: syz.5.6570 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1347.776027][T27246] Tainted: [U]=USER [ 1347.776037][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1347.776061][T27246] Call Trace: [ 1347.776069][T27246] [ 1347.776080][T27246] dump_stack_lvl+0x16c/0x1f0 [ 1347.776118][T27246] should_fail_ex+0x50a/0x650 [ 1347.776161][T27246] ? fs_reclaim_acquire+0xae/0x150 [ 1347.776200][T27246] ? snd_pcm_oss_change_params_locked+0x20c/0x3a60 [ 1347.776231][T27246] should_failslab+0xc2/0x120 [ 1347.776276][T27246] __kmalloc_cache_noprof+0x68/0x410 [ 1347.776324][T27246] snd_pcm_oss_change_params_locked+0x20c/0x3a60 [ 1347.776356][T27246] ? rcu_is_watching+0x12/0xc0 [ 1347.776386][T27246] ? trace_contention_end+0xee/0x140 [ 1347.776430][T27246] ? __mutex_lock+0x1cc/0xb10 [ 1347.776466][T27246] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1347.776500][T27246] ? __pfx___mutex_lock+0x10/0x10 [ 1347.776541][T27246] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1347.776588][T27246] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1347.776620][T27246] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1347.776653][T27246] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1347.776683][T27246] snd_pcm_oss_release+0x28b/0x310 [ 1347.776714][T27246] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1347.776743][T27246] __fput+0x3ff/0xb70 [ 1347.776779][T27246] task_work_run+0x14e/0x250 [ 1347.776817][T27246] ? __pfx_task_work_run+0x10/0x10 [ 1347.776856][T27246] ? __pfx___do_sys_close_range+0x10/0x10 [ 1347.776905][T27246] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1347.776940][T27246] do_syscall_64+0xda/0x250 [ 1347.776976][T27246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.777016][T27246] RIP: 0033:0x7f83aef8cde9 [ 1347.777037][T27246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.777071][T27246] RSP: 002b:00007f83acdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1347.777098][T27246] RAX: 0000000000000000 RBX: 00007f83af1a5fa0 RCX: 00007f83aef8cde9 [ 1347.777116][T27246] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1347.777132][T27246] RBP: 00007f83af00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.777149][T27246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.777165][T27246] R13: 0000000000000000 R14: 00007f83af1a5fa0 R15: 00007ffce05ae928 [ 1347.777199][T27246] [ 1348.072214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1348.098258][T27250] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1349.181999][T27265] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1349.537507][T27273] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1350.251089][T27280] FAULT_INJECTION: forcing a failure. [ 1350.251089][T27280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.295018][T27284] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1350.335956][T27280] CPU: 0 UID: 0 PID: 27280 Comm: syz.0.6579 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1350.335998][T27280] Tainted: [U]=USER [ 1350.336025][T27280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1350.336042][T27280] Call Trace: [ 1350.336051][T27280] [ 1350.336066][T27280] dump_stack_lvl+0x16c/0x1f0 [ 1350.336106][T27280] should_fail_ex+0x50a/0x650 [ 1350.336157][T27280] _copy_to_user+0x32/0xd0 [ 1350.336189][T27280] simple_read_from_buffer+0xd0/0x160 [ 1350.336230][T27280] proc_fail_nth_read+0x198/0x270 [ 1350.336266][T27280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.336304][T27280] ? rw_verify_area+0xcf/0x680 [ 1350.336339][T27280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.336373][T27280] vfs_read+0x1df/0xbf0 [ 1350.336411][T27280] ? __fget_files+0x1fc/0x3a0 [ 1350.336454][T27280] ? __pfx___mutex_lock+0x10/0x10 [ 1350.336489][T27280] ? __pfx_vfs_read+0x10/0x10 [ 1350.336537][T27280] ? __fget_files+0x206/0x3a0 [ 1350.336588][T27280] ksys_read+0x12b/0x250 [ 1350.336628][T27280] ? __pfx_ksys_read+0x10/0x10 [ 1350.336666][T27280] ? syscall_user_dispatch+0x7a/0x130 [ 1350.336724][T27280] do_syscall_64+0xcd/0x250 [ 1350.336762][T27280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.336803][T27280] RIP: 0033:0x7fd77cb8b7fc [ 1350.336835][T27280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1350.336865][T27280] RSP: 002b:00007fd77dab8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1350.336892][T27280] RAX: ffffffffffffffda RBX: 00007fd77cda5fa0 RCX: 00007fd77cb8b7fc [ 1350.336912][T27280] RDX: 000000000000000f RSI: 00007fd77dab80a0 RDI: 0000000000000003 [ 1350.336931][T27280] RBP: 00007fd77dab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.336949][T27280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.336967][T27280] R13: 0000000000000000 R14: 00007fd77cda5fa0 R15: 00007ffc19a69988 [ 1350.337005][T27280] [ 1351.364967][T27298] FAULT_INJECTION: forcing a failure. [ 1351.364967][T27298] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.392055][T27301] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr can't run '/sbi[ 1351.466499][T27298] CPU: 0 UID: 0 PID: 27298 Comm: syz.6.6585 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1351.466544][T27298] Tainted: [U]=USER [ 1351.466554][T27298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1351.466570][T27298] Call Trace: [ 1351.466579][T27298] [ 1351.466589][T27298] dump_stack_lvl+0x16c/0x1f0 [ 1351.466626][T27298] should_fail_ex+0x50a/0x650 [ 1351.466670][T27298] ? fs_reclaim_acquire+0xae/0x150 [ 1351.466705][T27298] ? snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 1351.466736][T27298] should_failslab+0xc2/0x120 [ 1351.466782][T27298] __kmalloc_cache_noprof+0x68/0x410 [ 1351.466820][T27298] ? snd_pcm_hw_param_first+0x301/0x6e0 [ 1351.466848][T27298] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 1351.466884][T27298] snd_pcm_hw_param_near.constprop.0+0xbe/0x8f0 [ 1351.466917][T27298] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1351.466948][T27298] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1351.466994][T27298] snd_pcm_oss_change_params_locked+0x13cd/0x3a60 [ 1351.467039][T27298] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1351.467071][T27298] ? __pfx___mutex_lock+0x10/0x10 [ 1351.467126][T27298] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 1351.467159][T27298] snd_pcm_oss_sync+0x1d7/0x7f0 [ 1351.467193][T27298] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1351.467224][T27298] snd_pcm_oss_release+0x28b/0x310 [ 1351.467256][T27298] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1351.467286][T27298] __fput+0x3ff/0xb70 [ 1351.467322][T27298] task_work_run+0x14e/0x250 [ 1351.467362][T27298] ? __pfx_task_work_run+0x10/0x10 [ 1351.467401][T27298] ? __pfx___do_sys_close_range+0x10/0x10 [ 1351.467453][T27298] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1351.467487][T27298] do_syscall_64+0xda/0x250 [ 1351.467523][T27298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.467563][T27298] RIP: 0033:0x7fcc4898cde9 [ 1351.467586][T27298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.467613][T27298] RSP: 002b:00007fcc497c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1351.467640][T27298] RAX: 0000000000000000 RBX: 00007fcc48ba5fa0 RCX: 00007fcc4898cde9 [ 1351.467658][T27298] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1351.467675][T27298] RBP: 00007fcc48a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.467690][T27298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.467705][T27298] R13: 0000000000000000 R14: 00007fcc48ba5fa0 R15: 00007ffcd55cbe98 [ 1351.467739][T27298] [ 1352.246101][T27313] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1352.317387][T27316] FAULT_INJECTION: forcing a failure. [ 1352.317387][T27316] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.363590][T27316] CPU: 1 UID: 0 PID: 27316 Comm: syz.6.6589 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1352.363633][T27316] Tainted: [U]=USER [ 1352.363644][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1352.363661][T27316] Call Trace: [ 1352.363670][T27316] [ 1352.363681][T27316] dump_stack_lvl+0x16c/0x1f0 [ 1352.363719][T27316] should_fail_ex+0x50a/0x650 [ 1352.363762][T27316] ? fs_reclaim_acquire+0xae/0x150 [ 1352.363802][T27316] should_failslab+0xc2/0x120 [ 1352.363846][T27316] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1352.363898][T27316] ? __kernfs_new_node+0xd3/0x890 [ 1352.363944][T27316] __kernfs_new_node+0xd3/0x890 [ 1352.363988][T27316] ? __pfx___kernfs_new_node+0x10/0x10 [ 1352.364045][T27316] ? __pfx___lock_acquire+0x10/0x10 [ 1352.364091][T27316] kernfs_new_node+0x186/0x240 [ 1352.364139][T27316] __kernfs_create_file+0x53/0x350 [ 1352.364173][T27316] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1352.364217][T27316] sysfs_create_file_ns+0x13e/0x1d0 [ 1352.364252][T27316] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1352.364285][T27316] ? down_read+0xc9/0x330 [ 1352.364319][T27316] ? __pfx___up_read+0x10/0x10 [ 1352.364363][T27316] ? kobject_put+0xab/0x5a0 [ 1352.364403][T27316] device_create_file+0xf2/0x1e0 [ 1352.364442][T27316] device_add+0x2c0/0x1a70 [ 1352.364476][T27316] ? __pfx_device_add+0x10/0x10 [ 1352.364506][T27316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1352.364545][T27316] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 1352.364584][T27316] wiphy_register+0x1cab/0x2860 [ 1352.364622][T27316] ? __pfx__dev_printk+0x10/0x10 [ 1352.364656][T27316] ? __pfx_wiphy_register+0x10/0x10 [ 1352.364703][T27316] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1352.364743][T27316] ieee80211_register_hw+0x2455/0x4060 [ 1352.364784][T27316] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1352.364814][T27316] ? net_generic+0xea/0x2a0 [ 1352.364843][T27316] ? lockdep_init_map_type+0x16d/0x7d0 [ 1352.364894][T27316] ? __asan_memset+0x23/0x50 [ 1352.364928][T27316] ? __hrtimer_init+0x106/0x2c0 [ 1352.364971][T27316] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1352.365022][T27316] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1352.365069][T27316] hwsim_new_radio_nl+0xb42/0x12b0 [ 1352.365112][T27316] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1352.365162][T27316] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1352.365207][T27316] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1352.365258][T27316] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1352.365301][T27316] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1352.365341][T27316] ? trace_cap_capable+0x1a2/0x210 [ 1352.365381][T27316] ? bpf_lsm_capable+0x9/0x10 [ 1352.365410][T27316] ? security_capable+0x7e/0x260 [ 1352.365458][T27316] ? ns_capable+0xd7/0x110 [ 1352.365502][T27316] genl_rcv_msg+0x565/0x800 [ 1352.365547][T27316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1352.365588][T27316] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1352.365638][T27316] netlink_rcv_skb+0x16b/0x440 [ 1352.365673][T27316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1352.365716][T27316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1352.365769][T27316] ? down_read+0xc9/0x330 [ 1352.365803][T27316] ? __pfx_down_read+0x10/0x10 [ 1352.365839][T27316] ? netlink_deliver_tap+0x1ae/0xd30 [ 1352.365884][T27316] genl_rcv+0x28/0x40 [ 1352.365919][T27316] netlink_unicast+0x53c/0x7f0 [ 1352.365960][T27316] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.365996][T27316] ? __phys_addr_symbol+0x30/0x80 [ 1352.366024][T27316] ? __check_object_size+0x488/0x710 [ 1352.366057][T27316] netlink_sendmsg+0x8b8/0xd70 [ 1352.366100][T27316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.366150][T27316] ____sys_sendmsg+0xaaf/0xc90 [ 1352.366180][T27316] ? copy_msghdr_from_user+0x10b/0x160 [ 1352.366219][T27316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.366266][T27316] ___sys_sendmsg+0x135/0x1e0 [ 1352.366309][T27316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.366365][T27316] ? __pfx_lock_release+0x10/0x10 [ 1352.366404][T27316] ? trace_lock_acquire+0x14e/0x1f0 [ 1352.366451][T27316] ? __fget_files+0x206/0x3a0 [ 1352.366504][T27316] __sys_sendmsg+0x16e/0x220 [ 1352.366544][T27316] ? __pfx___sys_sendmsg+0x10/0x10 [ 1352.366584][T27316] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1352.366651][T27316] do_syscall_64+0xcd/0x250 [ 1352.366688][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.366729][T27316] RIP: 0033:0x7fcc4898cde9 [ 1352.366753][T27316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.366782][T27316] RSP: 002b:00007fcc497c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.366809][T27316] RAX: ffffffffffffffda RBX: 00007fcc48ba5fa0 RCX: 00007fcc4898cde9 [ 1352.366828][T27316] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000005 [ 1352.366846][T27316] RBP: 00007fcc48a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.366863][T27316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.366887][T27316] R13: 0000000000000000 R14: 00007fcc48ba5fa0 R15: 00007ffcd55cbe98 [ 1352.366926][T27316] [ 1353.377440][T27319] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1353.436913][T27320] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1353.466999][T27304] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) can't run '/sbi[ 1353.574136][T27316] Process accounting resumed [ 1353.767502][T27324] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1353.965222][ T29] audit: type=1800 audit(4294967959.845:22): pid=27326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=6C202D7F name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1353.990277][T27329] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:20: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1354.298115][T27338] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:21: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1354.366105][T27337] ================================================================== [ 1354.375807][T27337] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1354.385094][T27337] Read of size 8 at addr ffff8881432c1018 by task syz.3.6594/27337 [ 1354.394575][T27337] [ 1354.397374][T27337] CPU: 1 UID: 0 PID: 27337 Comm: syz.3.6594 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1354.397416][T27337] Tainted: [U]=USER [ 1354.397427][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1354.397445][T27337] Call Trace: [ 1354.397455][T27337] [ 1354.397466][T27337] dump_stack_lvl+0x116/0x1f0 [ 1354.397505][T27337] print_report+0xc3/0x620 [ 1354.397550][T27337] ? __virt_addr_valid+0x5e/0x590 [ 1354.397579][T27337] ? __phys_addr+0xc6/0x150 [ 1354.397608][T27337] kasan_report+0xd9/0x110 [ 1354.397651][T27337] ? dvb_device_open+0x36a/0x3b0 [ 1354.397684][T27337] ? dvb_device_open+0x36a/0x3b0 [ 1354.397725][T27337] ? __pfx_dvb_device_open+0x10/0x10 [ 1354.397758][T27337] dvb_device_open+0x36a/0x3b0 [ 1354.397801][T27337] ? __pfx_dvb_device_open+0x10/0x10 [ 1354.397834][T27337] chrdev_open+0x237/0x6a0 [ 1354.397876][T27337] ? __pfx_apparmor_file_open+0x10/0x10 [ 1354.397911][T27337] ? __pfx_chrdev_open+0x10/0x10 [ 1354.397956][T27337] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1354.397998][T27337] do_dentry_open+0x735/0x1c40 [ 1354.398038][T27337] ? __pfx_chrdev_open+0x10/0x10 [ 1354.398082][T27337] ? inode_permission+0xdd/0x5f0 [ 1354.398115][T27337] vfs_open+0x82/0x3f0 [ 1354.398141][T27337] ? may_open+0x1f2/0x400 [ 1354.398173][T27337] path_openat+0x1e88/0x2d80 [ 1354.398218][T27337] ? __pfx_path_openat+0x10/0x10 [ 1354.398259][T27337] ? __pfx___lock_acquire+0x10/0x10 [ 1354.398299][T27337] ? lock_acquire.part.0+0x11b/0x380 [ 1354.398337][T27337] ? find_held_lock+0x2d/0x110 [ 1354.398369][T27337] do_filp_open+0x20c/0x470 [ 1354.398410][T27337] ? __pfx_do_filp_open+0x10/0x10 [ 1354.398450][T27337] ? find_held_lock+0x2d/0x110 [ 1354.398490][T27337] ? alloc_fd+0x41f/0x760 [ 1354.398533][T27337] do_sys_openat2+0x17a/0x1e0 can't run '/sbi[ 1354.398562][T27337] ? __pfx_do_sys_openat2+0x10/0x10 n/getty': Struct[ 1354.398591][T27337] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.398621][T27337] ? __pfx___might_resched+0x10/0x10 ure needs cleani[ 1354.398669][T27337] __x64_sys_openat+0x175/0x210 ng [ 1354.398715][T27337] ? __pfx___x64_sys_openat+0x10/0x10 [ 1354.398753][T27337] do_syscall_64+0xcd/0x250 [ 1354.398787][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.398828][T27337] RIP: 0033:0x7f2d1f78cde9 [ 1354.398851][T27337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1354.398879][T27337] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1354.398906][T27337] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1354.398926][T27337] RDX: 0000000000000001 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 1354.398944][T27337] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.398961][T27337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.398978][T27337] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1354.399004][T27337] [ 1354.399014][T27337] [ 1354.545702][T27340] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1217: comm init: corrupted in-inode xattr: bad magic number in in-inode xattr [ 1354.548956][T27337] Allocated by task 1: [ 1354.548973][T27337] kasan_save_stack+0x33/0x60 [ 1354.549020][T27337] kasan_save_track+0x14/0x30 [ 1354.781697][T27337] __kasan_kmalloc+0xaa/0xb0 [ 1354.787251][T27337] dvb_register_device+0x1d8/0x2310 [ 1354.793486][T27337] dvb_register_frontend+0x5a7/0x880 [ 1354.799820][T27337] vidtv_bridge_probe+0x45e/0xa90 [ 1354.805841][T27337] platform_probe+0xff/0x1f0 [ 1354.811386][T27337] really_probe+0x23e/0xa90 [ 1354.816898][T27337] __driver_probe_device+0x1de/0x440 [ 1354.823232][T27337] driver_probe_device+0x4c/0x1b0 [ 1354.829254][T27337] __driver_attach+0x283/0x580 [ 1354.834962][T27337] bus_for_each_dev+0x13c/0x1d0 [ 1354.840791][T27337] bus_add_driver+0x2e9/0x690 [ 1354.846400][T27337] driver_register+0x15c/0x4b0 [ 1354.852127][T27337] vidtv_bridge_init+0x45/0x80 [ 1354.857850][T27337] do_one_initcall+0x128/0x700 [ 1354.863558][T27337] kernel_init_freeable+0x5c7/0x900 [ 1354.869801][T27337] kernel_init+0x1c/0x2b0 [ 1354.874997][T27337] ret_from_fork+0x45/0x80 [ 1354.880295][T27337] ret_from_fork_asm+0x1a/0x30 [ 1354.886033][T27337] [ 1354.888812][T27337] Freed by task 27304: [ 1354.893691][T27337] kasan_save_stack+0x33/0x60 [ 1354.899321][T27337] kasan_save_track+0x14/0x30 [ 1354.904938][T27337] kasan_save_free_info+0x3b/0x60 [ 1354.910967][T27337] __kasan_slab_free+0x51/0x70 [ 1354.916698][T27337] kfree+0x2c4/0x4d0 [ 1354.921376][T27337] dvb_device_put.part.0+0x60/0x90 [ 1354.927509][T27337] dvb_device_open+0x2a4/0x3b0 [ 1354.933218][T27337] chrdev_open+0x237/0x6a0 [ 1354.938525][T27337] do_dentry_open+0x735/0x1c40 [ 1354.944251][T27337] vfs_open+0x82/0x3f0 [ 1354.949123][T27337] path_openat+0x1e88/0x2d80 [ 1354.954651][T27337] do_filp_open+0x20c/0x470 [ 1354.960054][T27337] do_sys_openat2+0x17a/0x1e0 [ 1354.965677][T27337] __x64_sys_openat+0x175/0x210 [ 1354.971495][T27337] do_syscall_64+0xcd/0x250 [ 1354.976903][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.983977][T27337] [ 1354.986755][T27337] The buggy address belongs to the object at ffff8881432c1000 [ 1354.986755][T27337] which belongs to the cache kmalloc-256 of size 256 [ 1355.003610][T27337] The buggy address is located 24 bytes inside of [ 1355.003610][T27337] freed 256-byte region [ffff8881432c1000, ffff8881432c1100) [ 1355.020064][T27337] [ 1355.022843][T27337] The buggy address belongs to the physical page: [ 1355.030525][T27337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1432c0 [ 1355.041159][T27337] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1355.051355][T27337] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 1355.060511][T27337] page_type: f5(slab) [ 1355.065312][T27337] raw: 057ff00000000040 ffff88801b041b40 dead000000000122 0000000000000000 [ 1355.075605][T27337] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1355.085920][T27337] head: 057ff00000000040 ffff88801b041b40 dead000000000122 0000000000000000 [ 1355.096325][T27337] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1355.106725][T27337] head: 057ff00000000001 ffffea00050cb001 ffffffffffffffff 0000000000000000 [ 1355.117119][T27337] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 1355.127511][T27337] page dumped because: kasan: bad access detected [ 1355.135191][T27337] page_owner tracks the page as allocated [ 1355.142036][T27337] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21824341753, free_ts 0 [ 1355.165686][T27337] post_alloc_hook+0x181/0x1b0 [ 1355.171412][T27337] get_page_from_freelist+0xfce/0x2f80 [ 1355.177984][T27337] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1355.185098][T27337] alloc_pages_mpol+0x1fc/0x540 [ 1355.190934][T27337] new_slab+0x23d/0x330 [ 1355.195937][T27337] ___slab_alloc+0xc5d/0x1720 [ 1355.201575][T27337] __slab_alloc.constprop.0+0x56/0xb0 [ 1355.208041][T27337] __kmalloc_cache_noprof+0xfa/0x410 [ 1355.214402][T27337] bus_add_driver+0x92/0x690 [ 1355.219913][T27337] driver_register+0x15c/0x4b0 [ 1355.225628][T27337] usb_register_driver+0x216/0x4d0 [ 1355.231776][T27337] uvc_init+0x24/0x60 [ 1355.236566][T27337] do_one_initcall+0x128/0x700 [ 1355.242277][T27337] kernel_init_freeable+0x5c7/0x900 [ 1355.248518][T27337] kernel_init+0x1c/0x2b0 [ 1355.253723][T27337] ret_from_fork+0x45/0x80 [ 1355.259025][T27337] page_owner free stack trace missing [ 1355.265447][T27337] [ 1355.268223][T27337] Memory state around the buggy address: [ 1355.274965][T27337] ffff8881432c0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1355.284628][T27337] ffff8881432c0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1355.294290][T27337] >ffff8881432c1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1355.303956][T27337] ^ [ 1355.309761][T27337] ffff8881432c1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1355.319424][T27337] ffff8881432c1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1355.329081][T27337] ================================================================== [ 1355.408330][T27337] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1355.416990][T27337] CPU: 0 UID: 0 PID: 27337 Comm: syz.3.6594 Tainted: G U 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 1355.431708][T27337] Tainted: [U]=USER [ 1355.436279][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1355.448364][T27337] Call Trace: [ 1355.452288][T27337] [ 1355.455799][T27337] dump_stack_lvl+0x3d/0x1f0 [ 1355.461321][T27337] panic+0x71d/0x800 [ 1355.466006][T27337] ? __pfx_panic+0x10/0x10 [ 1355.471317][T27337] ? irqentry_exit+0x3b/0x90 [ 1355.476835][T27337] ? lockdep_hardirqs_on+0x7c/0x110 [ 1355.483072][T27337] ? preempt_schedule_thunk+0x1a/0x30 [ 1355.489522][T27337] ? preempt_schedule_common+0x44/0xc0 [ 1355.496073][T27337] check_panic_on_warn+0xab/0xb0 [ 1355.502000][T27337] end_report+0x117/0x180 [ 1355.507216][T27337] kasan_report+0xe9/0x110 [ 1355.512545][T27337] ? dvb_device_open+0x36a/0x3b0 [ 1355.518474][T27337] ? dvb_device_open+0x36a/0x3b0 [ 1355.524400][T27337] ? __pfx_dvb_device_open+0x10/0x10 [ 1355.530743][T27337] dvb_device_open+0x36a/0x3b0 [ 1355.536469][T27337] ? __pfx_dvb_device_open+0x10/0x10 [ 1355.542831][T27337] chrdev_open+0x237/0x6a0 [ 1355.548141][T27337] ? __pfx_apparmor_file_open+0x10/0x10 [ 1355.554798][T27337] ? __pfx_chrdev_open+0x10/0x10 [ 1355.560741][T27337] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1355.568872][T27337] do_dentry_open+0x735/0x1c40 [ 1355.574600][T27337] ? __pfx_chrdev_open+0x10/0x10 [ 1355.580539][T27337] ? inode_permission+0xdd/0x5f0 [ 1355.586490][T27337] vfs_open+0x82/0x3f0 [ 1355.591373][T27337] ? may_open+0x1f2/0x400 [ 1355.596575][T27337] path_openat+0x1e88/0x2d80 [ 1355.602098][T27337] ? __pfx_path_openat+0x10/0x10 [ 1355.608054][T27337] ? __pfx___lock_acquire+0x10/0x10 [ 1355.614294][T27337] ? lock_acquire.part.0+0x11b/0x380 [ 1355.620668][T27337] ? find_held_lock+0x2d/0x110 [ 1355.626389][T27337] do_filp_open+0x20c/0x470 [ 1355.631817][T27337] ? __pfx_do_filp_open+0x10/0x10 [ 1355.637875][T27337] ? find_held_lock+0x2d/0x110 [ 1355.643598][T27337] ? alloc_fd+0x41f/0x760 [ 1355.648797][T27337] do_sys_openat2+0x17a/0x1e0 [ 1355.654403][T27337] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.660671][T27337] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.666912][T27337] ? __pfx___might_resched+0x10/0x10 [ 1355.673263][T27337] __x64_sys_openat+0x175/0x210 [ 1355.679097][T27337] ? __pfx___x64_sys_openat+0x10/0x10 [ 1355.685543][T27337] do_syscall_64+0xcd/0x250 [ 1355.690958][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.698043][T27337] RIP: 0033:0x7f2d1f78cde9 [ 1355.703335][T27337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.726978][T27337] RSP: 002b:00007f2d206c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1355.737079][T27337] RAX: ffffffffffffffda RBX: 00007f2d1f9a5fa0 RCX: 00007f2d1f78cde9 [ 1355.746643][T27337] RDX: 0000000000000001 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 1355.756199][T27337] RBP: 00007f2d1f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.765764][T27337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.775349][T27337] R13: 0000000000000000 R14: 00007f2d1f9a5fa0 R15: 00007ffec53228f8 [ 1355.784921][T27337] [ 1355.788946][T27337] Kernel Offset: disabled [ 1355.794145][T27337] Rebooting in 86400 seconds..