last executing test programs: 2m33.906173516s ago: executing program 0 (id=824): unshare$auto(0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1200c801}, 0x240000c8) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) umount2$auto(&(0x7f0000000080)='.\x00', 0xa) 2m33.808108502s ago: executing program 0 (id=826): socket(0xa, 0x2, 0x0) rseq$auto(0x0, 0x8000, 0x4000, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioperm$auto(0xa, 0x7, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000200)={0x1, 0xffffff01, 0x10001, 0x5, 0x8001, 0x8, "3745b7"}, 0x3bcb, 0x1, 0xd634) 2m33.178815395s ago: executing program 0 (id=841): ioctl$auto_CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, 0x0) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f0000000000)=@test={r0, 0x0, 0x21f1, 0x0, 0x4, 0x1, 0x897, 0x3, 0x9, 0x843, 0x39, 0xffffffffffffffff, 0x0, 0x4, 0x6}, 0x40) 2m33.050265392s ago: executing program 0 (id=834): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x478, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d8, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xd1, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df1a0d8f3f", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m32.576590463s ago: executing program 0 (id=840): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty37\x00', 0x240000, 0x0) read$auto_tty_fops_tty_io(r0, &(0x7f0000000880)=""/4096, 0x1000) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x4, 0x40000004, 0x81, 0x17, 0x4, 0xcb70) 2m32.458689418s ago: executing program 0 (id=843): pwrite64$auto(0xffffffffffffffff, 0x0, 0x52, 0x3) write$auto(0x1, 0x0, 0x80000000) (async) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000003780)={0x7fff, 0x3ffffffe}, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffd) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) r0 = socket(0x2b, 0x1, 0x1) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 64) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0xff}, 0x92) unlinkat$auto(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) madvise$auto(0x0, 0x2017, 0x15) 2m32.283549318s ago: executing program 32 (id=843): pwrite64$auto(0xffffffffffffffff, 0x0, 0x52, 0x3) write$auto(0x1, 0x0, 0x80000000) (async) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000003780)={0x7fff, 0x3ffffffe}, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffd) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) r0 = socket(0x2b, 0x1, 0x1) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 64) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0xff}, 0x92) unlinkat$auto(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) madvise$auto(0x0, 0x2017, 0x15) 1m40.814577181s ago: executing program 1 (id=1037): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) epoll_create$auto(0x4) flistxattr$auto(0x3, 0x0, 0x3) r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x5, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7327a7c", 0x4) pread64$auto(r2, 0x0, 0x594c, 0x9fffffffd) 1m40.020652594s ago: executing program 1 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40440) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x2, 0x2, 0x1, 0x9b74, 0x5aec, 0x2) bpf$auto(0x7, &(0x7f00000001c0)=@enable_stats={0x1}, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x9, 0xac2f, 0x11, 0x7, 0x0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24040084) madvise$auto(0x201000, 0x200007, 0x8) 1m39.442522853s ago: executing program 1 (id=1045): ioctl$auto_CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, 0x0) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r1, &(0x7f0000000080)='/\x00', 0x47) mmap$auto(0x40007, 0x400, 0xdf, 0xeb5, 0x401, 0x20008001) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r0}, 0x40) 1m38.772837066s ago: executing program 1 (id=1047): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7327a7c", 0x4) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 1m38.181428634s ago: executing program 1 (id=1049): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) epoll_create$auto(0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x5, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7327a7c", 0x4) pread64$auto(r2, 0x0, 0x594c, 0x9fffffffd) 1m37.271846467s ago: executing program 1 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x6}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5963ab9816f666ff}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="c4ab25bd7000ffdbdf252a000000500001801400020069703667726530000000000000000000140002007665746831000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="fc93350000", @ANYRES32=0x0, @ANYBLOB="08000300440c000008000300070000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300ff03000014000200736974300000000000000000000000000800030000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x404c0c0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m37.031302297s ago: executing program 33 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x6}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5963ab9816f666ff}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="c4ab25bd7000ffdbdf252a000000500001801400020069703667726530000000000000000000140002007665746831000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="fc93350000", @ANYRES32=0x0, @ANYBLOB="08000300440c000008000300070000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300ff03000014000200736974300000000000000000000000000800030000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x404c0c0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) 55.56244439s ago: executing program 2 (id=1198): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) rt_sigsuspend$auto(0x0, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x5bbcf9f5, 0x100000001) 54.609488427s ago: executing program 2 (id=1204): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0x3, 0x8000) (async, rerun: 32) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x7, 0x9, 0x80000001, 0xffffffffffffff7d, 0x9, 0x5) (async) r0 = open(0x0, 0x261c2, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x4, 0x0) (async) memfd_secret$auto(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x81, 0x0, &(0x7f0000000140)=0x9c9) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async, rerun: 32) write$auto_ftrace_set_event_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r6) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000380)={0x840, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IE_ASSOC_RESP={0x76a, 0x80, "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"}, @NL80211_ATTR_FILS_DISCOVERY={0xac, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xa7, 0x3, "3b605e55d6142005d4a96e72f71b4685d062d0cf3f581001be530067b07b3bbf4bdd3c88b7a285484cbff759f537e295c9d1dd3f8b5d9703ad450d7e75f1875df0136cdeaf44de11f9c4193221cb5035b2518b1038cba6276c9372fe0d34067dcd7b548ca20670f21f6e3d4f3a4add807ee52a6705e18dcef4b8715373fbf2a236cf6b2ee6f320e92c6b5e702e9b2f858174c9e86b8b116a3981b91f4c7f85b4a2a6cb"}]}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x840}, 0x1, 0x0, 0x0, 0x4044c80}, 0x4) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r8, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}, @CTRL_ATTR_OP={0x8, 0xa, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4ca269fe332587b1}, 0x4000001) 53.427042663s ago: executing program 2 (id=1208): ioctl$auto_CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x10001, 0x5}, 0x800, 0x0) r0 = getpid() shmctl$auto(0x8000, 0x1fe, &(0x7f0000000340)={{0x100, 0xee01, 0xee00, 0x5, 0x10001, 0x8001, 0x73b}, 0x58, 0x9f5d, 0x2, 0x702, 0xfffffff9, 0xfffffffe, 0x89, 0x0, &(0x7f0000000240)="6991b460c503e1636efcff39633b2bd4cba63440583ce92ac26e70d709db73d74f5644dc35d4c96d9c6635275dde038bd0cddb353873beca20a493621e1746dd9caf7e346ca0b367febddc983743fbd97539eeeb8e", &(0x7f00000002c0)="1bdef7094cc86a69977e483d22dfb5e33aa5e976909a2718a0eecd2a4d2cd674b02d6c6b1656f95f6eaaa17daeff29e76f019640e67cfbeee4694ed45bab3f4edf0d8ab2a9dc2dd0ca135a103803b528e84064109e42b22ce2385b55e8253feb4797811741ca33e02bf20afe7b8f75c88ef10c4563"}) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xfffffffa, @_rt={r0, r1, @sival_ptr=&(0x7f00000003c0)="c5e2b7db597d0919fbc56dafa78af5c6d53a465aa6b485244ab2477c88"}}}) syz_open_procfs$namespace(0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x38) io_uring_setup$auto(0x40000002c55, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="74005def", @ANYRES16=r6, @ANYBLOB="010b27bd7000fbdbdf2505000000", @ANYRESDEC=r4, @ANYRES32=r5], 0x14}}, 0x4000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) 46.22657607s ago: executing program 2 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) fchdir$auto(r3) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) getpgrp(0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140074240000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4) 35.820988411s ago: executing program 2 (id=1265): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20000000) r0 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r1 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xcf, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df1a0d", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 32.298579052s ago: executing program 2 (id=1276): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x458, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1b0, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xac, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d22", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 17.190668058s ago: executing program 34 (id=1276): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x458, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1b0, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xac, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d22", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.206092046s ago: executing program 5 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) fchdir$auto(r3) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) getpgrp(0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140074240000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x4) 4.251566253s ago: executing program 4 (id=1320): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xcd, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.133270169s ago: executing program 3 (id=1321): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) 3.380269918s ago: executing program 4 (id=1322): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20000000) r0 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r1 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xd0, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df1a0d8f", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.380120691s ago: executing program 5 (id=1323): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x6a040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, 0x0, 0x13) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/auth_enable\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) r2 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) write$auto_tracing_mark_raw_fops_trace(r2, 0x0, 0x10) socket(0x2, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/181, 0xb5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video29\x00', 0x80080, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/usb/drivers/cdc_wdm/unbind\x00', 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socket(0x1e, 0x80000, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mounts\x00', 0x80400, 0x0) socket(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r1, 0x87, 0x7d, 0x0, 0x8) 3.245852806s ago: executing program 6 (id=1325): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7", 0x1) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 3.092538517s ago: executing program 3 (id=1326): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7", 0x1) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 2.830195944s ago: executing program 5 (id=1327): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket(0x2, 0x801, 0x106) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x801, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xffd8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl802154(0x0, r1) shutdown$auto(0x200000003, 0x2) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x34000, 0x0) ioctl$auto(r0, 0x0, 0x5) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000) 2.448406424s ago: executing program 3 (id=1328): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x5, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7327a7c", 0x4) pread64$auto(r2, 0x0, 0x594c, 0x9fffffffd) 2.447526784s ago: executing program 6 (id=1329): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="4e43cbc37c"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) arch_prctl$auto(0x5001, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) clone$auto(0x799, 0x0, &(0x7f0000000540)=0x4, &(0x7f0000000580)=0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r8 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/udp_ports_reset\x00', 0x1, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pim6reg0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x8, 0x3ff, 0x9f, 0x8, 0xfffffffffffffffb) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001300)={'veth0_to_bond\x00', 0x0}) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r10) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x8000, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r12, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'rose0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x114, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xf9}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x310}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x10}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x40800}, 0x44004) 2.369124728s ago: executing program 4 (id=1330): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x83) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi14\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x1ffffffffc, 0x1, 0x2, 0xeb1, 0x401, 0x20000000008000) mmap$auto(0x40000005, 0x400006, 0xdf, 0x13, 0x0, 0x100000002) socketpair$auto(0x8000001d, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1a240, 0x118) socket(0x2c, 0x1, 0x8) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x54) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs1\x00', 0xc2400, 0x0) r3 = getpgrp(0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(r3, 0x6) capget$auto(&(0x7f0000000200)={0xffff7fff, r3}, &(0x7f0000000180)={0x8000, 0x1, 0xffffffff}) splice$auto(r2, &(0x7f0000000100)=0xffff, r0, &(0x7f0000000140)=0x6, 0x1, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty19\x00', 0x808002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x406, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) 2.362242265s ago: executing program 6 (id=1331): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x83) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi14\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x1ffffffffc, 0x1, 0x2, 0xeb1, 0x401, 0x20000000008000) mmap$auto(0x40000005, 0x400006, 0xdf, 0x13, 0x0, 0x100000002) socketpair$auto(0x8000001d, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x1a240, 0x118) socket(0x2c, 0x1, 0x8) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x54) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs1\x00', 0xc2400, 0x0) r3 = getpgrp(0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(r3, 0x6) capget$auto(&(0x7f0000000200)={0xffff7fff, r3}, &(0x7f0000000180)={0x8000, 0x1, 0xffffffff}) splice$auto(r2, &(0x7f0000000100)=0xffff, r0, &(0x7f0000000140)=0x6, 0x1, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty19\x00', 0x808002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x406, 0x1) pread64$auto(r1, 0x0, 0x100009, 0x40002000000000e) 2.055104513s ago: executing program 6 (id=1332): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xcd, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.002248928s ago: executing program 4 (id=1333): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 1.427198725s ago: executing program 4 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cb97000c2ebdb3357c089cb08000300", @ANYRES32=r2], 0x34}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r3) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="21022cbd0000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.28225743s ago: executing program 4 (id=1335): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x5, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000100), 0x400040, 0x0) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7327a7c", 0x4) pread64$auto(r2, 0x0, 0x594c, 0x9fffffffd) 1.282117905s ago: executing program 3 (id=1336): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7", 0x1) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 1.185170034s ago: executing program 6 (id=1337): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r0, @new_map_fd=r1, 0xa, @old_map_fd=r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x4}, 0x103) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x4}, 0x103) 846.845784ms ago: executing program 5 (id=1338): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) flistxattr$auto(0x3, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0xffffffffffffffff, 0x5, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f00000000c0)="4c8e1feda5ad08a3842c513a9afae76828eda4ac78e1b66eefefe489b16eaa4a3c7c222c494fa1", 0x200, 0x0, 0x72, 0x0, 0x8, 0x80000000}, 0x9}, 0x7, 0x100000a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x400040, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) write$auto_bm_status_operations_binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="b7", 0x1) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 736.698023ms ago: executing program 6 (id=1339): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20000000) r0 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r1 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xd0, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df1a0d8f", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 611.099742ms ago: executing program 3 (id=1340): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(r0, r0, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x9) r2 = socket(0x1d, 0x3, 0x1) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc004) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(0x0, 0x1081, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x47c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x152, 0x2, 0x0, 0x1, [@nested={0xcc, 0xe7, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x75}, @nested={0x4, 0x8a}, @typed={0x9, 0x102, 0x0, 0x0, @str='[-+]\x00'}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @typed={0x5, 0x143, 0x0, 0x0, @str='\x00'}, @generic="a36478fe3f47823e6366e990618a2e703fd0c06fd3cc219ec104ab53b0b410f9ddceae2d4fe4ba9adcb004a05c7e5ba8eaa1d032d823fba00b7944b7e1746e96ec2f030d1efe281f938d514af974e7c8647e0977818e6c275e72fe6fb777fd1874a3cfaae5a24caa914e710c37d5b8df543c9449c7c13bba6ecd03e27f58564ff9f84c89c0740b368de668048b3309ac8fe2a625247fc12b", @nested={0x4, 0x9}, @nested={0x4, 0xec}]}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x8}, @generic="6bc9a61eb6af860f40766d245c70ec03bd6e75687ee68bcbef07b6f0f105f9e2df81b2251ce2ab3a5e4a618afb9dc40fa10dac409e1e3cd4729def60806e69ba7ba38150a5bc48b859b6ff462e38f7a9f9f69f45b3d076960c9513d47f5f52cf2fb7ce460d7b486b2313019eb0f9"]}, @MACSEC_ATTR_SA_CONFIG={0x1d4, 0x3, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @nested={0x58, 0xb4, 0x0, 0x1, [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="193524a3e5025d8f1e3ef284908e0916c5a4add437b23b0de01d4e33bb5fe4ba13b0e60a009017961dd6a72ffcf3b675", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x7d, 0x2e, 0x0, 0x1, [@generic="b0a0ffb6ac7aab234d9c617056128326812462067603382baa09c7d653bf9d0889c4b03163c42ae094627c0a42aafec7fcf97549eb3260f307785facba9f832379508cc3790407e9ed793a7bc95d767fd805284a774952c6cc8dca6ab28fa9b46ce9033e909906cbb8fdf023c1772a126c", @typed={0x6, 0xe5, 0x0, 0x0, @str='@\x00'}]}, @nested={0xcf, 0xd7, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid}, @generic="1a77302954bbd175b47f4bcfa42ec1f661ee259b084dcda6181c6a24e13e1afe1c76534fec36050c25cdd2650e210e9e6414565a65b4e4c843503f66", @generic="51dd2f1cbe80a9a519c4c0d072b90ed23634ecbecfe59eb06d0464", @nested={0x4, 0xc9}, @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x6}, @generic="91f229ad070e3fc783c4dd2c00362e343665e924cb69fcf0c8cf86374f784a598e7bd88d2226137c57c8d4ac11058498a52e5ce50322e7132606e7469fb79ba5c2b3cf4b38df1a0d", @nested={0x4, 0x81}, @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x7}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}, @MACSEC_ATTR_SA_CONFIG={0x68, 0x3, 0x0, 0x1, [@generic="76cdc42584fa827c666a30f200bf3890495349b2e7bb522d22f698cbbffb2575e4c0221521008c83da144a73d7a8d9e72ad3d3ee99dfc9bca9c32e02d74cc5bac47bc7e5aa425d413b1721e380ebdea79ddccbe8f9cf9610dfbd12c261ed2366ffdb63a6"]}, @MACSEC_ATTR_RXSC_CONFIG={0xd0, 0x2, 0x0, 0x1, [@nested={0xc3, 0x119, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x3e}, @typed={0x4, 0xd1}, @nested={0x4, 0x113}, @generic="53f06a3dcf1f611f6e41a41f1cd4ae900733f0f6bd66f0274b99879f05fbbbe7f74dc8127e64ad68bb9bccb2f2ab0e4c1f3ba2a09094ecee21d1903dc24181f53e200d136fca1745c843aaa6a38c12b364a386c6628cd04db2a9972f29682a928b533b282058f218ea581c6ec05d88d75fda9728a543cbcfbf5fef1fa044a15dec257099238e0144384fa704ad14c3501854288ebf0f93", @typed={0x6, 0xf8, 0x0, 0x0, @str=']\x00'}]}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x881) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 225.451716ms ago: executing program 5 (id=1341): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x83) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi14\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x3) mmap$auto(0x1ffffffffc, 0x1, 0x2, 0xeb1, 0x401, 0x20000000008000) mmap$auto(0x40000005, 0x400006, 0xdf, 0x13, 0x0, 0x100000002) socketpair$auto(0x8000001d, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x1a240, 0x118) socket(0x2c, 0x1, 0x8) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x54) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs1\x00', 0xc2400, 0x0) r3 = getpgrp(0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(r3, 0x6) capget$auto(&(0x7f0000000200)={0xffff7fff, r3}, &(0x7f0000000180)={0x8000, 0x1, 0xffffffff}) splice$auto(r2, &(0x7f0000000100)=0xffff, r0, &(0x7f0000000140)=0x6, 0x1, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty19\x00', 0x808002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x406, 0x1) pread64$auto(r1, 0x0, 0x100009, 0x40002000000000e) 76.390322ms ago: executing program 5 (id=1342): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x800000) 0s ago: executing program 3 (id=1343): r0 = socket(0x2b, 0x0, 0x0) getpeername$auto(r0, 0x0, 0x0) socket(0x1, 0x5, 0x0) mmap$auto(0xfffffffffffffffc, 0x40000a, 0x3, 0x9b72, 0x2, 0x8000) sysfs$auto(0x7, 0x100dbf9, 0x1) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) sysfs$auto(0x2, 0x1e, 0x0) epoll_ctl$auto(0x5, 0x5, 0x8000000000000000, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-monitor\x00', 0x300, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x2404c051) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="831f2abd7000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) socket(0xa, 0x801, 0x106) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x4, 0x7352, 0x38, 0x3, 0x1ffde, 0x7, 0x3, 0x4, 0x9, 0x3, 0x6, 0x5, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x7, 0x0, 0x7, 0x0, 0x20000200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x3, 0x2000, 0x0, 0xa, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x24, 0x40000000000007, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0x10000, 0x4, 0x2, 0x0, 0x540a5ec3, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xc8, 0xf7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4000000000, 0x7fffffff]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 12) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x4, 0x0, 0x1, 0xa508}, 0x800}, 0x7, 0x6) socket(0x25, 0x1, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 64.750070][ T5818] cgroup: Unknown subsys name 'net' [ 64.880062][ T5818] cgroup: Unknown subsys name 'cpuset' [ 64.888297][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.294312][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.241780][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.250364][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.258230][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.265878][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.266833][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.274270][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.288581][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.296404][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.303601][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.305015][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.319138][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.328527][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.329234][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.335936][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.344607][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.350032][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.358935][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.364698][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.371860][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.378118][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.384879][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.391909][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.422165][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.432973][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.744568][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 68.823769][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 68.905381][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.969062][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.976369][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.985366][ T5829] bridge_slave_0: entered allmulticast mode [ 68.993350][ T5829] bridge_slave_0: entered promiscuous mode [ 69.006909][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.014115][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.021424][ T5829] bridge_slave_1: entered allmulticast mode [ 69.028318][ T5829] bridge_slave_1: entered promiscuous mode [ 69.060756][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.071483][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.078655][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.085854][ T5828] bridge_slave_0: entered allmulticast mode [ 69.092729][ T5828] bridge_slave_0: entered promiscuous mode [ 69.115100][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.122697][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.130584][ T5828] bridge_slave_1: entered allmulticast mode [ 69.137423][ T5828] bridge_slave_1: entered promiscuous mode [ 69.187828][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.200946][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.242355][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.255771][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.271387][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.278750][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.285989][ T5830] bridge_slave_0: entered allmulticast mode [ 69.293605][ T5830] bridge_slave_0: entered promiscuous mode [ 69.324274][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.332388][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.339735][ T5830] bridge_slave_1: entered allmulticast mode [ 69.346276][ T5830] bridge_slave_1: entered promiscuous mode [ 69.387608][ T5828] team0: Port device team_slave_0 added [ 69.395321][ T5829] team0: Port device team_slave_0 added [ 69.401347][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.409306][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.416475][ T5827] bridge_slave_0: entered allmulticast mode [ 69.423583][ T5827] bridge_slave_0: entered promiscuous mode [ 69.431477][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.438848][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.446016][ T5827] bridge_slave_1: entered allmulticast mode [ 69.452802][ T5827] bridge_slave_1: entered promiscuous mode [ 69.466748][ T5828] team0: Port device team_slave_1 added [ 69.475565][ T5829] team0: Port device team_slave_1 added [ 69.499637][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.540875][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.551568][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.558691][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.584646][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.596621][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.606439][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.635204][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.648848][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.665698][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.672813][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.698960][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.711012][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.718258][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.744288][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.756605][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.804347][ T5830] team0: Port device team_slave_0 added [ 69.837192][ T5830] team0: Port device team_slave_1 added [ 69.860376][ T5829] hsr_slave_0: entered promiscuous mode [ 69.866746][ T5829] hsr_slave_1: entered promiscuous mode [ 69.876693][ T5827] team0: Port device team_slave_0 added [ 69.892414][ T5828] hsr_slave_0: entered promiscuous mode [ 69.898939][ T5828] hsr_slave_1: entered promiscuous mode [ 69.906421][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.914327][ T5828] Cannot create hsr debugfs directory [ 69.922672][ T5827] team0: Port device team_slave_1 added [ 69.960428][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.968138][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.995042][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.015999][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.023199][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.049235][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.066637][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.073712][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.099635][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.122537][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.131280][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.157726][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.245546][ T5830] hsr_slave_0: entered promiscuous mode [ 70.252293][ T5830] hsr_slave_1: entered promiscuous mode [ 70.261142][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.268865][ T5830] Cannot create hsr debugfs directory [ 70.289315][ T5827] hsr_slave_0: entered promiscuous mode [ 70.295570][ T5827] hsr_slave_1: entered promiscuous mode [ 70.302294][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.310178][ T5827] Cannot create hsr debugfs directory [ 70.408202][ T54] Bluetooth: hci3: command tx timeout [ 70.487392][ T54] Bluetooth: hci2: command tx timeout [ 70.487412][ T5840] Bluetooth: hci0: command tx timeout [ 70.499085][ T5840] Bluetooth: hci1: command tx timeout [ 70.533104][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.555804][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.573755][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.586505][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.603787][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.629687][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.647429][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.659586][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.701049][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.713371][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.726909][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.757462][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.789242][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.816275][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.826533][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.836247][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.964321][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.997016][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.026498][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.033774][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.054560][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.061767][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.076441][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.104158][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.135370][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.168851][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.181572][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.197915][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.212614][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.219713][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.239789][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.246890][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.264949][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.272083][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.282805][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.289941][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.303789][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.310988][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.348771][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.355982][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.630857][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.694204][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.709002][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.734955][ T5829] veth0_vlan: entered promiscuous mode [ 71.771074][ T5829] veth1_vlan: entered promiscuous mode [ 71.808310][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.827198][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.860311][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.872731][ T5829] veth0_macvtap: entered promiscuous mode [ 71.882883][ T5829] veth1_macvtap: entered promiscuous mode [ 71.924011][ T5828] veth0_vlan: entered promiscuous mode [ 71.964751][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.990338][ T5828] veth1_vlan: entered promiscuous mode [ 72.001875][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.010076][ T5830] veth0_vlan: entered promiscuous mode [ 72.019397][ T5827] veth0_vlan: entered promiscuous mode [ 72.029400][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038544][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.047224][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.056797][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.071755][ T5830] veth1_vlan: entered promiscuous mode [ 72.112377][ T5827] veth1_vlan: entered promiscuous mode [ 72.165426][ T5828] veth0_macvtap: entered promiscuous mode [ 72.188108][ T5830] veth0_macvtap: entered promiscuous mode [ 72.197635][ T5828] veth1_macvtap: entered promiscuous mode [ 72.217973][ T5830] veth1_macvtap: entered promiscuous mode [ 72.256399][ T5827] veth0_macvtap: entered promiscuous mode [ 72.266831][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.279187][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.292056][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.306486][ T5827] veth1_macvtap: entered promiscuous mode [ 72.324567][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.327408][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.339617][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.354387][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.370144][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.381649][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.392540][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.402721][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.413936][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.426506][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.441987][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.451269][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.461639][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.470661][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.484871][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.498027][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.499246][ T5840] Bluetooth: hci3: command tx timeout [ 72.509493][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.524601][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.535636][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.565350][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.576543][ T54] Bluetooth: hci0: command tx timeout [ 72.576697][ T5840] Bluetooth: hci1: command tx timeout [ 72.579746][ T5840] Bluetooth: hci2: command tx timeout [ 72.584574][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.606231][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.616935][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.631186][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.641720][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654214][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.662763][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672419][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.681412][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.690380][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710472][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.721093][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.732585][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.743589][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.754293][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.765315][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.776950][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.812925][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.822076][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.833407][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.842410][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.854668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.863704][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.911945][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.923289][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.992548][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.020685][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.034212][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.099441][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.134148][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.172774][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.212315][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.244029][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.253820][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.318598][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.339937][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.631331][ T5892] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.682162][ T5892] svc: failed to register nfsaclv3 RPC service (errno 111). [ 73.743684][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.438700][ T5912] Zero length message leads to an empty skb [ 74.575510][ T5840] Bluetooth: hci3: command tx timeout [ 74.649956][ T5840] Bluetooth: hci2: command tx timeout [ 74.655552][ T5840] Bluetooth: hci1: command tx timeout [ 74.661181][ T54] Bluetooth: hci0: command tx timeout [ 74.742466][ T5920] Process accounting resumed [ 76.421621][ T5943] mmap: syz.2.16 (5943) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.650101][ T5840] Bluetooth: hci3: command tx timeout [ 76.728823][ T5840] Bluetooth: hci2: command tx timeout [ 76.734478][ T5840] Bluetooth: hci1: command tx timeout [ 76.737532][ T54] Bluetooth: hci0: command tx timeout [ 76.957736][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 76.988960][ T5953] geneve1: entered allmulticast mode [ 77.142870][ T5953] syz.0.18 (5953) used greatest stack depth: 21376 bytes left [ 77.282269][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 78.634038][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.782389][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 79.488778][ T5981] kafs: addr_prefs: Invalid Command [ 79.831356][ T5985] netlink: 'syz.0.27': attribute type 8 has an invalid length. [ 85.535401][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.580049][ T6067] ipvlan0: entered allmulticast mode [ 85.597185][ T6067] veth0_vlan: entered allmulticast mode [ 87.061152][ T46] cfg80211: failed to load regulatory.db [ 87.147600][ T6095] process 'syz.2.58' launched './file0' with NULL argv: empty string added [ 88.758530][ T6123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.778685][ T6123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.974773][ T6231] bridge0: port 3(macvlan0) entered blocking state [ 94.982381][ T6231] bridge0: port 3(macvlan0) entered disabled state [ 94.997462][ T6231] macvlan0: entered allmulticast mode [ 95.002958][ T6231] veth1_vlan: entered allmulticast mode [ 95.014347][ T6231] macvlan0: entered promiscuous mode [ 95.028513][ T6231] bridge0: port 3(macvlan0) entered blocking state [ 95.035484][ T6231] bridge0: port 3(macvlan0) entered forwarding state [ 97.385620][ T6271] bridge0: port 3(macvlan0) entered blocking state [ 97.393884][ T6271] bridge0: port 3(macvlan0) entered disabled state [ 97.405193][ T6271] macvlan0: entered allmulticast mode [ 97.412476][ T6271] veth1_vlan: entered allmulticast mode [ 97.423977][ T6271] macvlan0: entered promiscuous mode [ 97.431736][ T6271] bridge0: port 3(macvlan0) entered blocking state [ 97.438653][ T6271] bridge0: port 3(macvlan0) entered forwarding state [ 108.098072][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 108.115009][ T6483] ipvlan0: entered allmulticast mode [ 108.120699][ T6483] veth0_vlan: entered allmulticast mode [ 110.351166][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.387740][ T6529] ipvlan0: entered allmulticast mode [ 110.407578][ T6529] veth0_vlan: entered allmulticast mode [ 112.977241][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 113.069422][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 127.318563][ T6791] kexec: Could not allocate control_code_buffer [ 130.184173][ T6870] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 131.028367][ T6882] FAULT_INJECTION: forcing a failure. [ 131.028367][ T6882] name failslab, interval 1, probability 0, space 0, times 1 [ 131.043488][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.3.268 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 131.054301][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.064381][ T6882] Call Trace: [ 131.067678][ T6882] [ 131.070635][ T6882] dump_stack_lvl+0x16c/0x1f0 [ 131.075374][ T6882] should_fail_ex+0x497/0x5b0 [ 131.080369][ T6882] ? fs_reclaim_acquire+0xae/0x150 [ 131.085574][ T6882] should_failslab+0xc2/0x120 [ 131.090301][ T6882] __kmalloc_noprof+0xce/0x4f0 [ 131.095113][ T6882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.101996][ T6882] ? tomoyo_realpath_from_path+0xbf/0x710 [ 131.107755][ T6882] tomoyo_realpath_from_path+0xbf/0x710 [ 131.113339][ T6882] ? tomoyo_path_number_perm+0x235/0x5b0 [ 131.119050][ T6882] tomoyo_path_number_perm+0x248/0x5b0 [ 131.124672][ T6882] ? tomoyo_path_number_perm+0x235/0x5b0 [ 131.130360][ T6882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.136419][ T6882] ? __pfx_lock_release+0x10/0x10 [ 131.141510][ T6882] ? trace_lock_acquire+0x14e/0x1f0 [ 131.146838][ T6882] ? lock_acquire+0x2f/0xb0 [ 131.151367][ T6882] ? __fget_files+0x40/0x3a0 [ 131.156007][ T6882] ? __fget_files+0x206/0x3a0 [ 131.160721][ T6882] security_file_ioctl+0x9b/0x240 [ 131.165776][ T6882] __x64_sys_ioctl+0xb7/0x200 [ 131.170517][ T6882] do_syscall_64+0xcd/0x250 [ 131.175284][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.181366][ T6882] RIP: 0033:0x7fd5c9b85d19 [ 131.185946][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.205688][ T6882] RSP: 002b:00007fd5ca984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.214112][ T6882] RAX: ffffffffffffffda RBX: 00007fd5c9d75fa0 RCX: 00007fd5c9b85d19 [ 131.222085][ T6882] RDX: 0000000020001680 RSI: 0000000090009427 RDI: 0000000000000008 [ 131.230148][ T6882] RBP: 00007fd5ca984090 R08: 0000000000000000 R09: 0000000000000000 [ 131.238272][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.247231][ T6882] R13: 0000000000000000 R14: 00007fd5c9d75fa0 R15: 00007ffd38500a48 [ 131.255232][ T6882] [ 131.329857][ T6882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.137700][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.144043][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.067785][ T6938] mmap: syz.2.282 (6938): VmData 37601280 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 136.920991][ T6970] ICMPv6: process `syz.2.292' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 137.309936][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 137.623079][ T6974] netlink: 74 bytes leftover after parsing attributes in process `syz.2.295'. [ 139.106893][ T7010] ICMPv6: process `syz.1.304' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 141.009508][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.320'. [ 141.408760][ T7094] ICMPv6: process `syz.3.322' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 141.902668][ T7107] netlink: 204 bytes leftover after parsing attributes in process `syz.1.325'. [ 143.097546][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.338'. [ 143.987487][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 147.423417][ T7265] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 148.148601][ T7269] netlink: 204 bytes leftover after parsing attributes in process `syz.2.363'. [ 148.599497][ T7302] FAULT_INJECTION: forcing a failure. [ 148.599497][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 148.628634][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.3.367 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 148.639267][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 148.649372][ T7302] Call Trace: [ 148.652939][ T7302] [ 148.655886][ T7302] dump_stack_lvl+0x16c/0x1f0 [ 148.660606][ T7302] should_fail_ex+0x497/0x5b0 [ 148.665317][ T7302] ? fs_reclaim_acquire+0xae/0x150 [ 148.670461][ T7302] should_failslab+0xc2/0x120 [ 148.675177][ T7302] __kmalloc_cache_noprof+0x68/0x420 [ 148.680503][ T7302] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 148.687905][ T7302] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 148.695315][ T7302] genl_start+0x1e7/0x960 [ 148.699685][ T7302] __netlink_dump_start+0x615/0x980 [ 148.704921][ T7302] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 148.710677][ T7302] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 148.717058][ T7302] ? __pfx_genl_get_cmd+0x10/0x10 [ 148.722208][ T7302] ? __pfx_genl_start+0x10/0x10 [ 148.727797][ T7302] ? __pfx_genl_dumpit+0x10/0x10 [ 148.733205][ T7302] ? __pfx_genl_done+0x10/0x10 [ 148.738102][ T7302] ? __radix_tree_lookup+0x21f/0x2c0 [ 148.743949][ T7302] genl_rcv_msg+0x470/0x800 [ 148.748490][ T7302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.753554][ T7302] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 148.759842][ T7302] netlink_rcv_skb+0x165/0x410 [ 148.767316][ T7302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.772724][ T7302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.778078][ T7302] ? down_read+0xc9/0x330 [ 148.783971][ T7302] ? __pfx_down_read+0x10/0x10 [ 148.790170][ T7302] ? netlink_deliver_tap+0x1ae/0xca0 [ 148.795776][ T7302] genl_rcv+0x28/0x40 [ 148.799806][ T7302] netlink_unicast+0x53c/0x7f0 [ 148.804604][ T7302] ? __pfx_netlink_unicast+0x10/0x10 [ 148.809923][ T7302] ? __phys_addr_symbol+0x30/0x80 [ 148.814982][ T7302] ? __check_object_size+0x488/0x710 [ 148.820308][ T7302] netlink_sendmsg+0x8b8/0xd70 [ 148.825285][ T7302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.831415][ T7302] ____sys_sendmsg+0x9ae/0xb40 [ 148.836312][ T7302] ? copy_msghdr_from_user+0x10b/0x160 [ 148.842505][ T7302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.848287][ T7302] ___sys_sendmsg+0x135/0x1e0 [ 148.854057][ T7302] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.859312][ T7302] ? __pfx_lock_release+0x10/0x10 [ 148.864359][ T7302] ? trace_lock_acquire+0x14e/0x1f0 [ 148.869605][ T7302] ? __fget_files+0x206/0x3a0 [ 148.874322][ T7302] __sys_sendmsg+0x16e/0x220 [ 148.878954][ T7302] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.884127][ T7302] do_syscall_64+0xcd/0x250 [ 148.888793][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.894753][ T7302] RIP: 0033:0x7fd5c9b85d19 [ 148.899236][ T7302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.918990][ T7302] RSP: 002b:00007fd5ca963038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.927435][ T7302] RAX: ffffffffffffffda RBX: 00007fd5c9d76080 RCX: 00007fd5c9b85d19 [ 148.935433][ T7302] RDX: 00000000000000c4 RSI: 00000000200039c0 RDI: 0000000000000003 [ 148.943427][ T7302] RBP: 00007fd5ca963090 R08: 0000000000000000 R09: 0000000000000000 [ 148.951422][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.959414][ T7302] R13: 0000000000000001 R14: 00007fd5c9d76080 R15: 00007ffd38500a48 [ 148.967419][ T7302] [ 148.970554][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.715038][ T7361] netlink: 204 bytes leftover after parsing attributes in process `syz.3.380'. [ 155.977339][ T29] audit: type=1806 audit(4294967327.990:2): xattr="." res=0 [ 158.510819][ T7548] FAULT_INJECTION: forcing a failure. [ 158.510819][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 158.582255][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.2.415 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 158.592895][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 158.602969][ T7548] Call Trace: [ 158.606265][ T7548] [ 158.609217][ T7548] dump_stack_lvl+0x16c/0x1f0 [ 158.613933][ T7548] should_fail_ex+0x497/0x5b0 [ 158.618647][ T7548] should_failslab+0xc2/0x120 [ 158.623358][ T7548] __kmalloc_cache_noprof+0x68/0x420 [ 158.628671][ T7548] ? rcu_is_watching+0x12/0xc0 [ 158.633468][ T7548] ? trace_lock_acquire+0x14e/0x1f0 [ 158.638705][ T7548] sctp_add_bind_addr+0x9d/0x3e0 [ 158.643685][ T7548] sctp_copy_local_addr_list+0x39e/0x5a0 [ 158.649346][ T7548] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 158.655510][ T7548] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 158.661414][ T7548] ? sctp_bind_addr_copy+0xe0/0x530 [ 158.666614][ T7548] sctp_bind_addr_copy+0xe0/0x530 [ 158.671647][ T7548] sctp_connect_new_asoc+0x1d8/0x790 [ 158.676941][ T7548] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 158.682756][ T7548] ? lock_acquire+0x2f/0xb0 [ 158.687260][ T7548] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 158.693091][ T7548] __sctp_connect+0x3f5/0xc60 [ 158.697782][ T7548] ? sctp_inet_connect+0xac/0x200 [ 158.702821][ T7548] ? __pfx___sctp_connect+0x10/0x10 [ 158.708027][ T7548] ? __pfx_sctp_inet_connect+0x10/0x10 [ 158.713492][ T7548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.719393][ T7548] ? __pfx_sctp_inet_connect+0x10/0x10 [ 158.724857][ T7548] sctp_inet_connect+0x15f/0x200 [ 158.729804][ T7548] __sys_connect_file+0x13e/0x1a0 [ 158.734841][ T7548] __sys_connect+0x14f/0x170 [ 158.739439][ T7548] ? __pfx___sys_connect+0x10/0x10 [ 158.744571][ T7548] ? __pfx_ksys_write+0x10/0x10 [ 158.749433][ T7548] __x64_sys_connect+0x72/0xb0 [ 158.754199][ T7548] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.759401][ T7548] do_syscall_64+0xcd/0x250 [ 158.763911][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.769810][ T7548] RIP: 0033:0x7ff32e585d19 [ 158.774227][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.793839][ T7548] RSP: 002b:00007ff32c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 158.802255][ T7548] RAX: ffffffffffffffda RBX: 00007ff32e775fa0 RCX: 00007ff32e585d19 [ 158.810227][ T7548] RDX: 0000000000000054 RSI: 0000000020000080 RDI: 0000000000000003 [ 158.818195][ T7548] RBP: 00007ff32c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.826168][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.834140][ T7548] R13: 0000000000000000 R14: 00007ff32e775fa0 R15: 00007ffe902f27b8 [ 158.842123][ T7548] [ 161.827847][ T7622] syz.3.428 uses obsolete (PF_INET,SOCK_PACKET) [ 164.368771][ T7679] netlink: 342 bytes leftover after parsing attributes in process `syz.1.443'. [ 164.845562][ T7695] netlink: 655 bytes leftover after parsing attributes in process `syz.3.448'. [ 167.223081][ T7734] FAULT_INJECTION: forcing a failure. [ 167.223081][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 167.241749][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.2.458 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 167.252375][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 167.262448][ T7734] Call Trace: [ 167.265750][ T7734] [ 167.268698][ T7734] dump_stack_lvl+0x16c/0x1f0 [ 167.273412][ T7734] should_fail_ex+0x497/0x5b0 [ 167.278122][ T7734] ? fs_reclaim_acquire+0xae/0x150 [ 167.283268][ T7734] should_failslab+0xc2/0x120 [ 167.287986][ T7734] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 167.293392][ T7734] ? ptlock_alloc+0x1f/0x70 [ 167.297931][ T7734] ptlock_alloc+0x1f/0x70 [ 167.302295][ T7734] pte_alloc_one+0x74/0x390 [ 167.306821][ T7734] __pte_alloc+0x6e/0x3b0 [ 167.311177][ T7734] ? __pfx___pte_alloc+0x10/0x10 [ 167.316151][ T7734] do_pte_missing+0x2810/0x3e00 [ 167.321034][ T7734] ? mt_find+0x82d/0xa20 [ 167.325309][ T7734] ? __pfx_lock_release+0x10/0x10 [ 167.330367][ T7734] __handle_mm_fault+0x103c/0x2a40 [ 167.335525][ T7734] ? __pfx___handle_mm_fault+0x10/0x10 [ 167.341013][ T7734] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 167.346686][ T7734] ? find_vma+0xc0/0x140 [ 167.350958][ T7734] ? __pfx_find_vma+0x10/0x10 [ 167.355662][ T7734] handle_mm_fault+0x3fa/0xaa0 [ 167.360464][ T7734] do_user_addr_fault+0x7a3/0x13f0 [ 167.365601][ T7734] exc_page_fault+0x5c/0xc0 [ 167.370127][ T7734] asm_exc_page_fault+0x26/0x30 [ 167.375006][ T7734] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 167.380853][ T7734] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 167.400485][ T7734] RSP: 0018:ffffc900051ff9c0 EFLAGS: 00050202 [ 167.406573][ T7734] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000a2 [ 167.414565][ T7734] RDX: ffffed1006388415 RSI: ffff888031c42005 RDI: 0000000000000000 [ 167.422561][ T7734] RBP: ffffc900051ffbd0 R08: 0000000000000000 R09: ffffed1006388414 [ 167.430556][ T7734] R10: ffff888031c420a6 R11: 0000000000000000 R12: 00000000000000a2 [ 167.438547][ T7734] R13: ffff888031c42005 R14: 0000000000000000 R15: 00000000000000a2 [ 167.446550][ T7734] _copy_to_iter+0x52f/0x1400 [ 167.451269][ T7734] ? __pfx__copy_to_iter+0x10/0x10 [ 167.456410][ T7734] ? __virt_addr_valid+0x1a4/0x590 [ 167.461550][ T7734] ? __virt_addr_valid+0x5e/0x590 [ 167.466597][ T7734] ? __phys_addr_symbol+0x30/0x80 [ 167.471645][ T7734] ? __check_object_size+0x488/0x710 [ 167.476964][ T7734] seq_read_iter+0x725/0x12b0 [ 167.481675][ T7734] seq_read+0x39f/0x4e0 [ 167.485855][ T7734] ? __pfx_seq_read+0x10/0x10 [ 167.490576][ T7734] ? __pfx_seq_read+0x10/0x10 [ 167.495271][ T7734] proc_reg_read+0x23d/0x330 [ 167.499888][ T7734] ? __pfx_proc_reg_read+0x10/0x10 [ 167.505022][ T7734] vfs_read+0x1df/0xbe0 [ 167.509199][ T7734] ? __fget_files+0x1fc/0x3a0 [ 167.513894][ T7734] ? __pfx_lock_release+0x10/0x10 [ 167.518934][ T7734] ? __pfx_vfs_read+0x10/0x10 [ 167.523633][ T7734] ? lock_acquire+0x2f/0xb0 [ 167.528669][ T7734] ? __fget_files+0x40/0x3a0 [ 167.533633][ T7734] ? __fget_files+0x206/0x3a0 [ 167.538341][ T7734] __x64_sys_pread64+0x1f6/0x250 [ 167.543309][ T7734] ? __pfx___x64_sys_pread64+0x10/0x10 [ 167.548808][ T7734] do_syscall_64+0xcd/0x250 [ 167.553339][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.559257][ T7734] RIP: 0033:0x7ff32e585d19 [ 167.563684][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.583392][ T7734] RSP: 002b:00007ff32c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 167.591971][ T7734] RAX: ffffffffffffffda RBX: 00007ff32e775fa0 RCX: 00007ff32e585d19 [ 167.600001][ T7734] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000003 [ 167.607988][ T7734] RBP: 00007ff32c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.615973][ T7734] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 167.623959][ T7734] R13: 0000000000000000 R14: 00007ff32e775fa0 R15: 00007ffe902f27b8 [ 167.631995][ T7734] [ 168.985594][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'. [ 169.533340][ T7789] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 169.882346][ T7798] h: entered promiscuous mode [ 170.630420][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 171.974863][ T7844] h: entered promiscuous mode [ 172.573233][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 174.244679][ T7902] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 174.257652][ T7902] netlink: 230 bytes leftover after parsing attributes in process `syz.1.510'. [ 177.932834][ T7982] nl80211: entered promiscuous mode [ 178.343250][ T7995] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(8.9.0), cmd(49) [ 182.125020][ T8068] nl80211: entered promiscuous mode [ 182.193150][ T8071] TCP: TCP_TX_DELAY enabled [ 184.364429][ T8119] nl80211: entered promiscuous mode [ 184.769566][ T8133] Process accounting resumed [ 186.027489][ T8167] netlink: 330 bytes leftover after parsing attributes in process `syz.1.576'. [ 187.204022][ T8205] ======================================================= [ 187.204022][ T8205] WARNING: The mand mount option has been deprecated and [ 187.204022][ T8205] and is ignored by this kernel. Remove the mand [ 187.204022][ T8205] option from the mount to silence this warning. [ 187.204022][ T8205] ======================================================= [ 187.735374][ T8225] FAULT_INJECTION: forcing a failure. [ 187.735374][ T8225] name failslab, interval 1, probability 0, space 0, times 0 [ 187.777344][ T8225] CPU: 1 UID: 0 PID: 8225 Comm: syz.0.587 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 187.788255][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 187.798690][ T8225] Call Trace: [ 187.802021][ T8225] [ 187.804970][ T8225] dump_stack_lvl+0x16c/0x1f0 [ 187.809681][ T8225] should_fail_ex+0x497/0x5b0 [ 187.814390][ T8225] ? fs_reclaim_acquire+0xae/0x150 [ 187.819537][ T8225] should_failslab+0xc2/0x120 [ 187.824249][ T8225] __kmalloc_noprof+0xce/0x4f0 [ 187.829045][ T8225] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 187.834703][ T8225] ? tomoyo_realpath_from_path+0xbf/0x710 [ 187.840474][ T8225] tomoyo_realpath_from_path+0xbf/0x710 [ 187.846056][ T8225] ? tomoyo_path_number_perm+0x235/0x5b0 [ 187.851724][ T8225] tomoyo_path_number_perm+0x248/0x5b0 [ 187.857216][ T8225] ? tomoyo_path_number_perm+0x235/0x5b0 [ 187.862868][ T8225] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.868883][ T8225] ? __pfx_lock_release+0x10/0x10 [ 187.873909][ T8225] ? trace_lock_acquire+0x14e/0x1f0 [ 187.879138][ T8225] ? lock_acquire+0x2f/0xb0 [ 187.883646][ T8225] ? __fget_files+0x40/0x3a0 [ 187.888253][ T8225] ? __fget_files+0x206/0x3a0 [ 187.892946][ T8225] security_file_ioctl+0x9b/0x240 [ 187.897984][ T8225] __x64_sys_ioctl+0xb7/0x200 [ 187.902679][ T8225] do_syscall_64+0xcd/0x250 [ 187.907204][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.913102][ T8225] RIP: 0033:0x7fda44585d19 [ 187.917514][ T8225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.937122][ T8225] RSP: 002b:00007fda45485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.945540][ T8225] RAX: ffffffffffffffda RBX: 00007fda44775fa0 RCX: 00007fda44585d19 [ 187.953512][ T8225] RDX: 00000000000000a3 RSI: 000000000000ae03 RDI: 0000000000000003 [ 187.961490][ T8225] RBP: 00007fda45485090 R08: 0000000000000000 R09: 0000000000000000 [ 187.969467][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.977443][ T8225] R13: 0000000000000000 R14: 00007fda44775fa0 R15: 00007fff4c09f4a8 [ 187.985431][ T8225] [ 188.019346][ T8225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.527542][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 191.535278][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 191.535876][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 191.550443][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 192.595890][ T8335] ima: policy update failed [ 192.638887][ T29] audit: type=1802 audit(4294967364.659:3): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.618" res=0 errno=0 [ 194.577127][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583745][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.663816][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 200.930541][ T8514] FAULT_INJECTION: forcing a failure. [ 200.930541][ T8514] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.974433][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.3.661 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 200.983191][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 200.985855][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 200.985872][ T8514] Call Trace: [ 200.985880][ T8514] [ 200.985889][ T8514] dump_stack_lvl+0x16c/0x1f0 [ 201.016185][ T8514] should_fail_ex+0x497/0x5b0 [ 201.021169][ T8514] _copy_from_iter+0x29b/0x1400 [ 201.026091][ T8514] ? trace_lock_acquire+0x14e/0x1f0 [ 201.031331][ T8514] ? __alloc_skb+0x200/0x380 [ 201.035955][ T8514] ? __pfx__copy_from_iter+0x10/0x10 [ 201.041274][ T8514] ? __virt_addr_valid+0x1a4/0x590 [ 201.046417][ T8514] ? __virt_addr_valid+0x5e/0x590 [ 201.051486][ T8514] ? __phys_addr_symbol+0x30/0x80 [ 201.056554][ T8514] ? __check_object_size+0x488/0x710 [ 201.061996][ T8514] netlink_sendmsg+0x813/0xd70 [ 201.066830][ T8514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.072190][ T8514] ____sys_sendmsg+0x9ae/0xb40 [ 201.077183][ T8514] ? copy_msghdr_from_user+0x10b/0x160 [ 201.083114][ T8514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.088428][ T8514] ? __lock_acquire+0xcc5/0x3c40 [ 201.093412][ T8514] ? hlock_class+0x4e/0x130 [ 201.097960][ T8514] ? __lock_acquire+0x15a9/0x3c40 [ 201.103030][ T8514] ___sys_sendmsg+0x135/0x1e0 [ 201.107743][ T8514] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.112972][ T8514] ? __pfx___lock_acquire+0x10/0x10 [ 201.118388][ T8514] ? __pfx___might_resched+0x10/0x10 [ 201.123907][ T8514] ? __might_fault+0xe3/0x190 [ 201.129348][ T8514] __sys_sendmmsg+0x201/0x420 [ 201.134197][ T8514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 201.139706][ T8514] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.145733][ T8514] ? fput+0x67/0x440 [ 201.149662][ T8514] ? ksys_write+0x1ba/0x250 [ 201.154188][ T8514] ? __pfx_ksys_write+0x10/0x10 [ 201.159072][ T8514] __x64_sys_sendmmsg+0x9c/0x100 [ 201.164045][ T8514] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.169274][ T8514] do_syscall_64+0xcd/0x250 [ 201.173904][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.179887][ T8514] RIP: 0033:0x7fd5c9b85d19 [ 201.184371][ T8514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.204024][ T8514] RSP: 002b:00007fd5ca963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.212468][ T8514] RAX: ffffffffffffffda RBX: 00007fd5c9d76080 RCX: 00007fd5c9b85d19 [ 201.220464][ T8514] RDX: 0000000000000007 RSI: 0000000020000200 RDI: 000000000000000c [ 201.228469][ T8514] RBP: 00007fd5ca963090 R08: 0000000000000000 R09: 0000000000000000 [ 201.236498][ T8514] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 201.244930][ T8514] R13: 0000000000000000 R14: 00007fd5c9d76080 R15: 00007ffd38500a48 [ 201.253290][ T8514] [ 201.256407][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.849229][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 204.893792][ T8604] ksmbd: Unknown IPC event: 0, ignore. [ 206.926870][ T8649] svc: failed to register nfsdv3 RPC service (errno 111). [ 206.961842][ T8649] svc: failed to register nfsaclv3 RPC service (errno 111). [ 208.953879][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'. [ 208.977681][ T8712] macsec0: entered allmulticast mode [ 208.990583][ T8712] veth1_macvtap: entered allmulticast mode [ 212.234738][ T8810] vivid-013: ================= START STATUS ================= [ 212.279578][ T8810] vivid-013: Generate PTS: true [ 212.304641][ T8810] vivid-013: Generate SCR: true [ 212.331979][ T8810] tpg source WxH: 640x360 (Y'CbCr) [ 212.362898][ T8810] tpg field: 1 [ 212.366468][ T8810] tpg crop: 640x360@0x0 [ 212.378336][ T8810] tpg compose: 640x360@0x0 [ 212.390303][ T8810] tpg colorspace: 8 [ 212.394151][ T8810] tpg transfer function: 0/0 [ 212.398993][ T8810] tpg Y'CbCr encoding: 0/0 [ 212.403479][ T8810] tpg quantization: 0/0 [ 212.412729][ T8810] tpg RGB range: 0/2 [ 212.417415][ T8810] vivid-013: ================== END STATUS ================== [ 212.751524][ T29] audit: type=1800 audit(4294967384.769:4): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.723" name="discovery_nqn" dev="configfs" ino=20066 res=0 errno=0 [ 212.873976][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.725'. [ 212.883477][ T8824] macsec0: entered allmulticast mode [ 212.893020][ T8824] veth1_macvtap: entered allmulticast mode [ 213.144374][ T8836] netlink: 146 bytes leftover after parsing attributes in process `syz.1.730'. [ 214.371020][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.737'. [ 214.392709][ T8864] macsec0: entered allmulticast mode [ 214.399166][ T8864] veth1_macvtap: entered allmulticast mode [ 216.981160][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 217.027528][ T8918] macsec0: entered allmulticast mode [ 217.057390][ T8918] veth1_macvtap: entered allmulticast mode [ 217.326911][ T8926] vivid-013: ================= START STATUS ================= [ 217.346682][ T8926] vivid-013: Generate PTS: true [ 217.356818][ T8926] vivid-013: Generate SCR: true [ 217.382167][ T8926] tpg source WxH: 640x360 (Y'CbCr) [ 217.388527][ T8926] tpg field: 1 [ 217.391937][ T8926] tpg crop: 640x360@0x0 [ 217.411384][ T8926] tpg compose: 640x360@0x0 [ 217.425140][ T8926] tpg colorspace: 8 [ 217.434685][ T8926] tpg transfer function: 0/0 [ 217.442660][ T8926] tpg Y'CbCr encoding: 0/0 [ 217.447106][ T8926] tpg quantization: 0/0 [ 217.455441][ T8926] tpg RGB range: 0/2 [ 217.487395][ T8926] vivid-013: ================== END STATUS ================== [ 217.753149][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.752'. [ 219.032278][ T8966] FAULT_INJECTION: forcing a failure. [ 219.032278][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 219.050295][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.1.764 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 219.060923][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.064283][ T8969] vivid-013: ================= START STATUS ================= [ 219.071529][ T8966] Call Trace: [ 219.071645][ T8966] [ 219.071657][ T8966] dump_stack_lvl+0x16c/0x1f0 [ 219.071692][ T8966] should_fail_ex+0x497/0x5b0 [ 219.071721][ T8966] ? fs_reclaim_acquire+0xae/0x150 [ 219.071752][ T8966] should_failslab+0xc2/0x120 [ 219.071786][ T8966] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 219.107450][ T8969] vivid-013: Generate PTS: [ 219.109432][ T8966] ? __pfx___might_resched+0x10/0x10 [ 219.109471][ T8966] ? __anon_vma_prepare+0xae/0x5e0 [ 219.114899][ T8969] true [ 219.119315][ T8966] __anon_vma_prepare+0xae/0x5e0 [ 219.119352][ T8966] ? __pfx___pte_alloc+0x10/0x10 [ 219.119380][ T8966] __vmf_anon_prepare+0x11c/0x240 [ 219.119409][ T8966] do_pte_missing+0x1020/0x3e00 [ 219.119438][ T8966] ? mt_find+0x82d/0xa20 [ 219.119470][ T8966] ? __pfx_lock_release+0x10/0x10 [ 219.119499][ T8966] __handle_mm_fault+0x103c/0x2a40 [ 219.127087][ T8969] [ 219.129873][ T8966] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.129907][ T8966] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 219.129950][ T8966] ? find_vma+0xc0/0x140 [ 219.129976][ T8966] ? __pfx_find_vma+0x10/0x10 [ 219.192281][ T8966] handle_mm_fault+0x3fa/0xaa0 [ 219.197069][ T8966] do_user_addr_fault+0x7a3/0x13f0 [ 219.202275][ T8966] exc_page_fault+0x5c/0xc0 [ 219.206982][ T8966] asm_exc_page_fault+0x26/0x30 [ 219.212295][ T8966] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 219.218131][ T8966] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 219.238885][ T8966] RSP: 0018:ffffc90018d2f9c0 EFLAGS: 00050202 [ 219.244961][ T8966] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000a2 [ 219.252934][ T8966] RDX: ffffed10063c2015 RSI: ffff888031e10005 RDI: 0000000000000000 [ 219.260911][ T8966] RBP: ffffc90018d2fbd0 R08: 0000000000000000 R09: ffffed10063c2014 [ 219.268885][ T8966] R10: ffff888031e100a6 R11: 0000000000000000 R12: 00000000000000a2 [ 219.276857][ T8966] R13: ffff888031e10005 R14: 0000000000000000 R15: 00000000000000a2 [ 219.284870][ T8966] _copy_to_iter+0x52f/0x1400 [ 219.289572][ T8966] ? __pfx__copy_to_iter+0x10/0x10 [ 219.294694][ T8966] ? __virt_addr_valid+0x1a4/0x590 [ 219.299824][ T8966] ? __virt_addr_valid+0x5e/0x590 [ 219.304858][ T8966] ? __phys_addr_symbol+0x30/0x80 [ 219.309894][ T8966] ? __check_object_size+0x488/0x710 [ 219.315193][ T8966] seq_read_iter+0x725/0x12b0 [ 219.319884][ T8966] seq_read+0x39f/0x4e0 [ 219.324042][ T8966] ? __pfx_seq_read+0x10/0x10 [ 219.328743][ T8966] ? __pfx_seq_read+0x10/0x10 [ 219.333429][ T8966] proc_reg_read+0x23d/0x330 [ 219.338028][ T8966] ? __pfx_proc_reg_read+0x10/0x10 [ 219.343146][ T8966] vfs_read+0x1df/0xbe0 [ 219.347315][ T8966] ? __fget_files+0x1fc/0x3a0 [ 219.352005][ T8966] ? __pfx_lock_release+0x10/0x10 [ 219.357035][ T8966] ? __pfx_vfs_read+0x10/0x10 [ 219.361720][ T8966] ? lock_acquire+0x2f/0xb0 [ 219.366223][ T8966] ? __fget_files+0x40/0x3a0 [ 219.370822][ T8966] ? __fget_files+0x206/0x3a0 [ 219.375513][ T8966] __x64_sys_pread64+0x1f6/0x250 [ 219.380460][ T8966] ? __pfx___x64_sys_pread64+0x10/0x10 [ 219.385930][ T8966] do_syscall_64+0xcd/0x250 [ 219.390445][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.396345][ T8966] RIP: 0033:0x7fdf61f85d19 [ 219.400767][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.420381][ T8966] RSP: 002b:00007fdf62d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 219.428800][ T8966] RAX: ffffffffffffffda RBX: 00007fdf62175fa0 RCX: 00007fdf61f85d19 [ 219.436773][ T8966] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000003 [ 219.444749][ T8966] RBP: 00007fdf62d52090 R08: 0000000000000000 R09: 0000000000000000 [ 219.452737][ T8966] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 219.460712][ T8966] R13: 0000000000000000 R14: 00007fdf62175fa0 R15: 00007ffc76ab0318 [ 219.468698][ T8966] [ 219.495161][ T8969] vivid-013: Generate SCR: true [ 219.515379][ T8969] tpg source WxH: 640x360 (Y'CbCr) [ 219.521505][ T8969] tpg field: 1 [ 219.546636][ T8969] tpg crop: 640x360@0x0 [ 219.551606][ T8969] tpg compose: 640x360@0x0 [ 219.556062][ T8969] tpg colorspace: 8 [ 219.563630][ T8969] tpg transfer function: 0/0 [ 219.569733][ T8969] tpg Y'CbCr encoding: 0/0 [ 219.574291][ T8969] tpg quantization: 0/0 [ 219.582388][ T8969] tpg RGB range: 0/2 [ 219.586431][ T8969] vivid-013: ================== END STATUS ================== [ 222.125694][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 230.721094][ T9215] QAT: Device 0 not found [ 231.811149][ T9248] syz.3.831 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.049816][ T9244] bond0: option updelay: invalid value (/','}:--$:) [ 232.104078][ T9244] bond0: option updelay: allowed values 0 - 2147483647 [ 232.542405][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 232.898040][ T9283] nbd: must specify at least one socket [ 233.174630][ T9294] netlink: 342 bytes leftover after parsing attributes in process `syz.1.847'. [ 233.753825][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.763573][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.782588][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.809884][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.836936][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.869569][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.161525][ T1047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.348384][ T1047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.465819][ T1047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.611774][ T1047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.185352][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 235.201621][ T1047] macvlan0: left allmulticast mode [ 235.217928][ T1047] veth1_vlan: left allmulticast mode [ 235.226210][ T1047] macvlan0: left promiscuous mode [ 235.253147][ T1047] bridge0: port 3(macvlan0) entered disabled state [ 235.264301][ T1047] bridge_slave_1: left allmulticast mode [ 235.489406][ T1047] bridge_slave_1: left promiscuous mode [ 235.498681][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.537210][ T1047] bridge_slave_0: left allmulticast mode [ 235.543775][ T1047] bridge_slave_0: left promiscuous mode [ 235.574163][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.003220][ T54] Bluetooth: hci4: command tx timeout [ 236.115624][ T9333] cgroup: fork rejected by pids controller in /syz1 [ 238.099096][ T54] Bluetooth: hci4: command tx timeout [ 238.712914][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.223583][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.520797][ T1047] bond0 (unregistering): Released all slaves [ 240.171916][ T54] Bluetooth: hci4: command tx timeout [ 240.442186][ T1047] h: left promiscuous mode [ 240.711278][ T1047] nl80211: left promiscuous mode [ 241.044632][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.056517][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.064063][ T9305] bridge_slave_0: entered allmulticast mode [ 241.071857][ T9305] bridge_slave_0: entered promiscuous mode [ 241.080205][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.087558][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.095174][ T9305] bridge_slave_1: entered allmulticast mode [ 241.103382][ T9305] bridge_slave_1: entered promiscuous mode [ 241.230894][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.321509][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.514456][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 241.584392][ T9305] team0: Port device team_slave_0 added [ 241.631143][ T9305] team0: Port device team_slave_1 added [ 241.976629][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.004080][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.076293][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.126064][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.138820][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.213891][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.253843][ T54] Bluetooth: hci4: command tx timeout [ 242.300221][ T1047] hsr_slave_0: left promiscuous mode [ 242.337384][ T1047] hsr_slave_1: left promiscuous mode [ 242.354918][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.367405][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.379125][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.397358][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.432784][ T1047] veth1_macvtap: left allmulticast mode [ 242.457519][ T1047] veth1_macvtap: left promiscuous mode [ 242.463488][ T1047] veth0_macvtap: left promiscuous mode [ 242.483652][ T1047] veth1_vlan: left promiscuous mode [ 242.489472][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 242.498994][ T1047] veth0_vlan: left promiscuous mode [ 242.500243][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 243.229658][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 243.278619][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 243.832371][ T9305] hsr_slave_0: entered promiscuous mode [ 243.878557][ T9305] hsr_slave_1: entered promiscuous mode [ 244.156375][ T9594] nbd: illegal input index 50331648 [ 244.382953][ T9305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.415465][ T9305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.466712][ T9305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.488323][ T9305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.682737][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.735342][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.798989][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.806187][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.858942][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 244.906129][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.913782][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.998745][ T9305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.037503][ T9305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.445612][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.921647][ T9305] veth0_vlan: entered promiscuous mode [ 245.966330][ T9305] veth1_vlan: entered promiscuous mode [ 246.045448][ T9305] veth0_macvtap: entered promiscuous mode [ 246.092830][ T9305] veth1_macvtap: entered promiscuous mode [ 246.159621][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.213729][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.254107][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.283669][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.302850][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.343829][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.363934][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.395074][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.424829][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.463746][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.507384][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.517226][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.553098][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.568266][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.580078][ T9305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.589189][ T9305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.598300][ T9305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.607012][ T9305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.807032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.815350][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.817416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.842343][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.434533][ T9681] netlink: 146 bytes leftover after parsing attributes in process `syz.4.880'. [ 248.081563][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 252.219970][ T9821] netlink: 146 bytes leftover after parsing attributes in process `syz.1.905'. [ 252.975285][ T9848] netlink: 322 bytes leftover after parsing attributes in process `syz.1.912'. [ 253.008845][ T9848] netlink: 322 bytes leftover after parsing attributes in process `syz.1.912'. [ 256.012146][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.019225][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.932964][ T9932] netlink: 146 bytes leftover after parsing attributes in process `syz.3.929'. [ 257.561686][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 262.903427][T10074] FAULT_INJECTION: forcing a failure. [ 262.903427][T10074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.977644][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.953'. [ 263.020186][T10074] CPU: 1 UID: 0 PID: 10074 Comm: syz.4.953 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 263.030913][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 263.040988][T10074] Call Trace: [ 263.044288][T10074] [ 263.047240][T10074] dump_stack_lvl+0x16c/0x1f0 [ 263.051950][T10074] should_fail_ex+0x497/0x5b0 [ 263.056666][T10074] _copy_from_iter+0x29b/0x1400 [ 263.061558][T10074] ? trace_lock_acquire+0x14e/0x1f0 [ 263.066792][T10074] ? __alloc_skb+0x200/0x380 [ 263.071423][T10074] ? __pfx__copy_from_iter+0x10/0x10 [ 263.076759][T10074] ? __virt_addr_valid+0x1a4/0x590 [ 263.081909][T10074] ? __virt_addr_valid+0x5e/0x590 [ 263.086970][T10074] ? __phys_addr_symbol+0x30/0x80 [ 263.092032][T10074] ? __check_object_size+0x488/0x710 [ 263.097352][T10074] netlink_sendmsg+0x813/0xd70 [ 263.102154][T10074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.107487][T10074] ____sys_sendmsg+0x9ae/0xb40 [ 263.112301][T10074] ? copy_msghdr_from_user+0x10b/0x160 [ 263.119161][T10074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.124500][T10074] ? __lock_acquire+0xcc5/0x3c40 [ 263.130990][T10074] ? hlock_class+0x4e/0x130 [ 263.138193][T10074] ? __lock_acquire+0x15a9/0x3c40 [ 263.145290][T10074] ___sys_sendmsg+0x135/0x1e0 [ 263.151580][T10074] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.156811][T10074] ? __pfx___lock_acquire+0x10/0x10 [ 263.162078][T10074] ? __pfx___might_resched+0x10/0x10 [ 263.167483][T10074] ? __might_fault+0xe3/0x190 [ 263.172460][T10074] __sys_sendmmsg+0x201/0x420 [ 263.177283][T10074] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.183626][T10074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.190196][T10074] ? fput+0x67/0x440 [ 263.194143][T10074] ? ksys_write+0x1ba/0x250 [ 263.198952][T10074] ? __pfx_ksys_write+0x10/0x10 [ 263.204151][T10074] __x64_sys_sendmmsg+0x9c/0x100 [ 263.209126][T10074] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.214356][T10074] do_syscall_64+0xcd/0x250 [ 263.218895][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.225283][T10074] RIP: 0033:0x7facecb85d19 [ 263.229902][T10074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.252421][T10074] RSP: 002b:00007faced9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.263086][T10074] RAX: ffffffffffffffda RBX: 00007facecd76080 RCX: 00007facecb85d19 [ 263.277897][T10074] RDX: 0000000000000007 RSI: 0000000020000200 RDI: 000000000000000c [ 263.289504][T10074] RBP: 00007faced9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.297944][T10074] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 263.305939][T10074] R13: 0000000000000000 R14: 00007facecd76080 R15: 00007ffdf145f808 [ 263.313947][T10074] [ 263.317058][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.988888][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 272.613068][T10291] netlink: 330 bytes leftover after parsing attributes in process `syz.2.989'. [ 273.041938][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 274.386761][ T54] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 275.584863][T10339] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1003'. [ 276.003528][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 277.173593][T10364] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1008'. [ 281.062558][T10420] FAULT_INJECTION: forcing a failure. [ 281.062558][T10420] name failslab, interval 1, probability 0, space 0, times 0 [ 281.112299][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.3.1020 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 281.123133][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.133393][T10420] Call Trace: [ 281.137423][T10420] [ 281.140661][T10420] dump_stack_lvl+0x16c/0x1f0 [ 281.146114][T10420] should_fail_ex+0x497/0x5b0 [ 281.150839][T10420] ? fs_reclaim_acquire+0xae/0x150 [ 281.155994][T10420] should_failslab+0xc2/0x120 [ 281.160709][T10420] __kmalloc_noprof+0xce/0x4f0 [ 281.165510][T10420] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 281.171790][T10420] ? tomoyo_realpath_from_path+0xbf/0x710 [ 281.177659][T10420] tomoyo_realpath_from_path+0xbf/0x710 [ 281.183262][T10420] ? tomoyo_path_number_perm+0x235/0x5b0 [ 281.188950][T10420] tomoyo_path_number_perm+0x248/0x5b0 [ 281.194471][T10420] ? tomoyo_path_number_perm+0x235/0x5b0 [ 281.200149][T10420] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.206168][T10420] ? __pfx_lock_release+0x10/0x10 [ 281.211193][T10420] ? trace_lock_acquire+0x14e/0x1f0 [ 281.216403][T10420] ? lock_acquire+0x2f/0xb0 [ 281.220907][T10420] ? __fget_files+0x40/0x3a0 [ 281.225514][T10420] ? __fget_files+0x206/0x3a0 [ 281.230305][T10420] security_file_ioctl+0x9b/0x240 [ 281.235345][T10420] __x64_sys_ioctl+0xb7/0x200 [ 281.240587][T10420] do_syscall_64+0xcd/0x250 [ 281.245116][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.251023][T10420] RIP: 0033:0x7fd5c9b85d19 [ 281.255440][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.275519][T10420] RSP: 002b:00007fd5ca984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.284052][T10420] RAX: ffffffffffffffda RBX: 00007fd5c9d75fa0 RCX: 00007fd5c9b85d19 [ 281.292035][T10420] RDX: 0000000000000000 RSI: 00000000c02063a0 RDI: 0000000000000002 [ 281.301007][T10420] RBP: 00007fd5ca984090 R08: 0000000000000000 R09: 0000000000000000 [ 281.308993][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.317005][T10420] R13: 0000000000000000 R14: 00007fd5c9d75fa0 R15: 00007ffd38500a48 [ 281.325004][T10420] [ 281.517732][T10420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.314080][T10537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1050'. [ 288.885253][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.895269][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.908646][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.928074][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.942030][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.949990][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.275325][ T3532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.418445][ T3532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.892753][ T3532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.010998][T10560] chnl_net:caif_netlink_parms(): no params data found [ 290.369184][ T3532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.705638][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.717455][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.747571][T10560] bridge_slave_0: entered allmulticast mode [ 290.754604][T10560] bridge_slave_0: entered promiscuous mode [ 290.786328][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.807448][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.821403][T10560] bridge_slave_1: entered allmulticast mode [ 290.838828][T10560] bridge_slave_1: entered promiscuous mode [ 290.900077][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.928647][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.941642][T10593] ip_vti0: entered allmulticast mode [ 290.988807][T10592] ip_vti0: left allmulticast mode [ 291.048270][ T54] Bluetooth: hci0: command tx timeout [ 291.155650][T10560] team0: Port device team_slave_0 added [ 291.185669][T10560] team0: Port device team_slave_1 added [ 291.278700][ T3532] bridge_slave_1: left allmulticast mode [ 291.284430][ T3532] bridge_slave_1: left promiscuous mode [ 291.317705][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.448747][ T3532] bridge_slave_0: left allmulticast mode [ 291.454591][ T3532] bridge_slave_0: left promiscuous mode [ 291.473179][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.764861][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.786369][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.849296][ T3532] bond0 (unregistering): Released all slaves [ 292.950501][T10560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.958423][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.991357][T10560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.061538][ T3532] nl80211: left promiscuous mode [ 293.085069][T10560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.127557][ T54] Bluetooth: hci0: command tx timeout [ 293.136970][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.197467][T10560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.381810][T10560] hsr_slave_0: entered promiscuous mode [ 293.410471][T10560] hsr_slave_1: entered promiscuous mode [ 293.427647][T10560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.452314][T10560] Cannot create hsr debugfs directory [ 294.788240][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 294.814870][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 295.207460][ T54] Bluetooth: hci0: command tx timeout [ 295.395962][ T3532] hsr_slave_0: left promiscuous mode [ 295.404805][ T3532] hsr_slave_1: left promiscuous mode [ 295.496997][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.516857][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.558395][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.565899][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.829495][ T3532] veth1_macvtap: left promiscuous mode [ 295.864490][ T3532] veth0_macvtap: left promiscuous mode [ 295.887734][ T3532] veth1_vlan: left promiscuous mode [ 295.920965][ T3532] veth0_vlan: left promiscuous mode [ 297.291997][ T54] Bluetooth: hci0: command tx timeout [ 297.469100][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 297.708273][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 299.211817][T10560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.267743][T10560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.347724][T10560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.402683][T10560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.546475][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1086'. [ 299.624907][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.719122][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.748163][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.755955][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.782048][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.789234][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.043842][T10560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.083742][T10560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.520614][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.106843][T10560] veth0_vlan: entered promiscuous mode [ 301.171334][T10560] veth1_vlan: entered promiscuous mode [ 301.252517][T10560] veth0_macvtap: entered promiscuous mode [ 301.270937][T10560] veth1_macvtap: entered promiscuous mode [ 301.319556][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.346778][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.386152][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.401728][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.411641][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.422369][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.433689][T10560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.445405][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.456082][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.465989][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.476457][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.486441][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.496946][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.508060][T10560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.540942][T10560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.550150][T10560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.559081][T10560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.568707][T10560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.786804][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.825386][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.892206][T10781] FAULT_INJECTION: forcing a failure. [ 301.892206][T10781] name failslab, interval 1, probability 0, space 0, times 0 [ 301.916794][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.947640][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.955627][T10781] CPU: 0 UID: 0 PID: 10781 Comm: syz.4.1091 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 301.967194][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 301.977265][T10781] Call Trace: [ 301.980551][T10781] [ 301.983486][T10781] dump_stack_lvl+0x16c/0x1f0 [ 301.988185][T10781] should_fail_ex+0x497/0x5b0 [ 301.993140][T10781] ? fs_reclaim_acquire+0xae/0x150 [ 301.998829][T10781] should_failslab+0xc2/0x120 [ 302.003724][T10781] __kmalloc_noprof+0xce/0x4f0 [ 302.008594][T10781] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 302.014325][T10781] ? tomoyo_realpath_from_path+0xbf/0x710 [ 302.020932][T10781] tomoyo_realpath_from_path+0xbf/0x710 [ 302.026484][T10781] ? tomoyo_path_number_perm+0x235/0x5b0 [ 302.032132][T10781] tomoyo_path_number_perm+0x248/0x5b0 [ 302.037602][T10781] ? tomoyo_path_number_perm+0x235/0x5b0 [ 302.043248][T10781] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.049390][T10781] ? __pfx_lock_release+0x10/0x10 [ 302.054534][T10781] ? trace_lock_acquire+0x14e/0x1f0 [ 302.059756][T10781] ? lock_acquire+0x2f/0xb0 [ 302.064267][T10781] ? __fget_files+0x40/0x3a0 [ 302.068877][T10781] ? __fget_files+0x206/0x3a0 [ 302.073739][T10781] security_file_ioctl+0x9b/0x240 [ 302.078768][T10781] __x64_sys_ioctl+0xb7/0x200 [ 302.083458][T10781] do_syscall_64+0xcd/0x250 [ 302.087973][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.094069][T10781] RIP: 0033:0x7facecb85d19 [ 302.098492][T10781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.118205][T10781] RSP: 002b:00007faced9c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.126624][T10781] RAX: ffffffffffffffda RBX: 00007facecd75fa0 RCX: 00007facecb85d19 [ 302.134596][T10781] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000017 [ 302.142567][T10781] RBP: 00007faced9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 302.150735][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.158733][T10781] R13: 0000000000000000 R14: 00007facecd75fa0 R15: 00007ffdf145f808 [ 302.166916][T10781] [ 302.347439][T10781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.472982][T10786] Process accounting resumed [ 306.809727][T10872] FAULT_INJECTION: forcing a failure. [ 306.809727][T10872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.839018][T10872] CPU: 1 UID: 0 PID: 10872 Comm: syz.3.1103 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 306.849829][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.859904][T10872] Call Trace: [ 306.863206][T10872] [ 306.866154][T10872] dump_stack_lvl+0x16c/0x1f0 [ 306.870880][T10872] should_fail_ex+0x497/0x5b0 [ 306.875591][T10872] _copy_from_user+0x2e/0xd0 [ 306.880208][T10872] memdup_user+0x71/0xd0 [ 306.884483][T10872] btrfs_control_ioctl+0xa0/0x3c0 [ 306.889542][T10872] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 306.895205][T10872] ? __fget_files+0x206/0x3a0 [ 306.899912][T10872] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 306.905578][T10872] __x64_sys_ioctl+0x190/0x200 [ 306.910392][T10872] do_syscall_64+0xcd/0x250 [ 306.914936][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.920858][T10872] RIP: 0033:0x7fd5c9b85d19 [ 306.925294][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.944932][T10872] RSP: 002b:00007fd5ca984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.953366][T10872] RAX: ffffffffffffffda RBX: 00007fd5c9d75fa0 RCX: 00007fd5c9b85d19 [ 306.961343][T10872] RDX: 0000000020001680 RSI: 0000000090009427 RDI: 0000000000000008 [ 306.969318][T10872] RBP: 00007fd5ca984090 R08: 0000000000000000 R09: 0000000000000000 [ 306.977297][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.985276][T10872] R13: 0000000000000000 R14: 00007fd5c9d75fa0 R15: 00007ffd38500a48 [ 306.993260][T10872] [ 307.885755][T10902] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1107'. [ 310.014074][T10952] aoe: can't write to that file. [ 311.828644][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 313.774071][T11025] FAULT_INJECTION: forcing a failure. [ 313.774071][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.824461][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.2.1131 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 313.838622][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 313.848784][T11025] Call Trace: [ 313.852104][T11025] [ 313.855055][T11025] dump_stack_lvl+0x16c/0x1f0 [ 313.859768][T11025] should_fail_ex+0x497/0x5b0 [ 313.864482][T11025] _copy_to_user+0x32/0xd0 [ 313.868936][T11025] simple_read_from_buffer+0xd0/0x160 [ 313.874353][T11025] proc_fail_nth_read+0x198/0x270 [ 313.879441][T11025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.885224][T11025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.891965][T11025] vfs_read+0x1df/0xbe0 [ 313.896258][T11025] ? __fget_files+0x1fc/0x3a0 [ 313.900987][T11025] ? __pfx___mutex_lock+0x10/0x10 [ 313.906046][T11025] ? __pfx_vfs_read+0x10/0x10 [ 313.910763][T11025] ? __fget_files+0x206/0x3a0 [ 313.915482][T11025] ksys_read+0x12b/0x250 [ 313.919755][T11025] ? __pfx_ksys_read+0x10/0x10 [ 313.924584][T11025] do_syscall_64+0xcd/0x250 [ 313.929968][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.936364][T11025] RIP: 0033:0x7ff32e58472c [ 313.942316][T11025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 313.963971][T11025] RSP: 002b:00007ff32c3d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.972424][T11025] RAX: ffffffffffffffda RBX: 00007ff32e776080 RCX: 00007ff32e58472c [ 313.980425][T11025] RDX: 000000000000000f RSI: 00007ff32c3d50a0 RDI: 0000000000000008 [ 313.988611][T11025] RBP: 00007ff32c3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 313.997177][T11025] R10: 000000000000d634 R11: 0000000000000246 R12: 0000000000000001 [ 314.006434][T11025] R13: 0000000000000001 R14: 00007ff32e776080 R15: 00007ffe902f27b8 [ 314.015327][T11025] [ 317.450457][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460220][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.770505][T11148] ima: Unable to open file: / (-2) [ 319.770963][T11148] ima: policy update failed [ 319.794666][ T29] audit: type=1802 audit(4294967348.450:5): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1157" res=0 errno=0 [ 320.055720][T11154] FAULT_INJECTION: forcing a failure. [ 320.055720][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 320.107493][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.4.1158 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 320.118474][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 320.128556][T11154] Call Trace: [ 320.131852][T11154] [ 320.134823][T11154] dump_stack_lvl+0x16c/0x1f0 [ 320.141365][T11154] should_fail_ex+0x497/0x5b0 [ 320.146164][T11154] should_failslab+0xc2/0x120 [ 320.150904][T11154] __kmalloc_cache_noprof+0x68/0x420 [ 320.156436][T11154] ? __sctp_v6_cmp_addr+0x206/0x530 [ 320.161783][T11154] sctp_add_bind_addr+0x9d/0x3e0 [ 320.166758][T11154] sctp_copy_local_addr_list+0x39e/0x5a0 [ 320.172412][T11154] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 320.178580][T11154] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 320.184485][T11154] ? sctp_bind_addr_copy+0xe0/0x530 [ 320.189684][T11154] sctp_bind_addr_copy+0xe0/0x530 [ 320.195522][T11154] sctp_connect_new_asoc+0x1d8/0x790 [ 320.200924][T11154] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 320.206765][T11154] ? lock_acquire+0x2f/0xb0 [ 320.211304][T11154] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 320.217722][T11154] __sctp_connect+0x3f5/0xc60 [ 320.222433][T11154] ? sctp_inet_connect+0xac/0x200 [ 320.227490][T11154] ? __pfx___sctp_connect+0x10/0x10 [ 320.232710][T11154] ? __pfx_sctp_inet_connect+0x10/0x10 [ 320.238183][T11154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 320.244095][T11154] ? __pfx_sctp_inet_connect+0x10/0x10 [ 320.249617][T11154] sctp_inet_connect+0x15f/0x200 [ 320.254956][T11154] __sys_connect_file+0x13e/0x1a0 [ 320.260006][T11154] __sys_connect+0x14f/0x170 [ 320.264608][T11154] ? __pfx___sys_connect+0x10/0x10 [ 320.269744][T11154] ? __pfx_ksys_write+0x10/0x10 [ 320.274609][T11154] __x64_sys_connect+0x72/0xb0 [ 320.279395][T11154] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.284614][T11154] do_syscall_64+0xcd/0x250 [ 320.289877][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.296687][T11154] RIP: 0033:0x7facecb85d19 [ 320.301203][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.321007][T11154] RSP: 002b:00007faced9c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 320.329430][T11154] RAX: ffffffffffffffda RBX: 00007facecd75fa0 RCX: 00007facecb85d19 [ 320.337403][T11154] RDX: 0000000000000054 RSI: 0000000020000080 RDI: 0000000000000003 [ 320.345473][T11154] RBP: 00007faced9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 320.354426][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.362595][T11154] R13: 0000000000000000 R14: 00007facecd75fa0 R15: 00007ffdf145f808 [ 320.370689][T11154] [ 320.373730][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.560165][T11231] netlink: 'syz.2.1170': attribute type 8 has an invalid length. [ 322.977513][T11244] Process accounting resumed [ 324.962312][T11303] aoe: copy from user failed [ 324.966962][T11303] aoe: could not set interface list: too many interfaces [ 325.480543][T11316] FAULT_INJECTION: forcing a failure. [ 325.480543][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 325.531063][T11316] CPU: 1 UID: 0 PID: 11316 Comm: syz.2.1185 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 325.542854][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 325.553240][T11316] Call Trace: [ 325.556813][T11316] [ 325.559953][T11316] dump_stack_lvl+0x16c/0x1f0 [ 325.564774][T11316] should_fail_ex+0x497/0x5b0 [ 325.569670][T11316] ? fs_reclaim_acquire+0xae/0x150 [ 325.574825][T11316] should_failslab+0xc2/0x120 [ 325.580150][T11316] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 325.585593][T11316] ? __pfx___might_resched+0x10/0x10 [ 325.590907][T11316] ? __anon_vma_prepare+0x344/0x5e0 [ 325.596147][T11316] __anon_vma_prepare+0x344/0x5e0 [ 325.601208][T11316] ? __pfx___pte_alloc+0x10/0x10 [ 325.606177][T11316] __vmf_anon_prepare+0x11c/0x240 [ 325.611245][T11316] do_pte_missing+0x1020/0x3e00 [ 325.617445][T11316] ? mt_find+0x82d/0xa20 [ 325.622103][T11316] ? __pfx_lock_release+0x10/0x10 [ 325.627588][T11316] __handle_mm_fault+0x103c/0x2a40 [ 325.632961][T11316] ? __pfx___handle_mm_fault+0x10/0x10 [ 325.638463][T11316] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 325.644230][T11316] ? find_vma+0xc0/0x140 [ 325.648504][T11316] ? __pfx_find_vma+0x10/0x10 [ 325.653215][T11316] handle_mm_fault+0x3fa/0xaa0 [ 325.658025][T11316] do_user_addr_fault+0x7a3/0x13f0 [ 325.663184][T11316] exc_page_fault+0x5c/0xc0 [ 325.668005][T11316] asm_exc_page_fault+0x26/0x30 [ 325.672935][T11316] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 325.678982][T11316] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 325.699509][T11316] RSP: 0018:ffffc9000c26f9c0 EFLAGS: 00050202 [ 325.705605][T11316] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000a2 [ 325.713700][T11316] RDX: ffffed100c691815 RSI: ffff88806348c005 RDI: 0000000000000000 [ 325.721724][T11316] RBP: ffffc9000c26fbd0 R08: 0000000000000000 R09: ffffed100c691814 [ 325.730246][T11316] R10: ffff88806348c0a6 R11: 0000000000000000 R12: 00000000000000a2 [ 325.738352][T11316] R13: ffff88806348c005 R14: 0000000000000000 R15: 00000000000000a2 [ 325.746370][T11316] _copy_to_iter+0x52f/0x1400 [ 325.751093][T11316] ? __pfx__copy_to_iter+0x10/0x10 [ 325.756238][T11316] ? __virt_addr_valid+0x1a4/0x590 [ 325.761504][T11316] ? __virt_addr_valid+0x5e/0x590 [ 325.766567][T11316] ? __phys_addr_symbol+0x30/0x80 [ 325.771789][T11316] ? __check_object_size+0x488/0x710 [ 325.777221][T11316] seq_read_iter+0x725/0x12b0 [ 325.781971][T11316] seq_read+0x39f/0x4e0 [ 325.786610][T11316] ? __pfx_seq_read+0x10/0x10 [ 325.791336][T11316] ? __pfx_seq_read+0x10/0x10 [ 325.796048][T11316] proc_reg_read+0x23d/0x330 [ 325.800672][T11316] ? __pfx_proc_reg_read+0x10/0x10 [ 325.805862][T11316] vfs_read+0x1df/0xbe0 [ 325.810056][T11316] ? __fget_files+0x1fc/0x3a0 [ 325.814873][T11316] ? __pfx_lock_release+0x10/0x10 [ 325.820193][T11316] ? __pfx_vfs_read+0x10/0x10 [ 325.824954][T11316] ? lock_acquire+0x2f/0xb0 [ 325.829792][T11316] ? __fget_files+0x40/0x3a0 [ 325.834952][T11316] ? __fget_files+0x206/0x3a0 [ 325.839679][T11316] __x64_sys_pread64+0x1f6/0x250 [ 325.844652][T11316] ? __pfx___x64_sys_pread64+0x10/0x10 [ 325.850153][T11316] do_syscall_64+0xcd/0x250 [ 325.854694][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.860615][T11316] RIP: 0033:0x7ff32e585d19 [ 325.865060][T11316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.885775][T11316] RSP: 002b:00007ff32c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 325.894286][T11316] RAX: ffffffffffffffda RBX: 00007ff32e775fa0 RCX: 00007ff32e585d19 [ 325.902297][T11316] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000003 [ 325.910290][T11316] RBP: 00007ff32c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.918287][T11316] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 325.926290][T11316] R13: 0000000000000000 R14: 00007ff32e775fa0 R15: 00007ffe902f27b8 [ 325.934410][T11316] [ 327.864359][T11371] FAULT_INJECTION: forcing a failure. [ 327.864359][T11371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.914129][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.3.1193 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 327.925408][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 327.936115][T11371] Call Trace: [ 327.939414][T11371] [ 327.942359][T11371] dump_stack_lvl+0x16c/0x1f0 [ 327.947060][T11371] should_fail_ex+0x497/0x5b0 [ 327.951767][T11371] _copy_to_user+0x32/0xd0 [ 327.956219][T11371] simple_read_from_buffer+0xd0/0x160 [ 327.961804][T11371] proc_fail_nth_read+0x198/0x270 [ 327.966857][T11371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.972627][T11371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.978222][T11371] vfs_read+0x1df/0xbe0 [ 327.982672][T11371] ? __fget_files+0x1fc/0x3a0 [ 327.987378][T11371] ? __pfx___mutex_lock+0x10/0x10 [ 327.992444][T11371] ? __pfx_vfs_read+0x10/0x10 [ 327.997159][T11371] ? __fget_files+0x206/0x3a0 [ 328.001874][T11371] ksys_read+0x12b/0x250 [ 328.006139][T11371] ? __pfx_ksys_read+0x10/0x10 [ 328.011138][T11371] do_syscall_64+0xcd/0x250 [ 328.015891][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.022160][T11371] RIP: 0033:0x7fd5c9b8472c [ 328.026700][T11371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.046420][T11371] RSP: 002b:00007fd5ca984030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.054860][T11371] RAX: ffffffffffffffda RBX: 00007fd5c9d75fa0 RCX: 00007fd5c9b8472c [ 328.062850][T11371] RDX: 000000000000000f RSI: 00007fd5ca9840a0 RDI: 0000000000000004 [ 328.071101][T11371] RBP: 00007fd5ca984090 R08: 0000000000000000 R09: 0000000000000000 [ 328.079221][T11371] R10: 000000002000fdff R11: 0000000000000246 R12: 0000000000000001 [ 328.087570][T11371] R13: 0000000000000000 R14: 00007fd5c9d75fa0 R15: 00007ffd38500a48 [ 328.095759][T11371] [ 328.986331][T11383] ima: Unable to open file: / (-2) [ 328.991469][T11383] ima: policy update failed [ 329.057732][ T29] audit: type=1802 audit(4294967357.669:6): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1195" res=0 errno=0 [ 330.495731][T11407] can: request_module (can-proto-5) failed. [ 331.275783][T11419] cgroup: fork rejected by pids controller in /syz2 [ 332.004811][T11473] ima: Unable to open file: / (-2) [ 332.005353][T11473] ima: policy update failed [ 332.037571][ T29] audit: type=1802 audit(4294967360.699:7): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1210" res=0 errno=0 [ 344.484344][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1245'. [ 344.761456][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 345.015747][T11621] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1246'. [ 347.902123][T11668] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1257'. [ 348.163280][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1258'. [ 348.494435][T11684] FAULT_INJECTION: forcing a failure. [ 348.494435][T11684] name failslab, interval 1, probability 0, space 0, times 0 [ 348.518295][T11684] CPU: 0 UID: 0 PID: 11684 Comm: syz.3.1261 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 348.529120][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 348.539204][T11684] Call Trace: [ 348.542502][T11684] [ 348.545447][T11684] dump_stack_lvl+0x16c/0x1f0 [ 348.550165][T11684] should_fail_ex+0x497/0x5b0 [ 348.554873][T11684] ? fs_reclaim_acquire+0xae/0x150 [ 348.560021][T11684] should_failslab+0xc2/0x120 [ 348.564738][T11684] __kmalloc_noprof+0xce/0x4f0 [ 348.569534][T11684] ? d_absolute_path+0x137/0x1b0 [ 348.574502][T11684] ? tomoyo_encode2+0x100/0x3e0 [ 348.579389][T11684] tomoyo_encode2+0x100/0x3e0 [ 348.584100][T11684] tomoyo_realpath_from_path+0x1a7/0x710 [ 348.589769][T11684] tomoyo_path_number_perm+0x248/0x5b0 [ 348.595265][T11684] ? tomoyo_path_number_perm+0x235/0x5b0 [ 348.600936][T11684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.606984][T11684] ? __pfx_lock_release+0x10/0x10 [ 348.612036][T11684] ? trace_lock_acquire+0x14e/0x1f0 [ 348.617274][T11684] ? lock_acquire+0x2f/0xb0 [ 348.621799][T11684] ? __fget_files+0x40/0x3a0 [ 348.626424][T11684] ? __fget_files+0x206/0x3a0 [ 348.631145][T11684] security_file_ioctl+0x9b/0x240 [ 348.636198][T11684] __x64_sys_ioctl+0xb7/0x200 [ 348.640918][T11684] do_syscall_64+0xcd/0x250 [ 348.645462][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.651394][T11684] RIP: 0033:0x7fd5c9b85d19 [ 348.655833][T11684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.678223][T11684] RSP: 002b:00007fd5ca984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.690505][T11684] RAX: ffffffffffffffda RBX: 00007fd5c9d75fa0 RCX: 00007fd5c9b85d19 [ 348.704360][T11684] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000017 [ 348.715257][T11684] RBP: 00007fd5ca984090 R08: 0000000000000000 R09: 0000000000000000 [ 348.723966][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.731967][T11684] R13: 0000000000000000 R14: 00007fd5c9d75fa0 R15: 00007ffd38500a48 [ 348.739983][T11684] [ 348.756367][T11684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.932427][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1277'. [ 352.026296][T11728] FAULT_INJECTION: forcing a failure. [ 352.026296][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.058431][T11728] CPU: 1 UID: 0 PID: 11728 Comm: syz.4.1274 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 352.069253][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 352.079330][T11728] Call Trace: [ 352.082620][T11728] [ 352.085593][T11728] dump_stack_lvl+0x16c/0x1f0 [ 352.090353][T11728] should_fail_ex+0x497/0x5b0 [ 352.095122][T11728] _copy_from_user+0x2e/0xd0 [ 352.099757][T11728] copy_msghdr_from_user+0x99/0x160 [ 352.105117][T11728] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 352.111003][T11728] ___sys_sendmsg+0xff/0x1e0 [ 352.115725][T11728] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.120978][T11728] ? __pfx_lock_release+0x10/0x10 [ 352.126024][T11728] ? trace_lock_acquire+0x14e/0x1f0 [ 352.131275][T11728] ? __fget_files+0x206/0x3a0 [ 352.136359][T11728] __sys_sendmsg+0x16e/0x220 [ 352.141295][T11728] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.146534][T11728] do_syscall_64+0xcd/0x250 [ 352.151086][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.157037][T11728] RIP: 0033:0x7facecb85d19 [ 352.161487][T11728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.181097][T11728] RSP: 002b:00007faced9c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.190224][T11728] RAX: ffffffffffffffda RBX: 00007facecd75fa0 RCX: 00007facecb85d19 [ 352.198497][T11728] RDX: 0000000000000080 RSI: 0000000020003100 RDI: 0000000000000003 [ 352.207267][T11728] RBP: 00007faced9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 352.215255][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.223223][T11728] R13: 0000000000000000 R14: 00007facecd75fa0 R15: 00007ffdf145f808 [ 352.231211][T11728] [ 352.309521][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1273'. [ 352.737482][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 360.490688][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 368.359157][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.377858][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.421140][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.461166][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.491429][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 368.499137][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.791457][T11776] chnl_net:caif_netlink_parms(): no params data found [ 368.938996][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.967622][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.007725][T11776] bridge_slave_0: entered allmulticast mode [ 369.049101][T11776] bridge_slave_0: entered promiscuous mode [ 369.086922][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.106435][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.118224][T11776] bridge_slave_1: entered allmulticast mode [ 369.125491][T11776] bridge_slave_1: entered promiscuous mode [ 369.254287][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.282949][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.434748][T11776] team0: Port device team_slave_0 added [ 369.450904][T11776] team0: Port device team_slave_1 added [ 369.567824][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.575828][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.623181][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.647127][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.654167][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.687411][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.786840][T11776] hsr_slave_0: entered promiscuous mode [ 369.804655][T11776] hsr_slave_1: entered promiscuous mode [ 369.829084][T11776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.844261][T11776] Cannot create hsr debugfs directory [ 370.044841][T11423] syz.2.1204 (11423) used greatest stack depth: 19280 bytes left [ 370.502137][T11776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.587258][ T5840] Bluetooth: hci3: command tx timeout [ 370.949778][T11776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.251378][T11776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.410646][T11776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.841455][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.912763][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.943543][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.950828][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.987770][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.995147][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.271704][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.647769][ T5840] Bluetooth: hci3: command tx timeout [ 372.668423][T11453] syz.2.1204 (11453) used greatest stack depth: 19232 bytes left [ 372.759326][T11776] veth0_vlan: entered promiscuous mode [ 372.796413][T11776] veth1_vlan: entered promiscuous mode [ 372.866059][T11776] veth0_macvtap: entered promiscuous mode [ 372.886659][T11776] veth1_macvtap: entered promiscuous mode [ 372.950076][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.972354][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.002845][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.029984][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.058692][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.074697][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.096423][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.109355][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.121800][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.145312][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.162848][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.194449][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.230915][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.262613][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.289096][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.313408][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.346941][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.376084][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.409694][T11776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.429613][T11776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.457367][T11776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.487365][T11776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.708489][T11452] syz.2.1204 (11452) used greatest stack depth: 19000 bytes left [ 373.962149][T11834] netlink: 178 bytes leftover after parsing attributes in process `syz.3.1296'. [ 373.999965][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.010348][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.071818][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.111480][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.386055][T11442] syz.2.1204 (11442) used greatest stack depth: 18800 bytes left [ 374.539495][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1285'. [ 374.727537][ T5840] Bluetooth: hci3: command tx timeout [ 375.288143][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1285'. [ 376.296550][T11870] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 376.811221][ T5840] Bluetooth: hci3: command tx timeout [ 378.910136][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.939128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.004459][T11446] syz.2.1204 (11446) used greatest stack depth: 16624 bytes left [ 381.933867][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1324'. [ 383.879614][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1334'. [ 385.261707][T12035] ------------[ cut here ]------------ [ 385.268710][T12035] kernel BUG at arch/x86/mm/physaddr.c:28! [ 385.276066][T12035] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 385.288090][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.5.1342 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 385.300529][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 385.311831][T12035] RIP: 0010:__phys_addr+0xd8/0x150 [ 385.318938][T12035] Code: 48 d3 e8 48 89 c5 48 89 c6 e8 c4 c7 4e 00 48 85 ed 75 11 e8 4a c5 4e 00 48 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 39 c5 4e 00 90 <0f> 0b e8 31 c5 4e 00 48 c7 c0 10 80 ba 8d 48 ba 00 00 00 00 00 fc [ 385.340401][T12035] RSP: 0018:ffffc9001940f770 EFLAGS: 00010283 [ 385.346489][T12035] RAX: 0000000000002e10 RBX: 0000778000000000 RCX: ffffc9000d6cb000 [ 385.356406][T12035] RDX: 0000000000080000 RSI: ffffffff814a89b7 RDI: 0000000000000006 [ 385.367822][T12035] RBP: 0000000080000000 R08: 0000000000000006 R09: 0000000080000000 [ 385.378071][T12035] R10: 0000778000000000 R11: ffffffff81fb8dda R12: 0000000000000000 [ 385.386532][T12035] R13: ffff88807a5fa7e0 R14: 0000000000000004 R15: 0000000000000001 [ 385.400086][T12035] FS: 00007ffa06bcd6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 385.410597][T12035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.417927][T12035] CR2: 00007fd5c9d77bac CR3: 0000000041eee000 CR4: 00000000003526f0 [ 385.425921][T12035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.433976][T12035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.441943][T12035] Call Trace: [ 385.445215][T12035] [ 385.449744][T12035] ? die+0x31/0x80 [ 385.453542][T12035] ? do_trap+0x232/0x430 [ 385.461133][T12035] ? __phys_addr+0xd8/0x150 [ 385.466821][T12035] ? __phys_addr+0xd8/0x150 [ 385.471419][T12035] ? do_error_trap+0xf4/0x230 [ 385.476116][T12035] ? __phys_addr+0xd8/0x150 [ 385.480636][T12035] ? handle_invalid_op+0x34/0x40 [ 385.485940][T12035] ? __phys_addr+0xd8/0x150 [ 385.491690][T12035] ? exc_invalid_op+0x2e/0x50 [ 385.496380][T12035] ? asm_exc_invalid_op+0x1a/0x20 [ 385.501684][T12035] ? __kasan_kmalloc+0xaa/0xb0 [ 385.506459][T12035] ? __phys_addr+0xd7/0x150 [ 385.510966][T12035] ? __phys_addr+0xd8/0x150 [ 385.515472][T12035] __rb_map_vma+0x5b3/0xae0 [ 385.519985][T12035] ? __pfx___rb_map_vma+0x10/0x10 [ 385.525017][T12035] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.530830][T12035] ring_buffer_map+0x56e/0x9b0 [ 385.535602][T12035] tracing_buffers_mmap+0xa6/0x120 [ 385.543077][T12035] __mmap_region+0x1786/0x2670 [ 385.548135][T12035] ? __pfx___lock_acquire+0x10/0x10 [ 385.555619][T12035] ? __pfx___mmap_region+0x10/0x10 [ 385.562091][T12035] ? hlock_class+0x4e/0x130 [ 385.570091][T12035] ? mark_lock+0xb5/0xc60 [ 385.574893][T12035] ? cap_mmap_addr+0x53/0x320 [ 385.579580][T12035] mmap_region+0x127/0x320 [ 385.584007][T12035] do_mmap+0xc00/0xfc0 [ 385.588077][T12035] vm_mmap_pgoff+0x1ba/0x360 [ 385.594308][T12035] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 385.599909][T12035] ? __fget_files+0x206/0x3a0 [ 385.604699][T12035] ksys_mmap_pgoff+0x32c/0x5c0 [ 385.611174][T12035] ? rcu_is_watching+0x12/0xc0 [ 385.616098][T12035] __x64_sys_mmap+0x125/0x190 [ 385.624512][T12035] do_syscall_64+0xcd/0x250 [ 385.629126][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.635502][T12035] RIP: 0033:0x7ffa05d85d19 [ 385.639930][T12035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.661032][T12035] RSP: 002b:00007ffa06bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 385.675119][T12035] RAX: ffffffffffffffda RBX: 00007ffa05f75fa0 RCX: 00007ffa05d85d19 [ 385.686535][T12035] RDX: 0000000000000009 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 385.695519][T12035] RBP: 00007ffa05e01a20 R08: 0000000000000003 R09: 0000000000800000 [ 385.705939][T12035] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 385.715560][T12035] R13: 0000000000000000 R14: 00007ffa05f75fa0 R15: 00007ffe94db8bb8 [ 385.723537][T12035] [ 385.726549][T12035] Modules linked in: [ 385.733505][T12035] ---[ end trace 0000000000000000 ]--- [ 385.741032][T12035] RIP: 0010:__phys_addr+0xd8/0x150 [ 385.750893][T12035] Code: 48 d3 e8 48 89 c5 48 89 c6 e8 c4 c7 4e 00 48 85 ed 75 11 e8 4a c5 4e 00 48 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 39 c5 4e 00 90 <0f> 0b e8 31 c5 4e 00 48 c7 c0 10 80 ba 8d 48 ba 00 00 00 00 00 fc [ 385.772316][T12035] RSP: 0018:ffffc9001940f770 EFLAGS: 00010283 [ 385.778689][T12035] RAX: 0000000000002e10 RBX: 0000778000000000 RCX: ffffc9000d6cb000 [ 385.786765][T12035] RDX: 0000000000080000 RSI: ffffffff814a89b7 RDI: 0000000000000006 [ 385.796504][T12035] RBP: 0000000080000000 R08: 0000000000000006 R09: 0000000080000000 [ 385.806605][T12035] R10: 0000778000000000 R11: ffffffff81fb8dda R12: 0000000000000000 [ 385.815943][T12035] R13: ffff88807a5fa7e0 R14: 0000000000000004 R15: 0000000000000001 [ 385.818488][T12038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 385.827291][T12035] FS: 00007ffa06bcd6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 385.845005][T12038] FAULT_INJECTION: forcing a failure. [ 385.845005][T12038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.849244][T12035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.862137][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.3.1343 Tainted: G D 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 385.883789][T12038] Tainted: [D]=DIE [ 385.887793][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 385.898456][T12038] Call Trace: [ 385.901858][T12038] [ 385.904811][T12038] dump_stack_lvl+0x16c/0x1f0 [ 385.910302][T12038] should_fail_ex+0x497/0x5b0 [ 385.914993][T12038] _copy_from_user+0x2e/0xd0 [ 385.919586][T12038] copy_msghdr_from_user+0x99/0x160 [ 385.924789][T12038] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 385.930599][T12038] ? kfree+0x274/0x4b0 [ 385.935479][T12038] ? __pfx__kstrtoull+0x10/0x10 [ 385.940600][T12038] ? lock_release+0x4e2/0x6f0 [ 385.947476][T12038] ___sys_sendmsg+0xff/0x1e0 [ 385.955490][T12038] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.963409][T12038] ? __pfx_kstrtouint+0x10/0x10 [ 385.969062][T12038] ? rcu_is_watching+0x12/0xc0 [ 385.974188][T12038] ? __pfx___might_resched+0x10/0x10 [ 385.980448][T12038] ? __might_fault+0xe3/0x190 [ 385.985333][T12038] __sys_sendmmsg+0x201/0x420 [ 385.990449][T12038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.995928][T12038] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.001927][T12038] ? fput+0x67/0x440 [ 386.005831][T12038] ? ksys_write+0x1ba/0x250 [ 386.010333][T12038] ? __pfx_ksys_write+0x10/0x10 [ 386.015195][T12038] __x64_sys_sendmmsg+0x9c/0x100 [ 386.020938][T12038] do_syscall_64+0xcd/0x250 [ 386.025807][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.031766][T12038] RIP: 0033:0x7fd5c9b85d19 [ 386.036235][T12038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.057337][T12038] RSP: 002b:00007fd5ca963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 386.065751][T12038] RAX: ffffffffffffffda RBX: 00007fd5c9d76080 RCX: 00007fd5c9b85d19 [ 386.073726][T12038] RDX: 0000000000000007 RSI: 0000000020000200 RDI: 000000000000000c [ 386.081700][T12038] RBP: 00007fd5ca963090 R08: 0000000000000000 R09: 0000000000000000 [ 386.090636][T12038] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 386.099334][T12038] R13: 0000000000000000 R14: 00007fd5c9d76080 R15: 00007ffd38500a48 [ 386.107340][T12038] [ 386.111840][T12035] CR2: 00007fd5ca963d58 CR3: 0000000041eee000 CR4: 00000000003526f0 [ 386.120931][T12035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.130389][T12035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.136751][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1343'. [ 386.140191][T12035] Kernel panic - not syncing: Fatal exception [ 386.148377][T12035] Kernel Offset: disabled