last executing test programs: 1.802498038s ago: executing program 3 (id=2375): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8991, &(0x7f0000000100)="184c4d3a") 1.4914324s ago: executing program 3 (id=2383): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}], 0x1, 0x10022, 0x0) 1.188155104s ago: executing program 0 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0) 1.027995805s ago: executing program 0 (id=2394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x78, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 961.137779ms ago: executing program 4 (id=2396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 916.419008ms ago: executing program 0 (id=2397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) 827.117936ms ago: executing program 2 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002"], 0x44}}, 0x0) 825.498859ms ago: executing program 1 (id=2400): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) 797.194485ms ago: executing program 0 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}, @NL80211_ATTR_PROBE_RESP={0xa, 0x91, "40bf43c82bfa"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x7c}}, 0x0) 736.233629ms ago: executing program 4 (id=2402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000001380)="ee885d93") 693.571535ms ago: executing program 1 (id=2403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x40080) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf257b"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) socket$inet6_udp(0xa, 0x2, 0x0) 665.186479ms ago: executing program 4 (id=2404): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 604.245515ms ago: executing program 0 (id=2405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/4092, 0x6d989}], 0x1, 0x0, 0x2000000000000}, 0x700) 604.085769ms ago: executing program 2 (id=2406): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000140)=@sco, 0x80, 0x0}}], 0x1, 0x8000) 547.959161ms ago: executing program 1 (id=2407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000040)=@tcp, 0xdb078b170e00ec08}, 0x20) 527.996246ms ago: executing program 3 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffb9f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 456.321142ms ago: executing program 2 (id=2409): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000003c0)) 456.141962ms ago: executing program 4 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 413.083492ms ago: executing program 0 (id=2411): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x62040200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) 372.895882ms ago: executing program 1 (id=2412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2, 0x0, 0xff, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x8, 0x0, 0x0, 0x1}}}}}}, 0x0) 320.260043ms ago: executing program 3 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x9, 0x4) 308.200199ms ago: executing program 2 (id=2414): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 296.760509ms ago: executing program 4 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 168.252573ms ago: executing program 1 (id=2416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff7e1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2204c011}, 0x48840) 168.108553ms ago: executing program 3 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 152.76881ms ago: executing program 2 (id=2418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000a0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 101.290671ms ago: executing program 4 (id=2419): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x1e0, 0x0, 0x5002004a, 0x0, 0x128, 0x0, 0x1f8, 0x3c8, 0x3c8, 0x1f8, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20000}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 273.306µs ago: executing program 3 (id=2420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01071fb7761a88cf7a2501000000040001801c00028018000180080001000f0000000c0001"], 0x34}}, 0x2000c050) 97.367µs ago: executing program 2 (id=2421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000030801"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 1 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) kernel console output (not intermixed with test programs): 102658][T12224] ? __fget_files+0x2a/0x410 [ 277.102691][T12224] ? __fget_files+0x2a/0x410 [ 277.102733][T12224] __sys_sendmsg+0x269/0x350 [ 277.102763][T12224] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.102845][T12224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.102877][T12224] ? do_syscall_64+0x100/0x230 [ 277.102907][T12224] ? do_syscall_64+0xb6/0x230 [ 277.102937][T12224] do_syscall_64+0xf3/0x230 [ 277.102962][T12224] ? clear_bhb_loop+0x35/0x90 [ 277.102991][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.103018][T12224] RIP: 0033:0x7fa01478d169 [ 277.103038][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.103053][T12224] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.103076][T12224] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 277.103100][T12224] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 277.103113][T12224] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 277.103126][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.103138][T12224] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 277.103175][T12224] [ 277.656132][T12241] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.1778'. [ 277.704713][T12228] lo speed is unknown, defaulting to 1000 [ 277.712031][T12235] lo speed is unknown, defaulting to 1000 [ 277.878570][T12247] tipc: Enabling of bearer rejected, failed to enable media [ 278.022653][T12252] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.060729][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 278.069956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.119404][T12253] openvswitch: netlink: Message has 3 unknown bytes. [ 278.252882][T12258] netlink: 'syz.4.1781': attribute type 10 has an invalid length. [ 278.393515][T12262] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 278.569070][T12267] lo speed is unknown, defaulting to 1000 [ 278.958789][T12275] FAULT_INJECTION: forcing a failure. [ 278.958789][T12275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.972483][T12275] CPU: 1 UID: 0 PID: 12275 Comm: syz.2.1788 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 278.972511][T12275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.972523][T12275] Call Trace: [ 278.972530][T12275] [ 278.972538][T12275] dump_stack_lvl+0x241/0x360 [ 278.972568][T12275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.972589][T12275] ? __pfx__printk+0x10/0x10 [ 278.972611][T12275] ? __pfx_lock_release+0x10/0x10 [ 278.972649][T12275] should_fail_ex+0x40a/0x550 [ 278.972682][T12275] _copy_from_iter+0x1df/0x1c40 [ 278.972705][T12275] ? __virt_addr_valid+0x183/0x530 [ 278.972724][T12275] ? __pfx_lock_release+0x10/0x10 [ 278.972759][T12275] ? __alloc_skb+0x28f/0x440 [ 278.972780][T12275] ? __pfx__copy_from_iter+0x10/0x10 [ 278.972804][T12275] ? __virt_addr_valid+0x183/0x530 [ 278.972822][T12275] ? __virt_addr_valid+0x183/0x530 [ 278.972838][T12275] ? __virt_addr_valid+0x45f/0x530 [ 278.972857][T12275] ? __phys_addr_symbol+0x2f/0x70 [ 278.972874][T12275] ? __check_object_size+0x47a/0x730 [ 278.972903][T12275] netlink_sendmsg+0x742/0xcb0 [ 278.972945][T12275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.972978][T12275] ? aa_sock_msg_perm+0x91/0x160 [ 278.973013][T12275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.973039][T12275] __sock_sendmsg+0x221/0x270 [ 278.973069][T12275] ____sys_sendmsg+0x53a/0x860 [ 278.973101][T12275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.973120][T12275] ? __fget_files+0x2a/0x410 [ 278.973174][T12275] ? __fget_files+0x2a/0x410 [ 278.973211][T12275] __sys_sendmsg+0x269/0x350 [ 278.973239][T12275] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.973275][T12275] ? do_sys_openat2+0x17a/0x1d0 [ 278.973330][T12275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.973366][T12275] ? do_syscall_64+0x100/0x230 [ 278.973394][T12275] ? do_syscall_64+0xb6/0x230 [ 278.973420][T12275] do_syscall_64+0xf3/0x230 [ 278.973443][T12275] ? clear_bhb_loop+0x35/0x90 [ 278.973472][T12275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.973497][T12275] RIP: 0033:0x7fb15038d169 [ 278.973514][T12275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.973531][T12275] RSP: 002b:00007fb15117b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.973554][T12275] RAX: ffffffffffffffda RBX: 00007fb1505a5fa0 RCX: 00007fb15038d169 [ 278.973567][T12275] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007 [ 278.973580][T12275] RBP: 00007fb15117b090 R08: 0000000000000000 R09: 0000000000000000 [ 278.973592][T12275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.973603][T12275] R13: 0000000000000000 R14: 00007fb1505a5fa0 R15: 00007ffc18ffc678 [ 278.973633][T12275] [ 279.244039][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.479348][T12284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1791'. [ 279.490610][T12286] SET target dimension over the limit! [ 279.621626][T12288] tipc: Enabling of bearer rejected, failed to enable media [ 279.665503][T12291] veth7: left promiscuous mode [ 279.982297][T12298] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 280.315927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.331216][T12321] lo speed is unknown, defaulting to 1000 [ 280.338024][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 280.439240][T12326] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 280.634294][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 280.651767][T12333] tipc: Invalid UDP bearer configuration [ 280.651820][T12333] tipc: Enabling of bearer rejected, failed to enable media [ 280.970340][T12351] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 280.982373][T12351] CPU: 1 UID: 0 PID: 12351 Comm: syz.3.1812 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 280.982404][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.982416][T12351] Call Trace: [ 280.982424][T12351] [ 280.982432][T12351] dump_stack_lvl+0x241/0x360 [ 280.982466][T12351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.982490][T12351] ? __pfx__printk+0x10/0x10 [ 280.982518][T12351] ? __kmalloc_cache_noprof+0x243/0x390 [ 280.982546][T12351] ? sysfs_warn_dup+0x51/0xa0 [ 280.982578][T12351] sysfs_warn_dup+0x8e/0xa0 [ 280.982603][T12351] sysfs_do_create_link_sd+0xbe/0x110 [ 280.982640][T12351] device_add_class_symlinks+0x1c5/0x250 [ 280.982666][T12351] device_add+0x553/0xbf0 [ 280.982695][T12351] wiphy_register+0x1922/0x2650 [ 280.982740][T12351] ? __pfx_wiphy_register+0x10/0x10 [ 280.982763][T12351] ? minstrel_ht_alloc+0x84b/0x940 [ 280.982797][T12351] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 280.982830][T12351] ieee80211_register_hw+0x35d9/0x42e0 [ 280.982861][T12351] ? ieee80211_register_hw+0x1631/0x42e0 [ 280.982891][T12351] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 280.982923][T12351] ? __asan_memset+0x23/0x50 [ 280.982944][T12351] ? __hrtimer_init+0x170/0x250 [ 280.982972][T12351] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 280.983035][T12351] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 280.983062][T12351] ? trace_kmalloc+0x1f/0xd0 [ 280.983087][T12351] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 280.983118][T12351] ? kstrndup+0xbb/0x150 [ 280.983169][T12351] hwsim_new_radio_nl+0xece/0x2290 [ 280.983223][T12351] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.983254][T12351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.983331][T12351] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 280.983369][T12351] genl_rcv_msg+0xb1f/0xec0 [ 280.983405][T12351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.983467][T12351] ? __pfx_lock_acquire+0x10/0x10 [ 280.983498][T12351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.983527][T12351] ? __pfx___might_resched+0x10/0x10 [ 280.983568][T12351] netlink_rcv_skb+0x206/0x480 [ 280.983599][T12351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.983624][T12351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.983695][T12351] genl_rcv+0x28/0x40 [ 280.983715][T12351] netlink_unicast+0x7f6/0x990 [ 280.983754][T12351] ? __pfx_netlink_unicast+0x10/0x10 [ 280.983778][T12351] ? __virt_addr_valid+0x45f/0x530 [ 280.983799][T12351] ? __phys_addr_symbol+0x2f/0x70 [ 280.983818][T12351] ? __check_object_size+0x47a/0x730 [ 280.983852][T12351] netlink_sendmsg+0x8de/0xcb0 [ 280.983899][T12351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.983934][T12351] ? aa_sock_msg_perm+0x91/0x160 [ 280.983972][T12351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.984000][T12351] __sock_sendmsg+0x221/0x270 [ 280.984034][T12351] ____sys_sendmsg+0x53a/0x860 [ 280.984069][T12351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.984091][T12351] ? __fget_files+0x2a/0x410 [ 280.984124][T12351] ? __fget_files+0x2a/0x410 [ 280.984166][T12351] __sys_sendmsg+0x269/0x350 [ 280.984198][T12351] ? __pfx_futex_wake+0x10/0x10 [ 280.984233][T12351] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.984315][T12351] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.984348][T12351] ? do_syscall_64+0x100/0x230 [ 280.984379][T12351] ? do_syscall_64+0xb6/0x230 [ 280.984409][T12351] do_syscall_64+0xf3/0x230 [ 280.984434][T12351] ? clear_bhb_loop+0x35/0x90 [ 280.984467][T12351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.984493][T12351] RIP: 0033:0x7fa01478d169 [ 280.984513][T12351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.984530][T12351] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.984555][T12351] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 280.984570][T12351] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 280.984582][T12351] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 280.984595][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.984607][T12351] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 280.984643][T12351] [ 281.391233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.690781][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 281.700838][T12369] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1815'. [ 282.111190][T12375] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 282.362308][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1821'. [ 282.426815][T12389] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.442158][T12389] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.466030][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.476987][T12389] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.511126][T12389] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.066670][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1833'. [ 283.516031][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.660547][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 283.675018][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 283.723198][T12439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.955264][T12456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1845'. [ 284.069788][T12459] FAULT_INJECTION: forcing a failure. [ 284.069788][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 284.100401][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.1.1848 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 284.100435][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.100446][T12459] Call Trace: [ 284.100454][T12459] [ 284.100462][T12459] dump_stack_lvl+0x241/0x360 [ 284.100500][T12459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.100522][T12459] ? __pfx__printk+0x10/0x10 [ 284.100543][T12459] ? 0xffffffffa0001fa0 [ 284.100563][T12459] ? is_bpf_text_address+0x26/0x2a0 [ 284.100583][T12459] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.100613][T12459] should_fail_ex+0x40a/0x550 [ 284.100648][T12459] should_failslab+0xac/0x100 [ 284.100675][T12459] __kmalloc_cache_noprof+0x70/0x390 [ 284.100700][T12459] ? tipc_udp_enable+0x181/0x16f0 [ 284.100732][T12459] tipc_udp_enable+0x181/0x16f0 [ 284.100763][T12459] ? __pfx_tipc_udp_enable+0x10/0x10 [ 284.100789][T12459] ? stack_depot_save_flags+0x37/0x940 [ 284.100827][T12459] ? kasan_save_track+0x51/0x80 [ 284.100846][T12459] ? kasan_save_track+0x3f/0x80 [ 284.100865][T12459] ? __kasan_kmalloc+0x98/0xb0 [ 284.100885][T12459] ? __kmalloc_cache_noprof+0x243/0x390 [ 284.100909][T12459] ? __tipc_nl_bearer_enable+0xafb/0x1420 [ 284.100930][T12459] ? tipc_nl_bearer_enable+0x22/0x40 [ 284.100950][T12459] ? genl_rcv_msg+0xb1f/0xec0 [ 284.100970][T12459] ? netlink_rcv_skb+0x206/0x480 [ 284.100994][T12459] ? genl_rcv+0x28/0x40 [ 284.101011][T12459] ? netlink_unicast+0x7f6/0x990 [ 284.101033][T12459] ? netlink_sendmsg+0x8de/0xcb0 [ 284.101066][T12459] ? __sock_sendmsg+0x221/0x270 [ 284.101091][T12459] ? ____sys_sendmsg+0x53a/0x860 [ 284.101111][T12459] ? __sys_sendmsg+0x269/0x350 [ 284.101130][T12459] ? do_syscall_64+0xf3/0x230 [ 284.101152][T12459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.101233][T12459] ? read_word_at_a_time+0xe/0x20 [ 284.101258][T12459] ? sized_strscpy+0x9a/0x2b0 [ 284.101290][T12459] __tipc_nl_bearer_enable+0xbd2/0x1420 [ 284.101326][T12459] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 284.101347][T12459] ? trace_contention_end+0x3c/0x120 [ 284.101393][T12459] ? __pfx___mutex_lock+0x10/0x10 [ 284.101425][T12459] ? __nla_parse+0x40/0x60 [ 284.101452][T12459] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 284.101474][T12459] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 284.101501][T12459] tipc_nl_bearer_enable+0x22/0x40 [ 284.101524][T12459] genl_rcv_msg+0xb1f/0xec0 [ 284.101555][T12459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.101608][T12459] ? __pfx_lock_acquire+0x10/0x10 [ 284.101634][T12459] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 284.101657][T12459] ? __pfx___might_resched+0x10/0x10 [ 284.101694][T12459] netlink_rcv_skb+0x206/0x480 [ 284.101722][T12459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.101746][T12459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.101808][T12459] genl_rcv+0x28/0x40 [ 284.101827][T12459] netlink_unicast+0x7f6/0x990 [ 284.101862][T12459] ? __pfx_netlink_unicast+0x10/0x10 [ 284.101883][T12459] ? __virt_addr_valid+0x45f/0x530 [ 284.101901][T12459] ? __phys_addr_symbol+0x2f/0x70 [ 284.101917][T12459] ? __check_object_size+0x47a/0x730 [ 284.101946][T12459] netlink_sendmsg+0x8de/0xcb0 [ 284.101985][T12459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.102018][T12459] ? aa_sock_msg_perm+0x91/0x160 [ 284.102050][T12459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.102083][T12459] __sock_sendmsg+0x221/0x270 [ 284.102111][T12459] ____sys_sendmsg+0x53a/0x860 [ 284.102142][T12459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.102160][T12459] ? __fget_files+0x2a/0x410 [ 284.102190][T12459] ? __fget_files+0x2a/0x410 [ 284.102225][T12459] __sys_sendmsg+0x269/0x350 [ 284.102253][T12459] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.102284][T12459] ? do_sys_openat2+0x17a/0x1d0 [ 284.102330][T12459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.102353][T12459] ? do_syscall_64+0x100/0x230 [ 284.102375][T12459] ? do_syscall_64+0xb6/0x230 [ 284.102396][T12459] do_syscall_64+0xf3/0x230 [ 284.102415][T12459] ? clear_bhb_loop+0x35/0x90 [ 284.102438][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.102457][T12459] RIP: 0033:0x7f5ffe38d169 [ 284.102471][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.102484][T12459] RSP: 002b:00007f5fff27e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.102503][T12459] RAX: ffffffffffffffda RBX: 00007f5ffe5a5fa0 RCX: 00007f5ffe38d169 [ 284.102514][T12459] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000007 [ 284.102524][T12459] RBP: 00007f5fff27e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.102534][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.102543][T12459] R13: 0000000000000000 R14: 00007f5ffe5a5fa0 R15: 00007ffe5b40dc28 [ 284.102569][T12459] [ 284.571029][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.579863][T12459] tipc: Enabling of bearer rejected, failed to enable media [ 285.017704][T12485] xt_TCPMSS: Only works on TCP SYN packets [ 285.023898][T12486] xt_TCPMSS: Only works on TCP SYN packets [ 285.477250][T12499] __nla_validate_parse: 1 callbacks suppressed [ 285.477275][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 285.532099][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1861'. [ 285.585818][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.853276][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 285.860071][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.896397][T12522] netlink: 'syz.4.1865': attribute type 1 has an invalid length. [ 285.904650][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.913312][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'. [ 286.017125][T12529] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.058555][T12529] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.120748][T12535] lo speed is unknown, defaulting to 1000 [ 286.377578][T12547] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 286.625795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.821086][T12561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1877'. [ 286.841033][T12535] lo speed is unknown, defaulting to 1000 [ 286.849559][T12561] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 286.883846][T12561] CPU: 1 UID: 0 PID: 12561 Comm: syz.3.1877 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 286.883879][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.883902][T12561] Call Trace: [ 286.883910][T12561] [ 286.883919][T12561] dump_stack_lvl+0x241/0x360 [ 286.883953][T12561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.883976][T12561] ? __pfx__printk+0x10/0x10 [ 286.884002][T12561] ? __kmalloc_cache_noprof+0x243/0x390 [ 286.884030][T12561] ? sysfs_warn_dup+0x51/0xa0 [ 286.884058][T12561] sysfs_warn_dup+0x8e/0xa0 [ 286.884081][T12561] sysfs_do_create_link_sd+0xbe/0x110 [ 286.884106][T12561] device_add_class_symlinks+0x1c5/0x250 [ 286.884130][T12561] device_add+0x553/0xbf0 [ 286.884154][T12561] wiphy_register+0x1922/0x2650 [ 286.884195][T12561] ? __pfx_wiphy_register+0x10/0x10 [ 286.884220][T12561] ? minstrel_ht_alloc+0x84b/0x940 [ 286.884257][T12561] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 286.884293][T12561] ieee80211_register_hw+0x35d9/0x42e0 [ 286.884328][T12561] ? ieee80211_register_hw+0x1631/0x42e0 [ 286.884357][T12561] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 286.884389][T12561] ? __asan_memset+0x23/0x50 [ 286.884409][T12561] ? __hrtimer_init+0x170/0x250 [ 286.884434][T12561] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 286.884495][T12561] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 286.884520][T12561] ? trace_kmalloc+0x1f/0xd0 [ 286.884543][T12561] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 286.884568][T12561] ? kstrndup+0xbb/0x150 [ 286.884607][T12561] hwsim_new_radio_nl+0xece/0x2290 [ 286.884650][T12561] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.884679][T12561] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.884745][T12561] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 286.884781][T12561] genl_rcv_msg+0xb1f/0xec0 [ 286.884817][T12561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.884878][T12561] ? __pfx_lock_acquire+0x10/0x10 [ 286.884918][T12561] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.884947][T12561] ? __pfx___might_resched+0x10/0x10 [ 286.884989][T12561] netlink_rcv_skb+0x206/0x480 [ 286.885018][T12561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.885041][T12561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.885103][T12561] genl_rcv+0x28/0x40 [ 286.885124][T12561] netlink_unicast+0x7f6/0x990 [ 286.885160][T12561] ? __pfx_netlink_unicast+0x10/0x10 [ 286.885183][T12561] ? __virt_addr_valid+0x45f/0x530 [ 286.885203][T12561] ? __phys_addr_symbol+0x2f/0x70 [ 286.885227][T12561] ? __check_object_size+0x47a/0x730 [ 286.885260][T12561] netlink_sendmsg+0x8de/0xcb0 [ 286.885298][T12561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.885331][T12561] ? aa_sock_msg_perm+0x91/0x160 [ 286.885366][T12561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.885392][T12561] __sock_sendmsg+0x221/0x270 [ 286.885424][T12561] ____sys_sendmsg+0x53a/0x860 [ 286.885459][T12561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.885481][T12561] ? __fget_files+0x2a/0x410 [ 286.885515][T12561] ? __fget_files+0x2a/0x410 [ 286.885554][T12561] __sys_sendmsg+0x269/0x350 [ 286.885575][T12561] ? __pfx_futex_wake+0x10/0x10 [ 286.885608][T12561] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.885687][T12561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.885719][T12561] ? do_syscall_64+0x100/0x230 [ 286.885748][T12561] ? do_syscall_64+0xb6/0x230 [ 286.885775][T12561] do_syscall_64+0xf3/0x230 [ 286.885799][T12561] ? clear_bhb_loop+0x35/0x90 [ 286.885830][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.885855][T12561] RIP: 0033:0x7fa01478d169 [ 286.885874][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.885902][T12561] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.885927][T12561] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 286.885942][T12561] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 286.885955][T12561] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.885967][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.885979][T12561] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 286.886013][T12561] [ 287.449655][T12571] FAULT_INJECTION: forcing a failure. [ 287.449655][T12571] name failslab, interval 1, probability 0, space 0, times 0 [ 287.471062][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.2.1880 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 287.471095][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.471108][T12571] Call Trace: [ 287.471116][T12571] [ 287.471124][T12571] dump_stack_lvl+0x241/0x360 [ 287.471154][T12571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.471176][T12571] ? __pfx__printk+0x10/0x10 [ 287.471197][T12571] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 287.471225][T12571] ? __pfx___might_resched+0x10/0x10 [ 287.471254][T12571] should_fail_ex+0x40a/0x550 [ 287.471285][T12571] should_failslab+0xac/0x100 [ 287.471310][T12571] kmem_cache_alloc_node_noprof+0x77/0x380 [ 287.471334][T12571] ? __alloc_skb+0x1c3/0x440 [ 287.471355][T12571] __alloc_skb+0x1c3/0x440 [ 287.471380][T12571] ? __pfx___alloc_skb+0x10/0x10 [ 287.471401][T12571] ? netlink_autobind+0xd6/0x2f0 [ 287.471417][T12571] ? netlink_autobind+0x2b0/0x2f0 [ 287.471438][T12571] netlink_sendmsg+0x634/0xcb0 [ 287.471477][T12571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.471505][T12571] ? aa_sock_msg_perm+0x91/0x160 [ 287.471537][T12571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.471560][T12571] __sock_sendmsg+0x221/0x270 [ 287.471589][T12571] sock_write_iter+0x2d7/0x3f0 [ 287.471616][T12571] ? __pfx_sock_write_iter+0x10/0x10 [ 287.471660][T12571] do_iter_readv_writev+0x71a/0x9d0 [ 287.471690][T12571] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 287.471718][T12571] ? bpf_lsm_file_permission+0x9/0x10 [ 287.471743][T12571] ? rw_verify_area+0x243/0x630 [ 287.471765][T12571] vfs_writev+0x38b/0xbc0 [ 287.471802][T12571] ? __pfx_vfs_writev+0x10/0x10 [ 287.471842][T12571] ? do_sys_openat2+0x17a/0x1d0 [ 287.471870][T12571] ? __fget_files+0x2a/0x410 [ 287.471898][T12571] ? __fget_files+0x395/0x410 [ 287.471924][T12571] ? __fget_files+0x2a/0x410 [ 287.471960][T12571] do_writev+0x1b6/0x360 [ 287.471993][T12571] ? __pfx_do_writev+0x10/0x10 [ 287.472020][T12571] ? do_syscall_64+0x100/0x230 [ 287.472059][T12571] ? do_syscall_64+0xb6/0x230 [ 287.472085][T12571] do_syscall_64+0xf3/0x230 [ 287.472108][T12571] ? clear_bhb_loop+0x35/0x90 [ 287.472138][T12571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.472162][T12571] RIP: 0033:0x7fb15038d169 [ 287.472181][T12571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.472196][T12571] RSP: 002b:00007fb15115a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 287.472218][T12571] RAX: ffffffffffffffda RBX: 00007fb1505a6080 RCX: 00007fb15038d169 [ 287.472232][T12571] RDX: 0000000000000001 RSI: 0000400000000180 RDI: 0000000000000005 [ 287.472245][T12571] RBP: 00007fb15115a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.472257][T12571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.472269][T12571] R13: 0000000000000000 R14: 00007fb1505a6080 R15: 00007ffc18ffc678 [ 287.472300][T12571] [ 287.763722][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.962489][T12586] tipc: Enabling of bearer rejected, failed to enable media [ 288.041141][T12584] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 288.243020][T12595] netlink: 'syz.4.1888': attribute type 9 has an invalid length. [ 288.307690][T12599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1888'. [ 288.517070][T12608] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 288.535062][T12608] CPU: 1 UID: 0 PID: 12608 Comm: syz.3.1892 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 288.535095][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.535107][T12608] Call Trace: [ 288.535114][T12608] [ 288.535123][T12608] dump_stack_lvl+0x241/0x360 [ 288.535157][T12608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.535179][T12608] ? __pfx__printk+0x10/0x10 [ 288.535206][T12608] ? __kmalloc_cache_noprof+0x243/0x390 [ 288.535231][T12608] ? sysfs_warn_dup+0x51/0xa0 [ 288.535261][T12608] sysfs_warn_dup+0x8e/0xa0 [ 288.535286][T12608] sysfs_do_create_link_sd+0xbe/0x110 [ 288.535314][T12608] device_add_class_symlinks+0x1c5/0x250 [ 288.535340][T12608] device_add+0x553/0xbf0 [ 288.535366][T12608] wiphy_register+0x1922/0x2650 [ 288.535408][T12608] ? __pfx_wiphy_register+0x10/0x10 [ 288.535433][T12608] ? minstrel_ht_alloc+0x84b/0x940 [ 288.535475][T12608] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 288.535511][T12608] ieee80211_register_hw+0x35d9/0x42e0 [ 288.535545][T12608] ? ieee80211_register_hw+0x1631/0x42e0 [ 288.535572][T12608] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 288.535603][T12608] ? __asan_memset+0x23/0x50 [ 288.535624][T12608] ? __hrtimer_init+0x170/0x250 [ 288.535648][T12608] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 288.535709][T12608] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 288.535734][T12608] ? trace_kmalloc+0x1f/0xd0 [ 288.535757][T12608] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 288.535782][T12608] ? kstrndup+0xbb/0x150 [ 288.535821][T12608] hwsim_new_radio_nl+0xece/0x2290 [ 288.535873][T12608] ? __pfx___nla_validate_parse+0x10/0x10 [ 288.535902][T12608] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 288.535969][T12608] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 288.536003][T12608] genl_rcv_msg+0xb1f/0xec0 [ 288.536035][T12608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.536091][T12608] ? __pfx_lock_acquire+0x10/0x10 [ 288.536119][T12608] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 288.536147][T12608] ? __pfx___might_resched+0x10/0x10 [ 288.536183][T12608] netlink_rcv_skb+0x206/0x480 [ 288.536212][T12608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.536236][T12608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.536301][T12608] genl_rcv+0x28/0x40 [ 288.536322][T12608] netlink_unicast+0x7f6/0x990 [ 288.536359][T12608] ? __pfx_netlink_unicast+0x10/0x10 [ 288.536381][T12608] ? __virt_addr_valid+0x45f/0x530 [ 288.536402][T12608] ? __phys_addr_symbol+0x2f/0x70 [ 288.536419][T12608] ? __check_object_size+0x47a/0x730 [ 288.536452][T12608] netlink_sendmsg+0x8de/0xcb0 [ 288.536499][T12608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.536534][T12608] ? aa_sock_msg_perm+0x91/0x160 [ 288.536572][T12608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.536598][T12608] __sock_sendmsg+0x221/0x270 [ 288.536631][T12608] ____sys_sendmsg+0x53a/0x860 [ 288.536665][T12608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.536685][T12608] ? __fget_files+0x2a/0x410 [ 288.536715][T12608] ? __fget_files+0x2a/0x410 [ 288.536753][T12608] __sys_sendmsg+0x269/0x350 [ 288.536776][T12608] ? __pfx_futex_wake+0x10/0x10 [ 288.536810][T12608] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.536899][T12608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.536933][T12608] ? do_syscall_64+0x100/0x230 [ 288.536964][T12608] ? do_syscall_64+0xb6/0x230 [ 288.536992][T12608] do_syscall_64+0xf3/0x230 [ 288.537017][T12608] ? clear_bhb_loop+0x35/0x90 [ 288.537049][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.537075][T12608] RIP: 0033:0x7fa01478d169 [ 288.537095][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.537113][T12608] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.537137][T12608] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 288.537151][T12608] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 288.537164][T12608] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.537176][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.537188][T12608] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 288.537222][T12608] [ 288.943296][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.702014][T12622] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.996041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.024155][T12656] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 290.035794][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.4.1907 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 290.035826][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.035839][T12656] Call Trace: [ 290.035846][T12656] [ 290.035855][T12656] dump_stack_lvl+0x241/0x360 [ 290.035888][T12656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.035910][T12656] ? __pfx__printk+0x10/0x10 [ 290.035938][T12656] ? __kmalloc_cache_noprof+0x243/0x390 [ 290.035965][T12656] ? sysfs_warn_dup+0x51/0xa0 [ 290.035996][T12656] sysfs_warn_dup+0x8e/0xa0 [ 290.036022][T12656] sysfs_do_create_link_sd+0xbe/0x110 [ 290.036061][T12656] device_add_class_symlinks+0x1c5/0x250 [ 290.036087][T12656] device_add+0x553/0xbf0 [ 290.036115][T12656] wiphy_register+0x1922/0x2650 [ 290.036160][T12656] ? __pfx_wiphy_register+0x10/0x10 [ 290.036185][T12656] ? minstrel_ht_alloc+0x84b/0x940 [ 290.036225][T12656] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 290.036263][T12656] ieee80211_register_hw+0x35d9/0x42e0 [ 290.036301][T12656] ? ieee80211_register_hw+0x1631/0x42e0 [ 290.036332][T12656] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 290.036367][T12656] ? __asan_memset+0x23/0x50 [ 290.036388][T12656] ? __hrtimer_init+0x170/0x250 [ 290.036416][T12656] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 290.036546][T12656] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 290.036573][T12656] ? trace_kmalloc+0x1f/0xd0 [ 290.036597][T12656] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 290.036627][T12656] ? kstrndup+0xbb/0x150 [ 290.036679][T12656] hwsim_new_radio_nl+0xece/0x2290 [ 290.036724][T12656] ? __pfx___nla_validate_parse+0x10/0x10 [ 290.036753][T12656] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 290.036821][T12656] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 290.036857][T12656] genl_rcv_msg+0xb1f/0xec0 [ 290.036892][T12656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.036951][T12656] ? __pfx_lock_acquire+0x10/0x10 [ 290.036981][T12656] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 290.037010][T12656] ? __pfx___might_resched+0x10/0x10 [ 290.037057][T12656] netlink_rcv_skb+0x206/0x480 [ 290.037089][T12656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.037114][T12656] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.037184][T12656] genl_rcv+0x28/0x40 [ 290.037204][T12656] netlink_unicast+0x7f6/0x990 [ 290.037243][T12656] ? __pfx_netlink_unicast+0x10/0x10 [ 290.037266][T12656] ? __virt_addr_valid+0x45f/0x530 [ 290.037288][T12656] ? __phys_addr_symbol+0x2f/0x70 [ 290.037305][T12656] ? __check_object_size+0x47a/0x730 [ 290.037340][T12656] netlink_sendmsg+0x8de/0xcb0 [ 290.037387][T12656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.037423][T12656] ? aa_sock_msg_perm+0x91/0x160 [ 290.037461][T12656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.037488][T12656] __sock_sendmsg+0x221/0x270 [ 290.037522][T12656] ____sys_sendmsg+0x53a/0x860 [ 290.037558][T12656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.037578][T12656] ? __fget_files+0x2a/0x410 [ 290.037612][T12656] ? __fget_files+0x2a/0x410 [ 290.037654][T12656] __sys_sendmsg+0x269/0x350 [ 290.037685][T12656] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.037767][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.037798][T12656] ? do_syscall_64+0x100/0x230 [ 290.037829][T12656] ? do_syscall_64+0xb6/0x230 [ 290.037858][T12656] do_syscall_64+0xf3/0x230 [ 290.037883][T12656] ? clear_bhb_loop+0x35/0x90 [ 290.037914][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.037941][T12656] RIP: 0033:0x7f3b7cf8d169 [ 290.037960][T12656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.037978][T12656] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.038002][T12656] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 290.038017][T12656] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 290.038030][T12656] RBP: 00007f3b7d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 290.038058][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.038071][T12656] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 290.038106][T12656] [ 290.849467][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 290.910307][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 291.025854][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.127347][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 291.156230][T12695] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1917'. [ 291.238550][T12701] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 291.309568][T12694] lo speed is unknown, defaulting to 1000 [ 291.317552][T12708] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 291.328760][T12708] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 291.336805][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 291.348509][T12709] FAULT_INJECTION: forcing a failure. [ 291.348509][T12709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.363698][T12709] CPU: 1 UID: 0 PID: 12709 Comm: syz.1.1923 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 291.363728][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.363740][T12709] Call Trace: [ 291.363747][T12709] [ 291.363756][T12709] dump_stack_lvl+0x241/0x360 [ 291.363787][T12709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.363809][T12709] ? __pfx__printk+0x10/0x10 [ 291.363831][T12709] ? __pfx_lock_release+0x10/0x10 [ 291.363879][T12709] should_fail_ex+0x40a/0x550 [ 291.363914][T12709] _copy_from_iter+0x1df/0x1c40 [ 291.363937][T12709] ? __virt_addr_valid+0x183/0x530 [ 291.363957][T12709] ? __pfx_lock_release+0x10/0x10 [ 291.363992][T12709] ? __alloc_skb+0x28f/0x440 [ 291.364012][T12709] ? __pfx__copy_from_iter+0x10/0x10 [ 291.364036][T12709] ? __virt_addr_valid+0x183/0x530 [ 291.364052][T12709] ? __virt_addr_valid+0x183/0x530 [ 291.364068][T12709] ? __virt_addr_valid+0x45f/0x530 [ 291.364086][T12709] ? __phys_addr_symbol+0x2f/0x70 [ 291.364102][T12709] ? __check_object_size+0x47a/0x730 [ 291.364132][T12709] netlink_sendmsg+0x742/0xcb0 [ 291.364174][T12709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.364207][T12709] ? aa_sock_msg_perm+0x91/0x160 [ 291.364242][T12709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.364267][T12709] __sock_sendmsg+0x221/0x270 [ 291.364298][T12709] sock_write_iter+0x2d7/0x3f0 [ 291.364326][T12709] ? __pfx_sock_write_iter+0x10/0x10 [ 291.364374][T12709] do_iter_readv_writev+0x71a/0x9d0 [ 291.364404][T12709] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 291.364432][T12709] ? bpf_lsm_file_permission+0x9/0x10 [ 291.364460][T12709] ? rw_verify_area+0x243/0x630 [ 291.364484][T12709] vfs_writev+0x38b/0xbc0 [ 291.364527][T12709] ? __pfx_vfs_writev+0x10/0x10 [ 291.364568][T12709] ? do_sys_openat2+0x17a/0x1d0 [ 291.364595][T12709] ? __fget_files+0x2a/0x410 [ 291.364623][T12709] ? __fget_files+0x395/0x410 [ 291.364649][T12709] ? __fget_files+0x2a/0x410 [ 291.364690][T12709] do_writev+0x1b6/0x360 [ 291.364723][T12709] ? __pfx_do_writev+0x10/0x10 [ 291.364750][T12709] ? do_syscall_64+0x100/0x230 [ 291.364779][T12709] ? do_syscall_64+0xb6/0x230 [ 291.364805][T12709] do_syscall_64+0xf3/0x230 [ 291.364829][T12709] ? clear_bhb_loop+0x35/0x90 [ 291.364866][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.364890][T12709] RIP: 0033:0x7f5ffe38d169 [ 291.364908][T12709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.364924][T12709] RSP: 002b:00007f5fff25d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 291.364946][T12709] RAX: ffffffffffffffda RBX: 00007f5ffe5a6080 RCX: 00007f5ffe38d169 [ 291.364960][T12709] RDX: 0000000000000001 RSI: 0000400000000180 RDI: 0000000000000005 [ 291.364973][T12709] RBP: 00007f5fff25d090 R08: 0000000000000000 R09: 0000000000000000 [ 291.364985][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.364996][T12709] R13: 0000000000000000 R14: 00007f5ffe5a6080 R15: 00007ffe5b40dc28 [ 291.365027][T12709] [ 291.808313][T12712] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 291.816671][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 292.042688][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 292.065758][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.531009][T12747] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 292.674560][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 292.694694][T12752] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 292.704456][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 292.723333][T12752] netlink: 'syz.3.1941': attribute type 2 has an invalid length. [ 292.757153][T12752] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1941'. [ 292.955873][T12768] netlink: 'syz.2.1947': attribute type 5 has an invalid length. [ 292.962622][T12771] FAULT_INJECTION: forcing a failure. [ 292.962622][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 292.977375][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.4.1945 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 292.977405][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.977416][T12771] Call Trace: [ 292.977424][T12771] [ 292.977432][T12771] dump_stack_lvl+0x241/0x360 [ 292.977463][T12771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.977484][T12771] ? __pfx__printk+0x10/0x10 [ 292.977505][T12771] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 292.977531][T12771] ? __pfx___might_resched+0x10/0x10 [ 292.977559][T12771] should_fail_ex+0x40a/0x550 [ 292.977591][T12771] should_failslab+0xac/0x100 [ 292.977618][T12771] kmem_cache_alloc_node_noprof+0x77/0x380 [ 292.977641][T12771] ? __alloc_skb+0x1c3/0x440 [ 292.977665][T12771] __alloc_skb+0x1c3/0x440 [ 292.977689][T12771] ? __pfx___alloc_skb+0x10/0x10 [ 292.977709][T12771] ? inet_diag_handler_cmd+0x206/0x2b0 [ 292.977734][T12771] ? netlink_ack_tlv_len+0x6e/0x200 [ 292.977762][T12771] netlink_ack+0x145/0xa60 [ 292.977792][T12771] ? sock_diag_lock_handler+0x19/0x280 [ 292.977815][T12771] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 292.977839][T12771] ? sock_diag_rcv_msg+0x3ff/0x5f0 [ 292.977866][T12771] netlink_rcv_skb+0x294/0x480 [ 292.977893][T12771] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 292.977920][T12771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.977969][T12771] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.977997][T12771] netlink_unicast+0x7f6/0x990 [ 292.978028][T12771] ? __pfx_netlink_unicast+0x10/0x10 [ 292.978048][T12771] ? __virt_addr_valid+0x45f/0x530 [ 292.978066][T12771] ? __phys_addr_symbol+0x2f/0x70 [ 292.978083][T12771] ? __check_object_size+0x47a/0x730 [ 292.978125][T12771] netlink_sendmsg+0x8de/0xcb0 [ 292.978165][T12771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.978196][T12771] ? aa_sock_msg_perm+0x91/0x160 [ 292.978228][T12771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.978252][T12771] __sock_sendmsg+0x221/0x270 [ 292.978281][T12771] sock_write_iter+0x2d7/0x3f0 [ 292.978307][T12771] ? __pfx_sock_write_iter+0x10/0x10 [ 292.978353][T12771] do_iter_readv_writev+0x71a/0x9d0 [ 292.978382][T12771] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 292.978409][T12771] ? bpf_lsm_file_permission+0x9/0x10 [ 292.978434][T12771] ? rw_verify_area+0x243/0x630 [ 292.978457][T12771] vfs_writev+0x38b/0xbc0 [ 292.978498][T12771] ? __pfx_vfs_writev+0x10/0x10 [ 292.978536][T12771] ? do_sys_openat2+0x17a/0x1d0 [ 292.978561][T12771] ? __fget_files+0x2a/0x410 [ 292.978588][T12771] ? __fget_files+0x395/0x410 [ 292.978613][T12771] ? __fget_files+0x2a/0x410 [ 292.978649][T12771] do_writev+0x1b6/0x360 [ 292.978681][T12771] ? __pfx_do_writev+0x10/0x10 [ 292.978709][T12771] ? do_syscall_64+0x100/0x230 [ 292.978734][T12771] ? do_syscall_64+0xb6/0x230 [ 292.978758][T12771] do_syscall_64+0xf3/0x230 [ 292.978780][T12771] ? clear_bhb_loop+0x35/0x90 [ 292.978809][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.978833][T12771] RIP: 0033:0x7f3b7cf8d169 [ 292.978850][T12771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.978865][T12771] RSP: 002b:00007f3b7dd94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 292.978886][T12771] RAX: ffffffffffffffda RBX: 00007f3b7d1a6080 RCX: 00007f3b7cf8d169 [ 292.978900][T12771] RDX: 0000000000000001 RSI: 0000400000000180 RDI: 0000000000000005 [ 292.978911][T12771] RBP: 00007f3b7dd94090 R08: 0000000000000000 R09: 0000000000000000 [ 292.978923][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.978933][T12771] R13: 0000000000000000 R14: 00007f3b7d1a6080 R15: 00007ffc21510858 [ 292.978960][T12771] [ 292.987046][T12768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.106421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.107810][T12777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.369682][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 293.377025][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 293.423950][T12783] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 293.438625][T12783] team0: Device ipvlan1 failed to register rx_handler [ 293.486716][T12786] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 293.658707][T12794] xt_limit: Overflow, try lower: 262144/524288 [ 293.897439][T12800] IPVS: Scheduler module ip_vs_sip not found [ 293.985591][T12804] bridge0: left promiscuous mode [ 294.036224][T12804] bond0: left promiscuous mode [ 294.060670][T12804] macvlan3: left promiscuous mode [ 294.076696][T12804] ip6erspan0: left promiscuous mode [ 294.092863][T12804] gtp0: left promiscuous mode [ 294.102347][T12804] gtp0: left allmulticast mode [ 294.130296][T12804] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 294.145827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.157194][T12804] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.182795][T12804] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.195073][T12804] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.205914][T12804] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.253726][T12817] ip6gretap1: left promiscuous mode [ 294.275957][T12817] ip6gretap1: left allmulticast mode [ 294.378696][T12822] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 294.589589][T12825] tipc: Enabling of bearer rejected, failed to enable media [ 294.684738][T12839] netlink: 'syz.4.1973': attribute type 11 has an invalid length. [ 294.711351][T12839] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 294.752926][T12839] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 295.009887][T12853] wireguard0: left promiscuous mode [ 295.035869][T12853] wireguard0: left allmulticast mode [ 295.051833][T12853] hsr_slave_1: left allmulticast mode [ 295.067363][T12853] hsr_slave_1: left promiscuous mode [ 295.086163][T12853] vlan3: left promiscuous mode [ 295.091923][T12853] vlan3: left allmulticast mode [ 295.118302][T12855] lo speed is unknown, defaulting to 1000 [ 295.185873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.239137][T12867] FAULT_INJECTION: forcing a failure. [ 295.239137][T12867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.260682][T12867] CPU: 1 UID: 0 PID: 12867 Comm: syz.0.1983 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 295.260714][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.260726][T12867] Call Trace: [ 295.260733][T12867] [ 295.260742][T12867] dump_stack_lvl+0x241/0x360 [ 295.260773][T12867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.260794][T12867] ? __pfx__printk+0x10/0x10 [ 295.260816][T12867] ? __pfx_lock_release+0x10/0x10 [ 295.260849][T12867] ? __lock_acquire+0x1397/0x2100 [ 295.260881][T12867] should_fail_ex+0x40a/0x550 [ 295.260915][T12867] _copy_from_user+0x2d/0xb0 [ 295.260947][T12867] do_ipv6_mcast_group_source+0x286/0x5d0 [ 295.260981][T12867] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 295.261007][T12867] ? mark_lock+0x9a/0x360 [ 295.261042][T12867] ? __lock_acquire+0x1397/0x2100 [ 295.261093][T12867] ? mark_lock+0x9a/0x360 [ 295.261141][T12867] ? do_ipv6_setsockopt+0xbb9/0x35b0 [ 295.261167][T12867] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.261204][T12867] do_ipv6_setsockopt+0x14de/0x35b0 [ 295.261241][T12867] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 295.261268][T12867] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 295.261318][T12867] ? __pfx___might_resched+0x10/0x10 [ 295.261346][T12867] ? __lock_acquire+0x1397/0x2100 [ 295.261384][T12867] ? aa_sk_perm+0x96d/0xab0 [ 295.261419][T12867] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.261453][T12867] ipv6_setsockopt+0x5d/0x170 [ 295.261482][T12867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 295.261510][T12867] do_sock_setsockopt+0x3af/0x720 [ 295.261538][T12867] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 295.261566][T12867] ? __fget_files+0x395/0x410 [ 295.261591][T12867] ? __fget_files+0x2a/0x410 [ 295.261627][T12867] __x64_sys_setsockopt+0x1ee/0x280 [ 295.261656][T12867] do_syscall_64+0xf3/0x230 [ 295.261681][T12867] ? clear_bhb_loop+0x35/0x90 [ 295.261711][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.261734][T12867] RIP: 0033:0x7f5f7758d169 [ 295.261751][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.261768][T12867] RSP: 002b:00007f5f784ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.261789][T12867] RAX: ffffffffffffffda RBX: 00007f5f777a5fa0 RCX: 00007f5f7758d169 [ 295.261804][T12867] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 295.261815][T12867] RBP: 00007f5f784ae090 R08: 0000000000000108 R09: 0000000000000000 [ 295.261828][T12867] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 295.261839][T12867] R13: 0000000000000000 R14: 00007f5f777a5fa0 R15: 00007ffdafadcb58 [ 295.261872][T12867] [ 295.804426][T12875] can: request_module (can-proto-3) failed. [ 295.901686][T12859] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 296.230268][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.525897][T12907] FAULT_INJECTION: forcing a failure. [ 296.525897][T12907] name failslab, interval 1, probability 0, space 0, times 0 [ 296.560786][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.3.1997 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 296.560819][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.560833][T12907] Call Trace: [ 296.560840][T12907] [ 296.560849][T12907] dump_stack_lvl+0x241/0x360 [ 296.560882][T12907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.560904][T12907] ? __pfx__printk+0x10/0x10 [ 296.560928][T12907] ? __kmalloc_noprof+0xb5/0x4c0 [ 296.560957][T12907] ? __pfx___might_resched+0x10/0x10 [ 296.560988][T12907] should_fail_ex+0x40a/0x550 [ 296.561024][T12907] should_failslab+0xac/0x100 [ 296.561053][T12907] __kmalloc_noprof+0xdd/0x4c0 [ 296.561079][T12907] ? sock_kmalloc+0xd7/0x160 [ 296.561120][T12907] sock_kmalloc+0xd7/0x160 [ 296.561148][T12907] __ipv6_sock_mc_join+0x445/0x7e0 [ 296.561187][T12907] do_ipv6_mcast_group_source+0x458/0x5d0 [ 296.561221][T12907] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 296.561250][T12907] ? mark_lock+0x9a/0x360 [ 296.561275][T12907] ? __lock_acquire+0x1397/0x2100 [ 296.561331][T12907] ? mark_lock+0x9a/0x360 [ 296.561383][T12907] ? do_ipv6_setsockopt+0xbb9/0x35b0 [ 296.561412][T12907] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 296.561449][T12907] do_ipv6_setsockopt+0x14de/0x35b0 [ 296.561490][T12907] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 296.561519][T12907] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 296.561572][T12907] ? __pfx___might_resched+0x10/0x10 [ 296.561601][T12907] ? __lock_acquire+0x1397/0x2100 [ 296.561644][T12907] ? aa_sk_perm+0x96d/0xab0 [ 296.561682][T12907] ? __pfx_aa_sk_perm+0x10/0x10 [ 296.561718][T12907] ipv6_setsockopt+0x5d/0x170 [ 296.561750][T12907] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.561778][T12907] do_sock_setsockopt+0x3af/0x720 [ 296.561809][T12907] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 296.561838][T12907] ? __fget_files+0x395/0x410 [ 296.561863][T12907] ? __fget_files+0x2a/0x410 [ 296.561902][T12907] __x64_sys_setsockopt+0x1ee/0x280 [ 296.561933][T12907] do_syscall_64+0xf3/0x230 [ 296.561958][T12907] ? clear_bhb_loop+0x35/0x90 [ 296.561988][T12907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.562013][T12907] RIP: 0033:0x7fa01478d169 [ 296.562031][T12907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.562048][T12907] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.562070][T12907] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 296.562085][T12907] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 296.562105][T12907] RBP: 00007fa0155c7090 R08: 0000000000000108 R09: 0000000000000000 [ 296.562119][T12907] R10: 0000400000000200 R11: 0000000000000246 R12: 0000000000000001 [ 296.562132][T12907] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 296.562164][T12907] [ 296.638212][T12913] lo speed is unknown, defaulting to 1000 [ 297.009183][T12922] veth0_to_batadv: entered promiscuous mode [ 297.018362][T12922] bond0: (slave macvlan5): Enslaving as an active interface with an up link [ 297.034800][T12925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.075850][T12915] lo speed is unknown, defaulting to 1000 [ 297.265866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.646778][T12941] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.073965][T12954] __nla_validate_parse: 5 callbacks suppressed [ 298.073987][T12954] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2010'. [ 298.230926][T12954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.300648][ T5885] lo speed is unknown, defaulting to 1000 [ 298.316167][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.365389][T12964] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2013'. [ 298.786654][T12973] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 299.004315][T12989] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2021'. [ 299.041270][T12988] batman_adv: batadv0: Adding interface: ipvlan1 [ 299.051129][T12988] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.142991][T12988] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 299.218143][T12996] veth0_to_batadv: left promiscuous mode [ 299.286038][ T5885] lo speed is unknown, defaulting to 1000 [ 299.345900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.437282][T12997] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 299.660706][T13005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.813565][T13011] lo speed is unknown, defaulting to 1000 [ 299.834386][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2028'. [ 299.857251][T13014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.064165][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2030'. [ 300.104364][T13022] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 300.385732][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.392533][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 300.537760][T13044] batadv_slave_0: entered promiscuous mode [ 300.686338][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 300.888299][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 300.908945][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 300.933850][T13060] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 301.001757][T13086] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2046'. [ 301.126252][T13086] netlink: 'syz.2.2046': attribute type 10 has an invalid length. [ 301.134614][T13086] team0: entered promiscuous mode [ 301.146516][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.153571][T13086] bridge0: port 1(team0) entered blocking state [ 301.167291][T13086] bridge0: port 1(team0) entered disabled state [ 301.173981][T13086] team0: entered allmulticast mode [ 301.425989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.461125][T13105] lo speed is unknown, defaulting to 1000 [ 301.613922][T13118] FAULT_INJECTION: forcing a failure. [ 301.613922][T13118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.635147][T13118] CPU: 1 UID: 0 PID: 13118 Comm: syz.4.2058 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 301.635180][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.635192][T13118] Call Trace: [ 301.635200][T13118] [ 301.635208][T13118] dump_stack_lvl+0x241/0x360 [ 301.635248][T13118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.635270][T13118] ? __pfx__printk+0x10/0x10 [ 301.635292][T13118] ? __pfx_lock_release+0x10/0x10 [ 301.635330][T13118] should_fail_ex+0x40a/0x550 [ 301.635363][T13118] _copy_from_user+0x2d/0xb0 [ 301.635391][T13118] __sys_bpf+0x1be/0x820 [ 301.635421][T13118] ? __pfx___sys_bpf+0x10/0x10 [ 301.635466][T13118] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.635497][T13118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.635527][T13118] ? do_syscall_64+0x100/0x230 [ 301.635556][T13118] __x64_sys_bpf+0x7c/0x90 [ 301.635581][T13118] do_syscall_64+0xf3/0x230 [ 301.635606][T13118] ? clear_bhb_loop+0x35/0x90 [ 301.635634][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.635657][T13118] RIP: 0033:0x7f3b7cf8d169 [ 301.635674][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.635690][T13118] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.635712][T13118] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 301.635726][T13118] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 301.635738][T13118] RBP: 00007f3b7ddb5090 R08: 0000000000000000 R09: 0000000000000000 [ 301.635749][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.635760][T13118] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 301.635790][T13118] [ 301.689258][T13121] netlink: 'syz.0.2059': attribute type 39 has an invalid length. [ 302.465824][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.953808][T13160] tipc: Enabling of bearer rejected, failed to enable media [ 303.224458][T12005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.256367][T12005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.260348][T13181] lo speed is unknown, defaulting to 1000 [ 303.467048][T13193] xt_TCPMSS: Only works on TCP SYN packets [ 303.505868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.711883][T13203] netlink: 'syz.3.2085': attribute type 1 has an invalid length. [ 303.754403][T13203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.861742][T13208] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 304.555740][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.812647][T13250] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 304.909916][T13252] lo speed is unknown, defaulting to 1000 [ 305.372987][T13271] lo speed is unknown, defaulting to 1000 [ 305.595812][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.699278][T13284] __nla_validate_parse: 14 callbacks suppressed [ 305.699301][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'. [ 305.811018][T13287] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 305.829286][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.3.2111 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 305.829320][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.829333][T13287] Call Trace: [ 305.829341][T13287] [ 305.829349][T13287] dump_stack_lvl+0x241/0x360 [ 305.829383][T13287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.829407][T13287] ? __pfx__printk+0x10/0x10 [ 305.829434][T13287] ? __kmalloc_cache_noprof+0x243/0x390 [ 305.829462][T13287] ? sysfs_warn_dup+0x51/0xa0 [ 305.829494][T13287] sysfs_warn_dup+0x8e/0xa0 [ 305.829519][T13287] sysfs_do_create_link_sd+0xbe/0x110 [ 305.829549][T13287] device_add_class_symlinks+0x1c5/0x250 [ 305.829573][T13287] device_add+0x553/0xbf0 [ 305.829601][T13287] wiphy_register+0x1922/0x2650 [ 305.829646][T13287] ? __pfx_wiphy_register+0x10/0x10 [ 305.829671][T13287] ? minstrel_ht_alloc+0x84b/0x940 [ 305.829710][T13287] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 305.829748][T13287] ieee80211_register_hw+0x35d9/0x42e0 [ 305.829784][T13287] ? ieee80211_register_hw+0x1631/0x42e0 [ 305.829815][T13287] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 305.829849][T13287] ? __asan_memset+0x23/0x50 [ 305.829871][T13287] ? __hrtimer_init+0x170/0x250 [ 305.829899][T13287] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 305.829966][T13287] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 305.829992][T13287] ? trace_kmalloc+0x1f/0xd0 [ 305.830024][T13287] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 305.830053][T13287] ? kstrndup+0xbb/0x150 [ 305.830093][T13287] hwsim_new_radio_nl+0xece/0x2290 [ 305.830134][T13287] ? __pfx___nla_validate_parse+0x10/0x10 [ 305.830164][T13287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.830240][T13287] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 305.830277][T13287] genl_rcv_msg+0xb1f/0xec0 [ 305.830312][T13287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.830373][T13287] ? __pfx_lock_acquire+0x10/0x10 [ 305.830403][T13287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.830432][T13287] ? __pfx___might_resched+0x10/0x10 [ 305.830473][T13287] netlink_rcv_skb+0x206/0x480 [ 305.830505][T13287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.830529][T13287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.830595][T13287] genl_rcv+0x28/0x40 [ 305.830616][T13287] netlink_unicast+0x7f6/0x990 [ 305.830656][T13287] ? __pfx_netlink_unicast+0x10/0x10 [ 305.830680][T13287] ? __virt_addr_valid+0x45f/0x530 [ 305.830701][T13287] ? __phys_addr_symbol+0x2f/0x70 [ 305.830720][T13287] ? __check_object_size+0x47a/0x730 [ 305.830755][T13287] netlink_sendmsg+0x8de/0xcb0 [ 305.830800][T13287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.830837][T13287] ? aa_sock_msg_perm+0x91/0x160 [ 305.830875][T13287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.830903][T13287] __sock_sendmsg+0x221/0x270 [ 305.830936][T13287] ____sys_sendmsg+0x53a/0x860 [ 305.830972][T13287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.830993][T13287] ? __fget_files+0x2a/0x410 [ 305.831052][T13287] ? __fget_files+0x2a/0x410 [ 305.831093][T13287] __sys_sendmsg+0x269/0x350 [ 305.831126][T13287] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.831226][T13287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.831259][T13287] ? do_syscall_64+0x100/0x230 [ 305.831290][T13287] ? do_syscall_64+0xb6/0x230 [ 305.831321][T13287] do_syscall_64+0xf3/0x230 [ 305.831347][T13287] ? clear_bhb_loop+0x35/0x90 [ 305.831386][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.831414][T13287] RIP: 0033:0x7fa01478d169 [ 305.831434][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.831451][T13287] RSP: 002b:00007fa0155a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.831475][T13287] RAX: ffffffffffffffda RBX: 00007fa0149a6080 RCX: 00007fa01478d169 [ 305.831490][T13287] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 305.831503][T13287] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.831515][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.831527][T13287] R13: 0000000000000000 R14: 00007fa0149a6080 R15: 00007ffe5b4a8c58 [ 305.831569][T13287] [ 306.425926][T13297] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 306.635736][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.930352][T13315] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 307.284723][T13328] lo speed is unknown, defaulting to 1000 [ 307.667735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.768656][T13341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2126'. [ 307.821455][T13343] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 307.871300][T13341] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 307.903959][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.1.2126 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 307.903995][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.904008][T13341] Call Trace: [ 307.904016][T13341] [ 307.904025][T13341] dump_stack_lvl+0x241/0x360 [ 307.904058][T13341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.904081][T13341] ? __pfx__printk+0x10/0x10 [ 307.904108][T13341] ? __kmalloc_cache_noprof+0x243/0x390 [ 307.904137][T13341] ? sysfs_warn_dup+0x51/0xa0 [ 307.904168][T13341] sysfs_warn_dup+0x8e/0xa0 [ 307.904193][T13341] sysfs_do_create_link_sd+0xbe/0x110 [ 307.904223][T13341] device_add_class_symlinks+0x1c5/0x250 [ 307.904249][T13341] device_add+0x553/0xbf0 [ 307.904278][T13341] wiphy_register+0x1922/0x2650 [ 307.904322][T13341] ? __pfx_wiphy_register+0x10/0x10 [ 307.904346][T13341] ? minstrel_ht_alloc+0x84b/0x940 [ 307.904386][T13341] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 307.904421][T13341] ieee80211_register_hw+0x35d9/0x42e0 [ 307.904458][T13341] ? ieee80211_register_hw+0x1631/0x42e0 [ 307.904489][T13341] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 307.904523][T13341] ? __asan_memset+0x23/0x50 [ 307.904544][T13341] ? __hrtimer_init+0x170/0x250 [ 307.904571][T13341] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 307.904636][T13341] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 307.904662][T13341] ? trace_kmalloc+0x1f/0xd0 [ 307.904686][T13341] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 307.904715][T13341] ? kstrndup+0xbb/0x150 [ 307.904756][T13341] hwsim_new_radio_nl+0xece/0x2290 [ 307.904810][T13341] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.904839][T13341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.904897][T13341] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 307.904929][T13341] genl_rcv_msg+0xb1f/0xec0 [ 307.904965][T13341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.905026][T13341] ? __pfx_lock_acquire+0x10/0x10 [ 307.905054][T13341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.905083][T13341] ? __pfx___might_resched+0x10/0x10 [ 307.905124][T13341] netlink_rcv_skb+0x206/0x480 [ 307.905155][T13341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.905182][T13341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.905260][T13341] genl_rcv+0x28/0x40 [ 307.905280][T13341] netlink_unicast+0x7f6/0x990 [ 307.905317][T13341] ? __pfx_netlink_unicast+0x10/0x10 [ 307.905341][T13341] ? __virt_addr_valid+0x45f/0x530 [ 307.905363][T13341] ? __phys_addr_symbol+0x2f/0x70 [ 307.905380][T13341] ? __check_object_size+0x47a/0x730 [ 307.905414][T13341] netlink_sendmsg+0x8de/0xcb0 [ 307.905459][T13341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.905494][T13341] ? aa_sock_msg_perm+0x91/0x160 [ 307.905533][T13341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.905560][T13341] __sock_sendmsg+0x221/0x270 [ 307.905593][T13341] ____sys_sendmsg+0x53a/0x860 [ 307.905633][T13341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.905652][T13341] ? __fget_files+0x2a/0x410 [ 307.905682][T13341] ? __fget_files+0x2a/0x410 [ 307.905719][T13341] __sys_sendmsg+0x269/0x350 [ 307.905739][T13341] ? __pfx_futex_wake+0x10/0x10 [ 307.905772][T13341] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.905857][T13341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.905888][T13341] ? do_syscall_64+0x100/0x230 [ 307.905917][T13341] ? do_syscall_64+0xb6/0x230 [ 307.905946][T13341] do_syscall_64+0xf3/0x230 [ 307.905969][T13341] ? clear_bhb_loop+0x35/0x90 [ 307.906000][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.906025][T13341] RIP: 0033:0x7f5ffe38d169 [ 307.906044][T13341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.906061][T13341] RSP: 002b:00007f5fff27e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.906084][T13341] RAX: ffffffffffffffda RBX: 00007f5ffe5a5fa0 RCX: 00007f5ffe38d169 [ 307.906097][T13341] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 307.906111][T13341] RBP: 00007f5ffe40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 307.906122][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.906134][T13341] R13: 0000000000000000 R14: 00007f5ffe5a5fa0 R15: 00007ffe5b40dc28 [ 307.906167][T13341] [ 308.705741][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.954707][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2130'. [ 308.983635][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 309.170849][T13369] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 309.351714][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 309.406961][T13375] ipvlan2: entered promiscuous mode [ 309.412777][T13375] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 309.436538][T13375] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.745944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.864304][T13392] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 310.101746][T13401] --map-set only usable from mangle table [ 310.234536][T13414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.273067][T13414] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2148'. [ 310.284083][T13414] NCSI netlink: No device for ifindex 0 [ 310.336313][T13414] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2148'. [ 310.352926][T13415] can: request_module (can-proto-0) failed. [ 310.366373][T13414] NCSI netlink: No device for ifindex 0 [ 310.562342][T13430] lo speed is unknown, defaulting to 1000 [ 310.695361][T13438] FAULT_INJECTION: forcing a failure. [ 310.695361][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 310.703964][T13440] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 310.756683][T13438] CPU: 1 UID: 0 PID: 13438 Comm: syz.4.2156 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 310.756715][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.756726][T13438] Call Trace: [ 310.756733][T13438] [ 310.756742][T13438] dump_stack_lvl+0x241/0x360 [ 310.756769][T13438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.756790][T13438] ? __pfx__printk+0x10/0x10 [ 310.756811][T13438] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 310.756836][T13438] ? __pfx___might_resched+0x10/0x10 [ 310.756861][T13438] should_fail_ex+0x40a/0x550 [ 310.756895][T13438] should_failslab+0xac/0x100 [ 310.756919][T13438] ? page_pool_create_percpu+0x77/0xb70 [ 310.756938][T13438] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 310.756964][T13438] ? rcu_is_watching+0x15/0xb0 [ 310.756988][T13438] page_pool_create_percpu+0x77/0xb70 [ 310.757016][T13438] bpf_test_run_xdp_live+0x2e6/0x2220 [ 310.757043][T13438] ? __pfx_lock_release+0x10/0x10 [ 310.757084][T13438] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 310.757107][T13438] ? __pfx___might_resched+0x10/0x10 [ 310.757133][T13438] ? __mutex_unlock_slowpath+0x227/0x800 [ 310.757166][T13438] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 310.757190][T13438] ? synchronize_rcu+0x11b/0x360 [ 310.757210][T13438] ? __pfx_synchronize_rcu+0x10/0x10 [ 310.757254][T13438] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 310.757280][T13438] ? 0xffffffffa00022a8 [ 310.757315][T13438] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 310.757358][T13438] ? _copy_from_user+0x95/0xb0 [ 310.757383][T13438] ? bpf_test_init+0x137/0x160 [ 310.757405][T13438] ? xdp_convert_md_to_buff+0x5b/0x330 [ 310.757432][T13438] bpf_prog_test_run_xdp+0x805/0x11e0 [ 310.757464][T13438] ? __pfx_lock_release+0x10/0x10 [ 310.757498][T13438] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 310.757524][T13438] ? __fget_files+0x2a/0x410 [ 310.757552][T13438] ? __fget_files+0x2a/0x410 [ 310.757581][T13438] ? fput+0x21b/0x290 [ 310.757604][T13438] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 310.757632][T13438] bpf_prog_test_run+0x2e4/0x360 [ 310.757662][T13438] __sys_bpf+0x487/0x820 [ 310.757689][T13438] ? __pfx___sys_bpf+0x10/0x10 [ 310.757733][T13438] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.757764][T13438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.757793][T13438] ? do_syscall_64+0x100/0x230 [ 310.757821][T13438] __x64_sys_bpf+0x7c/0x90 [ 310.757844][T13438] do_syscall_64+0xf3/0x230 [ 310.757867][T13438] ? clear_bhb_loop+0x35/0x90 [ 310.757894][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.757917][T13438] RIP: 0033:0x7f3b7cf8d169 [ 310.757934][T13438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.757951][T13438] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.757973][T13438] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 310.757986][T13438] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 310.757998][T13438] RBP: 00007f3b7ddb5090 R08: 0000000000000000 R09: 0000000000000000 [ 310.758010][T13438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.758021][T13438] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 310.758051][T13438] [ 311.087145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.096221][T13443] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 311.153395][ T5845] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 311.156919][T13448] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 311.207793][ T5884] lo speed is unknown, defaulting to 1000 [ 311.854082][T13466] netlink: 'syz.2.2166': attribute type 11 has an invalid length. [ 311.930303][T13465] xt_TCPMSS: Only works on TCP SYN packets [ 311.952965][T13463] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 312.133874][T13463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2166'. [ 312.145903][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.270102][T13474] FAULT_INJECTION: forcing a failure. [ 312.270102][T13474] name failslab, interval 1, probability 0, space 0, times 0 [ 312.323376][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.1.2170 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 312.323410][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.323423][T13474] Call Trace: [ 312.323430][T13474] [ 312.323439][T13474] dump_stack_lvl+0x241/0x360 [ 312.323471][T13474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.323493][T13474] ? __pfx__printk+0x10/0x10 [ 312.323516][T13474] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 312.323544][T13474] ? __pfx___might_resched+0x10/0x10 [ 312.323573][T13474] should_fail_ex+0x40a/0x550 [ 312.323608][T13474] should_failslab+0xac/0x100 [ 312.323635][T13474] __kmalloc_node_noprof+0xe1/0x4d0 [ 312.323658][T13474] ? __kasan_kmalloc+0x98/0xb0 [ 312.323678][T13474] ? __kvmalloc_node_noprof+0x72/0x190 [ 312.323713][T13474] __kvmalloc_node_noprof+0x72/0x190 [ 312.323753][T13474] page_pool_create_percpu+0x2f5/0xb70 [ 312.323784][T13474] bpf_test_run_xdp_live+0x2e6/0x2220 [ 312.323812][T13474] ? __pfx_lock_release+0x10/0x10 [ 312.323846][T13474] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 312.323866][T13474] ? __pfx___might_resched+0x10/0x10 [ 312.323894][T13474] ? __mutex_unlock_slowpath+0x227/0x800 [ 312.323928][T13474] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 312.323951][T13474] ? synchronize_rcu+0x11b/0x360 [ 312.323973][T13474] ? __pfx_synchronize_rcu+0x10/0x10 [ 312.324017][T13474] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 312.324045][T13474] ? 0xffffffffa00022a4 [ 312.324084][T13474] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 312.324129][T13474] ? _copy_from_user+0x95/0xb0 [ 312.324164][T13474] ? bpf_test_init+0x137/0x160 [ 312.324188][T13474] ? xdp_convert_md_to_buff+0x5b/0x330 [ 312.324217][T13474] bpf_prog_test_run_xdp+0x805/0x11e0 [ 312.324250][T13474] ? __pfx_lock_release+0x10/0x10 [ 312.324287][T13474] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.324313][T13474] ? __fget_files+0x2a/0x410 [ 312.324343][T13474] ? __fget_files+0x2a/0x410 [ 312.324371][T13474] ? fput+0x21b/0x290 [ 312.324394][T13474] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.324422][T13474] bpf_prog_test_run+0x2e4/0x360 [ 312.324453][T13474] __sys_bpf+0x487/0x820 [ 312.324479][T13474] ? __pfx___sys_bpf+0x10/0x10 [ 312.324515][T13474] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.324545][T13474] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.324573][T13474] ? do_syscall_64+0x100/0x230 [ 312.324601][T13474] __x64_sys_bpf+0x7c/0x90 [ 312.324626][T13474] do_syscall_64+0xf3/0x230 [ 312.324649][T13474] ? clear_bhb_loop+0x35/0x90 [ 312.324679][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.324703][T13474] RIP: 0033:0x7f5ffe38d169 [ 312.324718][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.324745][T13474] RSP: 002b:00007f5fff27e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.324766][T13474] RAX: ffffffffffffffda RBX: 00007f5ffe5a5fa0 RCX: 00007f5ffe38d169 [ 312.324780][T13474] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 312.324792][T13474] RBP: 00007f5fff27e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.324805][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.324818][T13474] R13: 0000000000000000 R14: 00007f5ffe5a5fa0 R15: 00007ffe5b40dc28 [ 312.324849][T13474] [ 312.324858][T13474] page_pool_create_percpu() gave up with errno -12 [ 312.741194][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2173'. [ 312.888309][T13486] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 313.185832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.919950][T13517] FAULT_INJECTION: forcing a failure. [ 313.919950][T13517] name failslab, interval 1, probability 0, space 0, times 0 [ 313.968003][T13517] CPU: 0 UID: 0 PID: 13517 Comm: syz.4.2185 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 313.968036][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.968049][T13517] Call Trace: [ 313.968058][T13517] [ 313.968067][T13517] dump_stack_lvl+0x241/0x360 [ 313.968099][T13517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.968122][T13517] ? __pfx__printk+0x10/0x10 [ 313.968145][T13517] ? __kmalloc_cache_noprof+0x48/0x390 [ 313.968175][T13517] ? __pfx___might_resched+0x10/0x10 [ 313.968207][T13517] should_fail_ex+0x40a/0x550 [ 313.968243][T13517] should_failslab+0xac/0x100 [ 313.968271][T13517] __kmalloc_cache_noprof+0x70/0x390 [ 313.968297][T13517] ? __xdp_reg_mem_model+0x1e3/0x620 [ 313.968324][T13517] __xdp_reg_mem_model+0x1e3/0x620 [ 313.968351][T13517] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 313.968376][T13517] ? page_pool_create_percpu+0x73b/0xb70 [ 313.968406][T13517] xdp_reg_mem_model+0x22/0x40 [ 313.968427][T13517] bpf_test_run_xdp_live+0x32f/0x2220 [ 313.968456][T13517] ? __pfx_lock_release+0x10/0x10 [ 313.968492][T13517] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 313.968516][T13517] ? __pfx___might_resched+0x10/0x10 [ 313.968545][T13517] ? __mutex_unlock_slowpath+0x227/0x800 [ 313.968604][T13517] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 313.968632][T13517] ? synchronize_rcu+0x11b/0x360 [ 313.968655][T13517] ? __pfx_synchronize_rcu+0x10/0x10 [ 313.968703][T13517] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 313.968731][T13517] ? 0xffffffffa00021d4 [ 313.968780][T13517] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 313.968827][T13517] ? _copy_from_user+0x95/0xb0 [ 313.968854][T13517] ? bpf_test_init+0x137/0x160 [ 313.968880][T13517] ? xdp_convert_md_to_buff+0x5b/0x330 [ 313.968911][T13517] bpf_prog_test_run_xdp+0x805/0x11e0 [ 313.968946][T13517] ? __pfx_lock_release+0x10/0x10 [ 313.968985][T13517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.969013][T13517] ? __fget_files+0x2a/0x410 [ 313.969046][T13517] ? __fget_files+0x2a/0x410 [ 313.969078][T13517] ? fput+0x21b/0x290 [ 313.969103][T13517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.969134][T13517] bpf_prog_test_run+0x2e4/0x360 [ 313.969167][T13517] __sys_bpf+0x487/0x820 [ 313.969197][T13517] ? __pfx___sys_bpf+0x10/0x10 [ 313.969239][T13517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.969271][T13517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.969301][T13517] ? do_syscall_64+0x100/0x230 [ 313.969332][T13517] __x64_sys_bpf+0x7c/0x90 [ 313.969358][T13517] do_syscall_64+0xf3/0x230 [ 313.969383][T13517] ? clear_bhb_loop+0x35/0x90 [ 313.969413][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.969438][T13517] RIP: 0033:0x7f3b7cf8d169 [ 313.969455][T13517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.969472][T13517] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.969497][T13517] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 313.969512][T13517] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 313.969526][T13517] RBP: 00007f3b7ddb5090 R08: 0000000000000000 R09: 0000000000000000 [ 313.969538][T13517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.969551][T13517] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 313.969583][T13517] [ 314.235831][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.444441][T13521] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 314.503686][T13519] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 314.852651][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 314.871991][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2192'. [ 314.884880][T13531] openvswitch: netlink: Message has 1 unknown bytes. [ 314.902283][T13531] openvswitch: netlink: Actions may not be safe on all matching packets [ 314.904937][T13529] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 315.265735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.694571][T13552] trusted_key: syz.4.2202 sent an empty control message without MSG_MORE. [ 315.802977][T13557] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 315.963603][T13562] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2203'. [ 316.018253][T13568] x_tables: unsorted entry at hook 2 [ 316.041108][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 316.042150][T13561] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2203'. [ 316.305901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.868864][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 317.206664][T13628] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 317.345769][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.523027][T13634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2222'. [ 317.599718][T13634] : entered promiscuous mode [ 317.644512][T13643] netlink: 'syz.3.2226': attribute type 29 has an invalid length. [ 317.767163][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 317.817587][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 317.865834][T13647] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2228'. [ 317.942031][T13655] netlink: 'syz.2.2229': attribute type 15 has an invalid length. [ 317.965891][T13655] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2229'. [ 318.032796][T13648] lo speed is unknown, defaulting to 1000 [ 318.125936][T13672] netlink: 'syz.2.2234': attribute type 21 has an invalid length. [ 318.144313][T13672] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2234'. [ 318.161302][T13672] netlink: 'syz.2.2234': attribute type 5 has an invalid length. [ 318.182743][T13672] netlink: 'syz.2.2234': attribute type 6 has an invalid length. [ 318.209957][T13672] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2234'. [ 318.249872][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 318.301849][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 318.385814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.474469][T13685] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 318.646618][T13687] sit0: entered promiscuous mode [ 318.665915][T13687] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 318.691846][T13687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2238'. [ 318.758516][T13696] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 318.864271][T13698] xt_hashlimit: overflow, try lower: 0/0 [ 318.953286][T13648] tipc: Enabling of bearer rejected, media not registered [ 319.072679][T13648] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.187510][T13714] lo speed is unknown, defaulting to 1000 [ 319.344683][T13719] lo: entered promiscuous mode [ 319.376883][T13718] lo: left promiscuous mode [ 319.412517][T13721] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 319.425726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.784604][T13735] netlink: 'syz.0.2257': attribute type 21 has an invalid length. [ 319.989272][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 320.291692][T13757] batadv_slave_1: entered promiscuous mode [ 320.317538][T13757] batadv_slave_1: left promiscuous mode [ 320.465796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.598984][T13769] syz.4.2266: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.642223][T13769] CPU: 0 UID: 0 PID: 13769 Comm: syz.4.2266 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 320.642257][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.642272][T13769] Call Trace: [ 320.642281][T13769] [ 320.642290][T13769] dump_stack_lvl+0x241/0x360 [ 320.642325][T13769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.642349][T13769] ? __pfx__printk+0x10/0x10 [ 320.642377][T13769] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 320.642405][T13769] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 320.642435][T13769] warn_alloc+0x278/0x410 [ 320.642461][T13769] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 320.642484][T13769] ? __pfx_warn_alloc+0x10/0x10 [ 320.642509][T13769] ? kasan_save_track+0x3f/0x80 [ 320.642532][T13769] ? __kasan_kmalloc+0x98/0xb0 [ 320.642557][T13769] ? xsk_setsockopt+0x4aa/0x810 [ 320.642586][T13769] ? do_sock_setsockopt+0x3af/0x720 [ 320.642608][T13769] ? __x64_sys_setsockopt+0x1ee/0x280 [ 320.642628][T13769] ? do_syscall_64+0xf3/0x230 [ 320.642654][T13769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.642693][T13769] __vmalloc_node_range_noprof+0x126/0x1380 [ 320.642745][T13769] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.642767][T13769] ? __kasan_kmalloc+0x98/0xb0 [ 320.642794][T13769] vmalloc_user_noprof+0x74/0x80 [ 320.642816][T13769] ? xskq_create+0xb6/0x170 [ 320.642834][T13769] xskq_create+0xb6/0x170 [ 320.642858][T13769] xsk_init_queue+0xa1/0x100 [ 320.642881][T13769] xsk_setsockopt+0x4aa/0x810 [ 320.642916][T13769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.642947][T13769] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.642983][T13769] ? aa_sock_opt_perm+0x79/0x120 [ 320.643029][T13769] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.643057][T13769] do_sock_setsockopt+0x3af/0x720 [ 320.643088][T13769] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 320.643117][T13769] ? __fget_files+0x395/0x410 [ 320.643146][T13769] ? __fget_files+0x2a/0x410 [ 320.643185][T13769] __x64_sys_setsockopt+0x1ee/0x280 [ 320.643223][T13769] do_syscall_64+0xf3/0x230 [ 320.643249][T13769] ? clear_bhb_loop+0x35/0x90 [ 320.643282][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.643309][T13769] RIP: 0033:0x7f3b7cf8d169 [ 320.643328][T13769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.643346][T13769] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.643370][T13769] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 320.643386][T13769] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 320.643400][T13769] RBP: 00007f3b7d00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 320.643413][T13769] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.643427][T13769] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 320.643461][T13769] [ 320.643548][T13769] Mem-Info: [ 320.913963][T13769] active_anon:7642 inactive_anon:0 isolated_anon:0 [ 320.913963][T13769] active_file:1746 inactive_file:38402 isolated_file:0 [ 320.913963][T13769] unevictable:768 dirty:332 writeback:0 [ 320.913963][T13769] slab_reclaimable:11604 slab_unreclaimable:111738 [ 320.913963][T13769] mapped:28753 shmem:2172 pagetables:819 [ 320.913963][T13769] sec_pagetables:0 bounce:0 [ 320.913963][T13769] kernel_misc_reclaimable:0 [ 320.913963][T13769] free:1320247 free_pcp:1076 free_cma:0 [ 321.014040][T13775] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 321.026292][T13769] Node 0 active_anon:27968kB inactive_anon:0kB active_file:6984kB inactive_file:153536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115012kB dirty:1328kB writeback:0kB shmem:4352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12348kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 321.035752][T13775] CPU: 1 UID: 0 PID: 13775 Comm: syz.3.2268 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 321.035790][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.035803][T13775] Call Trace: [ 321.035811][T13775] [ 321.035820][T13775] dump_stack_lvl+0x241/0x360 [ 321.035851][T13775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.035873][T13775] ? __pfx__printk+0x10/0x10 [ 321.035898][T13775] ? __kmalloc_cache_noprof+0x243/0x390 [ 321.035921][T13775] ? sysfs_warn_dup+0x51/0xa0 [ 321.035949][T13775] sysfs_warn_dup+0x8e/0xa0 [ 321.035971][T13775] sysfs_do_create_link_sd+0xbe/0x110 [ 321.035997][T13775] device_add_class_symlinks+0x1c5/0x250 [ 321.036020][T13775] device_add+0x553/0xbf0 [ 321.036045][T13775] wiphy_register+0x1922/0x2650 [ 321.036083][T13775] ? __pfx_wiphy_register+0x10/0x10 [ 321.036105][T13775] ? minstrel_ht_alloc+0x84b/0x940 [ 321.036138][T13775] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 321.036169][T13775] ieee80211_register_hw+0x35d9/0x42e0 [ 321.036202][T13775] ? ieee80211_register_hw+0x1631/0x42e0 [ 321.036229][T13775] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 321.036259][T13775] ? __asan_memset+0x23/0x50 [ 321.036278][T13775] ? __hrtimer_init+0x170/0x250 [ 321.036302][T13775] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 321.036359][T13775] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 321.036381][T13775] ? trace_kmalloc+0x1f/0xd0 [ 321.036402][T13775] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 321.036427][T13775] ? kstrndup+0xbb/0x150 [ 321.036463][T13775] hwsim_new_radio_nl+0xece/0x2290 [ 321.036501][T13775] ? __pfx___nla_validate_parse+0x10/0x10 [ 321.036526][T13775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.036585][T13775] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 321.036615][T13775] genl_rcv_msg+0xb1f/0xec0 [ 321.036646][T13775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.036697][T13775] ? __pfx_lock_acquire+0x10/0x10 [ 321.036722][T13775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.036747][T13775] ? __pfx___might_resched+0x10/0x10 [ 321.036790][T13775] netlink_rcv_skb+0x206/0x480 [ 321.036817][T13775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.036840][T13775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.036898][T13775] genl_rcv+0x28/0x40 [ 321.036916][T13775] netlink_unicast+0x7f6/0x990 [ 321.036949][T13775] ? __pfx_netlink_unicast+0x10/0x10 [ 321.036969][T13775] ? __virt_addr_valid+0x45f/0x530 [ 321.036989][T13775] ? __phys_addr_symbol+0x2f/0x70 [ 321.037006][T13775] ? __check_object_size+0x47a/0x730 [ 321.037036][T13775] netlink_sendmsg+0x8de/0xcb0 [ 321.037076][T13775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.037106][T13775] ? aa_sock_msg_perm+0x91/0x160 [ 321.037139][T13775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.037162][T13775] __sock_sendmsg+0x221/0x270 [ 321.037191][T13775] ____sys_sendmsg+0x53a/0x860 [ 321.037221][T13775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.037239][T13775] ? __fget_files+0x2a/0x410 [ 321.037268][T13775] ? __fget_files+0x2a/0x410 [ 321.037303][T13775] __sys_sendmsg+0x269/0x350 [ 321.037322][T13775] ? __pfx_futex_wake+0x10/0x10 [ 321.037352][T13775] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.037422][T13775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.037449][T13775] ? do_syscall_64+0x100/0x230 [ 321.037475][T13775] ? do_syscall_64+0xb6/0x230 [ 321.037501][T13775] do_syscall_64+0xf3/0x230 [ 321.037523][T13775] ? clear_bhb_loop+0x35/0x90 [ 321.037550][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.037573][T13775] RIP: 0033:0x7fa01478d169 [ 321.037591][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.037606][T13775] RSP: 002b:00007fa0155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.037627][T13775] RAX: ffffffffffffffda RBX: 00007fa0149a5fa0 RCX: 00007fa01478d169 [ 321.037641][T13775] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 321.037653][T13775] RBP: 00007fa01480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 321.037665][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.037676][T13775] R13: 0000000000000000 R14: 00007fa0149a5fa0 R15: 00007ffe5b4a8c58 [ 321.037706][T13775] [ 321.506081][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.572460][T13769] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 321.667819][T13797] lo speed is unknown, defaulting to 1000 [ 321.674414][T13769] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.798028][T13769] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 321.834559][T13769] Node 0 DMA32 free:1367052kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28256kB inactive_anon:0kB active_file:6984kB inactive_file:153212kB unevictable:1536kB writepending:636kB present:3129332kB managed:2549712kB mlocked:0kB bounce:0kB free_pcp:1716kB local_pcp:1020kB free_cma:0kB [ 321.956558][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 321.961420][T13769] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.017600][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 322.022714][T13769] Node 1 Normal free:3902972kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:152kB free_cma:0kB [ 322.052375][T13814] IPv6: Can't replace route, no match found [ 322.052661][T13769] lowmem_reserve[]: 0 0 0 0 0 [ 322.103096][T13769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 322.125595][T13769] Node 0 DMA32: 797*4kB (UM) 932*8kB (UM) 481*16kB (UME) 222*32kB (UME) 223*64kB (UME) 138*128kB (UME) 42*256kB (UM) 23*512kB (UME) 10*1024kB (UME) 13*2048kB (UM) 305*4096kB (UM) = 1366052kB [ 322.197535][T13769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.209472][T13769] Node 1 Normal: 187*4kB (UE) 52*8kB (UME) 33*16kB (UME) 195*32kB (UME) 96*64kB (UME) 24*128kB (UME) 17*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3902972kB [ 322.228741][T13769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.239889][T13769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 322.249503][T13769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.256689][T13821] FAULT_INJECTION: forcing a failure. [ 322.256689][T13821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.259211][T13769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 322.281756][T13769] 41593 total pagecache pages [ 322.287469][T13769] 0 pages in swap cache [ 322.301623][T13769] Free swap = 124996kB [ 322.315175][T13769] Total swap = 124996kB [ 322.327757][T13769] 2097051 pages RAM [ 322.337313][T13769] 0 pages HighMem/MovableOnly [ 322.346045][T13821] CPU: 1 UID: 0 PID: 13821 Comm: syz.1.2276 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 322.346076][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.346089][T13821] Call Trace: [ 322.346097][T13821] [ 322.346106][T13821] dump_stack_lvl+0x241/0x360 [ 322.346136][T13821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.346158][T13821] ? __pfx__printk+0x10/0x10 [ 322.346190][T13821] should_fail_ex+0x40a/0x550 [ 322.346223][T13821] _copy_to_user+0x31/0xb0 [ 322.346251][T13821] bpf_test_finish+0x212/0x890 [ 322.346288][T13821] ? __pfx_bpf_test_finish+0x10/0x10 [ 322.346323][T13821] ? bpf_test_init+0x137/0x160 [ 322.346353][T13821] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 322.346388][T13821] ? __pfx_lock_release+0x10/0x10 [ 322.346428][T13821] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 322.346456][T13821] ? __fget_files+0x2a/0x410 [ 322.346488][T13821] ? __fget_files+0x2a/0x410 [ 322.346518][T13821] ? fput+0x21b/0x290 [ 322.346550][T13821] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 322.346581][T13821] bpf_prog_test_run+0x2e4/0x360 [ 322.346614][T13821] __sys_bpf+0x487/0x820 [ 322.346643][T13821] ? __pfx___sys_bpf+0x10/0x10 [ 322.346684][T13821] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 322.346716][T13821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.346746][T13821] ? do_syscall_64+0x100/0x230 [ 322.346777][T13821] __x64_sys_bpf+0x7c/0x90 [ 322.346800][T13821] do_syscall_64+0xf3/0x230 [ 322.346824][T13821] ? clear_bhb_loop+0x35/0x90 [ 322.346853][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.346878][T13821] RIP: 0033:0x7f5ffe38d169 [ 322.346896][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.346912][T13821] RSP: 002b:00007f5fff27e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.346934][T13821] RAX: ffffffffffffffda RBX: 00007f5ffe5a5fa0 RCX: 00007f5ffe38d169 [ 322.346949][T13821] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 322.346962][T13821] RBP: 00007f5fff27e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.346974][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.346986][T13821] R13: 0000000000000000 R14: 00007f5ffe5a5fa0 R15: 00007ffe5b40dc28 [ 322.347018][T13821] [ 322.351619][T13769] 427901 pages reserved [ 322.547064][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.609240][T13769] 0 pages cma reserved [ 322.611451][T13833] __nla_validate_parse: 8 callbacks suppressed [ 322.611469][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 322.732446][T13834] syzkaller0: entered promiscuous mode [ 322.752930][T13834] syzkaller0: entered allmulticast mode [ 322.778023][T13828] batadv_slave_0: left promiscuous mode [ 322.881999][T13841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2284'. [ 323.264161][T13855] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2287'. [ 323.348213][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 323.357774][T13858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2288'. [ 323.406631][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 323.521391][T13869] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 323.595811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.622982][T13873] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 324.635781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.482431][T13846] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 325.493077][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.2.2284 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 325.493107][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.493119][T13846] Call Trace: [ 325.493127][T13846] [ 325.493137][T13846] dump_stack_lvl+0x241/0x360 [ 325.493164][T13846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.493178][T13846] ? __pfx__printk+0x10/0x10 [ 325.493193][T13846] ? __kmalloc_cache_noprof+0x243/0x390 [ 325.493210][T13846] ? sysfs_warn_dup+0x51/0xa0 [ 325.493228][T13846] sysfs_warn_dup+0x8e/0xa0 [ 325.493243][T13846] sysfs_do_create_link_sd+0xbe/0x110 [ 325.493261][T13846] device_add_class_symlinks+0x1c5/0x250 [ 325.493276][T13846] device_add+0x553/0xbf0 [ 325.493291][T13846] wiphy_register+0x1922/0x2650 [ 325.493316][T13846] ? __pfx_wiphy_register+0x10/0x10 [ 325.493331][T13846] ? minstrel_ht_alloc+0x84b/0x940 [ 325.493353][T13846] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 325.493373][T13846] ieee80211_register_hw+0x35d9/0x42e0 [ 325.493393][T13846] ? ieee80211_register_hw+0x1631/0x42e0 [ 325.493410][T13846] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 325.493428][T13846] ? __asan_memset+0x23/0x50 [ 325.493441][T13846] ? __hrtimer_init+0x170/0x250 [ 325.493458][T13846] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 325.493492][T13846] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 325.493508][T13846] ? trace_kmalloc+0x1f/0xd0 [ 325.493522][T13846] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 325.493539][T13846] ? kstrndup+0xbb/0x150 [ 325.493563][T13846] hwsim_new_radio_nl+0xece/0x2290 [ 325.493587][T13846] ? __pfx___nla_validate_parse+0x10/0x10 [ 325.493605][T13846] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.493640][T13846] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 325.493661][T13846] genl_rcv_msg+0xb1f/0xec0 [ 325.493680][T13846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.493710][T13846] ? __pfx_lock_acquire+0x10/0x10 [ 325.493728][T13846] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.493744][T13846] ? __pfx___might_resched+0x10/0x10 [ 325.493767][T13846] netlink_rcv_skb+0x206/0x480 [ 325.493785][T13846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.493800][T13846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.493836][T13846] genl_rcv+0x28/0x40 [ 325.493848][T13846] netlink_unicast+0x7f6/0x990 [ 325.493869][T13846] ? __pfx_netlink_unicast+0x10/0x10 [ 325.493883][T13846] ? __virt_addr_valid+0x45f/0x530 [ 325.493896][T13846] ? __phys_addr_symbol+0x2f/0x70 [ 325.493906][T13846] ? __check_object_size+0x47a/0x730 [ 325.493926][T13846] netlink_sendmsg+0x8de/0xcb0 [ 325.493952][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.493973][T13846] ? aa_sock_msg_perm+0x91/0x160 [ 325.493995][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.494020][T13846] __sock_sendmsg+0x221/0x270 [ 325.494054][T13846] ____sys_sendmsg+0x53a/0x860 [ 325.494074][T13846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.494087][T13846] ? __fget_files+0x2a/0x410 [ 325.494107][T13846] ? __fget_files+0x2a/0x410 [ 325.494131][T13846] __sys_sendmsg+0x269/0x350 [ 325.494145][T13846] ? __pfx_futex_wake+0x10/0x10 [ 325.494165][T13846] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.494206][T13846] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.494226][T13846] ? do_syscall_64+0x100/0x230 [ 325.494243][T13846] ? do_syscall_64+0xb6/0x230 [ 325.494260][T13846] do_syscall_64+0xf3/0x230 [ 325.494275][T13846] ? clear_bhb_loop+0x35/0x90 [ 325.494295][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.494311][T13846] RIP: 0033:0x7fb15038d169 [ 325.494323][T13846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.494334][T13846] RSP: 002b:00007fb15115a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.494349][T13846] RAX: ffffffffffffffda RBX: 00007fb1505a6080 RCX: 00007fb15038d169 [ 325.494357][T13846] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 325.494365][T13846] RBP: 00007fb15040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.494372][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.494380][T13846] R13: 0000000000000000 R14: 00007fb1505a6080 R15: 00007ffc18ffc678 [ 325.494398][T13846] [ 325.902504][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.991115][T13858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 326.003796][T13858] gretap2: entered promiscuous mode [ 326.077670][T13863] bond0: (slave bond_slave_0): Releasing backup interface [ 326.198540][T13876] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 326.680227][T13907] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 326.719334][T13903] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 326.902980][T13913] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2301'. [ 327.101243][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2305'. [ 327.122439][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2305'. [ 327.135993][T13930] xt_recent: Unsupported userspace flags (00000042) [ 327.172545][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 327.210271][T13933] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 327.244250][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.1.2306 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 327.244285][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.244298][T13933] Call Trace: [ 327.244306][T13933] [ 327.244315][T13933] dump_stack_lvl+0x241/0x360 [ 327.244348][T13933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.244370][T13933] ? __pfx__printk+0x10/0x10 [ 327.244396][T13933] ? __kmalloc_cache_noprof+0x243/0x390 [ 327.244423][T13933] ? sysfs_warn_dup+0x51/0xa0 [ 327.244450][T13933] sysfs_warn_dup+0x8e/0xa0 [ 327.244473][T13933] sysfs_do_create_link_sd+0xbe/0x110 [ 327.244500][T13933] device_add_class_symlinks+0x1c5/0x250 [ 327.244526][T13933] device_add+0x553/0xbf0 [ 327.244556][T13933] wiphy_register+0x1922/0x2650 [ 327.244601][T13933] ? __pfx_wiphy_register+0x10/0x10 [ 327.244627][T13933] ? minstrel_ht_alloc+0x84b/0x940 [ 327.244667][T13933] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 327.244707][T13933] ieee80211_register_hw+0x35d9/0x42e0 [ 327.244756][T13933] ? ieee80211_register_hw+0x1631/0x42e0 [ 327.244788][T13933] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 327.244823][T13933] ? __asan_memset+0x23/0x50 [ 327.244845][T13933] ? __hrtimer_init+0x170/0x250 [ 327.244874][T13933] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 327.244942][T13933] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 327.244969][T13933] ? trace_kmalloc+0x1f/0xd0 [ 327.244992][T13933] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 327.245022][T13933] ? kstrndup+0xbb/0x150 [ 327.245066][T13933] hwsim_new_radio_nl+0xece/0x2290 [ 327.245111][T13933] ? __pfx___nla_validate_parse+0x10/0x10 [ 327.245141][T13933] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.245214][T13933] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 327.245258][T13933] genl_rcv_msg+0xb1f/0xec0 [ 327.245294][T13933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.245356][T13933] ? __pfx_lock_acquire+0x10/0x10 [ 327.245384][T13933] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 327.245413][T13933] ? __pfx___might_resched+0x10/0x10 [ 327.245453][T13933] netlink_rcv_skb+0x206/0x480 [ 327.245483][T13933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.245509][T13933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.245576][T13933] genl_rcv+0x28/0x40 [ 327.245598][T13933] netlink_unicast+0x7f6/0x990 [ 327.245640][T13933] ? __pfx_netlink_unicast+0x10/0x10 [ 327.245662][T13933] ? __virt_addr_valid+0x45f/0x530 [ 327.245682][T13933] ? __phys_addr_symbol+0x2f/0x70 [ 327.245700][T13933] ? __check_object_size+0x47a/0x730 [ 327.245741][T13933] netlink_sendmsg+0x8de/0xcb0 [ 327.245783][T13933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.245819][T13933] ? aa_sock_msg_perm+0x91/0x160 [ 327.245857][T13933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.245886][T13933] __sock_sendmsg+0x221/0x270 [ 327.245920][T13933] ____sys_sendmsg+0x53a/0x860 [ 327.245956][T13933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.245976][T13933] ? __fget_files+0x2a/0x410 [ 327.246009][T13933] ? __fget_files+0x2a/0x410 [ 327.246048][T13933] __sys_sendmsg+0x269/0x350 [ 327.246071][T13933] ? __pfx_futex_wake+0x10/0x10 [ 327.246106][T13933] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.246187][T13933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.246221][T13933] ? do_syscall_64+0x100/0x230 [ 327.246253][T13933] ? do_syscall_64+0xb6/0x230 [ 327.246283][T13933] do_syscall_64+0xf3/0x230 [ 327.246309][T13933] ? clear_bhb_loop+0x35/0x90 [ 327.246342][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.246369][T13933] RIP: 0033:0x7f5ffe38d169 [ 327.246389][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.246408][T13933] RSP: 002b:00007f5fff27e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.246432][T13933] RAX: ffffffffffffffda RBX: 00007f5ffe5a5fa0 RCX: 00007f5ffe38d169 [ 327.246447][T13933] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 327.246461][T13933] RBP: 00007f5ffe40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.246474][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.246487][T13933] R13: 0000000000000000 R14: 00007f5ffe5a5fa0 R15: 00007ffe5b40dc28 [ 327.246523][T13933] [ 327.673430][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.681740][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.689740][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.697715][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.705583][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.713539][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.721537][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.729612][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.737624][T13939] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 327.864101][T13955] o]U.: renamed from lo [ 328.186623][T13961] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 328.208736][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 328.647438][T13983] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 328.662386][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 328.708880][T13983] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.729153][T13983] gretap1: entered promiscuous mode [ 328.759488][T13983] gretap1: entered allmulticast mode [ 328.871697][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 328.985505][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2325'. [ 329.034525][T13991] bond2: entered promiscuous mode [ 329.076357][T13991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.226578][T13992] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 329.292007][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2326'. [ 329.342301][T14001] validate_nla: 24 callbacks suppressed [ 329.342324][T14001] netlink: 'syz.3.2319': attribute type 32 has an invalid length. [ 329.590426][T14003] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 329.631486][T14003] CPU: 0 UID: 0 PID: 14003 Comm: syz.0.2326 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 329.631519][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.631532][T14003] Call Trace: [ 329.631541][T14003] [ 329.631551][T14003] dump_stack_lvl+0x241/0x360 [ 329.631586][T14003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.631610][T14003] ? __pfx__printk+0x10/0x10 [ 329.631639][T14003] ? __kmalloc_cache_noprof+0x243/0x390 [ 329.631676][T14003] ? sysfs_warn_dup+0x51/0xa0 [ 329.631707][T14003] sysfs_warn_dup+0x8e/0xa0 [ 329.631732][T14003] sysfs_do_create_link_sd+0xbe/0x110 [ 329.631762][T14003] device_add_class_symlinks+0x1c5/0x250 [ 329.631788][T14003] device_add+0x553/0xbf0 [ 329.631817][T14003] wiphy_register+0x1922/0x2650 [ 329.631861][T14003] ? __pfx_wiphy_register+0x10/0x10 [ 329.631886][T14003] ? minstrel_ht_alloc+0x84b/0x940 [ 329.631922][T14003] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 329.631965][T14003] ieee80211_register_hw+0x35d9/0x42e0 [ 329.632003][T14003] ? ieee80211_register_hw+0x1631/0x42e0 [ 329.632034][T14003] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 329.632069][T14003] ? __asan_memset+0x23/0x50 [ 329.632090][T14003] ? __hrtimer_init+0x170/0x250 [ 329.632119][T14003] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 329.632184][T14003] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 329.632212][T14003] ? trace_kmalloc+0x1f/0xd0 [ 329.632237][T14003] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 329.632265][T14003] ? kstrndup+0xbb/0x150 [ 329.632305][T14003] hwsim_new_radio_nl+0xece/0x2290 [ 329.632348][T14003] ? __pfx___nla_validate_parse+0x10/0x10 [ 329.632377][T14003] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.632448][T14003] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 329.632484][T14003] genl_rcv_msg+0xb1f/0xec0 [ 329.632520][T14003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.632580][T14003] ? __pfx_lock_acquire+0x10/0x10 [ 329.632609][T14003] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.632638][T14003] ? __pfx___might_resched+0x10/0x10 [ 329.632686][T14003] netlink_rcv_skb+0x206/0x480 [ 329.632717][T14003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.632743][T14003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.632815][T14003] genl_rcv+0x28/0x40 [ 329.632836][T14003] netlink_unicast+0x7f6/0x990 [ 329.632875][T14003] ? __pfx_netlink_unicast+0x10/0x10 [ 329.632898][T14003] ? __virt_addr_valid+0x45f/0x530 [ 329.632919][T14003] ? __phys_addr_symbol+0x2f/0x70 [ 329.632938][T14003] ? __check_object_size+0x47a/0x730 [ 329.632972][T14003] netlink_sendmsg+0x8de/0xcb0 [ 329.633018][T14003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.633054][T14003] ? aa_sock_msg_perm+0x91/0x160 [ 329.633101][T14003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.633128][T14003] __sock_sendmsg+0x221/0x270 [ 329.633162][T14003] ____sys_sendmsg+0x53a/0x860 [ 329.633199][T14003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.633222][T14003] ? __fget_files+0x2a/0x410 [ 329.633256][T14003] ? __fget_files+0x2a/0x410 [ 329.633297][T14003] __sys_sendmsg+0x269/0x350 [ 329.633320][T14003] ? __pfx_futex_wake+0x10/0x10 [ 329.633354][T14003] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.633435][T14003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.633467][T14003] ? do_syscall_64+0x100/0x230 [ 329.633498][T14003] ? do_syscall_64+0xb6/0x230 [ 329.633528][T14003] do_syscall_64+0xf3/0x230 [ 329.633554][T14003] ? clear_bhb_loop+0x35/0x90 [ 329.633586][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.633613][T14003] RIP: 0033:0x7f5f7758d169 [ 329.633633][T14003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.633659][T14003] RSP: 002b:00007f5f7848d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.633684][T14003] RAX: ffffffffffffffda RBX: 00007f5f777a6080 RCX: 00007f5f7758d169 [ 329.633699][T14003] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 329.633712][T14003] RBP: 00007f5f7760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 329.633725][T14003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.633738][T14003] R13: 0000000000000000 R14: 00007f5f777a6080 R15: 00007ffdafadcb58 [ 329.633774][T14003] [ 329.635290][T14009] netlink: 'syz.3.2327': attribute type 27 has an invalid length. [ 329.759644][T14012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.075182][T14012] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.094871][ T52] hid-generic 0005:15C2:0A0E.0002: item fetching failed at offset 0/1 [ 330.105482][T14012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.110585][ T52] hid-generic 0005:15C2:0A0E.0002: probe with driver hid-generic failed with error -22 [ 330.297679][T14030] lo speed is unknown, defaulting to 1000 [ 330.306327][T14019] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 330.333776][T14019] CPU: 0 UID: 0 PID: 14019 Comm: syz.2.2330 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 330.333812][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.333826][T14019] Call Trace: [ 330.333834][T14019] [ 330.333844][T14019] dump_stack_lvl+0x241/0x360 [ 330.333879][T14019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.333903][T14019] ? __pfx__printk+0x10/0x10 [ 330.333933][T14019] ? __kmalloc_cache_noprof+0x243/0x390 [ 330.333961][T14019] ? sysfs_warn_dup+0x51/0xa0 [ 330.333994][T14019] sysfs_warn_dup+0x8e/0xa0 [ 330.334018][T14019] sysfs_do_create_link_sd+0xbe/0x110 [ 330.334048][T14019] device_add_class_symlinks+0x1c5/0x250 [ 330.334074][T14019] device_add+0x553/0xbf0 [ 330.334103][T14019] wiphy_register+0x1922/0x2650 [ 330.334149][T14019] ? __pfx_wiphy_register+0x10/0x10 [ 330.334180][T14019] ? minstrel_ht_alloc+0x84b/0x940 [ 330.334220][T14019] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 330.334259][T14019] ieee80211_register_hw+0x35d9/0x42e0 [ 330.334298][T14019] ? ieee80211_register_hw+0x1631/0x42e0 [ 330.334330][T14019] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 330.334366][T14019] ? __asan_memset+0x23/0x50 [ 330.334389][T14019] ? __hrtimer_init+0x170/0x250 [ 330.334417][T14019] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 330.334484][T14019] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 330.334511][T14019] ? trace_kmalloc+0x1f/0xd0 [ 330.334535][T14019] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 330.334564][T14019] ? kstrndup+0xbb/0x150 [ 330.334607][T14019] hwsim_new_radio_nl+0xece/0x2290 [ 330.334660][T14019] ? __pfx___nla_validate_parse+0x10/0x10 [ 330.334690][T14019] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 330.334761][T14019] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 330.334799][T14019] genl_rcv_msg+0xb1f/0xec0 [ 330.334833][T14019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.334891][T14019] ? __pfx_lock_acquire+0x10/0x10 [ 330.334916][T14019] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 330.334944][T14019] ? __pfx___might_resched+0x10/0x10 [ 330.334985][T14019] netlink_rcv_skb+0x206/0x480 [ 330.335017][T14019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.335044][T14019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.335113][T14019] genl_rcv+0x28/0x40 [ 330.335135][T14019] netlink_unicast+0x7f6/0x990 [ 330.335174][T14019] ? __pfx_netlink_unicast+0x10/0x10 [ 330.335199][T14019] ? __virt_addr_valid+0x45f/0x530 [ 330.335222][T14019] ? __phys_addr_symbol+0x2f/0x70 [ 330.335239][T14019] ? __check_object_size+0x47a/0x730 [ 330.335271][T14019] netlink_sendmsg+0x8de/0xcb0 [ 330.335318][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.335355][T14019] ? aa_sock_msg_perm+0x91/0x160 [ 330.335394][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.335422][T14019] __sock_sendmsg+0x221/0x270 [ 330.335456][T14019] ____sys_sendmsg+0x53a/0x860 [ 330.335493][T14019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.335515][T14019] ? __fget_files+0x2a/0x410 [ 330.335548][T14019] ? __fget_files+0x2a/0x410 [ 330.335591][T14019] __sys_sendmsg+0x269/0x350 [ 330.335620][T14019] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.335701][T14019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.335733][T14019] ? do_syscall_64+0x100/0x230 [ 330.335759][T14019] ? do_syscall_64+0xb6/0x230 [ 330.335785][T14019] do_syscall_64+0xf3/0x230 [ 330.335811][T14019] ? clear_bhb_loop+0x35/0x90 [ 330.335840][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.335864][T14019] RIP: 0033:0x7fb15038d169 [ 330.335882][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.335898][T14019] RSP: 002b:00007fb15117b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.335921][T14019] RAX: ffffffffffffffda RBX: 00007fb1505a5fa0 RCX: 00007fb15038d169 [ 330.335937][T14019] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000007 [ 330.335950][T14019] RBP: 00007fb15040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.335963][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.335975][T14019] R13: 0000000000000000 R14: 00007fb1505a5fa0 R15: 00007ffc18ffc678 [ 330.336010][T14019] [ 330.853735][T14036] syzkaller1: entered promiscuous mode [ 330.877449][T14036] syzkaller1: entered allmulticast mode [ 331.066190][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2331'. [ 331.087663][T14035] bridge: RTM_NEWNEIGH with invalid ether address [ 331.265918][T14046] netlink: 'syz.2.2336': attribute type 15 has an invalid length. [ 331.506470][T14061] batman_adv: batadv0: Adding interface: dummy0 [ 331.512848][T14061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.559255][T14061] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 332.919404][T14116] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2364'. [ 333.394695][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2374'. [ 333.638322][T14149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2379'. [ 334.069131][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 334.301706][T14185] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2398'. [ 334.433373][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 334.918871][T14213] lo speed is unknown, defaulting to 1000 [ 335.215279][T14229] [ 335.217688][T14229] ====================================================== [ 335.224742][T14229] WARNING: possible circular locking dependency detected [ 335.231885][T14229] 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 Not tainted [ 335.239039][T14229] ------------------------------------------------------ [ 335.246172][T14229] syz.4.2419/14229 is trying to acquire lock: [ 335.252266][T14229] ffff888027870768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 335.262068][T14229] [ 335.262068][T14229] but task is already holding lock: [ 335.269478][T14229] ffff8880274e0d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 335.278857][T14229] [ 335.278857][T14229] which lock already depends on the new lock. [ 335.278857][T14229] [ 335.289267][T14229] [ 335.289267][T14229] the existing dependency chain (in reverse order) is: [ 335.298287][T14229] [ 335.298287][T14229] -> #1 (&dev->lock){+.+.}-{4:4}: [ 335.305517][T14229] lock_acquire+0x1ed/0x550 [ 335.310595][T14229] __mutex_lock+0x19c/0x1010 [ 335.315742][T14229] register_netdevice+0x12d8/0x1b70 [ 335.321503][T14229] cfg80211_register_netdevice+0x149/0x2f0 [ 335.327873][T14229] ieee80211_if_add+0x119d/0x1780 [ 335.333743][T14229] ieee80211_register_hw+0x3708/0x42e0 [ 335.339753][T14229] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 335.346030][T14229] init_mac80211_hwsim+0x87a/0xb00 [ 335.351688][T14229] do_one_initcall+0x248/0x930 [ 335.356991][T14229] do_initcall_level+0x157/0x210 [ 335.362551][T14229] do_initcalls+0x71/0xd0 [ 335.367411][T14229] kernel_init_freeable+0x435/0x5d0 [ 335.373149][T14229] kernel_init+0x1d/0x2b0 [ 335.378010][T14229] ret_from_fork+0x4b/0x80 [ 335.382981][T14229] ret_from_fork_asm+0x1a/0x30 [ 335.388364][T14229] [ 335.388364][T14229] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 335.396196][T14229] validate_chain+0x18ef/0x5920 [ 335.401650][T14229] __lock_acquire+0x1397/0x2100 [ 335.407035][T14229] lock_acquire+0x1ed/0x550 [ 335.412069][T14229] __mutex_lock+0x19c/0x1010 [ 335.417189][T14229] ieee80211_change_mac+0xc6/0x1160 [ 335.422917][T14229] netif_set_mac_address+0x327/0x510 [ 335.428734][T14229] dev_set_mac_address+0x38/0x50 [ 335.434232][T14229] dev_ifsioc+0xdf4/0x1130 [ 335.439178][T14229] dev_ioctl+0x719/0x1340 [ 335.444212][T14229] sock_do_ioctl+0x240/0x460 [ 335.449332][T14229] sock_ioctl+0x626/0x8e0 [ 335.454192][T14229] __se_sys_ioctl+0xf5/0x170 [ 335.459307][T14229] do_syscall_64+0xf3/0x230 [ 335.464340][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.470859][T14229] [ 335.470859][T14229] other info that might help us debug this: [ 335.470859][T14229] [ 335.481179][T14229] Possible unsafe locking scenario: [ 335.481179][T14229] [ 335.489323][T14229] CPU0 CPU1 [ 335.494781][T14229] ---- ---- [ 335.500234][T14229] lock(&dev->lock); [ 335.504227][T14229] lock(&rdev->wiphy.mtx); [ 335.511270][T14229] lock(&dev->lock); [ 335.517778][T14229] lock(&rdev->wiphy.mtx); [ 335.522313][T14229] [ 335.522313][T14229] *** DEADLOCK *** [ 335.522313][T14229] [ 335.530829][T14229] 2 locks held by syz.4.2419/14229: [ 335.536042][T14229] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x706/0x1340 [ 335.544867][T14229] #1: ffff8880274e0d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 335.554290][T14229] [ 335.554290][T14229] stack backtrace: [ 335.560184][T14229] CPU: 0 UID: 0 PID: 14229 Comm: syz.4.2419 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 335.560205][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.560215][T14229] Call Trace: [ 335.560225][T14229] [ 335.560233][T14229] dump_stack_lvl+0x241/0x360 [ 335.560253][T14229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.560269][T14229] ? __pfx__printk+0x10/0x10 [ 335.560288][T14229] print_circular_bug+0x13a/0x1b0 [ 335.560309][T14229] check_noncircular+0x36a/0x4a0 [ 335.560328][T14229] ? __pfx_check_noncircular+0x10/0x10 [ 335.560345][T14229] ? lockdep_lock+0x123/0x2b0 [ 335.560368][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560383][T14229] ? do_raw_spin_unlock+0x13c/0x8b0 [ 335.560404][T14229] validate_chain+0x18ef/0x5920 [ 335.560429][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560449][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560467][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560483][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560498][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560517][T14229] ? __pfx_validate_chain+0x10/0x10 [ 335.560532][T14229] ? mark_lock+0x9a/0x360 [ 335.560548][T14229] __lock_acquire+0x1397/0x2100 [ 335.560574][T14229] lock_acquire+0x1ed/0x550 [ 335.560594][T14229] ? ieee80211_change_mac+0xc6/0x1160 [ 335.560616][T14229] ? __pfx_lock_acquire+0x10/0x10 [ 335.560638][T14229] ? __pfx___might_resched+0x10/0x10 [ 335.560662][T14229] __mutex_lock+0x19c/0x1010 [ 335.560680][T14229] ? ieee80211_change_mac+0xc6/0x1160 [ 335.560699][T14229] ? __pfx_lock_release+0x10/0x10 [ 335.560721][T14229] ? ieee80211_change_mac+0xc6/0x1160 [ 335.560740][T14229] ? __pfx___mutex_lock+0x10/0x10 [ 335.560760][T14229] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 335.560777][T14229] ? ib_device_get_by_netdev+0x85/0x5e0 [ 335.560799][T14229] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 335.560820][T14229] ? hsr_netdev_notify+0x295/0xb50 [ 335.560840][T14229] ieee80211_change_mac+0xc6/0x1160 [ 335.560859][T14229] ? ip6_route_dev_notify+0x99/0x600 [ 335.560876][T14229] ? notifier_call_chain+0x15a/0x3f0 [ 335.560906][T14229] ? notifier_call_chain+0x3cc/0x3f0 [ 335.560927][T14229] netif_set_mac_address+0x327/0x510 [ 335.560947][T14229] ? __pfx_netif_set_mac_address+0x10/0x10 [ 335.560963][T14229] ? rcu_is_watching+0x15/0xb0 [ 335.560980][T14229] ? __mutex_lock+0x397/0x1010 [ 335.560998][T14229] ? full_name_hash+0x93/0xe0 [ 335.561021][T14229] dev_set_mac_address+0x38/0x50 [ 335.561038][T14229] dev_ifsioc+0xdf4/0x1130 [ 335.561060][T14229] ? __pfx___mutex_lock+0x10/0x10 [ 335.561080][T14229] ? __pfx_dev_ifsioc+0x10/0x10 [ 335.561101][T14229] ? dev_load+0x21/0x1f0 [ 335.561120][T14229] dev_ioctl+0x719/0x1340 [ 335.561141][T14229] sock_do_ioctl+0x240/0x460 [ 335.561163][T14229] ? __pfx_sock_do_ioctl+0x10/0x10 [ 335.561189][T14229] sock_ioctl+0x626/0x8e0 [ 335.561208][T14229] ? __pfx_sock_ioctl+0x10/0x10 [ 335.561226][T14229] ? __fget_files+0x2a/0x410 [ 335.561247][T14229] ? __fget_files+0x2a/0x410 [ 335.561268][T14229] ? __pfx_sock_ioctl+0x10/0x10 [ 335.561287][T14229] __se_sys_ioctl+0xf5/0x170 [ 335.561303][T14229] do_syscall_64+0xf3/0x230 [ 335.561324][T14229] ? clear_bhb_loop+0x35/0x90 [ 335.561347][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.561367][T14229] RIP: 0033:0x7f3b7cf8d169 [ 335.561382][T14229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.561395][T14229] RSP: 002b:00007f3b7ddb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.561413][T14229] RAX: ffffffffffffffda RBX: 00007f3b7d1a5fa0 RCX: 00007f3b7cf8d169 [ 335.561425][T14229] RDX: 00004000000000c0 RSI: 0000000000008924 RDI: 0000000000000004 [ 335.561435][T14229] RBP: 00007f3b7d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.561445][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.561454][T14229] R13: 0000000000000000 R14: 00007f3b7d1a5fa0 R15: 00007ffc21510858 [ 335.561470][T14229] [ 335.570425][T14235] netlink: 'syz.3.2420': attribute type 1 has an invalid length. [ 335.578821][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2421'.