last executing test programs: 7.03299101s ago: executing program 0 (id=2303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 6.904425834s ago: executing program 2 (id=2305): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 6.595708122s ago: executing program 0 (id=2308): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 6.241259001s ago: executing program 1 (id=2310): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x105440, 0x9, 0x2, 0xd, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 3.044774883s ago: executing program 0 (id=2311): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b12d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.044589523s ago: executing program 2 (id=2312): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 2.953090245s ago: executing program 3 (id=2313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.71851074s ago: executing program 3 (id=2314): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x8801) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 2.7174969s ago: executing program 1 (id=2322): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.7167995s ago: executing program 2 (id=2315): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0xfffffffffffff6f0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, &(0x7f00000019c0)=""/173, 0x0, 0xad, 0x1}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8940, &(0x7f0000000080)) close(r3) 2.439230978s ago: executing program 3 (id=2316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.249017483s ago: executing program 0 (id=2317): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10111) socketpair(0x22, 0x6, 0x1, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) 2.248724883s ago: executing program 1 (id=2318): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x104101, 0x7, 0x0, 0x1, 0x100, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001140)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x4}]}, {0x0, [0x30, 0x61, 0x30, 0x61, 0x1e]}}, 0x0, 0x2b, 0x0, 0x1, 0xdb}, 0x28) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r4, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x19, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x106c}, @map_fd={0x18, 0xb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x313}}, @ldst={0x0, 0x0, 0x0, 0x3, 0x4, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f00000007c0)='GPL\x00', 0x80, 0x94, &(0x7f00000009c0)=""/148, 0x41000, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x5, 0x1, 0x9}, 0x10, 0x1ae73, 0xffffffffffffffff, 0x1, &(0x7f0000001040)=[r4], &(0x7f0000001080)=[{0x0, 0x2, 0xb, 0x4}], 0x10, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) 2.045472848s ago: executing program 3 (id=2319): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) 1.864331513s ago: executing program 1 (id=2320): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4804) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x104c270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@bloom_filter={0x1e, 0xfffffffc, 0x6, 0xc82, 0x9648b857b341fdac, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x6}, 0x53) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={r1, 0x58, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@bloom_filter={0x1e, 0x2, 0x7, 0x1, 0x11100, 0xffffffffffffffff, 0x537, '\x00', r2, r3, 0x4, 0x3, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.777824325s ago: executing program 0 (id=2321): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1.629468049s ago: executing program 2 (id=2323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 823.732159ms ago: executing program 0 (id=2324): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) socket$kcm(0x21, 0x2, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.446419ms ago: executing program 1 (id=2325): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 821.383619ms ago: executing program 3 (id=2326): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 564.551675ms ago: executing program 2 (id=2327): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x8801) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 61.384748ms ago: executing program 3 (id=2328): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 31.321819ms ago: executing program 1 (id=2329): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b12d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 0s ago: executing program 2 (id=2330): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x105440, 0x9, 0x2, 0xd, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) kernel console output (not intermixed with test programs): 479.922608][T11207] ? mac80211_hwsim_free+0x220/0x220 [ 479.928093][T11207] ? rcu_is_watching+0x15/0xb0 [ 479.932892][T11207] ? kstrndup+0xbd/0x140 [ 479.937180][T11207] hwsim_new_radio_nl+0xdad/0x1a70 [ 479.942329][T11207] ? __nla_validate+0x50/0x50 [ 479.947063][T11207] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 479.953433][T11207] ? __nla_parse+0x40/0x50 [ 479.957886][T11207] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 479.964257][T11207] genl_family_rcv_msg_doit+0x21a/0x310 [ 479.969853][T11207] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 479.975794][T11207] ? bpf_lsm_capable+0x9/0x10 [ 479.980515][T11207] ? security_capable+0x89/0xb0 [ 479.985404][T11207] genl_rcv_msg+0x611/0x7a0 [ 479.989948][T11207] ? genl_bind+0x360/0x360 [ 479.994391][T11207] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 480.000762][T11207] ? lockdep_hardirqs_on+0x98/0x150 [ 480.005998][T11207] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.012194][T11207] netlink_rcv_skb+0x235/0x4c0 [ 480.016988][T11207] ? genl_bind+0x360/0x360 [ 480.021430][T11207] ? netlink_ack+0x1160/0x1160 [ 480.026234][T11207] ? __lock_acquire+0x7d80/0x7d80 [ 480.031290][T11207] ? net_generic+0x1e/0x240 [ 480.035829][T11207] ? down_read+0x1ac/0x2e0 [ 480.040284][T11207] genl_rcv+0x28/0x40 [ 480.044390][T11207] netlink_unicast+0x7b1/0x930 [ 480.049218][T11207] netlink_sendmsg+0x8d0/0xbf0 [ 480.054053][T11207] ? netlink_getsockopt+0x590/0x590 [ 480.059282][T11207] ? apparmor_socket_sendmsg+0x8e/0x330 [ 480.064866][T11207] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 480.070188][T11207] ? security_socket_sendmsg+0x80/0xa0 [ 480.075676][T11207] ? netlink_getsockopt+0x590/0x590 [ 480.080904][T11207] ____sys_sendmsg+0x61b/0x980 [ 480.085704][T11207] ? __asan_memset+0x22/0x40 [ 480.090351][T11207] ? __sys_sendmsg_sock+0x30/0x30 [ 480.095397][T11207] ? __import_iovec+0x5f2/0x850 [ 480.100287][T11207] ? import_iovec+0x73/0xa0 [ 480.104824][T11207] ___sys_sendmsg+0x2a6/0x360 [ 480.109539][T11207] ? __sys_sendmsg+0x2b0/0x2b0 [ 480.114353][T11207] ? ktime_get+0x7f/0x280 [ 480.118713][T11207] ? trace_call_bpf+0xc3/0x6c0 [ 480.123526][T11207] __se_sys_sendmsg+0x1d0/0x2c0 [ 480.128408][T11207] ? perf_trace_preemptirq_template+0x269/0x330 [ 480.134687][T11207] ? __x64_sys_sendmsg+0x80/0x80 [ 480.139669][T11207] ? lockdep_hardirqs_on+0x98/0x150 [ 480.144929][T11207] do_syscall_64+0x55/0xb0 [ 480.149383][T11207] ? clear_bhb_loop+0x40/0x90 [ 480.154097][T11207] ? clear_bhb_loop+0x40/0x90 [ 480.158802][T11207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.164726][T11207] RIP: 0033:0x7f057819e0d9 [ 480.169172][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.188817][T11207] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.197266][T11207] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 480.205269][T11207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 480.213268][T11207] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 480.221265][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.229266][T11207] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 480.237311][T11207] [ 480.426086][T11213] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2131'. [ 481.050534][T11219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2134'. [ 481.178062][T11219] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 481.219588][T11219] CPU: 1 PID: 11219 Comm: syz.1.2134 Not tainted syzkaller #0 [ 481.227155][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.237266][T11219] Call Trace: [ 481.240594][T11219] [ 481.243568][T11219] dump_stack_lvl+0x18c/0x250 [ 481.248317][T11219] ? show_regs_print_info+0x20/0x20 [ 481.253574][T11219] ? load_image+0x420/0x420 [ 481.258169][T11219] sysfs_warn_dup+0x8e/0xa0 [ 481.262739][T11219] sysfs_do_create_link_sd+0xc0/0x110 [ 481.268172][T11219] device_add_class_symlinks+0x1cf/0x240 [ 481.273883][T11219] device_add+0x4f9/0xc40 [ 481.278277][T11219] wiphy_register+0x1d99/0x2ac0 [ 481.283219][T11219] ? cfg80211_event_work+0x40/0x40 [ 481.288398][T11219] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 481.294526][T11219] ieee80211_register_hw+0x2dd8/0x3b30 [ 481.300076][T11219] ? ieee80211_register_hw+0xfb1/0x3b30 [ 481.305693][T11219] ? ieee80211_tasklet_handler+0x20/0x20 [ 481.311375][T11219] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 481.317331][T11219] ? __debug_object_init+0xec/0x450 [ 481.322591][T11219] ? __asan_memset+0x22/0x40 [ 481.327235][T11219] ? __hrtimer_init+0x189/0x270 [ 481.332152][T11219] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 481.337948][T11219] ? lock_chain_count+0x20/0x20 [ 481.342884][T11219] ? mac80211_hwsim_free+0x220/0x220 [ 481.348334][T11219] ? memcpy_orig+0xe7/0x120 [ 481.352913][T11219] hwsim_new_radio_nl+0xdad/0x1a70 [ 481.358085][T11219] ? mark_lock+0x94/0x320 [ 481.362489][T11219] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 481.368551][T11219] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 481.374938][T11219] ? lockdep_hardirqs_on+0x98/0x150 [ 481.380195][T11219] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.386425][T11219] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 481.392827][T11219] genl_family_rcv_msg_doit+0x21a/0x310 [ 481.398440][T11219] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 481.404438][T11219] ? bpf_lsm_capable+0x9/0x10 [ 481.409171][T11219] ? security_capable+0x89/0xb0 [ 481.414087][T11219] genl_rcv_msg+0x611/0x7a0 [ 481.418662][T11219] ? genl_bind+0x360/0x360 [ 481.423134][T11219] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 481.429533][T11219] netlink_rcv_skb+0x235/0x4c0 [ 481.434347][T11219] ? genl_bind+0x360/0x360 [ 481.438835][T11219] ? netlink_ack+0x1160/0x1160 [ 481.443678][T11219] ? genl_bind+0x360/0x360 [ 481.448160][T11219] genl_rcv+0x28/0x40 [ 481.452202][T11219] netlink_unicast+0x7b1/0x930 [ 481.457057][T11219] netlink_sendmsg+0x8d0/0xbf0 [ 481.461908][T11219] ? netlink_getsockopt+0x590/0x590 [ 481.467171][T11219] ? apparmor_socket_sendmsg+0x8e/0x330 [ 481.472794][T11219] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 481.478146][T11219] ? security_socket_sendmsg+0x80/0xa0 [ 481.483656][T11219] ? netlink_getsockopt+0x590/0x590 [ 481.488916][T11219] ____sys_sendmsg+0x61b/0x980 [ 481.493755][T11219] ? __asan_memset+0x22/0x40 [ 481.498411][T11219] ? __sys_sendmsg_sock+0x30/0x30 [ 481.503488][T11219] ? __import_iovec+0x5f2/0x850 [ 481.508415][T11219] ? import_iovec+0x73/0xa0 [ 481.512981][T11219] ___sys_sendmsg+0x2a6/0x360 [ 481.517722][T11219] ? __sys_sendmsg+0x2b0/0x2b0 [ 481.522582][T11219] ? ktime_get+0x7f/0x280 [ 481.526966][T11219] ? trace_call_bpf+0xc3/0x6c0 [ 481.531820][T11219] __se_sys_sendmsg+0x1d0/0x2c0 [ 481.536732][T11219] ? perf_trace_preemptirq_template+0x269/0x330 [ 481.543048][T11219] ? __x64_sys_sendmsg+0x80/0x80 [ 481.548067][T11219] ? lockdep_hardirqs_on+0x98/0x150 [ 481.553327][T11219] do_syscall_64+0x55/0xb0 [ 481.557801][T11219] ? clear_bhb_loop+0x40/0x90 [ 481.562557][T11219] ? clear_bhb_loop+0x40/0x90 [ 481.567291][T11219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.573237][T11219] RIP: 0033:0x7f057819e0d9 [ 481.577697][T11219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.597396][T11219] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.605872][T11219] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 481.613897][T11219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 481.621919][T11219] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 481.629941][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.637981][T11219] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 481.646029][T11219] [ 482.335543][T11234] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2146'. [ 482.541200][T11234] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 482.551231][T11234] CPU: 0 PID: 11234 Comm: syz.0.2146 Not tainted syzkaller #0 [ 482.558760][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.568868][T11234] Call Trace: [ 482.572190][T11234] [ 482.575164][T11234] dump_stack_lvl+0x18c/0x250 [ 482.579919][T11234] ? show_regs_print_info+0x20/0x20 [ 482.585177][T11234] ? load_image+0x420/0x420 [ 482.589762][T11234] sysfs_warn_dup+0x8e/0xa0 [ 482.594327][T11234] sysfs_do_create_link_sd+0xc0/0x110 [ 482.599767][T11234] device_add_class_symlinks+0x1cf/0x240 [ 482.605463][T11234] device_add+0x4f9/0xc40 [ 482.609858][T11234] wiphy_register+0x1d99/0x2ac0 [ 482.614792][T11234] ? cfg80211_event_work+0x40/0x40 [ 482.619970][T11234] ? minstrel_ht_alloc+0x88a/0x990 [ 482.625158][T11234] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 482.631285][T11234] ieee80211_register_hw+0x2dd8/0x3b30 [ 482.636809][T11234] ? ieee80211_register_hw+0xfb1/0x3b30 [ 482.642425][T11234] ? ieee80211_tasklet_handler+0x20/0x20 [ 482.648124][T11234] ? debug_init+0x2d/0x1d0 [ 482.652602][T11234] ? __asan_memset+0x22/0x40 [ 482.657250][T11234] ? __hrtimer_init+0x189/0x270 [ 482.662165][T11234] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 482.667975][T11234] ? mac80211_hwsim_free+0x220/0x220 [ 482.673317][T11234] ? rcu_is_watching+0x15/0xb0 [ 482.678146][T11234] ? kstrndup+0xbd/0x140 [ 482.682459][T11234] hwsim_new_radio_nl+0xdad/0x1a70 [ 482.687635][T11234] ? mark_lock+0x94/0x320 [ 482.692025][T11234] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 482.698415][T11234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.704621][T11234] ? lockdep_hardirqs_on+0x98/0x150 [ 482.709910][T11234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.716144][T11234] genl_family_rcv_msg_doit+0x21a/0x310 [ 482.721755][T11234] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 482.727744][T11234] ? lockdep_hardirqs_on+0x98/0x150 [ 482.733018][T11234] ? bpf_lsm_capable+0x9/0x10 [ 482.737783][T11234] ? security_capable+0x89/0xb0 [ 482.742703][T11234] genl_rcv_msg+0x611/0x7a0 [ 482.747309][T11234] ? genl_bind+0x360/0x360 [ 482.751791][T11234] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 482.758191][T11234] netlink_rcv_skb+0x235/0x4c0 [ 482.763012][T11234] ? genl_bind+0x360/0x360 [ 482.767484][T11234] ? netlink_ack+0x1160/0x1160 [ 482.772339][T11234] ? down_read+0x1ac/0x2e0 [ 482.776818][T11234] genl_rcv+0x28/0x40 [ 482.780869][T11234] netlink_unicast+0x7b1/0x930 [ 482.785744][T11234] netlink_sendmsg+0x8d0/0xbf0 [ 482.790572][T11234] ? netlink_getsockopt+0x590/0x590 [ 482.795860][T11234] ? apparmor_socket_sendmsg+0x8e/0x330 [ 482.801475][T11234] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 482.806844][T11234] ? security_socket_sendmsg+0x80/0xa0 [ 482.812362][T11234] ? netlink_getsockopt+0x590/0x590 [ 482.817658][T11234] ____sys_sendmsg+0x61b/0x980 [ 482.822494][T11234] ? __asan_memset+0x22/0x40 [ 482.827169][T11234] ? __sys_sendmsg_sock+0x30/0x30 [ 482.832263][T11234] ? __import_iovec+0x5f2/0x850 [ 482.837187][T11234] ? import_iovec+0x73/0xa0 [ 482.841757][T11234] ___sys_sendmsg+0x2a6/0x360 [ 482.846501][T11234] ? __sys_sendmsg+0x2b0/0x2b0 [ 482.851352][T11234] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.857592][T11234] __se_sys_sendmsg+0x1d0/0x2c0 [ 482.862545][T11234] ? perf_trace_preemptirq_template+0x269/0x330 [ 482.868854][T11234] ? __x64_sys_sendmsg+0x80/0x80 [ 482.873871][T11234] ? lockdep_hardirqs_on+0x98/0x150 [ 482.879133][T11234] do_syscall_64+0x55/0xb0 [ 482.883637][T11234] ? clear_bhb_loop+0x40/0x90 [ 482.888369][T11234] ? clear_bhb_loop+0x40/0x90 [ 482.893099][T11234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.899042][T11234] RIP: 0033:0x7f81be99e0d9 [ 482.903511][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.923172][T11234] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.931654][T11234] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 482.939677][T11234] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 482.947693][T11234] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 482.955714][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.963736][T11234] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 482.971780][T11234] [ 485.448018][T11249] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2142'. [ 485.668611][T11249] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 485.702531][T11256] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2145'. [ 485.716129][T11249] CPU: 0 PID: 11249 Comm: syz.1.2142 Not tainted syzkaller #0 [ 485.723659][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.733764][T11249] Call Trace: [ 485.737090][T11249] [ 485.740069][T11249] dump_stack_lvl+0x18c/0x250 [ 485.744813][T11249] ? show_regs_print_info+0x20/0x20 [ 485.750069][T11249] ? load_image+0x420/0x420 [ 485.754699][T11249] sysfs_warn_dup+0x8e/0xa0 [ 485.759261][T11249] sysfs_do_create_link_sd+0xc0/0x110 [ 485.764709][T11249] device_add_class_symlinks+0x1cf/0x240 [ 485.770422][T11249] device_add+0x4f9/0xc40 [ 485.774829][T11249] wiphy_register+0x1d99/0x2ac0 [ 485.779768][T11249] ? cfg80211_event_work+0x40/0x40 [ 485.784939][T11249] ? minstrel_ht_alloc+0x88a/0x990 [ 485.790131][T11249] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 485.796274][T11249] ieee80211_register_hw+0x2dd8/0x3b30 [ 485.801821][T11249] ? ieee80211_register_hw+0xfb1/0x3b30 [ 485.807434][T11249] ? ieee80211_tasklet_handler+0x20/0x20 [ 485.813114][T11249] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 485.819075][T11249] ? __debug_object_init+0xec/0x450 [ 485.824434][T11249] ? __asan_memset+0x22/0x40 [ 485.829089][T11249] ? __hrtimer_init+0x189/0x270 [ 485.834005][T11249] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 485.839814][T11249] ? mac80211_hwsim_free+0x220/0x220 [ 485.845165][T11249] ? rcu_is_watching+0x15/0xb0 [ 485.849986][T11249] ? kstrndup+0xbd/0x140 [ 485.854305][T11249] hwsim_new_radio_nl+0xdad/0x1a70 [ 485.859509][T11249] ? __nla_validate+0x50/0x50 [ 485.864258][T11249] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 485.870643][T11249] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 485.876964][T11249] ? __nla_parse+0x40/0x50 [ 485.881446][T11249] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 485.887843][T11249] genl_family_rcv_msg_doit+0x21a/0x310 [ 485.893456][T11249] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 485.899411][T11249] ? lockdep_hardirqs_on+0x98/0x150 [ 485.904689][T11249] ? bpf_lsm_capable+0x9/0x10 [ 485.909437][T11249] ? security_capable+0x89/0xb0 [ 485.914353][T11249] genl_rcv_msg+0x611/0x7a0 [ 485.918927][T11249] ? genl_bind+0x360/0x360 [ 485.923430][T11249] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 485.929819][T11249] ? lockdep_hardirqs_on+0x98/0x150 [ 485.935084][T11249] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.941304][T11249] netlink_rcv_skb+0x235/0x4c0 [ 485.946125][T11249] ? genl_bind+0x360/0x360 [ 485.950601][T11249] ? netlink_ack+0x1160/0x1160 [ 485.955459][T11249] ? __lock_acquire+0x7d80/0x7d80 [ 485.960545][T11249] ? net_generic+0x1e/0x240 [ 485.965124][T11249] ? down_read+0x1ac/0x2e0 [ 485.969605][T11249] genl_rcv+0x28/0x40 [ 485.973642][T11249] netlink_unicast+0x7b1/0x930 [ 485.978483][T11249] netlink_sendmsg+0x8d0/0xbf0 [ 485.983306][T11249] ? lockdep_hardirqs_on+0x98/0x150 [ 485.988566][T11249] ? netlink_getsockopt+0x590/0x590 [ 485.993817][T11249] ? netlink_getsockopt+0x590/0x590 [ 485.999073][T11249] ? netlink_getsockopt+0x590/0x590 [ 486.004335][T11249] ____sys_sendmsg+0x61b/0x980 [ 486.009171][T11249] ? __asan_memset+0x22/0x40 [ 486.013825][T11249] ? __sys_sendmsg_sock+0x30/0x30 [ 486.018939][T11249] ? __import_iovec+0x5f2/0x850 [ 486.023868][T11249] ? import_iovec+0x73/0xa0 [ 486.028435][T11249] ___sys_sendmsg+0x2a6/0x360 [ 486.033171][T11249] ? __sys_sendmsg+0x2b0/0x2b0 [ 486.038058][T11249] __se_sys_sendmsg+0x1d0/0x2c0 [ 486.042975][T11249] ? __x64_sys_sendmsg+0x80/0x80 [ 486.047989][T11249] ? syscall_enter_from_user_mode+0x2e/0x80 [ 486.053939][T11249] do_syscall_64+0x55/0xb0 [ 486.058390][T11249] ? clear_bhb_loop+0x40/0x90 [ 486.063102][T11249] ? clear_bhb_loop+0x40/0x90 [ 486.067816][T11249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.073741][T11249] RIP: 0033:0x7f057819e0d9 [ 486.078186][T11249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.097824][T11249] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.106276][T11249] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 486.114279][T11249] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 486.122278][T11249] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 486.130276][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.138268][T11249] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 486.146285][T11249] [ 492.589137][T11288] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2158'. [ 492.864391][T11288] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 492.894432][T11288] CPU: 1 PID: 11288 Comm: syz.2.2158 Not tainted syzkaller #0 [ 492.901988][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.912101][T11288] Call Trace: [ 492.915433][T11288] [ 492.918409][T11288] dump_stack_lvl+0x18c/0x250 [ 492.923148][T11288] ? show_regs_print_info+0x20/0x20 [ 492.928416][T11288] ? load_image+0x420/0x420 [ 492.933004][T11288] sysfs_warn_dup+0x8e/0xa0 [ 492.937580][T11288] sysfs_do_create_link_sd+0xc0/0x110 [ 492.943016][T11288] device_add_class_symlinks+0x1cf/0x240 [ 492.948715][T11288] device_add+0x4f9/0xc40 [ 492.953105][T11288] wiphy_register+0x1d99/0x2ac0 [ 492.958069][T11288] ? cfg80211_event_work+0x40/0x40 [ 492.963268][T11288] ? minstrel_ht_alloc+0x88a/0x990 [ 492.968474][T11288] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 492.974609][T11288] ieee80211_register_hw+0x2dd8/0x3b30 [ 492.980135][T11288] ? ieee80211_register_hw+0xfb1/0x3b30 [ 492.985741][T11288] ? ieee80211_tasklet_handler+0x20/0x20 [ 492.991436][T11288] ? debug_init+0x2d/0x1d0 [ 492.995906][T11288] ? __asan_memset+0x22/0x40 [ 493.000563][T11288] ? __hrtimer_init+0x189/0x270 [ 493.005470][T11288] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 493.011267][T11288] ? mac80211_hwsim_free+0x220/0x220 [ 493.016616][T11288] ? rcu_is_watching+0x15/0xb0 [ 493.021445][T11288] ? kstrndup+0xbd/0x140 [ 493.025794][T11288] hwsim_new_radio_nl+0xdad/0x1a70 [ 493.030978][T11288] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 493.036883][T11288] ? mark_lock+0x94/0x320 [ 493.041292][T11288] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 493.047686][T11288] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.053894][T11288] ? lockdep_hardirqs_on+0x98/0x150 [ 493.059153][T11288] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.065391][T11288] genl_family_rcv_msg_doit+0x21a/0x310 [ 493.071012][T11288] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 493.076974][T11288] ? bpf_lsm_capable+0x9/0x10 [ 493.081712][T11288] ? security_capable+0x89/0xb0 [ 493.086634][T11288] genl_rcv_msg+0x611/0x7a0 [ 493.091202][T11288] ? genl_bind+0x360/0x360 [ 493.095674][T11288] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 493.102060][T11288] ? lockdep_hardirqs_on+0x98/0x150 [ 493.107324][T11288] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.113544][T11288] netlink_rcv_skb+0x235/0x4c0 [ 493.118356][T11288] ? genl_bind+0x360/0x360 [ 493.122829][T11288] ? netlink_ack+0x1160/0x1160 [ 493.127678][T11288] ? __lock_acquire+0x7d80/0x7d80 [ 493.132771][T11288] ? down_read+0x1ac/0x2e0 [ 493.137255][T11288] genl_rcv+0x28/0x40 [ 493.141286][T11288] netlink_unicast+0x7b1/0x930 [ 493.146131][T11288] netlink_sendmsg+0x8d0/0xbf0 [ 493.150963][T11288] ? netlink_getsockopt+0x590/0x590 [ 493.156215][T11288] ? apparmor_socket_sendmsg+0x8e/0x330 [ 493.161817][T11288] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.167170][T11288] ? security_socket_sendmsg+0x80/0xa0 [ 493.172677][T11288] ? netlink_getsockopt+0x590/0x590 [ 493.177934][T11288] ____sys_sendmsg+0x61b/0x980 [ 493.182761][T11288] ? lockdep_hardirqs_on+0x98/0x150 [ 493.188029][T11288] ? __sys_sendmsg_sock+0x30/0x30 [ 493.193124][T11288] ? ___sys_sendmsg+0x28b/0x360 [ 493.198042][T11288] ___sys_sendmsg+0x2a6/0x360 [ 493.202791][T11288] ? __sys_sendmsg+0x2b0/0x2b0 [ 493.207676][T11288] __se_sys_sendmsg+0x1d0/0x2c0 [ 493.212587][T11288] ? __x64_sys_sendmsg+0x80/0x80 [ 493.217606][T11288] ? syscall_enter_from_user_mode+0x2e/0x80 [ 493.223582][T11288] do_syscall_64+0x55/0xb0 [ 493.228053][T11288] ? clear_bhb_loop+0x40/0x90 [ 493.232792][T11288] ? clear_bhb_loop+0x40/0x90 [ 493.237528][T11288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.243477][T11288] RIP: 0033:0x7f2c5c79e0d9 [ 493.247943][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.267613][T11288] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.276106][T11288] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 493.284159][T11288] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 493.292191][T11288] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 493.300250][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.308272][T11288] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 493.316327][T11288] [ 496.749810][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.232401][T11320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2170'. [ 501.546742][T11331] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 501.584021][T11331] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2172'. [ 501.866158][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.874922][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.222379][T11320] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 504.231060][T11320] CPU: 0 PID: 11320 Comm: syz.3.2170 Not tainted syzkaller #0 [ 504.238586][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.248702][T11320] Call Trace: [ 504.252032][T11320] [ 504.255004][T11320] dump_stack_lvl+0x18c/0x250 [ 504.259743][T11320] ? show_regs_print_info+0x20/0x20 [ 504.265013][T11320] ? load_image+0x420/0x420 [ 504.269593][T11320] sysfs_warn_dup+0x8e/0xa0 [ 504.274151][T11320] sysfs_do_create_link_sd+0xc0/0x110 [ 504.279581][T11320] device_add_class_symlinks+0x1cf/0x240 [ 504.285280][T11320] device_add+0x4f9/0xc40 [ 504.289678][T11320] wiphy_register+0x1d99/0x2ac0 [ 504.294632][T11320] ? cfg80211_event_work+0x40/0x40 [ 504.299793][T11320] ? minstrel_ht_alloc+0x88a/0x990 [ 504.304988][T11320] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 504.311130][T11320] ieee80211_register_hw+0x2dd8/0x3b30 [ 504.316665][T11320] ? ieee80211_register_hw+0xfb1/0x3b30 [ 504.322298][T11320] ? ieee80211_tasklet_handler+0x20/0x20 [ 504.328073][T11320] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 504.334041][T11320] ? __debug_object_init+0xec/0x450 [ 504.339305][T11320] ? __asan_memset+0x22/0x40 [ 504.343945][T11320] ? __hrtimer_init+0x189/0x270 [ 504.348820][T11320] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 504.354600][T11320] ? mac80211_hwsim_free+0x220/0x220 [ 504.359956][T11320] ? rcu_is_watching+0x15/0xb0 [ 504.364793][T11320] ? kstrndup+0xbd/0x140 [ 504.369135][T11320] hwsim_new_radio_nl+0xdad/0x1a70 [ 504.374326][T11320] ? __nla_validate+0x50/0x50 [ 504.379088][T11320] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 504.385494][T11320] ? __nla_parse+0x40/0x50 [ 504.389981][T11320] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 504.396382][T11320] genl_family_rcv_msg_doit+0x21a/0x310 [ 504.402006][T11320] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 504.407971][T11320] ? bpf_lsm_capable+0x9/0x10 [ 504.412713][T11320] ? security_capable+0x89/0xb0 [ 504.417613][T11320] genl_rcv_msg+0x611/0x7a0 [ 504.422161][T11320] ? genl_bind+0x360/0x360 [ 504.426634][T11320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 504.432657][T11320] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 504.439028][T11320] ? ref_tracker_free+0x686/0x830 [ 504.444128][T11320] netlink_rcv_skb+0x235/0x4c0 [ 504.448942][T11320] ? genl_bind+0x360/0x360 [ 504.453414][T11320] ? netlink_ack+0x1160/0x1160 [ 504.458213][T11320] ? __lock_acquire+0x7d80/0x7d80 [ 504.463283][T11320] ? down_read+0x1ac/0x2e0 [ 504.467764][T11320] genl_rcv+0x28/0x40 [ 504.471805][T11320] netlink_unicast+0x7b1/0x930 [ 504.476650][T11320] netlink_sendmsg+0x8d0/0xbf0 [ 504.481486][T11320] ? netlink_getsockopt+0x590/0x590 [ 504.486756][T11320] ? apparmor_socket_sendmsg+0x8e/0x330 [ 504.492374][T11320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.497721][T11320] ? security_socket_sendmsg+0x80/0xa0 [ 504.503233][T11320] ? netlink_getsockopt+0x590/0x590 [ 504.508488][T11320] ____sys_sendmsg+0x61b/0x980 [ 504.513323][T11320] ? __asan_memset+0x22/0x40 [ 504.517980][T11320] ? __sys_sendmsg_sock+0x30/0x30 [ 504.523068][T11320] ? __import_iovec+0x5f2/0x850 [ 504.527991][T11320] ? import_iovec+0x73/0xa0 [ 504.532599][T11320] ___sys_sendmsg+0x2a6/0x360 [ 504.537345][T11320] ? __sys_sendmsg+0x2b0/0x2b0 [ 504.542251][T11320] __se_sys_sendmsg+0x1d0/0x2c0 [ 504.547170][T11320] ? __x64_sys_sendmsg+0x80/0x80 [ 504.552201][T11320] do_syscall_64+0x55/0xb0 [ 504.556675][T11320] ? clear_bhb_loop+0x40/0x90 [ 504.561448][T11320] ? clear_bhb_loop+0x40/0x90 [ 504.566366][T11320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.572320][T11320] RIP: 0033:0x7fd95099e0d9 [ 504.576808][T11320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.596514][T11320] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.605032][T11320] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 504.613070][T11320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 504.621107][T11320] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 504.629132][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.637157][T11320] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 504.645244][T11320] [ 505.105078][T11344] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2184'. [ 505.173069][T11344] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 505.181792][T11344] CPU: 0 PID: 11344 Comm: syz.2.2184 Not tainted syzkaller #0 [ 505.189312][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.199451][T11344] Call Trace: [ 505.202776][T11344] [ 505.205762][T11344] dump_stack_lvl+0x18c/0x250 [ 505.210513][T11344] ? show_regs_print_info+0x20/0x20 [ 505.215784][T11344] ? load_image+0x420/0x420 [ 505.220375][T11344] sysfs_warn_dup+0x8e/0xa0 [ 505.224944][T11344] sysfs_do_create_link_sd+0xc0/0x110 [ 505.230376][T11344] device_add_class_symlinks+0x1cf/0x240 [ 505.236080][T11344] device_add+0x4f9/0xc40 [ 505.240482][T11344] wiphy_register+0x1d99/0x2ac0 [ 505.245431][T11344] ? cfg80211_event_work+0x40/0x40 [ 505.250641][T11344] ? minstrel_ht_alloc+0x88a/0x990 [ 505.255808][T11344] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 505.261920][T11344] ieee80211_register_hw+0x2dd8/0x3b30 [ 505.267451][T11344] ? ieee80211_register_hw+0xfb1/0x3b30 [ 505.273038][T11344] ? ieee80211_tasklet_handler+0x20/0x20 [ 505.278709][T11344] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 505.284675][T11344] ? __debug_object_init+0xec/0x450 [ 505.289922][T11344] ? __asan_memset+0x22/0x40 [ 505.294551][T11344] ? __hrtimer_init+0x189/0x270 [ 505.299443][T11344] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 505.305211][T11344] ? mac80211_hwsim_free+0x220/0x220 [ 505.310521][T11344] ? rcu_is_watching+0x15/0xb0 [ 505.315322][T11344] ? kstrndup+0xbd/0x140 [ 505.319608][T11344] hwsim_new_radio_nl+0xdad/0x1a70 [ 505.324753][T11344] ? __nla_validate+0x50/0x50 [ 505.329486][T11344] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 505.335868][T11344] ? __nla_parse+0x40/0x50 [ 505.340329][T11344] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 505.346721][T11344] genl_family_rcv_msg_doit+0x21a/0x310 [ 505.352324][T11344] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 505.358264][T11344] ? bpf_lsm_capable+0x9/0x10 [ 505.362993][T11344] ? security_capable+0x89/0xb0 [ 505.367888][T11344] genl_rcv_msg+0x611/0x7a0 [ 505.372448][T11344] ? genl_bind+0x360/0x360 [ 505.377078][T11344] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 505.383440][T11344] ? perf_trace_preemptirq_template+0x269/0x330 [ 505.389727][T11344] ? irqentry_enter+0x37/0x50 [ 505.394530][T11344] netlink_rcv_skb+0x235/0x4c0 [ 505.399326][T11344] ? genl_bind+0x360/0x360 [ 505.403807][T11344] ? netlink_ack+0x1160/0x1160 [ 505.408621][T11344] ? down_read+0x1ac/0x2e0 [ 505.413078][T11344] genl_rcv+0x28/0x40 [ 505.417093][T11344] netlink_unicast+0x7b1/0x930 [ 505.421904][T11344] netlink_sendmsg+0x8d0/0xbf0 [ 505.426742][T11344] ? netlink_getsockopt+0x590/0x590 [ 505.431977][T11344] ? apparmor_socket_sendmsg+0x8e/0x330 [ 505.437558][T11344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 505.442879][T11344] ? security_socket_sendmsg+0x80/0xa0 [ 505.448368][T11344] ? netlink_getsockopt+0x590/0x590 [ 505.453609][T11344] ____sys_sendmsg+0x61b/0x980 [ 505.458411][T11344] ? __asan_memset+0x22/0x40 [ 505.463040][T11344] ? __sys_sendmsg_sock+0x30/0x30 [ 505.468093][T11344] ? __import_iovec+0x5f2/0x850 [ 505.473012][T11344] ? import_iovec+0x73/0xa0 [ 505.477590][T11344] ___sys_sendmsg+0x2a6/0x360 [ 505.482320][T11344] ? __sys_sendmsg+0x2b0/0x2b0 [ 505.487174][T11344] __se_sys_sendmsg+0x1d0/0x2c0 [ 505.492062][T11344] ? perf_trace_preemptirq_template+0x269/0x330 [ 505.498344][T11344] ? __x64_sys_sendmsg+0x80/0x80 [ 505.503342][T11344] ? lockdep_hardirqs_on+0x98/0x150 [ 505.508591][T11344] do_syscall_64+0x55/0xb0 [ 505.513043][T11344] ? clear_bhb_loop+0x40/0x90 [ 505.517761][T11344] ? clear_bhb_loop+0x40/0x90 [ 505.522467][T11344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.528398][T11344] RIP: 0033:0x7f2c5c79e0d9 [ 505.532845][T11344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.552484][T11344] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.560938][T11344] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 505.569031][T11344] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 505.577028][T11344] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 505.585029][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.593029][T11344] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 505.601048][T11344] [ 506.208425][T11364] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2183'. [ 509.351354][T11374] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 509.369745][T11374] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2185'. [ 509.586541][T11384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2189'. [ 509.720362][T11384] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 509.750746][T11384] CPU: 0 PID: 11384 Comm: syz.3.2189 Not tainted syzkaller #0 [ 509.758304][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.768437][T11384] Call Trace: [ 509.771798][T11384] [ 509.774776][T11384] dump_stack_lvl+0x18c/0x250 [ 509.779523][T11384] ? show_regs_print_info+0x20/0x20 [ 509.784782][T11384] ? load_image+0x420/0x420 [ 509.789411][T11384] sysfs_warn_dup+0x8e/0xa0 [ 509.793973][T11384] sysfs_do_create_link_sd+0xc0/0x110 [ 509.799407][T11384] device_add_class_symlinks+0x1cf/0x240 [ 509.805136][T11384] device_add+0x4f9/0xc40 [ 509.809565][T11384] wiphy_register+0x1d99/0x2ac0 [ 509.814501][T11384] ? cfg80211_event_work+0x40/0x40 [ 509.819672][T11384] ? minstrel_ht_alloc+0x88a/0x990 [ 509.824858][T11384] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 509.830994][T11384] ieee80211_register_hw+0x2dd8/0x3b30 [ 509.836539][T11384] ? ieee80211_register_hw+0xfb1/0x3b30 [ 509.842157][T11384] ? ieee80211_tasklet_handler+0x20/0x20 [ 509.847843][T11384] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 509.853802][T11384] ? __debug_object_init+0xec/0x450 [ 509.859069][T11384] ? __asan_memset+0x22/0x40 [ 509.863722][T11384] ? __hrtimer_init+0x189/0x270 [ 509.868634][T11384] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 509.874435][T11384] ? mac80211_hwsim_free+0x220/0x220 [ 509.879778][T11384] ? rcu_is_watching+0x15/0xb0 [ 509.884604][T11384] ? kstrndup+0xbd/0x140 [ 509.888922][T11384] hwsim_new_radio_nl+0xdad/0x1a70 [ 509.894106][T11384] ? __nla_validate+0x50/0x50 [ 509.898877][T11384] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 509.905280][T11384] ? __nla_parse+0x40/0x50 [ 509.909770][T11384] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 509.916197][T11384] genl_family_rcv_msg_doit+0x21a/0x310 [ 509.921820][T11384] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 509.927786][T11384] ? bpf_lsm_capable+0x9/0x10 [ 509.932534][T11384] ? security_capable+0x89/0xb0 [ 509.937455][T11384] genl_rcv_msg+0x611/0x7a0 [ 509.942041][T11384] ? genl_bind+0x360/0x360 [ 509.946514][T11384] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 509.952904][T11384] ? netlink_rcv_skb+0x214/0x4c0 [ 509.957912][T11384] netlink_rcv_skb+0x235/0x4c0 [ 509.962736][T11384] ? genl_bind+0x360/0x360 [ 509.967205][T11384] ? netlink_ack+0x1160/0x1160 [ 509.972040][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.978271][T11384] ? down_read+0x1ac/0x2e0 [ 509.982756][T11384] genl_rcv+0x28/0x40 [ 509.986810][T11384] netlink_unicast+0x7b1/0x930 [ 509.991658][T11384] netlink_sendmsg+0x8d0/0xbf0 [ 509.996489][T11384] ? netlink_getsockopt+0x590/0x590 [ 510.001750][T11384] ? apparmor_socket_sendmsg+0x8e/0x330 [ 510.007345][T11384] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 510.012672][T11384] ? security_socket_sendmsg+0x80/0xa0 [ 510.018164][T11384] ? netlink_getsockopt+0x590/0x590 [ 510.023393][T11384] ____sys_sendmsg+0x61b/0x980 [ 510.028192][T11384] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 510.034393][T11384] ? __asan_memset+0x22/0x40 [ 510.039028][T11384] ? __sys_sendmsg_sock+0x30/0x30 [ 510.044085][T11384] ? __import_iovec+0x5f2/0x850 [ 510.048984][T11384] ? import_iovec+0x73/0xa0 [ 510.053530][T11384] ___sys_sendmsg+0x2a6/0x360 [ 510.058244][T11384] ? __sys_sendmsg+0x2b0/0x2b0 [ 510.063081][T11384] __se_sys_sendmsg+0x1d0/0x2c0 [ 510.067969][T11384] ? __x64_sys_sendmsg+0x80/0x80 [ 510.072961][T11384] ? syscall_enter_from_user_mode+0x2e/0x80 [ 510.078897][T11384] do_syscall_64+0x55/0xb0 [ 510.083348][T11384] ? clear_bhb_loop+0x40/0x90 [ 510.088054][T11384] ? clear_bhb_loop+0x40/0x90 [ 510.092794][T11384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.098725][T11384] RIP: 0033:0x7fd95099e0d9 [ 510.103171][T11384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.122807][T11384] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.131254][T11384] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 510.139263][T11384] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 510.147265][T11384] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 510.155273][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.163285][T11384] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 510.171304][T11384] [ 513.438403][T11408] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2193'. [ 513.550713][T11408] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 513.583854][T11408] CPU: 1 PID: 11408 Comm: syz.2.2193 Not tainted syzkaller #0 [ 513.591406][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.601512][T11408] Call Trace: [ 513.604839][T11408] [ 513.607824][T11408] dump_stack_lvl+0x18c/0x250 [ 513.612562][T11408] ? show_regs_print_info+0x20/0x20 [ 513.617824][T11408] ? load_image+0x420/0x420 [ 513.622405][T11408] sysfs_warn_dup+0x8e/0xa0 [ 513.626968][T11408] sysfs_do_create_link_sd+0xc0/0x110 [ 513.632401][T11408] device_add_class_symlinks+0x1cf/0x240 [ 513.638097][T11408] device_add+0x4f9/0xc40 [ 513.642485][T11408] wiphy_register+0x1d99/0x2ac0 [ 513.647419][T11408] ? cfg80211_event_work+0x40/0x40 [ 513.652587][T11408] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.658829][T11408] ieee80211_register_hw+0x2dd8/0x3b30 [ 513.664362][T11408] ? ieee80211_register_hw+0xfb1/0x3b30 [ 513.669971][T11408] ? ieee80211_tasklet_handler+0x20/0x20 [ 513.675649][T11408] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 513.681614][T11408] ? __debug_object_init+0xec/0x450 [ 513.686874][T11408] ? __asan_memset+0x22/0x40 [ 513.691537][T11408] ? __hrtimer_init+0x189/0x270 [ 513.696447][T11408] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 513.702259][T11408] ? mac80211_hwsim_free+0x220/0x220 [ 513.707596][T11408] ? rcu_is_watching+0x15/0xb0 [ 513.712414][T11408] ? kstrndup+0xbd/0x140 [ 513.716722][T11408] hwsim_new_radio_nl+0xdad/0x1a70 [ 513.721885][T11408] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 513.727757][T11408] ? mark_lock+0x94/0x320 [ 513.732179][T11408] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 513.738575][T11408] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.744790][T11408] ? lockdep_hardirqs_on+0x98/0x150 [ 513.750068][T11408] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.756316][T11408] genl_family_rcv_msg_doit+0x21a/0x310 [ 513.761936][T11408] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 513.767902][T11408] ? bpf_lsm_capable+0x9/0x10 [ 513.772647][T11408] ? security_capable+0x89/0xb0 [ 513.777563][T11408] genl_rcv_msg+0x611/0x7a0 [ 513.782140][T11408] ? genl_bind+0x360/0x360 [ 513.786612][T11408] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 513.793017][T11408] netlink_rcv_skb+0x235/0x4c0 [ 513.797828][T11408] ? genl_bind+0x360/0x360 [ 513.802304][T11408] ? netlink_ack+0x1160/0x1160 [ 513.807133][T11408] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.813352][T11408] ? down_read+0x1ac/0x2e0 [ 513.818010][T11408] genl_rcv+0x28/0x40 [ 513.822056][T11408] netlink_unicast+0x7b1/0x930 [ 513.826988][T11408] netlink_sendmsg+0x8d0/0xbf0 [ 513.831865][T11408] ? netlink_getsockopt+0x590/0x590 [ 513.837120][T11408] ? apparmor_socket_sendmsg+0x8e/0x330 [ 513.842717][T11408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 513.848064][T11408] ? security_socket_sendmsg+0x80/0xa0 [ 513.853582][T11408] ? netlink_getsockopt+0x590/0x590 [ 513.858831][T11408] ____sys_sendmsg+0x61b/0x980 [ 513.863655][T11408] ? __asan_memset+0x22/0x40 [ 513.868304][T11408] ? __sys_sendmsg_sock+0x30/0x30 [ 513.873386][T11408] ? __import_iovec+0x5f2/0x850 [ 513.878312][T11408] ? import_iovec+0x73/0xa0 [ 513.882882][T11408] ___sys_sendmsg+0x2a6/0x360 [ 513.887629][T11408] ? __sys_sendmsg+0x2b0/0x2b0 [ 513.892521][T11408] __se_sys_sendmsg+0x1d0/0x2c0 [ 513.897438][T11408] ? __x64_sys_sendmsg+0x80/0x80 [ 513.902451][T11408] ? syscall_enter_from_user_mode+0x2e/0x80 [ 513.908412][T11408] do_syscall_64+0x55/0xb0 [ 513.912873][T11408] ? clear_bhb_loop+0x40/0x90 [ 513.917600][T11408] ? clear_bhb_loop+0x40/0x90 [ 513.922332][T11408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.928296][T11408] RIP: 0033:0x7f2c5c79e0d9 [ 513.932762][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.952429][T11408] RSP: 002b:00007f2c5a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.960902][T11408] RAX: ffffffffffffffda RBX: 00007f2c5ca26090 RCX: 00007f2c5c79e0d9 [ 513.968925][T11408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 513.976942][T11408] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 513.984962][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.992984][T11408] R13: 00007f2c5ca26128 R14: 00007f2c5ca26090 R15: 00007ffe1b8670f8 [ 514.001027][T11408] [ 514.367366][T11412] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2195'. [ 517.297299][T11424] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2203'. [ 517.396210][T11424] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 517.417644][T11424] CPU: 1 PID: 11424 Comm: syz.2.2203 Not tainted syzkaller #0 [ 517.425208][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.435322][T11424] Call Trace: [ 517.438659][T11424] [ 517.441639][T11424] dump_stack_lvl+0x18c/0x250 [ 517.446384][T11424] ? show_regs_print_info+0x20/0x20 [ 517.451640][T11424] ? load_image+0x420/0x420 [ 517.456222][T11424] sysfs_warn_dup+0x8e/0xa0 [ 517.460780][T11424] sysfs_do_create_link_sd+0xc0/0x110 [ 517.466210][T11424] device_add_class_symlinks+0x1cf/0x240 [ 517.471912][T11424] device_add+0x4f9/0xc40 [ 517.476307][T11424] wiphy_register+0x1d99/0x2ac0 [ 517.481235][T11424] ? cfg80211_event_work+0x40/0x40 [ 517.486406][T11424] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.492632][T11424] ? ieee80211_register_hw+0x2c1d/0x3b30 [ 517.498347][T11424] ieee80211_register_hw+0x2dd8/0x3b30 [ 517.504117][T11424] ? ieee80211_register_hw+0xfb1/0x3b30 [ 517.509743][T11424] ? ieee80211_tasklet_handler+0x20/0x20 [ 517.515453][T11424] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 517.521423][T11424] ? __debug_object_init+0xec/0x450 [ 517.526707][T11424] ? __asan_memset+0x22/0x40 [ 517.531371][T11424] ? __hrtimer_init+0x189/0x270 [ 517.536287][T11424] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 517.542098][T11424] ? mac80211_hwsim_free+0x220/0x220 [ 517.547442][T11424] ? rcu_is_watching+0x15/0xb0 [ 517.552281][T11424] ? kstrndup+0xbd/0x140 [ 517.556613][T11424] hwsim_new_radio_nl+0xdad/0x1a70 [ 517.561806][T11424] ? __nla_validate+0x50/0x50 [ 517.566575][T11424] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 517.572987][T11424] ? __nla_parse+0x40/0x50 [ 517.577483][T11424] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 517.583891][T11424] genl_family_rcv_msg_doit+0x21a/0x310 [ 517.589511][T11424] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 517.595489][T11424] ? bpf_lsm_capable+0x9/0x10 [ 517.600238][T11424] ? security_capable+0x89/0xb0 [ 517.605312][T11424] genl_rcv_msg+0x611/0x7a0 [ 517.609911][T11424] ? genl_bind+0x360/0x360 [ 517.614388][T11424] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 517.620839][T11424] ? mark_lock+0x94/0x320 [ 517.625289][T11424] netlink_rcv_skb+0x235/0x4c0 [ 517.630113][T11424] ? genl_bind+0x360/0x360 [ 517.634586][T11424] ? netlink_ack+0x1160/0x1160 [ 517.639440][T11424] ? down_read+0x61/0x2e0 [ 517.643843][T11424] ? down_read+0x1ac/0x2e0 [ 517.648416][T11424] genl_rcv+0x28/0x40 [ 517.652455][T11424] netlink_unicast+0x7b1/0x930 [ 517.657299][T11424] netlink_sendmsg+0x8d0/0xbf0 [ 517.662141][T11424] ? netlink_getsockopt+0x590/0x590 [ 517.667410][T11424] ? apparmor_socket_sendmsg+0x8e/0x330 [ 517.673024][T11424] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 517.678397][T11424] ? security_socket_sendmsg+0x80/0xa0 [ 517.683917][T11424] ? netlink_getsockopt+0x590/0x590 [ 517.689177][T11424] ____sys_sendmsg+0x61b/0x980 [ 517.694011][T11424] ? __asan_memset+0x22/0x40 [ 517.698683][T11424] ? __sys_sendmsg_sock+0x30/0x30 [ 517.703769][T11424] ? __import_iovec+0x5f2/0x850 [ 517.708698][T11424] ? import_iovec+0x73/0xa0 [ 517.713266][T11424] ___sys_sendmsg+0x2a6/0x360 [ 517.718000][T11424] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 517.723886][T11424] ? __sys_sendmsg+0x2b0/0x2b0 [ 517.728723][T11424] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 517.734797][T11424] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.741030][T11424] ? lockdep_hardirqs_on+0x98/0x150 [ 517.746306][T11424] ? __se_sys_sendmsg+0xf2/0x2c0 [ 517.751305][T11424] ? kasan_check_range+0x1bc/0x290 [ 517.756490][T11424] __se_sys_sendmsg+0x1d0/0x2c0 [ 517.761402][T11424] ? __x64_sys_sendmsg+0x80/0x80 [ 517.766422][T11424] ? syscall_enter_from_user_mode+0x2e/0x80 [ 517.772385][T11424] do_syscall_64+0x55/0xb0 [ 517.776862][T11424] ? clear_bhb_loop+0x40/0x90 [ 517.781624][T11424] ? clear_bhb_loop+0x40/0x90 [ 517.786365][T11424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.792326][T11424] RIP: 0033:0x7f2c5c79e0d9 [ 517.796796][T11424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.816466][T11424] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.824951][T11424] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 517.832981][T11424] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 517.841012][T11424] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 517.849067][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.857102][T11424] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 517.865152][T11424] [ 517.893772][T11425] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2202'. [ 517.957155][T11425] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2202'. [ 517.983824][T11422] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2202'. [ 518.007172][T11427] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2202'. [ 518.079255][T11422] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 518.098082][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2202'. [ 523.605252][T11447] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2210'. [ 523.879947][T11454] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2214'. [ 523.942175][T11454] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 523.966960][T11454] CPU: 1 PID: 11454 Comm: syz.2.2214 Not tainted syzkaller #0 [ 523.974530][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.984667][T11454] Call Trace: [ 523.988005][T11454] [ 523.990986][T11454] dump_stack_lvl+0x18c/0x250 [ 523.995829][T11454] ? show_regs_print_info+0x20/0x20 [ 524.001101][T11454] ? load_image+0x420/0x420 [ 524.005700][T11454] sysfs_warn_dup+0x8e/0xa0 [ 524.010276][T11454] sysfs_do_create_link_sd+0xc0/0x110 [ 524.015726][T11454] device_add_class_symlinks+0x1cf/0x240 [ 524.021439][T11454] device_add+0x4f9/0xc40 [ 524.025838][T11454] wiphy_register+0x1d99/0x2ac0 [ 524.030788][T11454] ? cfg80211_event_work+0x40/0x40 [ 524.035977][T11454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.042270][T11454] ? ieee80211_register_hw+0x2d37/0x3b30 [ 524.047991][T11454] ieee80211_register_hw+0x2dd8/0x3b30 [ 524.053532][T11454] ? ieee80211_register_hw+0xfb1/0x3b30 [ 524.059154][T11454] ? ieee80211_tasklet_handler+0x20/0x20 [ 524.064847][T11454] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 524.070821][T11454] ? __debug_object_init+0xec/0x450 [ 524.076100][T11454] ? __asan_memset+0x22/0x40 [ 524.080767][T11454] ? __hrtimer_init+0x189/0x270 [ 524.085684][T11454] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 524.091501][T11454] ? mac80211_hwsim_free+0x220/0x220 [ 524.096845][T11454] ? rcu_is_watching+0x15/0xb0 [ 524.101683][T11454] ? kstrndup+0xbd/0x140 [ 524.106004][T11454] hwsim_new_radio_nl+0xdad/0x1a70 [ 524.111182][T11454] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 524.117061][T11454] ? mark_lock+0x94/0x320 [ 524.121463][T11454] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 524.127856][T11454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.134097][T11454] ? lockdep_hardirqs_on+0x98/0x150 [ 524.139372][T11454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.145622][T11454] genl_family_rcv_msg_doit+0x21a/0x310 [ 524.151250][T11454] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 524.157218][T11454] ? bpf_lsm_capable+0x9/0x10 [ 524.161962][T11454] ? security_capable+0x89/0xb0 [ 524.166890][T11454] genl_rcv_msg+0x611/0x7a0 [ 524.171474][T11454] ? genl_bind+0x360/0x360 [ 524.175945][T11454] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 524.182341][T11454] ? lockdep_hardirqs_on+0x98/0x150 [ 524.187607][T11454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.193829][T11454] netlink_rcv_skb+0x235/0x4c0 [ 524.198675][T11454] ? genl_bind+0x360/0x360 [ 524.203162][T11454] ? netlink_ack+0x1160/0x1160 [ 524.207996][T11454] ? __lock_acquire+0x7d80/0x7d80 [ 524.213097][T11454] ? down_read+0x1ac/0x2e0 [ 524.217579][T11454] genl_rcv+0x28/0x40 [ 524.221629][T11454] netlink_unicast+0x7b1/0x930 [ 524.226474][T11454] netlink_sendmsg+0x8d0/0xbf0 [ 524.231310][T11454] ? netlink_getsockopt+0x590/0x590 [ 524.236563][T11454] ? apparmor_socket_sendmsg+0x8e/0x330 [ 524.242170][T11454] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 524.247521][T11454] ? security_socket_sendmsg+0x80/0xa0 [ 524.253044][T11454] ? netlink_getsockopt+0x590/0x590 [ 524.258306][T11454] ____sys_sendmsg+0x61b/0x980 [ 524.263140][T11454] ? __asan_memset+0x22/0x40 [ 524.267790][T11454] ? __sys_sendmsg_sock+0x30/0x30 [ 524.272875][T11454] ? __import_iovec+0x5f2/0x850 [ 524.277814][T11454] ? import_iovec+0x73/0xa0 [ 524.282396][T11454] ___sys_sendmsg+0x2a6/0x360 [ 524.287153][T11454] ? __sys_sendmsg+0x2b0/0x2b0 [ 524.292015][T11454] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.298276][T11454] __se_sys_sendmsg+0x1d0/0x2c0 [ 524.303194][T11454] ? perf_trace_preemptirq_template+0x269/0x330 [ 524.309518][T11454] ? __x64_sys_sendmsg+0x80/0x80 [ 524.314554][T11454] ? lockdep_hardirqs_on+0x98/0x150 [ 524.319829][T11454] do_syscall_64+0x55/0xb0 [ 524.324306][T11454] ? clear_bhb_loop+0x40/0x90 [ 524.329048][T11454] ? clear_bhb_loop+0x40/0x90 [ 524.333796][T11454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.339755][T11454] RIP: 0033:0x7f2c5c79e0d9 [ 524.344237][T11454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.363913][T11454] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.372389][T11454] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 524.380419][T11454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 524.388457][T11454] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 524.396495][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.404539][T11454] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 524.412592][T11454] [ 527.516287][T11475] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2220'. [ 528.741969][T11334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.071373][T11468] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.349039][T11468] syzkaller0: entered promiscuous mode [ 530.362630][T11468] syzkaller0: entered allmulticast mode [ 530.395394][T11475] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2220'. [ 530.415789][T11477] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 530.435481][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2220'. [ 535.294673][T11494] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2227'. [ 535.575049][T11498] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2228'. [ 535.683621][T11498] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 535.699515][T11498] CPU: 0 PID: 11498 Comm: syz.0.2228 Not tainted syzkaller #0 [ 535.707069][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.717187][T11498] Call Trace: [ 535.720518][T11498] [ 535.723496][T11498] dump_stack_lvl+0x18c/0x250 [ 535.728230][T11498] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.734483][T11498] ? show_regs_print_info+0x20/0x20 [ 535.739741][T11498] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.745976][T11498] sysfs_warn_dup+0x8e/0xa0 [ 535.750549][T11498] sysfs_do_create_link_sd+0xc0/0x110 [ 535.756094][T11498] device_add_class_symlinks+0x1cf/0x240 [ 535.761799][T11498] device_add+0x4f9/0xc40 [ 535.766200][T11498] wiphy_register+0x1d99/0x2ac0 [ 535.771148][T11498] ? cfg80211_event_work+0x40/0x40 [ 535.776325][T11498] ? minstrel_ht_alloc+0x88a/0x990 [ 535.781521][T11498] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 535.787664][T11498] ieee80211_register_hw+0x2dd8/0x3b30 [ 535.793284][T11498] ? ieee80211_register_hw+0xfb1/0x3b30 [ 535.798898][T11498] ? ieee80211_tasklet_handler+0x20/0x20 [ 535.804647][T11498] ? __asan_memset+0x22/0x40 [ 535.809305][T11498] ? __hrtimer_init+0x189/0x270 [ 535.814212][T11498] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 535.820014][T11498] ? mac80211_hwsim_free+0x220/0x220 [ 535.825352][T11498] ? rcu_is_watching+0x15/0xb0 [ 535.830178][T11498] ? kstrndup+0xbd/0x140 [ 535.834499][T11498] hwsim_new_radio_nl+0xdad/0x1a70 [ 535.839681][T11498] ? __nla_validate+0x50/0x50 [ 535.844451][T11498] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 535.850855][T11498] ? __nla_parse+0x40/0x50 [ 535.855343][T11498] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 535.861771][T11498] genl_family_rcv_msg_doit+0x21a/0x310 [ 535.867397][T11498] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 535.873373][T11498] ? bpf_lsm_capable+0x9/0x10 [ 535.878117][T11498] ? security_capable+0x89/0xb0 [ 535.883042][T11498] genl_rcv_msg+0x611/0x7a0 [ 535.887616][T11498] ? genl_bind+0x360/0x360 [ 535.892131][T11498] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 535.898541][T11498] netlink_rcv_skb+0x235/0x4c0 [ 535.903371][T11498] ? genl_bind+0x360/0x360 [ 535.907846][T11498] ? netlink_ack+0x1160/0x1160 [ 535.912703][T11498] ? down_read+0x1ac/0x2e0 [ 535.917200][T11498] genl_rcv+0x28/0x40 [ 535.921245][T11498] netlink_unicast+0x7b1/0x930 [ 535.926101][T11498] netlink_sendmsg+0x8d0/0xbf0 [ 535.931051][T11498] ? netlink_getsockopt+0x590/0x590 [ 535.936310][T11498] ? apparmor_socket_sendmsg+0x8e/0x330 [ 535.941924][T11498] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 535.947268][T11498] ? security_socket_sendmsg+0x80/0xa0 [ 535.953072][T11498] ? netlink_getsockopt+0x590/0x590 [ 535.958342][T11498] ____sys_sendmsg+0x61b/0x980 [ 535.963216][T11498] ? __asan_memset+0x22/0x40 [ 535.967908][T11498] ? __sys_sendmsg_sock+0x30/0x30 [ 535.973005][T11498] ? __import_iovec+0x5f2/0x850 [ 535.977938][T11498] ? import_iovec+0x73/0xa0 [ 535.982519][T11498] ___sys_sendmsg+0x2a6/0x360 [ 535.987296][T11498] ? __sys_sendmsg+0x2b0/0x2b0 [ 535.992182][T11498] __se_sys_sendmsg+0x1d0/0x2c0 [ 535.997087][T11498] ? perf_trace_preemptirq_template+0x269/0x330 [ 536.003402][T11498] ? __x64_sys_sendmsg+0x80/0x80 [ 536.008418][T11498] ? lockdep_hardirqs_on+0x98/0x150 [ 536.013682][T11498] do_syscall_64+0x55/0xb0 [ 536.018153][T11498] ? clear_bhb_loop+0x40/0x90 [ 536.022888][T11498] ? clear_bhb_loop+0x40/0x90 [ 536.027623][T11498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.033575][T11498] RIP: 0033:0x7f81be99e0d9 [ 536.038040][T11498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.057711][T11498] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.066190][T11498] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 536.074219][T11498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 536.082269][T11498] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 536.090295][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.098321][T11498] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 536.106369][T11498] [ 536.382452][T11507] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2231'. [ 536.440706][T11507] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 536.456392][T11507] CPU: 1 PID: 11507 Comm: syz.1.2231 Not tainted syzkaller #0 [ 536.463933][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.474040][T11507] Call Trace: [ 536.477363][T11507] [ 536.480339][T11507] dump_stack_lvl+0x18c/0x250 [ 536.485113][T11507] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.491417][T11507] ? show_regs_print_info+0x20/0x20 [ 536.496665][T11507] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.502888][T11507] sysfs_warn_dup+0x8e/0xa0 [ 536.507439][T11507] sysfs_do_create_link_sd+0xc0/0x110 [ 536.512866][T11507] device_add_class_symlinks+0x1cf/0x240 [ 536.518563][T11507] device_add+0x4f9/0xc40 [ 536.522944][T11507] wiphy_register+0x1d99/0x2ac0 [ 536.527887][T11507] ? cfg80211_event_work+0x40/0x40 [ 536.533050][T11507] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.539299][T11507] ieee80211_register_hw+0x2dd8/0x3b30 [ 536.544838][T11507] ? ieee80211_register_hw+0xfb1/0x3b30 [ 536.550443][T11507] ? ieee80211_tasklet_handler+0x20/0x20 [ 536.556129][T11507] ? __hrtimer_init+0x98/0x270 [ 536.560945][T11507] ? audit_tree_destroy_watch+0x20/0x20 [ 536.566548][T11507] ? __hrtimer_init+0x189/0x270 [ 536.571537][T11507] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 536.577335][T11507] ? mac80211_hwsim_free+0x220/0x220 [ 536.582665][T11507] ? rcu_is_watching+0x15/0xb0 [ 536.587479][T11507] ? kstrndup+0xbd/0x140 [ 536.591775][T11507] hwsim_new_radio_nl+0xdad/0x1a70 [ 536.596964][T11507] ? mark_lock+0x94/0x320 [ 536.601360][T11507] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 536.607735][T11507] ? lockdep_hardirqs_on+0x98/0x150 [ 536.612991][T11507] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.619196][T11507] ? lockdep_hardirqs_on+0x98/0x150 [ 536.624438][T11507] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.630645][T11507] genl_family_rcv_msg_doit+0x21a/0x310 [ 536.636252][T11507] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 536.642201][T11507] ? bpf_lsm_capable+0x9/0x10 [ 536.646924][T11507] ? security_capable+0x89/0xb0 [ 536.651837][T11507] genl_rcv_msg+0x611/0x7a0 [ 536.656399][T11507] ? genl_bind+0x360/0x360 [ 536.660862][T11507] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 536.667243][T11507] ? mark_lock+0x94/0x320 [ 536.671633][T11507] netlink_rcv_skb+0x235/0x4c0 [ 536.676453][T11507] ? genl_bind+0x360/0x360 [ 536.680919][T11507] ? netlink_ack+0x1160/0x1160 [ 536.685759][T11507] ? down_read+0x1b3/0x2e0 [ 536.690228][T11507] ? down_read+0x1ac/0x2e0 [ 536.694695][T11507] genl_rcv+0x28/0x40 [ 536.698729][T11507] netlink_unicast+0x7b1/0x930 [ 536.703566][T11507] netlink_sendmsg+0x8d0/0xbf0 [ 536.708377][T11507] ? aa_sock_msg_perm+0x94/0x150 [ 536.713363][T11507] ? netlink_getsockopt+0x590/0x590 [ 536.718610][T11507] ? apparmor_socket_sendmsg+0x8e/0x330 [ 536.724203][T11507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 536.729534][T11507] ? security_socket_sendmsg+0x80/0xa0 [ 536.735034][T11507] ? netlink_getsockopt+0x590/0x590 [ 536.740278][T11507] ____sys_sendmsg+0x61b/0x980 [ 536.745106][T11507] ? __asan_memset+0x22/0x40 [ 536.749751][T11507] ? __sys_sendmsg_sock+0x30/0x30 [ 536.754817][T11507] ? __import_iovec+0x5f2/0x850 [ 536.759735][T11507] ? import_iovec+0x73/0xa0 [ 536.764300][T11507] ___sys_sendmsg+0x2a6/0x360 [ 536.769054][T11507] ? __sys_sendmsg+0x2b0/0x2b0 [ 536.773943][T11507] __se_sys_sendmsg+0x1d0/0x2c0 [ 536.778942][T11507] ? __x64_sys_sendmsg+0x80/0x80 [ 536.783957][T11507] ? syscall_enter_from_user_mode+0x2e/0x80 [ 536.789920][T11507] do_syscall_64+0x55/0xb0 [ 536.794391][T11507] ? clear_bhb_loop+0x40/0x90 [ 536.799116][T11507] ? clear_bhb_loop+0x40/0x90 [ 536.803845][T11507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.809786][T11507] RIP: 0033:0x7f057819e0d9 [ 536.814255][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.833924][T11507] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.842397][T11507] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 536.850413][T11507] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 536.858434][T11507] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 536.866495][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.874508][T11507] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 536.882633][T11507] [ 537.833165][T11528] syzkaller0: entered promiscuous mode [ 537.842158][T11528] syzkaller0: entered allmulticast mode [ 541.042087][T11538] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2242'. [ 542.936930][T11538] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 542.955671][T11538] CPU: 0 PID: 11538 Comm: syz.2.2242 Not tainted syzkaller #0 [ 542.963237][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.973344][T11538] Call Trace: [ 542.976643][T11538] [ 542.979599][T11538] dump_stack_lvl+0x18c/0x250 [ 542.984344][T11538] ? show_regs_print_info+0x20/0x20 [ 542.989631][T11538] ? load_image+0x420/0x420 [ 542.994259][T11538] sysfs_warn_dup+0x8e/0xa0 [ 542.998825][T11538] sysfs_do_create_link_sd+0xc0/0x110 [ 543.004252][T11538] device_add_class_symlinks+0x1cf/0x240 [ 543.009927][T11538] device_add+0x4f9/0xc40 [ 543.014320][T11538] wiphy_register+0x1d99/0x2ac0 [ 543.019257][T11538] ? cfg80211_event_work+0x40/0x40 [ 543.024423][T11538] ? minstrel_ht_alloc+0x88a/0x990 [ 543.029604][T11538] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 543.035733][T11538] ieee80211_register_hw+0x2dd8/0x3b30 [ 543.041264][T11538] ? ieee80211_register_hw+0xfb1/0x3b30 [ 543.046888][T11538] ? ieee80211_tasklet_handler+0x20/0x20 [ 543.052583][T11538] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.058552][T11538] ? __debug_object_init+0xec/0x450 [ 543.063817][T11538] ? __asan_memset+0x22/0x40 [ 543.068476][T11538] ? __hrtimer_init+0x189/0x270 [ 543.073396][T11538] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 543.079192][T11538] ? mac80211_hwsim_free+0x220/0x220 [ 543.084541][T11538] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 543.089887][T11538] hwsim_new_radio_nl+0xdad/0x1a70 [ 543.095054][T11538] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 543.100940][T11538] ? mark_lock+0x94/0x320 [ 543.105343][T11538] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 543.111736][T11538] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.117941][T11538] ? lockdep_hardirqs_on+0x98/0x150 [ 543.123182][T11538] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.129422][T11538] genl_family_rcv_msg_doit+0x21a/0x310 [ 543.135055][T11538] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 543.141028][T11538] ? bpf_lsm_capable+0x9/0x10 [ 543.145776][T11538] ? security_capable+0x89/0xb0 [ 543.150697][T11538] genl_rcv_msg+0x611/0x7a0 [ 543.155262][T11538] ? genl_bind+0x360/0x360 [ 543.159727][T11538] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 543.166214][T11538] netlink_rcv_skb+0x235/0x4c0 [ 543.171031][T11538] ? genl_bind+0x360/0x360 [ 543.175515][T11538] ? netlink_ack+0x1160/0x1160 [ 543.180354][T11538] ? genl_bind+0x360/0x360 [ 543.184832][T11538] genl_rcv+0x28/0x40 [ 543.188871][T11538] netlink_unicast+0x7b1/0x930 [ 543.193717][T11538] netlink_sendmsg+0x8d0/0xbf0 [ 543.198549][T11538] ? netlink_getsockopt+0x590/0x590 [ 543.203811][T11538] ? apparmor_socket_sendmsg+0x8e/0x330 [ 543.209408][T11538] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.214748][T11538] ? security_socket_sendmsg+0x80/0xa0 [ 543.220259][T11538] ? netlink_getsockopt+0x590/0x590 [ 543.225518][T11538] ____sys_sendmsg+0x61b/0x980 [ 543.230338][T11538] ? __asan_memset+0x22/0x40 [ 543.235025][T11538] ? __sys_sendmsg_sock+0x30/0x30 [ 543.240122][T11538] ? __import_iovec+0x5f2/0x850 [ 543.245046][T11538] ? import_iovec+0x73/0xa0 [ 543.249624][T11538] ___sys_sendmsg+0x2a6/0x360 [ 543.254360][T11538] ? __sys_sendmsg+0x2b0/0x2b0 [ 543.259238][T11538] __se_sys_sendmsg+0x1d0/0x2c0 [ 543.264146][T11538] ? __x64_sys_sendmsg+0x80/0x80 [ 543.269164][T11538] ? syscall_enter_from_user_mode+0x2e/0x80 [ 543.275150][T11538] do_syscall_64+0x55/0xb0 [ 543.279615][T11538] ? clear_bhb_loop+0x40/0x90 [ 543.284346][T11538] ? clear_bhb_loop+0x40/0x90 [ 543.289081][T11538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.295033][T11538] RIP: 0033:0x7f2c5c79e0d9 [ 543.299507][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.319169][T11538] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.327638][T11538] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 543.335663][T11538] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 543.343689][T11538] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 543.351704][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.359725][T11538] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 543.367767][T11538] [ 543.425105][T11541] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2245'. [ 543.451588][T11541] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 543.469981][T11541] CPU: 1 PID: 11541 Comm: syz.1.2245 Not tainted syzkaller #0 [ 543.477521][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.487647][T11541] Call Trace: [ 543.490978][T11541] [ 543.493959][T11541] dump_stack_lvl+0x18c/0x250 [ 543.498707][T11541] ? show_regs_print_info+0x20/0x20 [ 543.503961][T11541] ? load_image+0x420/0x420 [ 543.508550][T11541] sysfs_warn_dup+0x8e/0xa0 [ 543.513105][T11541] sysfs_do_create_link_sd+0xc0/0x110 [ 543.518575][T11541] device_add_class_symlinks+0x1cf/0x240 [ 543.524276][T11541] device_add+0x4f9/0xc40 [ 543.528682][T11541] wiphy_register+0x1d99/0x2ac0 [ 543.533602][T11541] ? cfg80211_event_work+0x40/0x40 [ 543.538779][T11541] ? minstrel_ht_alloc+0x88a/0x990 [ 543.543933][T11541] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 543.550085][T11541] ieee80211_register_hw+0x2dd8/0x3b30 [ 543.555590][T11541] ? ieee80211_register_hw+0xfb1/0x3b30 [ 543.561197][T11541] ? ieee80211_tasklet_handler+0x20/0x20 [ 543.566857][T11541] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.572792][T11541] ? __debug_object_init+0xec/0x450 [ 543.578030][T11541] ? __asan_memset+0x22/0x40 [ 543.582660][T11541] ? __hrtimer_init+0x189/0x270 [ 543.587551][T11541] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 543.593322][T11541] ? mac80211_hwsim_free+0x220/0x220 [ 543.598656][T11541] ? rcu_is_watching+0x15/0xb0 [ 543.603457][T11541] ? kstrndup+0xbd/0x140 [ 543.607744][T11541] hwsim_new_radio_nl+0xdad/0x1a70 [ 543.612892][T11541] ? __nla_validate+0x50/0x50 [ 543.617616][T11541] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 543.623986][T11541] ? __nla_parse+0x40/0x50 [ 543.628451][T11541] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 543.634821][T11541] genl_family_rcv_msg_doit+0x21a/0x310 [ 543.640419][T11541] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 543.646350][T11541] ? bpf_lsm_capable+0x9/0x10 [ 543.651062][T11541] ? security_capable+0x89/0xb0 [ 543.655951][T11541] genl_rcv_msg+0x611/0x7a0 [ 543.660500][T11541] ? genl_bind+0x360/0x360 [ 543.664950][T11541] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 543.671359][T11541] netlink_rcv_skb+0x235/0x4c0 [ 543.676155][T11541] ? genl_bind+0x360/0x360 [ 543.680605][T11541] ? netlink_ack+0x1160/0x1160 [ 543.685418][T11541] ? __lock_acquire+0x7d80/0x7d80 [ 543.690485][T11541] ? down_read+0x1ac/0x2e0 [ 543.694934][T11541] genl_rcv+0x28/0x40 [ 543.698968][T11541] netlink_unicast+0x7b1/0x930 [ 543.703803][T11541] netlink_sendmsg+0x8d0/0xbf0 [ 543.708602][T11541] ? lockdep_hardirqs_on+0x98/0x150 [ 543.713836][T11541] ? netlink_getsockopt+0x590/0x590 [ 543.719061][T11541] ? netlink_getsockopt+0x590/0x590 [ 543.724292][T11541] ? netlink_getsockopt+0x590/0x590 [ 543.729516][T11541] ____sys_sendmsg+0x61b/0x980 [ 543.734314][T11541] ? lockdep_hardirqs_on+0x98/0x150 [ 543.739553][T11541] ? __sys_sendmsg_sock+0x30/0x30 [ 543.744648][T11541] ? ___sys_sendmsg+0x28b/0x360 [ 543.749535][T11541] ___sys_sendmsg+0x2a6/0x360 [ 543.754253][T11541] ? __sys_sendmsg+0x2b0/0x2b0 [ 543.759093][T11541] __se_sys_sendmsg+0x1d0/0x2c0 [ 543.763971][T11541] ? perf_trace_preemptirq_template+0x269/0x330 [ 543.770280][T11541] ? __x64_sys_sendmsg+0x80/0x80 [ 543.775261][T11541] ? lockdep_hardirqs_on+0x98/0x150 [ 543.780504][T11541] do_syscall_64+0x55/0xb0 [ 543.784953][T11541] ? clear_bhb_loop+0x40/0x90 [ 543.789703][T11541] ? clear_bhb_loop+0x40/0x90 [ 543.794417][T11541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.800339][T11541] RIP: 0033:0x7f057819e0d9 [ 543.804787][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.824438][T11541] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.832895][T11541] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 543.840897][T11541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 543.848929][T11541] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 543.856927][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.864967][T11541] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 543.872993][T11541] [ 547.283068][T11563] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2253'. [ 547.363588][T11563] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 547.379461][T11563] CPU: 1 PID: 11563 Comm: syz.2.2253 Not tainted syzkaller #0 [ 547.386998][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.397105][T11563] Call Trace: [ 547.400427][T11563] [ 547.403400][T11563] dump_stack_lvl+0x18c/0x250 [ 547.408142][T11563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.414352][T11563] ? show_regs_print_info+0x20/0x20 [ 547.419609][T11563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.425840][T11563] sysfs_warn_dup+0x8e/0xa0 [ 547.430396][T11563] sysfs_do_create_link_sd+0xc0/0x110 [ 547.435824][T11563] device_add_class_symlinks+0x1cf/0x240 [ 547.441514][T11563] device_add+0x4f9/0xc40 [ 547.445902][T11563] wiphy_register+0x1d99/0x2ac0 [ 547.450839][T11563] ? cfg80211_event_work+0x40/0x40 [ 547.456008][T11563] ? minstrel_ht_alloc+0x88a/0x990 [ 547.461198][T11563] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 547.467338][T11563] ieee80211_register_hw+0x2dd8/0x3b30 [ 547.472915][T11563] ? ieee80211_register_hw+0xfb1/0x3b30 [ 547.478527][T11563] ? ieee80211_tasklet_handler+0x20/0x20 [ 547.484220][T11563] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 547.490185][T11563] ? __debug_object_init+0xec/0x450 [ 547.495449][T11563] ? __asan_memset+0x22/0x40 [ 547.500109][T11563] ? __hrtimer_init+0x189/0x270 [ 547.505020][T11563] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 547.510826][T11563] ? mac80211_hwsim_free+0x220/0x220 [ 547.516173][T11563] ? rcu_is_watching+0x15/0xb0 [ 547.521004][T11563] ? kstrndup+0xbd/0x140 [ 547.525322][T11563] hwsim_new_radio_nl+0xdad/0x1a70 [ 547.530502][T11563] ? __nla_validate+0x50/0x50 [ 547.535265][T11563] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 547.541668][T11563] ? __nla_parse+0x40/0x50 [ 547.546155][T11563] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 547.552555][T11563] genl_family_rcv_msg_doit+0x21a/0x310 [ 547.558162][T11563] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 547.564121][T11563] ? lockdep_hardirqs_on+0x98/0x150 [ 547.569399][T11563] ? genl_rcv_msg+0x5ef/0x7a0 [ 547.574141][T11563] genl_rcv_msg+0x611/0x7a0 [ 547.578720][T11563] ? genl_bind+0x360/0x360 [ 547.583200][T11563] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 547.589588][T11563] ? lockdep_hardirqs_on+0x98/0x150 [ 547.594846][T11563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.601068][T11563] netlink_rcv_skb+0x235/0x4c0 [ 547.605887][T11563] ? genl_bind+0x360/0x360 [ 547.610358][T11563] ? netlink_ack+0x1160/0x1160 [ 547.615190][T11563] ? __lock_acquire+0x7d80/0x7d80 [ 547.620282][T11563] ? down_read+0x1ac/0x2e0 [ 547.624762][T11563] genl_rcv+0x28/0x40 [ 547.628798][T11563] netlink_unicast+0x7b1/0x930 [ 547.633645][T11563] netlink_sendmsg+0x8d0/0xbf0 [ 547.638475][T11563] ? netlink_getsockopt+0x590/0x590 [ 547.643775][T11563] ? apparmor_socket_sendmsg+0x8e/0x330 [ 547.649379][T11563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 547.654728][T11563] ? security_socket_sendmsg+0x80/0xa0 [ 547.660236][T11563] ? netlink_getsockopt+0x590/0x590 [ 547.665492][T11563] ____sys_sendmsg+0x61b/0x980 [ 547.670317][T11563] ? __asan_memset+0x22/0x40 [ 547.674967][T11563] ? __sys_sendmsg_sock+0x30/0x30 [ 547.680044][T11563] ? __import_iovec+0x5f2/0x850 [ 547.684971][T11563] ? import_iovec+0x73/0xa0 [ 547.689547][T11563] ___sys_sendmsg+0x2a6/0x360 [ 547.694289][T11563] ? __sys_sendmsg+0x2b0/0x2b0 [ 547.699181][T11563] __se_sys_sendmsg+0x1d0/0x2c0 [ 547.704096][T11563] ? __x64_sys_sendmsg+0x80/0x80 [ 547.709112][T11563] ? syscall_enter_from_user_mode+0x2e/0x80 [ 547.715081][T11563] do_syscall_64+0x55/0xb0 [ 547.719904][T11563] ? clear_bhb_loop+0x40/0x90 [ 547.724640][T11563] ? clear_bhb_loop+0x40/0x90 [ 547.729383][T11563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.735327][T11563] RIP: 0033:0x7f2c5c79e0d9 [ 547.739888][T11563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.759553][T11563] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.768028][T11563] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 547.776140][T11563] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 547.784155][T11563] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 547.792172][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.800192][T11563] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 547.808234][T11563] [ 550.668690][T11572] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2256'. [ 550.681538][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'. [ 550.695144][T11573] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2258'. [ 550.758712][T11573] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 550.777872][T11573] CPU: 1 PID: 11573 Comm: syz.3.2258 Not tainted syzkaller #0 [ 550.785427][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.795536][T11573] Call Trace: [ 550.798870][T11573] [ 550.801844][T11573] dump_stack_lvl+0x18c/0x250 [ 550.806580][T11573] ? show_regs_print_info+0x20/0x20 [ 550.811819][T11573] ? load_image+0x420/0x420 [ 550.816370][T11573] sysfs_warn_dup+0x8e/0xa0 [ 550.820906][T11573] sysfs_do_create_link_sd+0xc0/0x110 [ 550.826315][T11573] device_add_class_symlinks+0x1cf/0x240 [ 550.831984][T11573] device_add+0x4f9/0xc40 [ 550.836346][T11573] wiphy_register+0x1d99/0x2ac0 [ 550.841249][T11573] ? cfg80211_event_work+0x40/0x40 [ 550.846387][T11573] ? minstrel_ht_alloc+0x88a/0x990 [ 550.851551][T11573] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 550.857658][T11573] ieee80211_register_hw+0x2dd8/0x3b30 [ 550.863160][T11573] ? ieee80211_register_hw+0xfb1/0x3b30 [ 550.868748][T11573] ? ieee80211_tasklet_handler+0x20/0x20 [ 550.874436][T11573] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 550.880385][T11573] ? __debug_object_init+0xec/0x450 [ 550.885619][T11573] ? __asan_memset+0x22/0x40 [ 550.890246][T11573] ? __hrtimer_init+0x189/0x270 [ 550.895130][T11573] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 550.900904][T11573] ? mac80211_hwsim_free+0x220/0x220 [ 550.906256][T11573] ? rcu_is_watching+0x15/0xb0 [ 550.911070][T11573] ? kstrndup+0xbd/0x140 [ 550.915377][T11573] hwsim_new_radio_nl+0xdad/0x1a70 [ 550.920514][T11573] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 550.926372][T11573] ? mark_lock+0x94/0x320 [ 550.930748][T11573] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 550.937115][T11573] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.943316][T11573] ? lockdep_hardirqs_on+0x98/0x150 [ 550.948563][T11573] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.954788][T11573] genl_family_rcv_msg_doit+0x21a/0x310 [ 550.960397][T11573] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 550.966341][T11573] ? bpf_lsm_capable+0x9/0x10 [ 550.971063][T11573] ? security_capable+0x89/0xb0 [ 550.975963][T11573] genl_rcv_msg+0x611/0x7a0 [ 550.980508][T11573] ? genl_bind+0x360/0x360 [ 550.984989][T11573] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 550.991363][T11573] netlink_rcv_skb+0x235/0x4c0 [ 550.996163][T11573] ? genl_bind+0x360/0x360 [ 551.000615][T11573] ? netlink_ack+0x1160/0x1160 [ 551.005419][T11573] ? __lock_acquire+0x7d80/0x7d80 [ 551.010482][T11573] ? down_read+0x1ac/0x2e0 [ 551.014944][T11573] genl_rcv+0x28/0x40 [ 551.018965][T11573] netlink_unicast+0x7b1/0x930 [ 551.023780][T11573] netlink_sendmsg+0x8d0/0xbf0 [ 551.028842][T11573] ? netlink_getsockopt+0x590/0x590 [ 551.034075][T11573] ? apparmor_socket_sendmsg+0x8e/0x330 [ 551.039669][T11573] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 551.044982][T11573] ? security_socket_sendmsg+0x80/0xa0 [ 551.050469][T11573] ? netlink_getsockopt+0x590/0x590 [ 551.055699][T11573] ____sys_sendmsg+0x61b/0x980 [ 551.060512][T11573] ? lockdep_hardirqs_on+0x98/0x150 [ 551.065749][T11573] ? __sys_sendmsg_sock+0x30/0x30 [ 551.070809][T11573] ? ___sys_sendmsg+0x28b/0x360 [ 551.075700][T11573] ___sys_sendmsg+0x2a6/0x360 [ 551.080411][T11573] ? __sys_sendmsg+0x2b0/0x2b0 [ 551.085247][T11573] __se_sys_sendmsg+0x1d0/0x2c0 [ 551.090129][T11573] ? __x64_sys_sendmsg+0x80/0x80 [ 551.095125][T11573] ? syscall_enter_from_user_mode+0x2e/0x80 [ 551.101243][T11573] do_syscall_64+0x55/0xb0 [ 551.105707][T11573] ? clear_bhb_loop+0x40/0x90 [ 551.110426][T11573] ? clear_bhb_loop+0x40/0x90 [ 551.115180][T11573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.121109][T11573] RIP: 0033:0x7fd95099e0d9 [ 551.125557][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.145200][T11573] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.153666][T11573] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 551.161674][T11573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 551.169679][T11573] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 551.177674][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.185671][T11573] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 551.193689][T11573] [ 551.308835][T11580] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 551.318101][T11580] hsr0: entered promiscuous mode [ 551.642949][T11587] netlink: 'syz.2.2262': attribute type 9 has an invalid length. [ 551.680679][T11587] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2262'. [ 552.428983][T11584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.436840][T11584] IPv6: NLM_F_CREATE should be set when creating new route [ 552.444220][T11584] IPv6: NLM_F_CREATE should be set when creating new route [ 552.451543][T11584] IPv6: NLM_F_CREATE should be set when creating new route [ 552.551122][T11592] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2264'. [ 554.202394][T11592] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2264'. [ 554.212635][T11598] netlink: 'syz.3.2264': attribute type 10 has an invalid length. [ 554.221436][T11598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'. [ 554.247263][T11588] netlink: 'syz.2.2262': attribute type 9 has an invalid length. [ 554.269215][T11588] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2262'. [ 554.457467][T11597] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2265'. [ 554.491533][T11597] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 554.512088][T11597] CPU: 0 PID: 11597 Comm: syz.1.2265 Not tainted syzkaller #0 [ 554.519639][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.529779][T11597] Call Trace: [ 554.533111][T11597] [ 554.536093][T11597] dump_stack_lvl+0x18c/0x250 [ 554.540830][T11597] ? show_regs_print_info+0x20/0x20 [ 554.546083][T11597] ? load_image+0x420/0x420 [ 554.550676][T11597] sysfs_warn_dup+0x8e/0xa0 [ 554.555248][T11597] sysfs_do_create_link_sd+0xc0/0x110 [ 554.560685][T11597] device_add_class_symlinks+0x1cf/0x240 [ 554.566406][T11597] device_add+0x4f9/0xc40 [ 554.570815][T11597] wiphy_register+0x1d99/0x2ac0 [ 554.576097][T11597] ? cfg80211_event_work+0x40/0x40 [ 554.581266][T11597] ? minstrel_ht_alloc+0x88a/0x990 [ 554.586461][T11597] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 554.592610][T11597] ieee80211_register_hw+0x2dd8/0x3b30 [ 554.598145][T11597] ? ieee80211_register_hw+0xfb1/0x3b30 [ 554.603766][T11597] ? ieee80211_tasklet_handler+0x20/0x20 [ 554.609457][T11597] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 554.615422][T11597] ? __debug_object_init+0xec/0x450 [ 554.620670][T11597] ? __asan_memset+0x22/0x40 [ 554.625304][T11597] ? __hrtimer_init+0x189/0x270 [ 554.630190][T11597] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 554.635968][T11597] ? mac80211_hwsim_free+0x220/0x220 [ 554.641282][T11597] ? rcu_is_watching+0x15/0xb0 [ 554.646078][T11597] ? kstrndup+0xbd/0x140 [ 554.650399][T11597] hwsim_new_radio_nl+0xdad/0x1a70 [ 554.655546][T11597] ? __nla_validate+0x50/0x50 [ 554.660277][T11597] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 554.666648][T11597] ? __nla_parse+0x40/0x50 [ 554.671104][T11597] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 554.677470][T11597] genl_family_rcv_msg_doit+0x21a/0x310 [ 554.683085][T11597] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 554.689020][T11597] ? bpf_lsm_capable+0x9/0x10 [ 554.693740][T11597] ? security_capable+0x89/0xb0 [ 554.698641][T11597] genl_rcv_msg+0x611/0x7a0 [ 554.703360][T11597] ? genl_bind+0x360/0x360 [ 554.707834][T11597] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 554.714237][T11597] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 554.720106][T11597] netlink_rcv_skb+0x235/0x4c0 [ 554.724905][T11597] ? genl_bind+0x360/0x360 [ 554.729352][T11597] ? netlink_ack+0x1160/0x1160 [ 554.734158][T11597] ? __lock_acquire+0x7d80/0x7d80 [ 554.739225][T11597] ? net_generic+0x1e/0x240 [ 554.743792][T11597] ? down_read+0x1ac/0x2e0 [ 554.748249][T11597] genl_rcv+0x28/0x40 [ 554.752275][T11597] netlink_unicast+0x7b1/0x930 [ 554.757109][T11597] netlink_sendmsg+0x8d0/0xbf0 [ 554.761909][T11597] ? aa_sock_msg_perm+0x94/0x150 [ 554.766881][T11597] ? netlink_getsockopt+0x590/0x590 [ 554.772110][T11597] ? apparmor_socket_sendmsg+0x8e/0x330 [ 554.777690][T11597] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 554.783010][T11597] ? security_socket_sendmsg+0x80/0xa0 [ 554.788495][T11597] ? netlink_getsockopt+0x590/0x590 [ 554.793724][T11597] ____sys_sendmsg+0x61b/0x980 [ 554.798525][T11597] ? __asan_memset+0x22/0x40 [ 554.803151][T11597] ? __sys_sendmsg_sock+0x30/0x30 [ 554.808213][T11597] ? __import_iovec+0x5f2/0x850 [ 554.813115][T11597] ? import_iovec+0x73/0xa0 [ 554.817664][T11597] ___sys_sendmsg+0x2a6/0x360 [ 554.822379][T11597] ? __sys_sendmsg+0x2b0/0x2b0 [ 554.827194][T11597] ? ktime_get+0x7f/0x280 [ 554.831558][T11597] ? trace_call_bpf+0xc3/0x6c0 [ 554.836371][T11597] __se_sys_sendmsg+0x1d0/0x2c0 [ 554.841280][T11597] ? perf_trace_preemptirq_template+0x269/0x330 [ 554.847579][T11597] ? __x64_sys_sendmsg+0x80/0x80 [ 554.852564][T11597] ? lockdep_hardirqs_on+0x98/0x150 [ 554.857798][T11597] do_syscall_64+0x55/0xb0 [ 554.862251][T11597] ? clear_bhb_loop+0x40/0x90 [ 554.866962][T11597] ? clear_bhb_loop+0x40/0x90 [ 554.871723][T11597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.877656][T11597] RIP: 0033:0x7f057819e0d9 [ 554.882098][T11597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.901739][T11597] RSP: 002b:00007f0579042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.910194][T11597] RAX: ffffffffffffffda RBX: 00007f0578425fa0 RCX: 00007f057819e0d9 [ 554.918205][T11597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 554.926210][T11597] RBP: 00007f0578235024 R08: 0000000000000000 R09: 0000000000000000 [ 554.934218][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.942234][T11597] R13: 00007f0578426038 R14: 00007f0578425fa0 R15: 00007fffbe84b718 [ 554.950251][T11597] [ 555.053773][T11600] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2267'. [ 555.173329][T11600] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 555.200298][T11600] CPU: 0 PID: 11600 Comm: syz.3.2267 Not tainted syzkaller #0 [ 555.207859][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.217973][T11600] Call Trace: [ 555.221301][T11600] [ 555.224277][T11600] dump_stack_lvl+0x18c/0x250 [ 555.229051][T11600] ? show_regs_print_info+0x20/0x20 [ 555.234304][T11600] ? load_image+0x420/0x420 [ 555.238883][T11600] sysfs_warn_dup+0x8e/0xa0 [ 555.243452][T11600] sysfs_do_create_link_sd+0xc0/0x110 [ 555.248884][T11600] device_add_class_symlinks+0x1cf/0x240 [ 555.254577][T11600] device_add+0x4f9/0xc40 [ 555.258968][T11600] wiphy_register+0x1d99/0x2ac0 [ 555.263904][T11600] ? cfg80211_event_work+0x40/0x40 [ 555.269078][T11600] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.275314][T11600] ieee80211_register_hw+0x2dd8/0x3b30 [ 555.280848][T11600] ? ieee80211_register_hw+0xfb1/0x3b30 [ 555.286473][T11600] ? ieee80211_tasklet_handler+0x20/0x20 [ 555.292166][T11600] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 555.298132][T11600] ? __debug_object_init+0xec/0x450 [ 555.303396][T11600] ? __asan_memset+0x22/0x40 [ 555.308047][T11600] ? __hrtimer_init+0x189/0x270 [ 555.312959][T11600] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 555.318799][T11600] ? mac80211_hwsim_free+0x220/0x220 [ 555.324138][T11600] ? rcu_is_watching+0x15/0xb0 [ 555.328969][T11600] ? kstrndup+0xbd/0x140 [ 555.333283][T11600] hwsim_new_radio_nl+0xdad/0x1a70 [ 555.338452][T11600] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 555.344321][T11600] ? mark_lock+0x94/0x320 [ 555.348717][T11600] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 555.355111][T11600] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.361332][T11600] ? lockdep_hardirqs_on+0x98/0x150 [ 555.366599][T11600] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.372841][T11600] genl_family_rcv_msg_doit+0x21a/0x310 [ 555.378462][T11600] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 555.384426][T11600] ? bpf_lsm_capable+0x9/0x10 [ 555.389170][T11600] ? security_capable+0x89/0xb0 [ 555.394107][T11600] genl_rcv_msg+0x611/0x7a0 [ 555.398681][T11600] ? genl_bind+0x360/0x360 [ 555.403150][T11600] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 555.409560][T11600] netlink_rcv_skb+0x235/0x4c0 [ 555.414380][T11600] ? genl_bind+0x360/0x360 [ 555.418857][T11600] ? netlink_ack+0x1160/0x1160 [ 555.423724][T11600] ? __lock_acquire+0x7d80/0x7d80 [ 555.428821][T11600] ? down_read+0x1ac/0x2e0 [ 555.433299][T11600] genl_rcv+0x28/0x40 [ 555.437340][T11600] netlink_unicast+0x7b1/0x930 [ 555.442188][T11600] netlink_sendmsg+0x8d0/0xbf0 [ 555.447057][T11600] ? netlink_getsockopt+0x590/0x590 [ 555.452404][T11600] ? apparmor_socket_sendmsg+0x8e/0x330 [ 555.458011][T11600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.463364][T11600] ? security_socket_sendmsg+0x80/0xa0 [ 555.468877][T11600] ? netlink_getsockopt+0x590/0x590 [ 555.474141][T11600] ____sys_sendmsg+0x61b/0x980 [ 555.478988][T11600] ? __asan_memset+0x22/0x40 [ 555.483650][T11600] ? __sys_sendmsg_sock+0x30/0x30 [ 555.488729][T11600] ? __import_iovec+0x5f2/0x850 [ 555.493655][T11600] ? import_iovec+0x73/0xa0 [ 555.498228][T11600] ___sys_sendmsg+0x2a6/0x360 [ 555.502976][T11600] ? __sys_sendmsg+0x2b0/0x2b0 [ 555.507819][T11600] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 555.515294][T11600] __se_sys_sendmsg+0x1d0/0x2c0 [ 555.520224][T11600] ? perf_trace_preemptirq_template+0x269/0x330 [ 555.526556][T11600] ? __x64_sys_sendmsg+0x80/0x80 [ 555.531592][T11600] ? lockdep_hardirqs_on+0x98/0x150 [ 555.536986][T11600] do_syscall_64+0x55/0xb0 [ 555.541482][T11600] ? clear_bhb_loop+0x40/0x90 [ 555.546219][T11600] ? clear_bhb_loop+0x40/0x90 [ 555.550965][T11600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.556920][T11600] RIP: 0033:0x7fd95099e0d9 [ 555.561388][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.581101][T11600] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.589584][T11600] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 555.597611][T11600] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 555.605641][T11600] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 555.613663][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.621689][T11600] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 555.629741][T11600] [ 557.419384][T11608] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.708890][T11608] syzkaller0: entered promiscuous mode [ 557.739332][T11608] syzkaller0: entered allmulticast mode [ 558.756870][T11615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2272'. [ 560.306635][T11615] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 560.317859][T11615] CPU: 1 PID: 11615 Comm: syz.3.2272 Not tainted syzkaller #0 [ 560.325710][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.335818][T11615] Call Trace: [ 560.339144][T11615] [ 560.342128][T11615] dump_stack_lvl+0x18c/0x250 [ 560.346857][T11615] ? show_regs_print_info+0x20/0x20 [ 560.352100][T11615] ? load_image+0x420/0x420 [ 560.356695][T11615] sysfs_warn_dup+0x8e/0xa0 [ 560.361257][T11615] sysfs_do_create_link_sd+0xc0/0x110 [ 560.366684][T11615] device_add_class_symlinks+0x1cf/0x240 [ 560.372374][T11615] device_add+0x4f9/0xc40 [ 560.376780][T11615] wiphy_register+0x1d99/0x2ac0 [ 560.381735][T11615] ? cfg80211_event_work+0x40/0x40 [ 560.386911][T11615] ? minstrel_ht_alloc+0x88a/0x990 [ 560.392103][T11615] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 560.398247][T11615] ieee80211_register_hw+0x2dd8/0x3b30 [ 560.403782][T11615] ? ieee80211_register_hw+0xfb1/0x3b30 [ 560.409392][T11615] ? ieee80211_tasklet_handler+0x20/0x20 [ 560.415096][T11615] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 560.421067][T11615] ? __debug_object_init+0xec/0x450 [ 560.426339][T11615] ? __asan_memset+0x22/0x40 [ 560.431012][T11615] ? __hrtimer_init+0x189/0x270 [ 560.435931][T11615] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 560.441741][T11615] ? mac80211_hwsim_free+0x220/0x220 [ 560.447119][T11615] ? rcu_is_watching+0x15/0xb0 [ 560.451953][T11615] ? kstrndup+0xbd/0x140 [ 560.456276][T11615] hwsim_new_radio_nl+0xdad/0x1a70 [ 560.461463][T11615] ? mark_lock+0x94/0x320 [ 560.465868][T11615] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 560.472265][T11615] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.478481][T11615] ? lockdep_hardirqs_on+0x98/0x150 [ 560.483754][T11615] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 560.489992][T11615] ? hwsim_new_radio_nl+0x10/0x1a70 [ 560.495251][T11615] genl_family_rcv_msg_doit+0x21a/0x310 [ 560.500867][T11615] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 560.506834][T11615] ? bpf_lsm_capable+0x9/0x10 [ 560.511592][T11615] ? security_capable+0x89/0xb0 [ 560.516527][T11615] genl_rcv_msg+0x611/0x7a0 [ 560.521103][T11615] ? genl_bind+0x360/0x360 [ 560.525579][T11615] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 560.531974][T11615] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 560.538624][T11615] ? ref_tracker_free+0x686/0x830 [ 560.543734][T11615] netlink_rcv_skb+0x235/0x4c0 [ 560.548561][T11615] ? genl_bind+0x360/0x360 [ 560.553038][T11615] ? netlink_ack+0x1160/0x1160 [ 560.557873][T11615] ? __lock_acquire+0x7d80/0x7d80 [ 560.562970][T11615] ? down_read+0x1ac/0x2e0 [ 560.567452][T11615] genl_rcv+0x28/0x40 [ 560.571520][T11615] netlink_unicast+0x7b1/0x930 [ 560.576373][T11615] netlink_sendmsg+0x8d0/0xbf0 [ 560.581202][T11615] ? netlink_getsockopt+0x590/0x590 [ 560.586456][T11615] ? apparmor_socket_sendmsg+0x8e/0x330 [ 560.592066][T11615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 560.597418][T11615] ? security_socket_sendmsg+0x80/0xa0 [ 560.602936][T11615] ? netlink_getsockopt+0x590/0x590 [ 560.608197][T11615] ____sys_sendmsg+0x61b/0x980 [ 560.613033][T11615] ? __asan_memset+0x22/0x40 [ 560.617690][T11615] ? __sys_sendmsg_sock+0x30/0x30 [ 560.622794][T11615] ? __import_iovec+0x5f2/0x850 [ 560.627749][T11615] ? import_iovec+0x73/0xa0 [ 560.632330][T11615] ___sys_sendmsg+0x2a6/0x360 [ 560.637083][T11615] ? __sys_sendmsg+0x2b0/0x2b0 [ 560.641980][T11615] __se_sys_sendmsg+0x1d0/0x2c0 [ 560.646896][T11615] ? __x64_sys_sendmsg+0x80/0x80 [ 560.651918][T11615] ? syscall_enter_from_user_mode+0x2e/0x80 [ 560.657884][T11615] do_syscall_64+0x55/0xb0 [ 560.662365][T11615] ? clear_bhb_loop+0x40/0x90 [ 560.667097][T11615] ? clear_bhb_loop+0x40/0x90 [ 560.671820][T11615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.677753][T11615] RIP: 0033:0x7fd95099e0d9 [ 560.682208][T11615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.701857][T11615] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.710311][T11615] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 560.718323][T11615] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 560.726338][T11615] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 560.734348][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.742359][T11615] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 560.750388][T11615] [ 560.765228][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 561.461105][T11630] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2277'. [ 561.582887][T11630] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 561.629636][T11630] CPU: 0 PID: 11630 Comm: syz.0.2277 Not tainted syzkaller #0 [ 561.637232][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.647352][T11630] Call Trace: [ 561.650685][T11630] [ 561.653665][T11630] dump_stack_lvl+0x18c/0x250 [ 561.658410][T11630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.664632][T11630] ? show_regs_print_info+0x20/0x20 [ 561.669915][T11630] ? _printk+0x11d/0x130 [ 561.674262][T11630] sysfs_warn_dup+0x8e/0xa0 [ 561.678904][T11630] sysfs_do_create_link_sd+0xc0/0x110 [ 561.684336][T11630] device_add_class_symlinks+0x1cf/0x240 [ 561.690040][T11630] device_add+0x4f9/0xc40 [ 561.694436][T11630] wiphy_register+0x1d99/0x2ac0 [ 561.699379][T11630] ? cfg80211_event_work+0x40/0x40 [ 561.704553][T11630] ? minstrel_ht_alloc+0x88a/0x990 [ 561.709748][T11630] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 561.715880][T11630] ieee80211_register_hw+0x2dd8/0x3b30 [ 561.721421][T11630] ? ieee80211_register_hw+0xfb1/0x3b30 [ 561.727121][T11630] ? ieee80211_tasklet_handler+0x20/0x20 [ 561.732813][T11630] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 561.738796][T11630] ? __debug_object_init+0xec/0x450 [ 561.744064][T11630] ? __asan_memset+0x22/0x40 [ 561.748725][T11630] ? __hrtimer_init+0x189/0x270 [ 561.753627][T11630] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 561.759423][T11630] ? mac80211_hwsim_free+0x220/0x220 [ 561.764750][T11630] ? rcu_is_watching+0x15/0xb0 [ 561.769553][T11630] ? kstrndup+0xbd/0x140 [ 561.773852][T11630] hwsim_new_radio_nl+0xdad/0x1a70 [ 561.779006][T11630] ? mark_lock+0x94/0x320 [ 561.783386][T11630] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 561.789767][T11630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.795974][T11630] ? lockdep_hardirqs_on+0x98/0x150 [ 561.801219][T11630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 561.807521][T11630] genl_family_rcv_msg_doit+0x21a/0x310 [ 561.813113][T11630] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 561.819054][T11630] ? bpf_lsm_capable+0x9/0x10 [ 561.823815][T11630] ? security_capable+0x89/0xb0 [ 561.828797][T11630] genl_rcv_msg+0x611/0x7a0 [ 561.833348][T11630] ? genl_bind+0x360/0x360 [ 561.837821][T11630] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 561.844204][T11630] netlink_rcv_skb+0x235/0x4c0 [ 561.849002][T11630] ? genl_bind+0x360/0x360 [ 561.853458][T11630] ? netlink_ack+0x1160/0x1160 [ 561.858267][T11630] ? __lock_acquire+0x7d80/0x7d80 [ 561.863334][T11630] ? net_generic+0x1e/0x240 [ 561.867890][T11630] ? down_read+0x1ac/0x2e0 [ 561.872387][T11630] genl_rcv+0x28/0x40 [ 561.876453][T11630] netlink_unicast+0x7b1/0x930 [ 561.881292][T11630] netlink_sendmsg+0x8d0/0xbf0 [ 561.886109][T11630] ? netlink_getsockopt+0x590/0x590 [ 561.891363][T11630] ? apparmor_socket_sendmsg+0x8e/0x330 [ 561.896968][T11630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.902295][T11630] ? security_socket_sendmsg+0x80/0xa0 [ 561.907793][T11630] ? netlink_getsockopt+0x590/0x590 [ 561.913024][T11630] ____sys_sendmsg+0x61b/0x980 [ 561.917843][T11630] ? __asan_memset+0x22/0x40 [ 561.922486][T11630] ? __sys_sendmsg_sock+0x30/0x30 [ 561.927575][T11630] ? __import_iovec+0x5f2/0x850 [ 561.932494][T11630] ? import_iovec+0x73/0xa0 [ 561.937040][T11630] ___sys_sendmsg+0x2a6/0x360 [ 561.941765][T11630] ? __sys_sendmsg+0x2b0/0x2b0 [ 561.946620][T11630] __se_sys_sendmsg+0x1d0/0x2c0 [ 561.951516][T11630] ? __x64_sys_sendmsg+0x80/0x80 [ 561.956500][T11630] ? syscall_enter_from_user_mode+0x2e/0x80 [ 561.962461][T11630] do_syscall_64+0x55/0xb0 [ 561.966913][T11630] ? clear_bhb_loop+0x40/0x90 [ 561.971632][T11630] ? clear_bhb_loop+0x40/0x90 [ 561.976347][T11630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.982276][T11630] RIP: 0033:0x7f81be99e0d9 [ 561.986750][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.006515][T11630] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.015108][T11630] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 562.023144][T11630] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 562.031157][T11630] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 562.039169][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.047180][T11630] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 562.055200][T11630] [ 563.000567][T11645] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2284'. [ 563.156112][T11645] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 563.209330][T11645] CPU: 0 PID: 11645 Comm: syz.2.2284 Not tainted syzkaller #0 [ 563.216889][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.227015][T11645] Call Trace: [ 563.230354][T11645] [ 563.233334][T11645] dump_stack_lvl+0x18c/0x250 [ 563.238085][T11645] ? show_regs_print_info+0x20/0x20 [ 563.243344][T11645] ? load_image+0x420/0x420 [ 563.247934][T11645] sysfs_warn_dup+0x8e/0xa0 [ 563.252501][T11645] sysfs_do_create_link_sd+0xc0/0x110 [ 563.257947][T11645] device_add_class_symlinks+0x1cf/0x240 [ 563.263666][T11645] device_add+0x4f9/0xc40 [ 563.268074][T11645] wiphy_register+0x1d99/0x2ac0 [ 563.273020][T11645] ? lock_chain_count+0x20/0x20 [ 563.278058][T11645] ? cfg80211_event_work+0x40/0x40 [ 563.283236][T11645] ? ieee80211_register_hw+0x29b1/0x3b30 [ 563.288934][T11645] ? ieee80211_register_hw+0x2b38/0x3b30 [ 563.294651][T11645] ? kasan_check_range+0x41/0x290 [ 563.299757][T11645] ieee80211_register_hw+0x2dd8/0x3b30 [ 563.305293][T11645] ? ieee80211_register_hw+0xfb1/0x3b30 [ 563.310915][T11645] ? ieee80211_tasklet_handler+0x20/0x20 [ 563.316602][T11645] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 563.322669][T11645] ? __debug_object_init+0xec/0x450 [ 563.327948][T11645] ? __asan_memset+0x22/0x40 [ 563.332627][T11645] ? __hrtimer_init+0x189/0x270 [ 563.337527][T11645] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 563.343309][T11645] ? mac80211_hwsim_free+0x220/0x220 [ 563.348641][T11645] hwsim_new_radio_nl+0xdad/0x1a70 [ 563.353801][T11645] ? __nla_validate+0x50/0x50 [ 563.358528][T11645] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 563.364907][T11645] ? __nla_parse+0x40/0x50 [ 563.369374][T11645] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 563.375748][T11645] genl_family_rcv_msg_doit+0x21a/0x310 [ 563.381341][T11645] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 563.387275][T11645] ? bpf_lsm_capable+0x9/0x10 [ 563.391999][T11645] ? security_capable+0x89/0xb0 [ 563.396902][T11645] genl_rcv_msg+0x611/0x7a0 [ 563.401455][T11645] ? genl_bind+0x360/0x360 [ 563.405905][T11645] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 563.412294][T11645] ? perf_trace_lock+0xfc/0x3b0 [ 563.417186][T11645] netlink_rcv_skb+0x235/0x4c0 [ 563.422000][T11645] ? genl_bind+0x360/0x360 [ 563.426475][T11645] ? netlink_ack+0x1160/0x1160 [ 563.431298][T11645] ? __lock_acquire+0x7d80/0x7d80 [ 563.436399][T11645] ? down_read+0x1ac/0x2e0 [ 563.440866][T11645] genl_rcv+0x28/0x40 [ 563.444885][T11645] netlink_unicast+0x7b1/0x930 [ 563.449707][T11645] netlink_sendmsg+0x8d0/0xbf0 [ 563.454516][T11645] ? lockdep_hardirqs_on+0x98/0x150 [ 563.459756][T11645] ? netlink_getsockopt+0x590/0x590 [ 563.465027][T11645] ? netlink_getsockopt+0x590/0x590 [ 563.470264][T11645] ? netlink_getsockopt+0x590/0x590 [ 563.475505][T11645] ____sys_sendmsg+0x61b/0x980 [ 563.480305][T11645] ? lockdep_hardirqs_on+0x98/0x150 [ 563.485550][T11645] ? __asan_memset+0x22/0x40 [ 563.490183][T11645] ? __sys_sendmsg_sock+0x30/0x30 [ 563.495240][T11645] ? __import_iovec+0x5f2/0x850 [ 563.500143][T11645] ? import_iovec+0x73/0xa0 [ 563.504697][T11645] ___sys_sendmsg+0x2a6/0x360 [ 563.509418][T11645] ? __sys_sendmsg+0x2b0/0x2b0 [ 563.514279][T11645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.520530][T11645] __se_sys_sendmsg+0x1d0/0x2c0 [ 563.525783][T11645] ? __x64_sys_sendmsg+0x80/0x80 [ 563.530783][T11645] ? syscall_enter_from_user_mode+0x2e/0x80 [ 563.536729][T11645] do_syscall_64+0x55/0xb0 [ 563.541180][T11645] ? clear_bhb_loop+0x40/0x90 [ 563.545886][T11645] ? clear_bhb_loop+0x40/0x90 [ 563.550629][T11645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.556560][T11645] RIP: 0033:0x7f2c5c79e0d9 [ 563.561007][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.580681][T11645] RSP: 002b:00007f2c5d58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.589142][T11645] RAX: ffffffffffffffda RBX: 00007f2c5ca25fa0 RCX: 00007f2c5c79e0d9 [ 563.597153][T11645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 563.605161][T11645] RBP: 00007f2c5c835024 R08: 0000000000000000 R09: 0000000000000000 [ 563.613167][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.621634][T11645] R13: 00007f2c5ca26038 R14: 00007f2c5ca25fa0 R15: 00007ffe1b8670f8 [ 563.629678][T11645] [ 563.840199][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.846664][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.842820][T11668] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2293'. [ 567.081930][T11668] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 567.118069][T11668] CPU: 0 PID: 11668 Comm: syz.0.2293 Not tainted syzkaller #0 [ 567.125593][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.135710][T11668] Call Trace: [ 567.139027][T11668] [ 567.142007][T11668] dump_stack_lvl+0x18c/0x250 [ 567.146754][T11668] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.152973][T11668] ? show_regs_print_info+0x20/0x20 [ 567.158224][T11668] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.164450][T11668] ? dump_stack+0x9/0x20 [ 567.168766][T11668] sysfs_warn_dup+0x8e/0xa0 [ 567.173331][T11668] sysfs_do_create_link_sd+0xc0/0x110 [ 567.178764][T11668] device_add_class_symlinks+0x1cf/0x240 [ 567.184462][T11668] device_add+0x4f9/0xc40 [ 567.188858][T11668] wiphy_register+0x1d99/0x2ac0 [ 567.193808][T11668] ? cfg80211_event_work+0x40/0x40 [ 567.198981][T11668] ? minstrel_ht_alloc+0x88a/0x990 [ 567.204173][T11668] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 567.210315][T11668] ieee80211_register_hw+0x2dd8/0x3b30 [ 567.215852][T11668] ? ieee80211_register_hw+0xfb1/0x3b30 [ 567.221475][T11668] ? ieee80211_tasklet_handler+0x20/0x20 [ 567.227176][T11668] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 567.233153][T11668] ? __debug_object_init+0xec/0x450 [ 567.238440][T11668] ? __asan_memset+0x22/0x40 [ 567.243146][T11668] ? __hrtimer_init+0x189/0x270 [ 567.248071][T11668] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 567.253889][T11668] ? mac80211_hwsim_free+0x220/0x220 [ 567.259239][T11668] ? kstrndup+0xbd/0x140 [ 567.263566][T11668] hwsim_new_radio_nl+0xdad/0x1a70 [ 567.268741][T11668] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 567.274797][T11668] ? lock_chain_count+0x20/0x20 [ 567.279741][T11668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 567.286150][T11668] ? __nla_parse+0x40/0x50 [ 567.290641][T11668] ? __nla_parse+0x40/0x50 [ 567.295133][T11668] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 567.301546][T11668] genl_family_rcv_msg_doit+0x21a/0x310 [ 567.307163][T11668] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 567.313143][T11668] ? bpf_lsm_capable+0x9/0x10 [ 567.317950][T11668] ? security_capable+0x89/0xb0 [ 567.322885][T11668] genl_rcv_msg+0x611/0x7a0 [ 567.327466][T11668] ? genl_bind+0x360/0x360 [ 567.331980][T11668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 567.338395][T11668] netlink_rcv_skb+0x235/0x4c0 [ 567.343227][T11668] ? genl_bind+0x360/0x360 [ 567.347686][T11668] ? netlink_ack+0x1160/0x1160 [ 567.352503][T11668] ? down_read+0x1ac/0x2e0 [ 567.356983][T11668] genl_rcv+0x28/0x40 [ 567.361000][T11668] netlink_unicast+0x7b1/0x930 [ 567.365822][T11668] netlink_sendmsg+0x8d0/0xbf0 [ 567.370627][T11668] ? lockdep_hardirqs_on+0x98/0x150 [ 567.375883][T11668] ? netlink_getsockopt+0x590/0x590 [ 567.381122][T11668] ? security_socket_sendmsg+0x45/0xa0 [ 567.386619][T11668] ? security_socket_sendmsg+0x80/0xa0 [ 567.392107][T11668] ? netlink_getsockopt+0x590/0x590 [ 567.397352][T11668] ____sys_sendmsg+0x61b/0x980 [ 567.402144][T11668] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.408339][T11668] ? __asan_memset+0x22/0x40 [ 567.412965][T11668] ? __sys_sendmsg_sock+0x30/0x30 [ 567.418021][T11668] ? __import_iovec+0x5f2/0x850 [ 567.422916][T11668] ? import_iovec+0x73/0xa0 [ 567.427459][T11668] ___sys_sendmsg+0x2a6/0x360 [ 567.432186][T11668] ? __sys_sendmsg+0x2b0/0x2b0 [ 567.437034][T11668] __se_sys_sendmsg+0x1d0/0x2c0 [ 567.441920][T11668] ? __x64_sys_sendmsg+0x80/0x80 [ 567.446903][T11668] ? syscall_enter_from_user_mode+0x2e/0x80 [ 567.452837][T11668] do_syscall_64+0x55/0xb0 [ 567.457286][T11668] ? clear_bhb_loop+0x40/0x90 [ 567.461994][T11668] ? clear_bhb_loop+0x40/0x90 [ 567.466736][T11668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.472667][T11668] RIP: 0033:0x7f81be99e0d9 [ 567.477116][T11668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.496774][T11668] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.505234][T11668] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 567.513242][T11668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 567.521429][T11668] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 567.529617][T11668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.537619][T11668] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 567.545642][T11668] [ 570.029432][T11681] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2296'. [ 570.126266][T11681] netlink: 'syz.2.2296': attribute type 10 has an invalid length. [ 570.143502][T11681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2296'. [ 570.173081][T11681] dummy0: entered promiscuous mode [ 570.178645][T11681] dummy0: entered allmulticast mode [ 570.193942][T11681] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 570.233313][T11686] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 570.241907][T11686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2297'. [ 570.297295][T11685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2300'. [ 570.335168][T11686] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 570.408303][T11685] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 570.433978][T11685] CPU: 0 PID: 11685 Comm: syz.3.2300 Not tainted syzkaller #0 [ 570.441546][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.451695][T11685] Call Trace: [ 570.455030][T11685] [ 570.458009][T11685] dump_stack_lvl+0x18c/0x250 [ 570.462752][T11685] ? show_regs_print_info+0x20/0x20 [ 570.468018][T11685] ? load_image+0x420/0x420 [ 570.472646][T11685] sysfs_warn_dup+0x8e/0xa0 [ 570.477213][T11685] sysfs_do_create_link_sd+0xc0/0x110 [ 570.482653][T11685] device_add_class_symlinks+0x1cf/0x240 [ 570.488363][T11685] device_add+0x4f9/0xc40 [ 570.492780][T11685] wiphy_register+0x1d99/0x2ac0 [ 570.497730][T11685] ? cfg80211_event_work+0x40/0x40 [ 570.502936][T11685] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 570.509080][T11685] ieee80211_register_hw+0x2dd8/0x3b30 [ 570.514613][T11685] ? ieee80211_register_hw+0xfb1/0x3b30 [ 570.520334][T11685] ? ieee80211_tasklet_handler+0x20/0x20 [ 570.526038][T11685] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 570.532007][T11685] ? __debug_object_init+0xec/0x450 [ 570.537273][T11685] ? __asan_memset+0x22/0x40 [ 570.541934][T11685] ? __hrtimer_init+0x189/0x270 [ 570.546847][T11685] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 570.552682][T11685] ? mac80211_hwsim_free+0x220/0x220 [ 570.558015][T11685] ? rcu_is_watching+0x15/0xb0 [ 570.562824][T11685] ? kstrndup+0xbd/0x140 [ 570.567113][T11685] hwsim_new_radio_nl+0xdad/0x1a70 [ 570.572266][T11685] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 570.578295][T11685] ? lock_chain_count+0x20/0x20 [ 570.583193][T11685] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 570.589563][T11685] ? __nla_parse+0x40/0x50 [ 570.594028][T11685] ? __nla_parse+0x40/0x50 [ 570.598485][T11685] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 570.604854][T11685] genl_family_rcv_msg_doit+0x21a/0x310 [ 570.610438][T11685] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 570.616368][T11685] ? bpf_lsm_capable+0x9/0x10 [ 570.621083][T11685] ? security_capable+0x89/0xb0 [ 570.625969][T11685] genl_rcv_msg+0x611/0x7a0 [ 570.630513][T11685] ? genl_bind+0x360/0x360 [ 570.634958][T11685] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 570.641323][T11685] ? lockdep_hardirqs_on+0x98/0x150 [ 570.646566][T11685] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 570.652761][T11685] netlink_rcv_skb+0x235/0x4c0 [ 570.657566][T11685] ? genl_bind+0x360/0x360 [ 570.662036][T11685] ? netlink_ack+0x1160/0x1160 [ 570.666842][T11685] ? __lock_acquire+0x7d80/0x7d80 [ 570.671919][T11685] ? down_read+0x1ac/0x2e0 [ 570.676376][T11685] genl_rcv+0x28/0x40 [ 570.680386][T11685] netlink_unicast+0x7b1/0x930 [ 570.685198][T11685] netlink_sendmsg+0x8d0/0xbf0 [ 570.690006][T11685] ? lockdep_hardirqs_on+0x98/0x150 [ 570.695255][T11685] ? netlink_getsockopt+0x590/0x590 [ 570.700490][T11685] ? netlink_getsockopt+0x590/0x590 [ 570.705807][T11685] ? netlink_getsockopt+0x590/0x590 [ 570.711037][T11685] ____sys_sendmsg+0x61b/0x980 [ 570.715839][T11685] ? __asan_memset+0x22/0x40 [ 570.720476][T11685] ? __sys_sendmsg_sock+0x30/0x30 [ 570.725538][T11685] ? __import_iovec+0x5f2/0x850 [ 570.730431][T11685] ? import_iovec+0x73/0xa0 [ 570.734972][T11685] ___sys_sendmsg+0x2a6/0x360 [ 570.739698][T11685] ? __sys_sendmsg+0x2b0/0x2b0 [ 570.744588][T11685] __se_sys_sendmsg+0x1d0/0x2c0 [ 570.749478][T11685] ? __x64_sys_sendmsg+0x80/0x80 [ 570.754460][T11685] ? syscall_enter_from_user_mode+0x2e/0x80 [ 570.760400][T11685] do_syscall_64+0x55/0xb0 [ 570.764851][T11685] ? clear_bhb_loop+0x40/0x90 [ 570.769566][T11685] ? clear_bhb_loop+0x40/0x90 [ 570.774281][T11685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.780239][T11685] RIP: 0033:0x7fd95099e0d9 [ 570.784686][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.804327][T11685] RSP: 002b:00007fd951799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.812784][T11685] RAX: ffffffffffffffda RBX: 00007fd950c25fa0 RCX: 00007fd95099e0d9 [ 570.820791][T11685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 570.828790][T11685] RBP: 00007fd950a35024 R08: 0000000000000000 R09: 0000000000000000 [ 570.836798][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.844798][T11685] R13: 00007fd950c26038 R14: 00007fd950c25fa0 R15: 00007fff07f4b3a8 [ 570.852811][T11685] [ 571.533950][ T51] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 571.717918][T11707] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2308'. [ 572.137715][T11707] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 572.174247][T11707] CPU: 0 PID: 11707 Comm: syz.0.2308 Not tainted syzkaller #0 [ 572.181805][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.191924][T11707] Call Trace: [ 572.195263][T11707] [ 572.198253][T11707] dump_stack_lvl+0x18c/0x250 [ 572.203000][T11707] ? show_regs_print_info+0x20/0x20 [ 572.208264][T11707] ? load_image+0x420/0x420 [ 572.212853][T11707] sysfs_warn_dup+0x8e/0xa0 [ 572.217412][T11707] sysfs_do_create_link_sd+0xc0/0x110 [ 572.222844][T11707] device_add_class_symlinks+0x1cf/0x240 [ 572.228550][T11707] device_add+0x4f9/0xc40 [ 572.232955][T11707] wiphy_register+0x1d99/0x2ac0 [ 572.237905][T11707] ? cfg80211_event_work+0x40/0x40 [ 572.243077][T11707] ? minstrel_ht_alloc+0x88a/0x990 [ 572.248250][T11707] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 572.254378][T11707] ieee80211_register_hw+0x2dd8/0x3b30 [ 572.259914][T11707] ? ieee80211_register_hw+0xfb1/0x3b30 [ 572.265538][T11707] ? ieee80211_tasklet_handler+0x20/0x20 [ 572.271229][T11707] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 572.277286][T11707] ? __debug_object_init+0xec/0x450 [ 572.282564][T11707] ? __asan_memset+0x22/0x40 [ 572.287229][T11707] ? __hrtimer_init+0x189/0x270 [ 572.292148][T11707] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 572.297965][T11707] ? mac80211_hwsim_free+0x220/0x220 [ 572.303322][T11707] ? kstrndup+0xf0/0x140 [ 572.307638][T11707] hwsim_new_radio_nl+0xdad/0x1a70 [ 572.312831][T11707] ? __nla_validate+0x50/0x50 [ 572.317597][T11707] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 572.324011][T11707] ? __nla_parse+0x40/0x50 [ 572.328511][T11707] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 572.334914][T11707] genl_family_rcv_msg_doit+0x21a/0x310 [ 572.340630][T11707] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 572.346591][T11707] ? bpf_lsm_capable+0x9/0x10 [ 572.351326][T11707] ? security_capable+0x89/0xb0 [ 572.356236][T11707] genl_rcv_msg+0x611/0x7a0 [ 572.360806][T11707] ? genl_bind+0x360/0x360 [ 572.365268][T11707] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 572.371658][T11707] netlink_rcv_skb+0x235/0x4c0 [ 572.376474][T11707] ? genl_bind+0x360/0x360 [ 572.380955][T11707] ? netlink_ack+0x1160/0x1160 [ 572.385780][T11707] ? __lock_acquire+0x7d80/0x7d80 [ 572.390867][T11707] ? down_read+0x1ac/0x2e0 [ 572.395335][T11707] genl_rcv+0x28/0x40 [ 572.399366][T11707] netlink_unicast+0x7b1/0x930 [ 572.404193][T11707] netlink_sendmsg+0x8d0/0xbf0 [ 572.409011][T11707] ? netlink_getsockopt+0x590/0x590 [ 572.414255][T11707] ? apparmor_socket_sendmsg+0x8e/0x330 [ 572.419883][T11707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 572.425236][T11707] ? security_socket_sendmsg+0x80/0xa0 [ 572.430741][T11707] ? netlink_getsockopt+0x590/0x590 [ 572.435990][T11707] ____sys_sendmsg+0x61b/0x980 [ 572.440811][T11707] ? __asan_memset+0x22/0x40 [ 572.445453][T11707] ? __sys_sendmsg_sock+0x30/0x30 [ 572.450519][T11707] ? __import_iovec+0x5f2/0x850 [ 572.455426][T11707] ? import_iovec+0x73/0xa0 [ 572.459987][T11707] ___sys_sendmsg+0x2a6/0x360 [ 572.464722][T11707] ? __sys_sendmsg+0x2b0/0x2b0 [ 572.469586][T11707] __se_sys_sendmsg+0x1d0/0x2c0 [ 572.474489][T11707] ? __x64_sys_sendmsg+0x80/0x80 [ 572.479492][T11707] ? syscall_enter_from_user_mode+0x2e/0x80 [ 572.485447][T11707] do_syscall_64+0x55/0xb0 [ 572.489914][T11707] ? clear_bhb_loop+0x40/0x90 [ 572.494642][T11707] ? clear_bhb_loop+0x40/0x90 [ 572.499373][T11707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.505312][T11707] RIP: 0033:0x7f81be99e0d9 [ 572.509773][T11707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.529424][T11707] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.537926][T11707] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 572.545977][T11707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 572.553993][T11707] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 572.562006][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.570047][T11707] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 572.578084][T11707] [ 575.075640][T11721] netlink: 'syz.2.2312': attribute type 4 has an invalid length. [ 575.087644][T11721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2312'. [ 575.103289][T11719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2311'. [ 575.175949][T11719] netlink: 'syz.0.2311': attribute type 10 has an invalid length. [ 575.186082][T11719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2311'. [ 575.213188][T11719] dummy0: entered promiscuous mode [ 575.218651][T11719] dummy0: entered allmulticast mode [ 575.271894][T11719] bridge0: port 3(dummy0) entered blocking state [ 575.294385][T11719] bridge0: port 3(dummy0) entered disabled state [ 575.377370][T11719] bridge0: port 3(dummy0) entered blocking state [ 575.385528][T11719] bridge0: port 3(dummy0) entered forwarding state [ 575.950429][ T51] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 576.059976][T11740] netlink: 'syz.3.2319': attribute type 6 has an invalid length. [ 576.089346][T11740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2319'. [ 576.404525][T11745] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2321'. [ 576.488642][T11745] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 576.504362][T11745] CPU: 0 PID: 11745 Comm: syz.0.2321 Not tainted syzkaller #0 [ 576.511933][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.522047][T11745] Call Trace: [ 576.525376][T11745] [ 576.528350][T11745] dump_stack_lvl+0x18c/0x250 [ 576.533114][T11745] ? show_regs_print_info+0x20/0x20 [ 576.538387][T11745] ? load_image+0x420/0x420 [ 576.542984][T11745] sysfs_warn_dup+0x8e/0xa0 [ 576.547553][T11745] sysfs_do_create_link_sd+0xc0/0x110 [ 576.552992][T11745] device_add_class_symlinks+0x1cf/0x240 [ 576.558692][T11745] device_add+0x4f9/0xc40 [ 576.563091][T11745] wiphy_register+0x1d99/0x2ac0 [ 576.568035][T11745] ? cfg80211_event_work+0x40/0x40 [ 576.573208][T11745] ? minstrel_ht_alloc+0x88a/0x990 [ 576.578420][T11745] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 576.584593][T11745] ieee80211_register_hw+0x2dd8/0x3b30 [ 576.590088][T11745] ? ieee80211_register_hw+0xfb1/0x3b30 [ 576.595665][T11745] ? ieee80211_tasklet_handler+0x20/0x20 [ 576.601330][T11745] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 576.607294][T11745] ? __debug_object_init+0xec/0x450 [ 576.612555][T11745] ? __asan_memset+0x22/0x40 [ 576.617201][T11745] ? __hrtimer_init+0x189/0x270 [ 576.622097][T11745] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 576.627898][T11745] ? mac80211_hwsim_free+0x220/0x220 [ 576.633221][T11745] hwsim_new_radio_nl+0xdad/0x1a70 [ 576.638376][T11745] ? __nla_validate+0x50/0x50 [ 576.643137][T11745] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 576.649549][T11745] ? __nla_parse+0x40/0x50 [ 576.654032][T11745] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 576.660427][T11745] genl_family_rcv_msg_doit+0x21a/0x310 [ 576.666096][T11745] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 576.672072][T11745] ? bpf_lsm_capable+0x9/0x10 [ 576.676814][T11745] ? security_capable+0x89/0xb0 [ 576.681739][T11745] genl_rcv_msg+0x611/0x7a0 [ 576.686307][T11745] ? genl_bind+0x360/0x360 [ 576.690776][T11745] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 576.697164][T11745] ? mark_lock+0x94/0x320 [ 576.701568][T11745] netlink_rcv_skb+0x235/0x4c0 [ 576.706510][T11745] ? genl_bind+0x360/0x360 [ 576.710992][T11745] ? netlink_ack+0x1160/0x1160 [ 576.715815][T11745] ? lockdep_hardirqs_on+0x98/0x150 [ 576.721100][T11745] ? kasan_check_range+0x8f/0x290 [ 576.726208][T11745] ? down_read+0x1ac/0x2e0 [ 576.730687][T11745] genl_rcv+0x28/0x40 [ 576.734731][T11745] netlink_unicast+0x7b1/0x930 [ 576.739578][T11745] netlink_sendmsg+0x8d0/0xbf0 [ 576.744421][T11745] ? netlink_getsockopt+0x590/0x590 [ 576.749689][T11745] ? apparmor_socket_sendmsg+0x8e/0x330 [ 576.755294][T11745] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.760639][T11745] ? security_socket_sendmsg+0x80/0xa0 [ 576.766149][T11745] ? netlink_getsockopt+0x590/0x590 [ 576.771397][T11745] ____sys_sendmsg+0x61b/0x980 [ 576.776222][T11745] ? __asan_memset+0x22/0x40 [ 576.780866][T11745] ? __sys_sendmsg_sock+0x30/0x30 [ 576.785930][T11745] ? __import_iovec+0x5f2/0x850 [ 576.790844][T11745] ? import_iovec+0x73/0xa0 [ 576.795401][T11745] ___sys_sendmsg+0x2a6/0x360 [ 576.800143][T11745] ? __sys_sendmsg+0x2b0/0x2b0 [ 576.805014][T11745] __se_sys_sendmsg+0x1d0/0x2c0 [ 576.809911][T11745] ? __x64_sys_sendmsg+0x80/0x80 [ 576.814915][T11745] ? syscall_enter_from_user_mode+0x2e/0x80 [ 576.820875][T11745] do_syscall_64+0x55/0xb0 [ 576.825336][T11745] ? clear_bhb_loop+0x40/0x90 [ 576.830059][T11745] ? clear_bhb_loop+0x40/0x90 [ 576.834790][T11745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.840729][T11745] RIP: 0033:0x7f81be99e0d9 [ 576.845190][T11745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.864849][T11745] RSP: 002b:00007f81bf93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.873320][T11745] RAX: ffffffffffffffda RBX: 00007f81bec25fa0 RCX: 00007f81be99e0d9 [ 576.883081][T11745] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 576.891134][T11745] RBP: 00007f81bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 576.899158][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.907178][T11745] R13: 00007f81bec26038 R14: 00007f81bec25fa0 R15: 00007fff32cdf5c8 [ 576.915222][T11745] [ 577.324270][ T3487] wlan1: Trigger new scan to find an IBSS to join [ 577.416942][T11757] netlink: 'syz.1.2325': attribute type 4 has an invalid length. [ 577.438318][T11757] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2325'. [ 578.048940][ T12] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 578.063982][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 578.094773][ T3544] ------------[ cut here ]------------ [ 578.101479][ T3544] WARNING: CPU: 0 PID: 3544 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 578.111648][ T3544] Modules linked in: [ 578.115612][ T3544] CPU: 0 PID: 3544 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 578.123355][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.133573][ T3544] Workqueue: cfg80211 cfg80211_event_work [ 578.139476][ T3544] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 578.145712][ T3544] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 578.165562][ T3544] RSP: 0018:ffffc9000d0d7a40 EFLAGS: 00010293 [ 578.171925][ T3544] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88802e3e5a00 [ 578.180086][ T3544] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 578.188127][ T3544] RBP: ffffc9000d0d7af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 578.196287][ T3544] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d5d8d10 [ 578.204400][ T3544] R13: ffff88807df4b658 R14: 1ffff92001a1af4c R15: 000000000000001f [ 578.212495][ T3544] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 578.221861][ T3544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.228518][ T3544] CR2: 000000110c3377eb CR3: 000000001928c000 CR4: 00000000003506f0 [ 578.237141][ T3544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.245286][ T3544] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 578.253392][ T3544] Call Trace: [ 578.256745][ T3544] [ 578.260245][ T3544] ? trace_rdev_return_void+0x1c0/0x1c0 [ 578.266069][ T3544] cfg80211_process_wdev_events+0x396/0x500 [ 578.272303][ T3544] cfg80211_process_rdev_events+0xa1/0x110 [ 578.278219][ T3544] cfg80211_event_work+0x2f/0x40 [ 578.283300][ T3544] ? process_scheduled_works+0x975/0x1600 [ 578.289094][ T3544] process_scheduled_works+0xa60/0x1600 [ 578.294819][ T3544] ? worker_attach_to_pool+0x370/0x370 [ 578.300491][ T3544] ? assign_work+0x3cc/0x5d0 [ 578.305168][ T3544] worker_thread+0xa5e/0xfe0 [ 578.309897][ T3544] ? _raw_spin_unlock+0x40/0x40 [ 578.314821][ T3544] ? __kthread_parkme+0x71/0x1c0 [ 578.319931][ T3544] kthread+0x2fa/0x390 [ 578.324158][ T3544] ? pr_cont_work+0x550/0x550 [ 578.328913][ T3544] ? kthread_blkcg+0xd0/0xd0 [ 578.333630][ T3544] ret_from_fork+0x48/0x80 [ 578.338144][ T3544] ? kthread_blkcg+0xd0/0xd0 [ 578.342894][ T3544] ret_from_fork_asm+0x11/0x20 [ 578.347725][ T3544] [ 578.350848][ T3544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.358174][ T3544] CPU: 0 PID: 3544 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 578.365856][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.375957][ T3544] Workqueue: cfg80211 cfg80211_event_work [ 578.381736][ T3544] Call Trace: [ 578.385042][ T3544] [ 578.387995][ T3544] dump_stack_lvl+0x18c/0x250 [ 578.392733][ T3544] ? show_regs_print_info+0x20/0x20 [ 578.397976][ T3544] ? load_image+0x420/0x420 [ 578.402542][ T3544] panic+0x2ca/0x720 [ 578.406483][ T3544] ? bpf_jit_dump+0xd0/0xd0 [ 578.411032][ T3544] ? ret_from_fork_asm+0x11/0x20 [ 578.416011][ T3544] __warn+0x2e0/0x470 [ 578.420022][ T3544] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 578.425609][ T3544] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 578.431193][ T3544] report_bug+0x2be/0x4f0 [ 578.435621][ T3544] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 578.441200][ T3544] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 578.446776][ T3544] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 578.452363][ T3544] handle_bug+0xcf/0x120 [ 578.456637][ T3544] exc_invalid_op+0x1a/0x50 [ 578.461176][ T3544] asm_exc_invalid_op+0x1a/0x20 [ 578.466052][ T3544] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 578.472239][ T3544] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 578.491978][ T3544] RSP: 0018:ffffc9000d0d7a40 EFLAGS: 00010293 [ 578.498085][ T3544] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88802e3e5a00 [ 578.506093][ T3544] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 578.514093][ T3544] RBP: ffffc9000d0d7af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 578.522093][ T3544] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d5d8d10 [ 578.530089][ T3544] R13: ffff88807df4b658 R14: 1ffff92001a1af4c R15: 000000000000001f [ 578.538090][ T3544] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 578.543688][ T3544] ? trace_rdev_return_void+0x1c0/0x1c0 [ 578.549274][ T3544] cfg80211_process_wdev_events+0x396/0x500 [ 578.555206][ T3544] cfg80211_process_rdev_events+0xa1/0x110 [ 578.561050][ T3544] cfg80211_event_work+0x2f/0x40 [ 578.566045][ T3544] ? process_scheduled_works+0x975/0x1600 [ 578.571793][ T3544] process_scheduled_works+0xa60/0x1600 [ 578.577396][ T3544] ? worker_attach_to_pool+0x370/0x370 [ 578.582891][ T3544] ? assign_work+0x3cc/0x5d0 [ 578.587515][ T3544] worker_thread+0xa5e/0xfe0 [ 578.592168][ T3544] ? _raw_spin_unlock+0x40/0x40 [ 578.597045][ T3544] ? __kthread_parkme+0x71/0x1c0 [ 578.602021][ T3544] kthread+0x2fa/0x390 [ 578.606128][ T3544] ? pr_cont_work+0x550/0x550 [ 578.610874][ T3544] ? kthread_blkcg+0xd0/0xd0 [ 578.615512][ T3544] ret_from_fork+0x48/0x80 [ 578.619966][ T3544] ? kthread_blkcg+0xd0/0xd0 [ 578.624585][ T3544] ret_from_fork_asm+0x11/0x20 [ 578.629397][ T3544] [ 578.633025][ T3544] Kernel Offset: disabled [ 578.637438][ T3544] Rebooting in 86400 seconds..