last executing test programs: 29.624305824s ago: executing program 1 (id=11921): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x69) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) 29.340416221s ago: executing program 1 (id=11916): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/14, 0xe}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x15, 0xa, 0x3, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='FROZEN\x00', 0x7) 28.900146892s ago: executing program 2 (id=11917): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e724, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.954594526s ago: executing program 2 (id=11920): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x40010100) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 25.524730936s ago: executing program 2 (id=11922): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x18}, 0x0) close(r2) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 25.514717866s ago: executing program 1 (id=11923): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbffffffeff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x828, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x3, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000ac0)=[{0x0, 0x2, 0x6, 0xb}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0010000000000000000000000000000000004be8407f8ff40a8aff264475d70373890000", @ANYBLOB], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x7602, 0x8, 0x9202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000070000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x29, &(0x7f0000001880)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 21.532161955s ago: executing program 3 (id=11925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x143541, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 19.165279654s ago: executing program 3 (id=11926): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7ffffffffffffff}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, @perf_config_ext={0x9, 0x400}, 0xa100, 0xc8, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 18.325534705s ago: executing program 1 (id=11931): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000800000008000000c2", @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 18.310173235s ago: executing program 2 (id=11932): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}, 0xfa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/318], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="000000000000db5cb16a0000e5b428000000008fde004472d5690406aeba8500000084000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5], 0x40) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x12412, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17.72539064s ago: executing program 3 (id=11934): perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x2, 0xa, 0x9, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x7fffffff, 0xfffffffe, 0x40004}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 16.881600181s ago: executing program 1 (id=11936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) 15.533388404s ago: executing program 3 (id=11938): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8991, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 15.492484255s ago: executing program 1 (id=11939): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8990, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x340, r2}, 0x38) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)=r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41122000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.134066389s ago: executing program 3 (id=11940): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x80000001, r1, 0x4}, 0x38) 13.151741753s ago: executing program 3 (id=11941): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x18}, 0x0) close(r2) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.207407416s ago: executing program 2 (id=11948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) 3.405545636s ago: executing program 0 (id=11949): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x66, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.109072813s ago: executing program 2 (id=11950): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.458016449s ago: executing program 0 (id=11951): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 2.252173034s ago: executing program 0 (id=11952): close(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10044001) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=""/228}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0, 0x1}, 0x20, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x1003, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.114719388s ago: executing program 0 (id=11953): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8991, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 1.672547628s ago: executing program 0 (id=11954): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) perf_event_open(0x0, 0x0, 0xffffffbffffffeff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x828, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x7602, 0x8, 0x9202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.551675631s ago: executing program 0 (id=11955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x3b, 0x0, &(0x7f0000000380)="e46033c470d8d400eb00c15286dd11e6d2e4153f87564c0fa142a42b83f3eb460d0dcc2dda42dfb56499d49722cee4ce23d90b80fa2a3f132fcbd0", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 32 (id=11939): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8990, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x340, r2}, 0x38) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)=r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41122000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T9537] ____sys_sendmsg+0x61b/0x980 [ 2656.148820][ T9537] ? __asan_memset+0x22/0x40 [ 2656.153413][ T9537] ? __sys_sendmsg_sock+0x30/0x30 [ 2656.158436][ T9537] ? __import_iovec+0x5f2/0x850 [ 2656.163299][ T9537] ? import_iovec+0x73/0xa0 [ 2656.167837][ T9537] ___sys_sendmsg+0x2a6/0x360 [ 2656.172523][ T9537] ? __sys_sendmsg+0x2b0/0x2b0 [ 2656.177337][ T9537] __se_sys_sendmsg+0x1d0/0x2c0 [ 2656.182196][ T9537] ? __x64_sys_sendmsg+0x80/0x80 [ 2656.187154][ T9537] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2656.193063][ T9537] do_syscall_64+0x55/0xb0 [ 2656.197499][ T9537] ? clear_bhb_loop+0x40/0x90 [ 2656.202182][ T9537] ? clear_bhb_loop+0x40/0x90 [ 2656.206861][ T9537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2656.212757][ T9537] RIP: 0033:0x7ff9f819e159 [ 2656.217174][ T9537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2656.236785][ T9537] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2656.245202][ T9537] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2656.253173][ T9537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2656.261143][ T9537] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2656.269113][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2656.277085][ T9537] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2656.285078][ T9537] [ 2656.306981][ T9542] netlink: 'syz.1.11501': attribute type 4 has an invalid length. [ 2656.341405][ T9542] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11501'. [ 2656.567307][ T9546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11503'. [ 2656.652383][ T9546] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2656.676144][ T9546] CPU: 1 PID: 9546 Comm: syz.1.11503 Not tainted syzkaller #0 [ 2656.683679][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2656.693769][ T9546] Call Trace: [ 2656.697076][ T9546] [ 2656.700028][ T9546] dump_stack_lvl+0x18c/0x250 [ 2656.704746][ T9546] ? show_regs_print_info+0x20/0x20 [ 2656.709980][ T9546] ? load_image+0x420/0x420 [ 2656.714532][ T9546] sysfs_warn_dup+0x8e/0xa0 [ 2656.719073][ T9546] sysfs_do_create_link_sd+0xc0/0x110 [ 2656.724484][ T9546] device_add_class_symlinks+0x1cf/0x240 [ 2656.730148][ T9546] device_add+0x4f9/0xc40 [ 2656.734482][ T9546] wiphy_register+0x1d99/0x2ac0 [ 2656.739344][ T9546] ? cfg80211_event_work+0x40/0x40 [ 2656.744455][ T9546] ? minstrel_ht_alloc+0x88a/0x990 [ 2656.749564][ T9546] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2656.755653][ T9546] ieee80211_register_hw+0x2dd8/0x3b30 [ 2656.761160][ T9546] ? ieee80211_register_hw+0xf11/0x3b30 [ 2656.766747][ T9546] ? ieee80211_tasklet_handler+0x20/0x20 [ 2656.772406][ T9546] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2656.778337][ T9546] ? __debug_object_init+0xec/0x450 [ 2656.783566][ T9546] ? __asan_memset+0x22/0x40 [ 2656.788169][ T9546] ? __hrtimer_init+0x189/0x270 [ 2656.793029][ T9546] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2656.798773][ T9546] ? mac80211_hwsim_free+0x220/0x220 [ 2656.804062][ T9546] ? rcu_is_watching+0x15/0xb0 [ 2656.808840][ T9546] ? kstrndup+0xbd/0x140 [ 2656.813099][ T9546] hwsim_new_radio_nl+0xdad/0x1a70 [ 2656.818222][ T9546] ? __nla_validate+0x50/0x50 [ 2656.822927][ T9546] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2656.829267][ T9546] ? __nla_parse+0x24/0x50 [ 2656.833693][ T9546] ? __nla_parse+0x40/0x50 [ 2656.838150][ T9546] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2656.844496][ T9546] genl_family_rcv_msg_doit+0x21a/0x310 [ 2656.850058][ T9546] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2656.855969][ T9546] ? bpf_lsm_capable+0x9/0x10 [ 2656.860655][ T9546] ? security_capable+0x89/0xb0 [ 2656.865518][ T9546] genl_rcv_msg+0x611/0x7a0 [ 2656.870061][ T9546] ? genl_bind+0x360/0x360 [ 2656.874483][ T9546] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2656.880822][ T9546] ? lockdep_hardirqs_on+0x98/0x150 [ 2656.886036][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2656.892206][ T9546] netlink_rcv_skb+0x235/0x4c0 [ 2656.896976][ T9546] ? genl_bind+0x360/0x360 [ 2656.901402][ T9546] ? netlink_ack+0x1160/0x1160 [ 2656.906192][ T9546] ? __lock_acquire+0x7d80/0x7d80 [ 2656.911224][ T9546] ? net_generic+0x1e/0x240 [ 2656.915741][ T9546] ? down_read+0x1ac/0x2e0 [ 2656.920167][ T9546] genl_rcv+0x28/0x40 [ 2656.924161][ T9546] netlink_unicast+0x7b1/0x930 [ 2656.928941][ T9546] netlink_sendmsg+0x8d0/0xbf0 [ 2656.933719][ T9546] ? netlink_getsockopt+0x590/0x590 [ 2656.938945][ T9546] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2656.944503][ T9546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2656.949794][ T9546] ? security_socket_sendmsg+0x80/0xa0 [ 2656.955260][ T9546] ? netlink_getsockopt+0x590/0x590 [ 2656.960465][ T9546] ____sys_sendmsg+0x61b/0x980 [ 2656.965238][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2656.971407][ T9546] ? __asan_memset+0x22/0x40 [ 2656.976007][ T9546] ? __sys_sendmsg_sock+0x30/0x30 [ 2656.981034][ T9546] ? __import_iovec+0x5f2/0x850 [ 2656.985900][ T9546] ? import_iovec+0x73/0xa0 [ 2656.990502][ T9546] ___sys_sendmsg+0x2a6/0x360 [ 2656.995193][ T9546] ? __sys_sendmsg+0x2b0/0x2b0 [ 2657.000008][ T9546] __se_sys_sendmsg+0x1d0/0x2c0 [ 2657.004871][ T9546] ? __x64_sys_sendmsg+0x80/0x80 [ 2657.009831][ T9546] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2657.015738][ T9546] do_syscall_64+0x55/0xb0 [ 2657.020160][ T9546] ? clear_bhb_loop+0x40/0x90 [ 2657.024842][ T9546] ? clear_bhb_loop+0x40/0x90 [ 2657.029531][ T9546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2657.035440][ T9546] RIP: 0033:0x7f110779e159 [ 2657.039859][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2657.059469][ T9546] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2657.067900][ T9546] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2657.075881][ T9546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2657.083858][ T9546] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2657.091858][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2657.099834][ T9546] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2657.107834][ T9546] [ 2657.153212][ T9552] netlink: 'syz.3.11505': attribute type 6 has an invalid length. [ 2657.165251][ T9552] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11505'. [ 2657.596272][ T9554] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.11505'. [ 2657.663968][ T9554] netlink: 'syz.3.11505': attribute type 2 has an invalid length. [ 2657.678406][ T9560] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11508'. [ 2657.728401][ T9560] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2657.738269][ T9560] CPU: 1 PID: 9560 Comm: syz.0.11508 Not tainted syzkaller #0 [ 2657.745795][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2657.755884][ T9560] Call Trace: [ 2657.759171][ T9560] [ 2657.762105][ T9560] dump_stack_lvl+0x18c/0x250 [ 2657.766796][ T9560] ? show_regs_print_info+0x20/0x20 [ 2657.772036][ T9560] ? load_image+0x420/0x420 [ 2657.776564][ T9560] sysfs_warn_dup+0x8e/0xa0 [ 2657.781079][ T9560] sysfs_do_create_link_sd+0xc0/0x110 [ 2657.786459][ T9560] device_add_class_symlinks+0x1cf/0x240 [ 2657.792103][ T9560] device_add+0x4f9/0xc40 [ 2657.796437][ T9560] wiphy_register+0x1d99/0x2ac0 [ 2657.801313][ T9560] ? cfg80211_event_work+0x40/0x40 [ 2657.806430][ T9560] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2657.812600][ T9560] ? ieee80211_register_hw+0x2c1d/0x3b30 [ 2657.818245][ T9560] ieee80211_register_hw+0x2dd8/0x3b30 [ 2657.823729][ T9560] ? ieee80211_register_hw+0xf11/0x3b30 [ 2657.829301][ T9560] ? ieee80211_tasklet_handler+0x20/0x20 [ 2657.834939][ T9560] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2657.840847][ T9560] ? __debug_object_init+0xec/0x450 [ 2657.846091][ T9560] ? __asan_memset+0x22/0x40 [ 2657.850709][ T9560] ? __hrtimer_init+0x189/0x270 [ 2657.855576][ T9560] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2657.861443][ T9560] ? mac80211_hwsim_free+0x220/0x220 [ 2657.866825][ T9560] ? rcu_is_watching+0x15/0xb0 [ 2657.871601][ T9560] ? kstrndup+0xbd/0x140 [ 2657.875889][ T9560] hwsim_new_radio_nl+0xdad/0x1a70 [ 2657.881043][ T9560] ? mark_lock+0x94/0x320 [ 2657.885398][ T9560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2657.891741][ T9560] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2657.897902][ T9560] ? lockdep_hardirqs_on+0x98/0x150 [ 2657.903114][ T9560] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2657.909289][ T9560] genl_family_rcv_msg_doit+0x21a/0x310 [ 2657.914853][ T9560] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2657.920764][ T9560] ? bpf_lsm_capable+0x9/0x10 [ 2657.925464][ T9560] ? security_capable+0x89/0xb0 [ 2657.930326][ T9560] genl_rcv_msg+0x611/0x7a0 [ 2657.934842][ T9560] ? genl_bind+0x360/0x360 [ 2657.939264][ T9560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2657.945610][ T9560] netlink_rcv_skb+0x235/0x4c0 [ 2657.950378][ T9560] ? genl_bind+0x360/0x360 [ 2657.954806][ T9560] ? netlink_ack+0x1160/0x1160 [ 2657.959590][ T9560] ? __lock_acquire+0x7d80/0x7d80 [ 2657.964620][ T9560] ? net_generic+0x1e/0x240 [ 2657.969135][ T9560] ? down_read+0x1ac/0x2e0 [ 2657.973558][ T9560] genl_rcv+0x28/0x40 [ 2657.977541][ T9560] netlink_unicast+0x7b1/0x930 [ 2657.982318][ T9560] netlink_sendmsg+0x8d0/0xbf0 [ 2657.987090][ T9560] ? netlink_getsockopt+0x590/0x590 [ 2657.992296][ T9560] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2657.997859][ T9560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2658.003150][ T9560] ? security_socket_sendmsg+0x80/0xa0 [ 2658.008615][ T9560] ? netlink_getsockopt+0x590/0x590 [ 2658.013826][ T9560] ____sys_sendmsg+0x61b/0x980 [ 2658.018605][ T9560] ? __asan_memset+0x22/0x40 [ 2658.023202][ T9560] ? __sys_sendmsg_sock+0x30/0x30 [ 2658.028225][ T9560] ? __import_iovec+0x5f2/0x850 [ 2658.033090][ T9560] ? import_iovec+0x73/0xa0 [ 2658.037605][ T9560] ___sys_sendmsg+0x2a6/0x360 [ 2658.042289][ T9560] ? __sys_sendmsg+0x2b0/0x2b0 [ 2658.047109][ T9560] __se_sys_sendmsg+0x1d0/0x2c0 [ 2658.051964][ T9560] ? __x64_sys_sendmsg+0x80/0x80 [ 2658.056926][ T9560] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2658.062832][ T9560] do_syscall_64+0x55/0xb0 [ 2658.067250][ T9560] ? clear_bhb_loop+0x40/0x90 [ 2658.071946][ T9560] ? clear_bhb_loop+0x40/0x90 [ 2658.076651][ T9560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2658.082549][ T9560] RIP: 0033:0x7ff9f819e159 [ 2658.086964][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2658.106579][ T9560] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2658.114996][ T9560] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2658.122971][ T9560] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2658.130956][ T9560] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2658.138937][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2658.146909][ T9560] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2658.154913][ T9560] [ 2659.455828][ T9572] netlink: 'syz.0.11519': attribute type 6 has an invalid length. [ 2659.470152][ T9572] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11519'. [ 2659.838896][ T9578] netlink: 'syz.3.11512': attribute type 4 has an invalid length. [ 2659.853479][ T9581] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11519'. [ 2659.865859][ T9578] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11512'. [ 2659.950045][ T9581] netlink: 'syz.0.11519': attribute type 2 has an invalid length. [ 2660.948113][ T9596] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11517'. [ 2661.017972][ T9596] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2661.059077][ T9596] CPU: 0 PID: 9596 Comm: syz.3.11517 Not tainted syzkaller #0 [ 2661.066617][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2661.076704][ T9596] Call Trace: [ 2661.079987][ T9596] [ 2661.082924][ T9596] dump_stack_lvl+0x18c/0x250 [ 2661.087604][ T9596] ? show_regs_print_info+0x20/0x20 [ 2661.092802][ T9596] ? load_image+0x420/0x420 [ 2661.097309][ T9596] sysfs_warn_dup+0x8e/0xa0 [ 2661.101827][ T9596] sysfs_do_create_link_sd+0xc0/0x110 [ 2661.107237][ T9596] device_add_class_symlinks+0x1cf/0x240 [ 2661.112915][ T9596] device_add+0x4f9/0xc40 [ 2661.117260][ T9596] wiphy_register+0x1d99/0x2ac0 [ 2661.122151][ T9596] ? cfg80211_event_work+0x40/0x40 [ 2661.127259][ T9596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2661.133461][ T9596] ieee80211_register_hw+0x2dd8/0x3b30 [ 2661.138931][ T9596] ? ieee80211_register_hw+0xf11/0x3b30 [ 2661.144487][ T9596] ? ieee80211_tasklet_handler+0x20/0x20 [ 2661.150139][ T9596] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2661.156039][ T9596] ? __debug_object_init+0xec/0x450 [ 2661.161266][ T9596] ? __asan_memset+0x22/0x40 [ 2661.165863][ T9596] ? __hrtimer_init+0x189/0x270 [ 2661.170716][ T9596] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2661.176462][ T9596] ? mac80211_hwsim_free+0x220/0x220 [ 2661.181763][ T9596] ? rcu_is_watching+0x15/0xb0 [ 2661.186554][ T9596] ? kstrndup+0xbd/0x140 [ 2661.190812][ T9596] hwsim_new_radio_nl+0xdad/0x1a70 [ 2661.195941][ T9596] ? __nla_validate+0x50/0x50 [ 2661.200633][ T9596] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2661.206980][ T9596] ? __nla_parse+0x40/0x50 [ 2661.211419][ T9596] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2661.217782][ T9596] genl_family_rcv_msg_doit+0x21a/0x310 [ 2661.223355][ T9596] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2661.229253][ T9596] ? bpf_lsm_capable+0x9/0x10 [ 2661.233944][ T9596] ? security_capable+0x89/0xb0 [ 2661.238811][ T9596] genl_rcv_msg+0x611/0x7a0 [ 2661.243320][ T9596] ? genl_bind+0x360/0x360 [ 2661.247731][ T9596] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2661.254070][ T9596] netlink_rcv_skb+0x235/0x4c0 [ 2661.258836][ T9596] ? genl_bind+0x360/0x360 [ 2661.263253][ T9596] ? netlink_ack+0x1160/0x1160 [ 2661.268050][ T9596] ? __lock_acquire+0x7d80/0x7d80 [ 2661.273080][ T9596] ? net_generic+0x1e/0x240 [ 2661.277616][ T9596] ? down_read+0x1ac/0x2e0 [ 2661.282032][ T9596] genl_rcv+0x28/0x40 [ 2661.286010][ T9596] netlink_unicast+0x7b1/0x930 [ 2661.290793][ T9596] netlink_sendmsg+0x8d0/0xbf0 [ 2661.295581][ T9596] ? netlink_getsockopt+0x590/0x590 [ 2661.300785][ T9596] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2661.306348][ T9596] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2661.311646][ T9596] ? security_socket_sendmsg+0x80/0xa0 [ 2661.317105][ T9596] ? netlink_getsockopt+0x590/0x590 [ 2661.322302][ T9596] ____sys_sendmsg+0x61b/0x980 [ 2661.327076][ T9596] ? __asan_memset+0x22/0x40 [ 2661.331665][ T9596] ? __sys_sendmsg_sock+0x30/0x30 [ 2661.336687][ T9596] ? __import_iovec+0x5f2/0x850 [ 2661.341542][ T9596] ? import_iovec+0x73/0xa0 [ 2661.346047][ T9596] ___sys_sendmsg+0x2a6/0x360 [ 2661.350727][ T9596] ? __sys_sendmsg+0x2b0/0x2b0 [ 2661.355578][ T9596] __se_sys_sendmsg+0x1d0/0x2c0 [ 2661.360460][ T9596] ? __x64_sys_sendmsg+0x80/0x80 [ 2661.365409][ T9596] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2661.371300][ T9596] do_syscall_64+0x55/0xb0 [ 2661.375717][ T9596] ? clear_bhb_loop+0x40/0x90 [ 2661.380387][ T9596] ? clear_bhb_loop+0x40/0x90 [ 2661.385068][ T9596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2661.390955][ T9596] RIP: 0033:0x7ffbf1b9e159 [ 2661.395383][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2661.414990][ T9596] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2661.423401][ T9596] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2661.431387][ T9596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2661.439369][ T9596] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2661.447333][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2661.455324][ T9596] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2661.463309][ T9596] [ 2661.647244][ T9600] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11518'. [ 2661.744600][ T9600] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2661.753914][ T9600] CPU: 0 PID: 9600 Comm: syz.2.11518 Not tainted syzkaller #0 [ 2661.761425][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2661.771506][ T9600] Call Trace: [ 2661.774810][ T9600] [ 2661.777768][ T9600] dump_stack_lvl+0x18c/0x250 [ 2661.782487][ T9600] ? show_regs_print_info+0x20/0x20 [ 2661.787760][ T9600] ? load_image+0x420/0x420 [ 2661.792310][ T9600] sysfs_warn_dup+0x8e/0xa0 [ 2661.796847][ T9600] sysfs_do_create_link_sd+0xc0/0x110 [ 2661.802257][ T9600] device_add_class_symlinks+0x1cf/0x240 [ 2661.807923][ T9600] device_add+0x4f9/0xc40 [ 2661.812284][ T9600] wiphy_register+0x1d99/0x2ac0 [ 2661.817193][ T9600] ? cfg80211_event_work+0x40/0x40 [ 2661.822326][ T9600] ? minstrel_ht_alloc+0x88a/0x990 [ 2661.827469][ T9600] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2661.833566][ T9600] ieee80211_register_hw+0x2dd8/0x3b30 [ 2661.839063][ T9600] ? ieee80211_register_hw+0xf11/0x3b30 [ 2661.844644][ T9600] ? ieee80211_tasklet_handler+0x20/0x20 [ 2661.850299][ T9600] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2661.856221][ T9600] ? __debug_object_init+0xec/0x450 [ 2661.861459][ T9600] ? __asan_memset+0x22/0x40 [ 2661.866077][ T9600] ? __hrtimer_init+0x189/0x270 [ 2661.870954][ T9600] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2661.876720][ T9600] ? mac80211_hwsim_free+0x220/0x220 [ 2661.882023][ T9600] ? rcu_is_watching+0x15/0xb0 [ 2661.886807][ T9600] ? kstrndup+0xbd/0x140 [ 2661.891083][ T9600] hwsim_new_radio_nl+0xdad/0x1a70 [ 2661.896223][ T9600] ? __nla_validate+0x50/0x50 [ 2661.900941][ T9600] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2661.907301][ T9600] ? __nla_parse+0x40/0x50 [ 2661.911747][ T9600] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2661.918103][ T9600] genl_family_rcv_msg_doit+0x21a/0x310 [ 2661.923686][ T9600] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2661.929609][ T9600] ? bpf_lsm_capable+0x9/0x10 [ 2661.934310][ T9600] ? security_capable+0x89/0xb0 [ 2661.939189][ T9600] genl_rcv_msg+0x611/0x7a0 [ 2661.943718][ T9600] ? genl_bind+0x360/0x360 [ 2661.948160][ T9600] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2661.954527][ T9600] netlink_rcv_skb+0x235/0x4c0 [ 2661.959351][ T9600] ? genl_bind+0x360/0x360 [ 2661.963794][ T9600] ? netlink_ack+0x1160/0x1160 [ 2661.968591][ T9600] ? __lock_acquire+0x7d80/0x7d80 [ 2661.973636][ T9600] ? net_generic+0x1e/0x240 [ 2661.978175][ T9600] ? down_read+0x1ac/0x2e0 [ 2661.982618][ T9600] genl_rcv+0x28/0x40 [ 2661.986619][ T9600] netlink_unicast+0x7b1/0x930 [ 2661.991422][ T9600] netlink_sendmsg+0x8d0/0xbf0 [ 2661.996217][ T9600] ? netlink_getsockopt+0x590/0x590 [ 2662.001442][ T9600] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2662.007014][ T9600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2662.012325][ T9600] ? security_socket_sendmsg+0x80/0xa0 [ 2662.017799][ T9600] ? netlink_getsockopt+0x590/0x590 [ 2662.023019][ T9600] ____sys_sendmsg+0x61b/0x980 [ 2662.027811][ T9600] ? __asan_memset+0x22/0x40 [ 2662.032422][ T9600] ? __sys_sendmsg_sock+0x30/0x30 [ 2662.037462][ T9600] ? __import_iovec+0x5f2/0x850 [ 2662.042355][ T9600] ? import_iovec+0x73/0xa0 [ 2662.046890][ T9600] ___sys_sendmsg+0x2a6/0x360 [ 2662.051593][ T9600] ? __sys_sendmsg+0x2b0/0x2b0 [ 2662.056402][ T9600] ? ktime_get+0x7f/0x280 [ 2662.060751][ T9600] ? trace_call_bpf+0xc3/0x6c0 [ 2662.065561][ T9600] __se_sys_sendmsg+0x1d0/0x2c0 [ 2662.070441][ T9600] ? perf_trace_preemptirq_template+0x269/0x330 [ 2662.076710][ T9600] ? __x64_sys_sendmsg+0x80/0x80 [ 2662.081686][ T9600] ? lockdep_hardirqs_on+0x98/0x150 [ 2662.086911][ T9600] do_syscall_64+0x55/0xb0 [ 2662.091347][ T9600] ? clear_bhb_loop+0x40/0x90 [ 2662.096045][ T9600] ? clear_bhb_loop+0x40/0x90 [ 2662.100741][ T9600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2662.106647][ T9600] RIP: 0033:0x7fe73a39e159 [ 2662.111109][ T9600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2662.130750][ T9600] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2662.139191][ T9600] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2662.147181][ T9600] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2662.155173][ T9600] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2662.163202][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2662.171190][ T9600] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2662.179207][ T9600] [ 2662.831265][ T9609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11523'. [ 2662.957990][ T9609] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2662.980940][ T9609] CPU: 0 PID: 9609 Comm: syz.2.11523 Not tainted syzkaller #0 [ 2662.988463][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2662.998521][ T9609] Call Trace: [ 2663.001794][ T9609] [ 2663.004727][ T9609] dump_stack_lvl+0x18c/0x250 [ 2663.009408][ T9609] ? show_regs_print_info+0x20/0x20 [ 2663.014609][ T9609] ? load_image+0x420/0x420 [ 2663.019118][ T9609] sysfs_warn_dup+0x8e/0xa0 [ 2663.023618][ T9609] sysfs_do_create_link_sd+0xc0/0x110 [ 2663.029008][ T9609] device_add_class_symlinks+0x1cf/0x240 [ 2663.034668][ T9609] device_add+0x4f9/0xc40 [ 2663.039020][ T9609] wiphy_register+0x1d99/0x2ac0 [ 2663.043903][ T9609] ? cfg80211_event_work+0x40/0x40 [ 2663.049022][ T9609] ? minstrel_ht_alloc+0x88a/0x990 [ 2663.054148][ T9609] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2663.060223][ T9609] ieee80211_register_hw+0x2dd8/0x3b30 [ 2663.065697][ T9609] ? ieee80211_register_hw+0xf11/0x3b30 [ 2663.071252][ T9609] ? ieee80211_tasklet_handler+0x20/0x20 [ 2663.076884][ T9609] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2663.082780][ T9609] ? __debug_object_init+0xec/0x450 [ 2663.087984][ T9609] ? __asan_memset+0x22/0x40 [ 2663.092583][ T9609] ? __hrtimer_init+0x189/0x270 [ 2663.097441][ T9609] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2663.103183][ T9609] ? mac80211_hwsim_free+0x220/0x220 [ 2663.108471][ T9609] ? rcu_is_watching+0x15/0xb0 [ 2663.113241][ T9609] ? kstrndup+0xbd/0x140 [ 2663.117500][ T9609] hwsim_new_radio_nl+0xdad/0x1a70 [ 2663.122613][ T9609] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2663.128603][ T9609] ? lock_chain_count+0x20/0x20 [ 2663.133470][ T9609] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2663.139816][ T9609] ? __nla_parse+0x44/0x50 [ 2663.144244][ T9609] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2663.150619][ T9609] genl_family_rcv_msg_doit+0x21a/0x310 [ 2663.156178][ T9609] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2663.162086][ T9609] ? bpf_lsm_capable+0x9/0x10 [ 2663.166768][ T9609] ? security_capable+0x89/0xb0 [ 2663.171625][ T9609] genl_rcv_msg+0x611/0x7a0 [ 2663.176142][ T9609] ? genl_bind+0x360/0x360 [ 2663.180562][ T9609] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2663.186894][ T9609] ? perf_trace_lock+0xfc/0x3b0 [ 2663.191741][ T9609] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.196954][ T9609] netlink_rcv_skb+0x235/0x4c0 [ 2663.201724][ T9609] ? genl_bind+0x360/0x360 [ 2663.206150][ T9609] ? netlink_ack+0x1160/0x1160 [ 2663.210925][ T9609] ? __lock_acquire+0x7d80/0x7d80 [ 2663.215952][ T9609] ? net_generic+0x1e/0x240 [ 2663.220464][ T9609] ? down_read+0x1ac/0x2e0 [ 2663.224914][ T9609] genl_rcv+0x28/0x40 [ 2663.228897][ T9609] netlink_unicast+0x7b1/0x930 [ 2663.233671][ T9609] netlink_sendmsg+0x8d0/0xbf0 [ 2663.238443][ T9609] ? netlink_getsockopt+0x590/0x590 [ 2663.243646][ T9609] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2663.249196][ T9609] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2663.254487][ T9609] ? security_socket_sendmsg+0x80/0xa0 [ 2663.259944][ T9609] ? netlink_getsockopt+0x590/0x590 [ 2663.265149][ T9609] ____sys_sendmsg+0x61b/0x980 [ 2663.269923][ T9609] ? __asan_memset+0x22/0x40 [ 2663.274516][ T9609] ? __sys_sendmsg_sock+0x30/0x30 [ 2663.279547][ T9609] ? __import_iovec+0x5f2/0x850 [ 2663.284416][ T9609] ? import_iovec+0x73/0xa0 [ 2663.288929][ T9609] ___sys_sendmsg+0x2a6/0x360 [ 2663.293639][ T9609] ? __sys_sendmsg+0x2b0/0x2b0 [ 2663.298423][ T9609] ? ktime_get+0x7f/0x280 [ 2663.302756][ T9609] ? trace_call_bpf+0xc3/0x6c0 [ 2663.307544][ T9609] __se_sys_sendmsg+0x1d0/0x2c0 [ 2663.312404][ T9609] ? perf_trace_preemptirq_template+0x269/0x330 [ 2663.318650][ T9609] ? __x64_sys_sendmsg+0x80/0x80 [ 2663.323603][ T9609] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.328811][ T9609] do_syscall_64+0x55/0xb0 [ 2663.333231][ T9609] ? clear_bhb_loop+0x40/0x90 [ 2663.337907][ T9609] ? clear_bhb_loop+0x40/0x90 [ 2663.342586][ T9609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2663.348481][ T9609] RIP: 0033:0x7fe73a39e159 [ 2663.352900][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2663.372507][ T9609] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2663.380924][ T9609] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2663.388894][ T9609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2663.396864][ T9609] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2663.404832][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2663.412803][ T9609] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2663.420794][ T9609] [ 2663.630444][ T9613] netlink: 'syz.1.11525': attribute type 4 has an invalid length. [ 2663.639870][ T9613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11525'. [ 2663.853557][ T9617] netlink: 'syz.1.11527': attribute type 6 has an invalid length. [ 2663.862058][ T9617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11527'. [ 2664.310940][ T9619] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.11527'. [ 2664.370965][ T9619] netlink: 'syz.1.11527': attribute type 2 has an invalid length. [ 2665.012357][ T9627] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11532'. [ 2665.199803][ T9627] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2665.231065][ T9627] CPU: 0 PID: 9627 Comm: syz.3.11532 Not tainted syzkaller #0 [ 2665.238603][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2665.248667][ T9627] Call Trace: [ 2665.251946][ T9627] [ 2665.254878][ T9627] dump_stack_lvl+0x18c/0x250 [ 2665.259574][ T9627] ? show_regs_print_info+0x20/0x20 [ 2665.264771][ T9627] ? load_image+0x420/0x420 [ 2665.269284][ T9627] sysfs_warn_dup+0x8e/0xa0 [ 2665.273789][ T9627] sysfs_do_create_link_sd+0xc0/0x110 [ 2665.279177][ T9627] device_add_class_symlinks+0x1cf/0x240 [ 2665.284816][ T9627] device_add+0x4f9/0xc40 [ 2665.289180][ T9627] wiphy_register+0x1d99/0x2ac0 [ 2665.294055][ T9627] ? cfg80211_event_work+0x40/0x40 [ 2665.299171][ T9627] ? minstrel_ht_alloc+0x88a/0x990 [ 2665.304292][ T9627] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2665.310367][ T9627] ieee80211_register_hw+0x2dd8/0x3b30 [ 2665.315839][ T9627] ? ieee80211_register_hw+0xf11/0x3b30 [ 2665.321395][ T9627] ? ieee80211_tasklet_handler+0x20/0x20 [ 2665.327029][ T9627] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2665.332926][ T9627] ? __debug_object_init+0xec/0x450 [ 2665.338130][ T9627] ? __asan_memset+0x22/0x40 [ 2665.342728][ T9627] ? __hrtimer_init+0x189/0x270 [ 2665.347584][ T9627] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2665.353330][ T9627] ? mac80211_hwsim_free+0x220/0x220 [ 2665.358619][ T9627] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 2665.363938][ T9627] hwsim_new_radio_nl+0xdad/0x1a70 [ 2665.369072][ T9627] ? __nla_validate+0x50/0x50 [ 2665.373767][ T9627] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2665.380108][ T9627] ? __nla_parse+0x40/0x50 [ 2665.384542][ T9627] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2665.390911][ T9627] genl_family_rcv_msg_doit+0x21a/0x310 [ 2665.396466][ T9627] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2665.402370][ T9627] ? bpf_lsm_capable+0x9/0x10 [ 2665.407049][ T9627] ? security_capable+0x89/0xb0 [ 2665.411910][ T9627] genl_rcv_msg+0x611/0x7a0 [ 2665.416430][ T9627] ? genl_bind+0x360/0x360 [ 2665.420844][ T9627] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2665.427176][ T9627] ? perf_trace_lock+0xfc/0x3b0 [ 2665.432027][ T9627] ? lockdep_hardirqs_on+0x98/0x150 [ 2665.437242][ T9627] netlink_rcv_skb+0x235/0x4c0 [ 2665.442015][ T9627] ? genl_bind+0x360/0x360 [ 2665.446432][ T9627] ? netlink_ack+0x1160/0x1160 [ 2665.451211][ T9627] ? __lock_acquire+0x7d80/0x7d80 [ 2665.456243][ T9627] ? net_generic+0x1e/0x240 [ 2665.460762][ T9627] ? down_read+0x1ac/0x2e0 [ 2665.465190][ T9627] genl_rcv+0x28/0x40 [ 2665.469172][ T9627] netlink_unicast+0x7b1/0x930 [ 2665.473950][ T9627] netlink_sendmsg+0x8d0/0xbf0 [ 2665.478723][ T9627] ? netlink_getsockopt+0x590/0x590 [ 2665.483921][ T9627] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2665.489470][ T9627] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2665.494776][ T9627] ? security_socket_sendmsg+0x80/0xa0 [ 2665.500240][ T9627] ? netlink_getsockopt+0x590/0x590 [ 2665.505465][ T9627] ____sys_sendmsg+0x61b/0x980 [ 2665.510262][ T9627] ? __asan_memset+0x22/0x40 [ 2665.514857][ T9627] ? __sys_sendmsg_sock+0x30/0x30 [ 2665.519880][ T9627] ? __import_iovec+0x5f2/0x850 [ 2665.524745][ T9627] ? import_iovec+0x73/0xa0 [ 2665.529256][ T9627] ___sys_sendmsg+0x2a6/0x360 [ 2665.533938][ T9627] ? __sys_sendmsg+0x2b0/0x2b0 [ 2665.538755][ T9627] __se_sys_sendmsg+0x1d0/0x2c0 [ 2665.543619][ T9627] ? __x64_sys_sendmsg+0x80/0x80 [ 2665.548573][ T9627] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2665.554476][ T9627] do_syscall_64+0x55/0xb0 [ 2665.558898][ T9627] ? clear_bhb_loop+0x40/0x90 [ 2665.563576][ T9627] ? clear_bhb_loop+0x40/0x90 [ 2665.568256][ T9627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.574156][ T9627] RIP: 0033:0x7ffbf1b9e159 [ 2665.578571][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.598177][ T9627] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2665.606593][ T9627] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2665.614565][ T9627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2665.622565][ T9627] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2665.630554][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.638539][ T9627] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2665.646530][ T9627] [ 2666.324250][ T9637] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11536'. [ 2666.395138][ T9637] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2666.404927][ T9637] CPU: 0 PID: 9637 Comm: syz.3.11536 Not tainted syzkaller #0 [ 2666.412440][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2666.422528][ T9637] Call Trace: [ 2666.425832][ T9637] [ 2666.428781][ T9637] dump_stack_lvl+0x18c/0x250 [ 2666.433491][ T9637] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2666.439686][ T9637] ? show_regs_print_info+0x20/0x20 [ 2666.444922][ T9637] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2666.451136][ T9637] sysfs_warn_dup+0x8e/0xa0 [ 2666.455673][ T9637] sysfs_do_create_link_sd+0xc0/0x110 [ 2666.461077][ T9637] device_add_class_symlinks+0x1cf/0x240 [ 2666.466752][ T9637] device_add+0x4f9/0xc40 [ 2666.471119][ T9637] wiphy_register+0x1d99/0x2ac0 [ 2666.476030][ T9637] ? cfg80211_event_work+0x40/0x40 [ 2666.481177][ T9637] ? minstrel_ht_alloc+0x88a/0x990 [ 2666.486332][ T9637] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2666.492454][ T9637] ieee80211_register_hw+0x2dd8/0x3b30 [ 2666.497961][ T9637] ? ieee80211_register_hw+0xf11/0x3b30 [ 2666.503555][ T9637] ? ieee80211_tasklet_handler+0x20/0x20 [ 2666.509219][ T9637] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2666.515150][ T9637] ? __debug_object_init+0xec/0x450 [ 2666.520388][ T9637] ? __asan_memset+0x22/0x40 [ 2666.525026][ T9637] ? __hrtimer_init+0x189/0x270 [ 2666.529915][ T9637] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2666.535655][ T9637] ? mac80211_hwsim_free+0x220/0x220 [ 2666.540948][ T9637] ? rcu_is_watching+0x15/0xb0 [ 2666.545744][ T9637] ? kstrndup+0xbd/0x140 [ 2666.550046][ T9637] hwsim_new_radio_nl+0xdad/0x1a70 [ 2666.555185][ T9637] ? __nla_validate+0x50/0x50 [ 2666.559877][ T9637] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2666.566232][ T9637] ? __nla_parse+0x40/0x50 [ 2666.570649][ T9637] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2666.576987][ T9637] genl_family_rcv_msg_doit+0x21a/0x310 [ 2666.582550][ T9637] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2666.588444][ T9637] ? bpf_lsm_capable+0x9/0x10 [ 2666.593118][ T9637] ? security_capable+0x89/0xb0 [ 2666.597968][ T9637] genl_rcv_msg+0x611/0x7a0 [ 2666.602476][ T9637] ? genl_bind+0x360/0x360 [ 2666.606885][ T9637] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2666.613214][ T9637] ? perf_trace_lock+0xfc/0x3b0 [ 2666.618059][ T9637] ? lockdep_hardirqs_on+0x98/0x150 [ 2666.623259][ T9637] netlink_rcv_skb+0x235/0x4c0 [ 2666.628017][ T9637] ? genl_bind+0x360/0x360 [ 2666.632435][ T9637] ? netlink_ack+0x1160/0x1160 [ 2666.637200][ T9637] ? __lock_acquire+0x7d80/0x7d80 [ 2666.642217][ T9637] ? net_generic+0x1e/0x240 [ 2666.646739][ T9637] ? down_read+0x1ac/0x2e0 [ 2666.651151][ T9637] genl_rcv+0x28/0x40 [ 2666.655132][ T9637] netlink_unicast+0x7b1/0x930 [ 2666.659915][ T9637] netlink_sendmsg+0x8d0/0xbf0 [ 2666.664680][ T9637] ? netlink_getsockopt+0x590/0x590 [ 2666.669893][ T9637] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2666.675473][ T9637] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2666.680773][ T9637] ? security_socket_sendmsg+0x80/0xa0 [ 2666.686238][ T9637] ? netlink_getsockopt+0x590/0x590 [ 2666.691440][ T9637] ____sys_sendmsg+0x61b/0x980 [ 2666.696220][ T9637] ? __asan_memset+0x22/0x40 [ 2666.700816][ T9637] ? __sys_sendmsg_sock+0x30/0x30 [ 2666.705837][ T9637] ? __import_iovec+0x5f2/0x850 [ 2666.710698][ T9637] ? import_iovec+0x73/0xa0 [ 2666.715208][ T9637] ___sys_sendmsg+0x2a6/0x360 [ 2666.719896][ T9637] ? __sys_sendmsg+0x2b0/0x2b0 [ 2666.724711][ T9637] __se_sys_sendmsg+0x1d0/0x2c0 [ 2666.729565][ T9637] ? __x64_sys_sendmsg+0x80/0x80 [ 2666.734519][ T9637] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2666.740428][ T9637] do_syscall_64+0x55/0xb0 [ 2666.744986][ T9637] ? clear_bhb_loop+0x40/0x90 [ 2666.749667][ T9637] ? clear_bhb_loop+0x40/0x90 [ 2666.754346][ T9637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2666.760239][ T9637] RIP: 0033:0x7ffbf1b9e159 [ 2666.764657][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2666.784263][ T9637] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2666.792681][ T9637] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2666.800662][ T9637] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2666.808629][ T9637] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2666.816600][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2666.824574][ T9637] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2666.832561][ T9637] [ 2667.111176][ T9645] netlink: 'syz.3.11538': attribute type 4 has an invalid length. [ 2667.119101][ T9645] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11538'. [ 2667.594319][ T9652] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11542'. [ 2667.615788][ T9652] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2667.624351][ T9652] CPU: 0 PID: 9652 Comm: syz.2.11542 Not tainted syzkaller #0 [ 2667.631857][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2667.641921][ T9652] Call Trace: [ 2667.645198][ T9652] [ 2667.648121][ T9652] dump_stack_lvl+0x18c/0x250 [ 2667.652798][ T9652] ? show_regs_print_info+0x20/0x20 [ 2667.657992][ T9652] ? load_image+0x420/0x420 [ 2667.662495][ T9652] sysfs_warn_dup+0x8e/0xa0 [ 2667.666995][ T9652] sysfs_do_create_link_sd+0xc0/0x110 [ 2667.672365][ T9652] device_add_class_symlinks+0x1cf/0x240 [ 2667.677995][ T9652] device_add+0x4f9/0xc40 [ 2667.682345][ T9652] wiphy_register+0x1d99/0x2ac0 [ 2667.687206][ T9652] ? cfg80211_event_work+0x40/0x40 [ 2667.692310][ T9652] ? minstrel_ht_alloc+0x88a/0x990 [ 2667.697417][ T9652] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2667.703480][ T9652] ieee80211_register_hw+0x2dd8/0x3b30 [ 2667.708941][ T9652] ? ieee80211_register_hw+0xf11/0x3b30 [ 2667.714482][ T9652] ? ieee80211_tasklet_handler+0x20/0x20 [ 2667.720129][ T9652] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2667.726024][ T9652] ? __debug_object_init+0xec/0x450 [ 2667.731238][ T9652] ? __asan_memset+0x22/0x40 [ 2667.735826][ T9652] ? __hrtimer_init+0x189/0x270 [ 2667.740670][ T9652] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2667.746381][ T9652] ? lock_chain_count+0x20/0x20 [ 2667.751256][ T9652] ? mac80211_hwsim_free+0x220/0x220 [ 2667.756530][ T9652] ? kstrndup+0x95/0x140 [ 2667.760780][ T9652] ? kstrndup+0xbd/0x140 [ 2667.765030][ T9652] hwsim_new_radio_nl+0xdad/0x1a70 [ 2667.770139][ T9652] ? __nla_validate+0x50/0x50 [ 2667.774822][ T9652] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2667.781150][ T9652] ? __nla_parse+0x40/0x50 [ 2667.785562][ T9652] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2667.791889][ T9652] genl_family_rcv_msg_doit+0x21a/0x310 [ 2667.797447][ T9652] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2667.803341][ T9652] ? bpf_lsm_capable+0x9/0x10 [ 2667.808015][ T9652] ? security_capable+0x89/0xb0 [ 2667.812863][ T9652] genl_rcv_msg+0x611/0x7a0 [ 2667.817382][ T9652] ? genl_bind+0x360/0x360 [ 2667.821789][ T9652] ? perf_trace_lock+0xfc/0x3b0 [ 2667.826627][ T9652] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2667.832950][ T9652] ? perf_trace_lock+0xfc/0x3b0 [ 2667.837796][ T9652] netlink_rcv_skb+0x235/0x4c0 [ 2667.842553][ T9652] ? genl_bind+0x360/0x360 [ 2667.846959][ T9652] ? netlink_ack+0x1160/0x1160 [ 2667.851717][ T9652] ? __lock_acquire+0x7d80/0x7d80 [ 2667.856755][ T9652] ? net_generic+0x1e/0x240 [ 2667.861263][ T9652] ? down_read+0x1ac/0x2e0 [ 2667.865673][ T9652] genl_rcv+0x28/0x40 [ 2667.869647][ T9652] netlink_unicast+0x7b1/0x930 [ 2667.874410][ T9652] netlink_sendmsg+0x8d0/0xbf0 [ 2667.879174][ T9652] ? netlink_getsockopt+0x590/0x590 [ 2667.884360][ T9652] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2667.889896][ T9652] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2667.895173][ T9652] ? security_socket_sendmsg+0x80/0xa0 [ 2667.900617][ T9652] ? netlink_getsockopt+0x590/0x590 [ 2667.905803][ T9652] ____sys_sendmsg+0x61b/0x980 [ 2667.910616][ T9652] ? __asan_memset+0x22/0x40 [ 2667.915201][ T9652] ? __sys_sendmsg_sock+0x30/0x30 [ 2667.920214][ T9652] ? __import_iovec+0x5f2/0x850 [ 2667.925094][ T9652] ? import_iovec+0x73/0xa0 [ 2667.929619][ T9652] ___sys_sendmsg+0x2a6/0x360 [ 2667.934294][ T9652] ? __sys_sendmsg+0x2b0/0x2b0 [ 2667.939061][ T9652] ? trace_call_bpf+0xc3/0x6c0 [ 2667.943831][ T9652] __se_sys_sendmsg+0x1d0/0x2c0 [ 2667.948669][ T9652] ? perf_trace_preemptirq_template+0x269/0x330 [ 2667.954904][ T9652] ? __x64_sys_sendmsg+0x80/0x80 [ 2667.959865][ T9652] ? lockdep_hardirqs_on+0x98/0x150 [ 2667.965089][ T9652] do_syscall_64+0x55/0xb0 [ 2667.969496][ T9652] ? clear_bhb_loop+0x40/0x90 [ 2667.974170][ T9652] ? clear_bhb_loop+0x40/0x90 [ 2667.978837][ T9652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2667.984720][ T9652] RIP: 0033:0x7fe73a39e159 [ 2667.989173][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2668.008777][ T9652] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2668.017190][ T9652] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2668.025153][ T9652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2668.033117][ T9652] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2668.041079][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2668.049047][ T9652] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2668.057026][ T9652] [ 2668.184325][ T9656] netlink: 'syz.2.11543': attribute type 6 has an invalid length. [ 2668.192814][ T9656] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11543'. [ 2668.296938][ T9657] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.11543'. [ 2668.306747][ T9657] netlink: 'syz.2.11543': attribute type 2 has an invalid length. [ 2669.305251][ T9668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11546'. [ 2669.358771][ T9668] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2669.367438][ T9668] CPU: 1 PID: 9668 Comm: syz.2.11546 Not tainted syzkaller #0 [ 2669.374940][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2669.385002][ T9668] Call Trace: [ 2669.388287][ T9668] [ 2669.391220][ T9668] dump_stack_lvl+0x18c/0x250 [ 2669.395912][ T9668] ? show_regs_print_info+0x20/0x20 [ 2669.401115][ T9668] ? load_image+0x420/0x420 [ 2669.405633][ T9668] sysfs_warn_dup+0x8e/0xa0 [ 2669.410144][ T9668] sysfs_do_create_link_sd+0xc0/0x110 [ 2669.415523][ T9668] device_add_class_symlinks+0x1cf/0x240 [ 2669.421168][ T9668] device_add+0x4f9/0xc40 [ 2669.425505][ T9668] wiphy_register+0x1d99/0x2ac0 [ 2669.430378][ T9668] ? cfg80211_event_work+0x40/0x40 [ 2669.435490][ T9668] ? minstrel_ht_alloc+0x88a/0x990 [ 2669.440641][ T9668] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2669.446750][ T9668] ieee80211_register_hw+0x2dd8/0x3b30 [ 2669.452234][ T9668] ? ieee80211_register_hw+0xf11/0x3b30 [ 2669.457796][ T9668] ? ieee80211_tasklet_handler+0x20/0x20 [ 2669.463432][ T9668] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2669.469333][ T9668] ? __debug_object_init+0xec/0x450 [ 2669.474542][ T9668] ? __asan_memset+0x22/0x40 [ 2669.479138][ T9668] ? __hrtimer_init+0x189/0x270 [ 2669.484005][ T9668] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2669.489746][ T9668] ? mac80211_hwsim_free+0x220/0x220 [ 2669.495029][ T9668] ? rcu_is_watching+0x15/0xb0 [ 2669.499796][ T9668] ? kstrndup+0xbd/0x140 [ 2669.504052][ T9668] hwsim_new_radio_nl+0xdad/0x1a70 [ 2669.509170][ T9668] ? __nla_validate+0x50/0x50 [ 2669.513851][ T9668] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2669.519848][ T9668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2669.526177][ T9668] ? lockdep_hardirqs_on+0x98/0x150 [ 2669.531388][ T9668] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2669.537562][ T9668] ? __nla_parse+0x40/0x50 [ 2669.541999][ T9668] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2669.548338][ T9668] genl_family_rcv_msg_doit+0x21a/0x310 [ 2669.553893][ T9668] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2669.559800][ T9668] ? bpf_lsm_capable+0x9/0x10 [ 2669.564484][ T9668] ? security_capable+0x89/0xb0 [ 2669.569350][ T9668] genl_rcv_msg+0x611/0x7a0 [ 2669.573871][ T9668] ? genl_bind+0x360/0x360 [ 2669.578294][ T9668] ? perf_trace_lock+0xfc/0x3b0 [ 2669.583146][ T9668] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2669.589498][ T9668] ? perf_trace_lock+0xfc/0x3b0 [ 2669.594432][ T9668] netlink_rcv_skb+0x235/0x4c0 [ 2669.599230][ T9668] ? genl_bind+0x360/0x360 [ 2669.603662][ T9668] ? netlink_ack+0x1160/0x1160 [ 2669.608532][ T9668] ? __lock_acquire+0x7d80/0x7d80 [ 2669.613566][ T9668] ? net_generic+0x1e/0x240 [ 2669.618080][ T9668] ? down_read+0x1ac/0x2e0 [ 2669.622503][ T9668] genl_rcv+0x28/0x40 [ 2669.626488][ T9668] netlink_unicast+0x7b1/0x930 [ 2669.631263][ T9668] netlink_sendmsg+0x8d0/0xbf0 [ 2669.636038][ T9668] ? netlink_getsockopt+0x590/0x590 [ 2669.641252][ T9668] ? netlink_getsockopt+0x590/0x590 [ 2669.646450][ T9668] ____sys_sendmsg+0x61b/0x980 [ 2669.651240][ T9668] ? __asan_memset+0x22/0x40 [ 2669.655837][ T9668] ? __sys_sendmsg_sock+0x30/0x30 [ 2669.660858][ T9668] ? __import_iovec+0x5f2/0x850 [ 2669.665721][ T9668] ? import_iovec+0x73/0xa0 [ 2669.670232][ T9668] ___sys_sendmsg+0x2a6/0x360 [ 2669.674926][ T9668] ? __sys_sendmsg+0x2b0/0x2b0 [ 2669.679738][ T9668] __se_sys_sendmsg+0x1d0/0x2c0 [ 2669.684594][ T9668] ? __x64_sys_sendmsg+0x80/0x80 [ 2669.689545][ T9668] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2669.695486][ T9668] do_syscall_64+0x55/0xb0 [ 2669.699906][ T9668] ? clear_bhb_loop+0x40/0x90 [ 2669.704583][ T9668] ? clear_bhb_loop+0x40/0x90 [ 2669.709265][ T9668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2669.715171][ T9668] RIP: 0033:0x7fe73a39e159 [ 2669.719599][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2669.739211][ T9668] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2669.747631][ T9668] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2669.755646][ T9668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2669.763619][ T9668] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2669.771592][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2669.779590][ T9668] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2669.787607][ T9668] [ 2669.841712][ T9670] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11547'. [ 2669.875061][ T9670] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2669.885084][ T9670] CPU: 1 PID: 9670 Comm: syz.0.11547 Not tainted syzkaller #0 [ 2669.892579][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2669.902654][ T9670] Call Trace: [ 2669.905930][ T9670] [ 2669.908859][ T9670] dump_stack_lvl+0x18c/0x250 [ 2669.913544][ T9670] ? show_regs_print_info+0x20/0x20 [ 2669.918751][ T9670] ? load_image+0x420/0x420 [ 2669.923270][ T9670] sysfs_warn_dup+0x8e/0xa0 [ 2669.927775][ T9670] sysfs_do_create_link_sd+0xc0/0x110 [ 2669.933167][ T9670] device_add_class_symlinks+0x1cf/0x240 [ 2669.938844][ T9670] device_add+0x4f9/0xc40 [ 2669.943222][ T9670] wiphy_register+0x1d99/0x2ac0 [ 2669.948226][ T9670] ? cfg80211_event_work+0x40/0x40 [ 2669.953381][ T9670] ? minstrel_ht_alloc+0x88a/0x990 [ 2669.958548][ T9670] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2669.964665][ T9670] ieee80211_register_hw+0x2dd8/0x3b30 [ 2669.970195][ T9670] ? ieee80211_register_hw+0xf11/0x3b30 [ 2669.975797][ T9670] ? ieee80211_tasklet_handler+0x20/0x20 [ 2669.981435][ T9670] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2669.987336][ T9670] ? __debug_object_init+0xec/0x450 [ 2669.992560][ T9670] ? __asan_memset+0x22/0x40 [ 2669.997173][ T9670] ? __hrtimer_init+0x189/0x270 [ 2670.002032][ T9670] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2670.007767][ T9670] ? mac80211_hwsim_free+0x220/0x220 [ 2670.013049][ T9670] ? rcu_is_watching+0x15/0xb0 [ 2670.017821][ T9670] ? kstrndup+0xbd/0x140 [ 2670.022068][ T9670] hwsim_new_radio_nl+0xdad/0x1a70 [ 2670.027187][ T9670] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2670.033042][ T9670] ? mark_lock+0x94/0x320 [ 2670.037397][ T9670] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2670.043748][ T9670] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2670.049943][ T9670] ? lockdep_hardirqs_on+0x98/0x150 [ 2670.055183][ T9670] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2670.061394][ T9670] genl_family_rcv_msg_doit+0x21a/0x310 [ 2670.066993][ T9670] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2670.072937][ T9670] ? bpf_lsm_capable+0x9/0x10 [ 2670.077657][ T9670] ? security_capable+0x89/0xb0 [ 2670.082566][ T9670] genl_rcv_msg+0x611/0x7a0 [ 2670.087122][ T9670] ? genl_bind+0x360/0x360 [ 2670.091574][ T9670] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2670.097943][ T9670] ? lockdep_hardirqs_on+0x98/0x150 [ 2670.103191][ T9670] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2670.109406][ T9670] netlink_rcv_skb+0x235/0x4c0 [ 2670.114214][ T9670] ? genl_bind+0x360/0x360 [ 2670.118672][ T9670] ? netlink_ack+0x1160/0x1160 [ 2670.123487][ T9670] ? __lock_acquire+0x7d80/0x7d80 [ 2670.128593][ T9670] ? net_generic+0x1e/0x240 [ 2670.133119][ T9670] ? down_read+0x1ac/0x2e0 [ 2670.137547][ T9670] genl_rcv+0x28/0x40 [ 2670.141538][ T9670] netlink_unicast+0x7b1/0x930 [ 2670.146316][ T9670] netlink_sendmsg+0x8d0/0xbf0 [ 2670.151088][ T9670] ? netlink_getsockopt+0x590/0x590 [ 2670.156288][ T9670] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2670.161839][ T9670] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2670.167123][ T9670] ? security_socket_sendmsg+0x80/0xa0 [ 2670.172577][ T9670] ? netlink_getsockopt+0x590/0x590 [ 2670.177778][ T9670] ____sys_sendmsg+0x61b/0x980 [ 2670.182553][ T9670] ? __asan_memset+0x22/0x40 [ 2670.187144][ T9670] ? __sys_sendmsg_sock+0x30/0x30 [ 2670.192171][ T9670] ? __import_iovec+0x5f2/0x850 [ 2670.197035][ T9670] ? import_iovec+0x73/0xa0 [ 2670.201544][ T9670] ___sys_sendmsg+0x2a6/0x360 [ 2670.206228][ T9670] ? __sys_sendmsg+0x2b0/0x2b0 [ 2670.211039][ T9670] __se_sys_sendmsg+0x1d0/0x2c0 [ 2670.215888][ T9670] ? perf_trace_preemptirq_template+0x269/0x330 [ 2670.222135][ T9670] ? __x64_sys_sendmsg+0x80/0x80 [ 2670.227086][ T9670] ? lockdep_hardirqs_on+0x98/0x150 [ 2670.232294][ T9670] do_syscall_64+0x55/0xb0 [ 2670.236709][ T9670] ? clear_bhb_loop+0x40/0x90 [ 2670.241385][ T9670] ? clear_bhb_loop+0x40/0x90 [ 2670.246066][ T9670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2670.251959][ T9670] RIP: 0033:0x7ff9f819e159 [ 2670.256375][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2670.275987][ T9670] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2670.284405][ T9670] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2670.292375][ T9670] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2670.300344][ T9670] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2670.308312][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2670.316281][ T9670] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2670.324270][ T9670] [ 2670.332985][ T9673] netlink: 'syz.2.11548': attribute type 4 has an invalid length. [ 2670.344065][ T9673] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11548'. [ 2670.424538][ T9676] netlink: 'syz.3.11549': attribute type 6 has an invalid length. [ 2670.441052][ T9676] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11549'. [ 2670.587193][ T9681] netlink: 'syz.0.11551': attribute type 4 has an invalid length. [ 2670.599522][ T9681] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11551'. [ 2670.764385][ T9677] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.11549'. [ 2670.782651][ T9677] netlink: 'syz.3.11549': attribute type 2 has an invalid length. [ 2671.525659][ T9697] netlink: 'syz.1.11556': attribute type 4 has an invalid length. [ 2671.538990][ T9697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11556'. [ 2671.821575][ T9701] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11557'. [ 2671.965630][ T9701] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2671.974727][ T9701] CPU: 0 PID: 9701 Comm: syz.1.11557 Not tainted syzkaller #0 [ 2671.982242][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2671.992355][ T9701] Call Trace: [ 2671.995660][ T9701] [ 2671.998599][ T9701] dump_stack_lvl+0x18c/0x250 [ 2672.003293][ T9701] ? show_regs_print_info+0x20/0x20 [ 2672.008519][ T9701] ? load_image+0x420/0x420 [ 2672.013057][ T9701] sysfs_warn_dup+0x8e/0xa0 [ 2672.017576][ T9701] sysfs_do_create_link_sd+0xc0/0x110 [ 2672.022959][ T9701] device_add_class_symlinks+0x1cf/0x240 [ 2672.028603][ T9701] device_add+0x4f9/0xc40 [ 2672.032942][ T9701] wiphy_register+0x1d99/0x2ac0 [ 2672.037826][ T9701] ? cfg80211_event_work+0x40/0x40 [ 2672.042945][ T9701] ? minstrel_ht_alloc+0x88a/0x990 [ 2672.048081][ T9701] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2672.054168][ T9701] ieee80211_register_hw+0x2dd8/0x3b30 [ 2672.059641][ T9701] ? ieee80211_register_hw+0xf11/0x3b30 [ 2672.065199][ T9701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2672.070834][ T9701] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2672.076733][ T9701] ? __debug_object_init+0xec/0x450 [ 2672.081941][ T9701] ? __asan_memset+0x22/0x40 [ 2672.086538][ T9701] ? __hrtimer_init+0x189/0x270 [ 2672.091396][ T9701] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2672.097148][ T9701] ? mac80211_hwsim_free+0x220/0x220 [ 2672.102456][ T9701] hwsim_new_radio_nl+0xdad/0x1a70 [ 2672.107576][ T9701] ? __nla_validate+0x50/0x50 [ 2672.112272][ T9701] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2672.118612][ T9701] ? __nla_parse+0x40/0x50 [ 2672.123034][ T9701] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2672.129372][ T9701] genl_family_rcv_msg_doit+0x21a/0x310 [ 2672.134956][ T9701] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2672.140881][ T9701] ? bpf_lsm_capable+0x9/0x10 [ 2672.145574][ T9701] ? security_capable+0x89/0xb0 [ 2672.150442][ T9701] genl_rcv_msg+0x611/0x7a0 [ 2672.154966][ T9701] ? genl_bind+0x360/0x360 [ 2672.159388][ T9701] ? perf_trace_lock+0xfc/0x3b0 [ 2672.164243][ T9701] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2672.170576][ T9701] ? perf_trace_lock+0xfc/0x3b0 [ 2672.175435][ T9701] netlink_rcv_skb+0x235/0x4c0 [ 2672.180204][ T9701] ? genl_bind+0x360/0x360 [ 2672.184623][ T9701] ? netlink_ack+0x1160/0x1160 [ 2672.189412][ T9701] ? __lock_acquire+0x7d80/0x7d80 [ 2672.194452][ T9701] ? net_generic+0x1e/0x240 [ 2672.198969][ T9701] ? down_read+0x1ac/0x2e0 [ 2672.203400][ T9701] genl_rcv+0x28/0x40 [ 2672.207388][ T9701] netlink_unicast+0x7b1/0x930 [ 2672.212164][ T9701] netlink_sendmsg+0x8d0/0xbf0 [ 2672.216947][ T9701] ? netlink_getsockopt+0x590/0x590 [ 2672.222164][ T9701] ? netlink_getsockopt+0x590/0x590 [ 2672.227365][ T9701] ____sys_sendmsg+0x61b/0x980 [ 2672.232141][ T9701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2672.238311][ T9701] ? __asan_memset+0x22/0x40 [ 2672.242911][ T9701] ? __sys_sendmsg_sock+0x30/0x30 [ 2672.247936][ T9701] ? __import_iovec+0x5f2/0x850 [ 2672.252800][ T9701] ? import_iovec+0x73/0xa0 [ 2672.257311][ T9701] ___sys_sendmsg+0x2a6/0x360 [ 2672.262007][ T9701] ? __sys_sendmsg+0x2b0/0x2b0 [ 2672.266824][ T9701] __se_sys_sendmsg+0x1d0/0x2c0 [ 2672.271689][ T9701] ? __x64_sys_sendmsg+0x80/0x80 [ 2672.276647][ T9701] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2672.282548][ T9701] do_syscall_64+0x55/0xb0 [ 2672.286969][ T9701] ? clear_bhb_loop+0x40/0x90 [ 2672.291646][ T9701] ? clear_bhb_loop+0x40/0x90 [ 2672.296324][ T9701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2672.302221][ T9701] RIP: 0033:0x7f110779e159 [ 2672.306638][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2672.326255][ T9701] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2672.334681][ T9701] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2672.342660][ T9701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2672.350633][ T9701] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2672.358606][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2672.366581][ T9701] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2672.374574][ T9701] [ 2672.530300][ T9705] netlink: 'syz.2.11559': attribute type 4 has an invalid length. [ 2672.538839][ T9705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11559'. [ 2672.553036][ T9703] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11558'. [ 2672.736949][ T9703] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2672.749172][ T9703] CPU: 1 PID: 9703 Comm: syz.0.11558 Not tainted syzkaller #0 [ 2672.756690][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2672.766772][ T9703] Call Trace: [ 2672.770048][ T9703] [ 2672.772986][ T9703] dump_stack_lvl+0x18c/0x250 [ 2672.777682][ T9703] ? show_regs_print_info+0x20/0x20 [ 2672.782888][ T9703] ? load_image+0x420/0x420 [ 2672.787410][ T9703] sysfs_warn_dup+0x8e/0xa0 [ 2672.791922][ T9703] sysfs_do_create_link_sd+0xc0/0x110 [ 2672.797327][ T9703] device_add_class_symlinks+0x1cf/0x240 [ 2672.802977][ T9703] device_add+0x4f9/0xc40 [ 2672.807314][ T9703] wiphy_register+0x1d99/0x2ac0 [ 2672.812190][ T9703] ? cfg80211_event_work+0x40/0x40 [ 2672.817304][ T9703] ? minstrel_ht_alloc+0x88a/0x990 [ 2672.822422][ T9703] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2672.828499][ T9703] ieee80211_register_hw+0x2dd8/0x3b30 [ 2672.833976][ T9703] ? ieee80211_register_hw+0xf11/0x3b30 [ 2672.839533][ T9703] ? ieee80211_tasklet_handler+0x20/0x20 [ 2672.845164][ T9703] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2672.851065][ T9703] ? __debug_object_init+0xec/0x450 [ 2672.856271][ T9703] ? __asan_memset+0x22/0x40 [ 2672.860868][ T9703] ? __hrtimer_init+0x189/0x270 [ 2672.865724][ T9703] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2672.871470][ T9703] ? mac80211_hwsim_free+0x220/0x220 [ 2672.876763][ T9703] ? rcu_is_watching+0x15/0xb0 [ 2672.881570][ T9703] ? kstrndup+0xbd/0x140 [ 2672.885851][ T9703] hwsim_new_radio_nl+0xdad/0x1a70 [ 2672.890974][ T9703] ? __nla_validate+0x50/0x50 [ 2672.895676][ T9703] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2672.902017][ T9703] ? __nla_parse+0x40/0x50 [ 2672.906452][ T9703] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2672.912797][ T9703] genl_family_rcv_msg_doit+0x21a/0x310 [ 2672.918367][ T9703] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2672.924270][ T9703] ? bpf_lsm_capable+0x9/0x10 [ 2672.928949][ T9703] ? security_capable+0x89/0xb0 [ 2672.933810][ T9703] genl_rcv_msg+0x611/0x7a0 [ 2672.938329][ T9703] ? genl_bind+0x360/0x360 [ 2672.942753][ T9703] ? perf_trace_lock+0xfc/0x3b0 [ 2672.947614][ T9703] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2672.953946][ T9703] ? perf_trace_lock+0xfc/0x3b0 [ 2672.958805][ T9703] netlink_rcv_skb+0x235/0x4c0 [ 2672.963572][ T9703] ? genl_bind+0x360/0x360 [ 2672.967992][ T9703] ? netlink_ack+0x1160/0x1160 [ 2672.972769][ T9703] ? __lock_acquire+0x7d80/0x7d80 [ 2672.977800][ T9703] ? net_generic+0x1e/0x240 [ 2672.982315][ T9703] ? down_read+0x1ac/0x2e0 [ 2672.986743][ T9703] genl_rcv+0x28/0x40 [ 2672.990726][ T9703] netlink_unicast+0x7b1/0x930 [ 2672.995510][ T9703] netlink_sendmsg+0x8d0/0xbf0 [ 2673.000289][ T9703] ? netlink_getsockopt+0x590/0x590 [ 2673.005495][ T9703] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2673.011044][ T9703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2673.016341][ T9703] ? security_socket_sendmsg+0x80/0xa0 [ 2673.021799][ T9703] ? netlink_getsockopt+0x590/0x590 [ 2673.027000][ T9703] ____sys_sendmsg+0x61b/0x980 [ 2673.031775][ T9703] ? __asan_memset+0x22/0x40 [ 2673.036374][ T9703] ? __sys_sendmsg_sock+0x30/0x30 [ 2673.041398][ T9703] ? __import_iovec+0x5f2/0x850 [ 2673.046262][ T9703] ? import_iovec+0x73/0xa0 [ 2673.050789][ T9703] ___sys_sendmsg+0x2a6/0x360 [ 2673.055482][ T9703] ? __sys_sendmsg+0x2b0/0x2b0 [ 2673.060295][ T9703] __se_sys_sendmsg+0x1d0/0x2c0 [ 2673.065153][ T9703] ? __x64_sys_sendmsg+0x80/0x80 [ 2673.070151][ T9703] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2673.076072][ T9703] do_syscall_64+0x55/0xb0 [ 2673.080491][ T9703] ? clear_bhb_loop+0x40/0x90 [ 2673.085169][ T9703] ? clear_bhb_loop+0x40/0x90 [ 2673.089854][ T9703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2673.095752][ T9703] RIP: 0033:0x7ff9f819e159 [ 2673.100167][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2673.119775][ T9703] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2673.128191][ T9703] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2673.136164][ T9703] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2673.144135][ T9703] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2673.152192][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2673.160161][ T9703] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2673.168148][ T9703] [ 2673.240666][ T9711] netlink: 'syz.1.11561': attribute type 4 has an invalid length. [ 2673.248768][ T9711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11561'. [ 2673.468933][ T9719] netlink: 'syz.0.11562': attribute type 4 has an invalid length. [ 2673.485237][ T9719] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11562'. [ 2674.134862][ T9731] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2674.169515][ T9731] CPU: 1 PID: 9731 Comm: syz.1.11568 Not tainted syzkaller #0 [ 2674.177066][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2674.187170][ T9731] Call Trace: [ 2674.190492][ T9731] [ 2674.193460][ T9731] dump_stack_lvl+0x18c/0x250 [ 2674.198190][ T9731] ? show_regs_print_info+0x20/0x20 [ 2674.203435][ T9731] ? load_image+0x420/0x420 [ 2674.207993][ T9731] sysfs_warn_dup+0x8e/0xa0 [ 2674.212549][ T9731] sysfs_do_create_link_sd+0xc0/0x110 [ 2674.217965][ T9731] device_add_class_symlinks+0x1cf/0x240 [ 2674.223647][ T9731] device_add+0x4f9/0xc40 [ 2674.228022][ T9731] wiphy_register+0x1d99/0x2ac0 [ 2674.232941][ T9731] ? cfg80211_event_work+0x40/0x40 [ 2674.238088][ T9731] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2674.244287][ T9731] ? ieee80211_register_hw+0x2a24/0x3b30 [ 2674.249972][ T9731] ieee80211_register_hw+0x2dd8/0x3b30 [ 2674.255487][ T9731] ? ieee80211_register_hw+0xf11/0x3b30 [ 2674.261086][ T9731] ? ieee80211_tasklet_handler+0x20/0x20 [ 2674.266758][ T9731] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2674.272694][ T9731] ? __debug_object_init+0xec/0x450 [ 2674.277935][ T9731] ? __asan_memset+0x22/0x40 [ 2674.282575][ T9731] ? __hrtimer_init+0x189/0x270 [ 2674.287474][ T9731] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2674.293275][ T9731] ? mac80211_hwsim_free+0x220/0x220 [ 2674.298600][ T9731] ? rcu_is_watching+0x15/0xb0 [ 2674.303415][ T9731] ? kstrndup+0xbd/0x140 [ 2674.307721][ T9731] hwsim_new_radio_nl+0xdad/0x1a70 [ 2674.312877][ T9731] ? __nla_validate+0x50/0x50 [ 2674.317620][ T9731] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2674.324006][ T9731] ? __nla_parse+0x40/0x50 [ 2674.328470][ T9731] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2674.334842][ T9731] genl_family_rcv_msg_doit+0x21a/0x310 [ 2674.340427][ T9731] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2674.346364][ T9731] ? bpf_lsm_capable+0x9/0x10 [ 2674.351076][ T9731] ? security_capable+0x89/0xb0 [ 2674.355989][ T9731] genl_rcv_msg+0x611/0x7a0 [ 2674.360529][ T9731] ? genl_bind+0x360/0x360 [ 2674.364982][ T9731] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2674.371345][ T9731] ? lockdep_hardirqs_on+0x98/0x150 [ 2674.376581][ T9731] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2674.382781][ T9731] netlink_rcv_skb+0x235/0x4c0 [ 2674.387576][ T9731] ? genl_bind+0x360/0x360 [ 2674.392022][ T9731] ? netlink_ack+0x1160/0x1160 [ 2674.396827][ T9731] ? __lock_acquire+0x7d80/0x7d80 [ 2674.401886][ T9731] ? net_generic+0x1e/0x240 [ 2674.406428][ T9731] ? down_read+0x1ac/0x2e0 [ 2674.410881][ T9731] genl_rcv+0x28/0x40 [ 2674.414892][ T9731] netlink_unicast+0x7b1/0x930 [ 2674.419699][ T9731] netlink_sendmsg+0x8d0/0xbf0 [ 2674.424502][ T9731] ? netlink_getsockopt+0x590/0x590 [ 2674.429735][ T9731] ? netlink_getsockopt+0x590/0x590 [ 2674.434964][ T9731] ____sys_sendmsg+0x61b/0x980 [ 2674.439777][ T9731] ? __asan_memset+0x22/0x40 [ 2674.444412][ T9731] ? __sys_sendmsg_sock+0x30/0x30 [ 2674.449459][ T9731] ? __import_iovec+0x5f2/0x850 [ 2674.454357][ T9731] ? import_iovec+0x73/0xa0 [ 2674.458894][ T9731] ___sys_sendmsg+0x2a6/0x360 [ 2674.463607][ T9731] ? __sys_sendmsg+0x2b0/0x2b0 [ 2674.468466][ T9731] __se_sys_sendmsg+0x1d0/0x2c0 [ 2674.473346][ T9731] ? __x64_sys_sendmsg+0x80/0x80 [ 2674.478333][ T9731] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2674.484268][ T9731] do_syscall_64+0x55/0xb0 [ 2674.488709][ T9731] ? clear_bhb_loop+0x40/0x90 [ 2674.493411][ T9731] ? clear_bhb_loop+0x40/0x90 [ 2674.498122][ T9731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2674.504041][ T9731] RIP: 0033:0x7f110779e159 [ 2674.508483][ T9731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2674.528127][ T9731] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2674.536595][ T9731] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2674.544593][ T9731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2674.552593][ T9731] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2674.560592][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2674.568628][ T9731] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2674.576647][ T9731] [ 2674.757658][ T9736] netlink: 'syz.3.11569': attribute type 4 has an invalid length. [ 2674.904257][ T9738] netlink: 'syz.2.11572': attribute type 4 has an invalid length. [ 2675.048755][ T9742] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2675.061186][ T9742] CPU: 1 PID: 9742 Comm: syz.0.11570 Not tainted syzkaller #0 [ 2675.068713][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2675.078798][ T9742] Call Trace: [ 2675.082104][ T9742] [ 2675.085067][ T9742] dump_stack_lvl+0x18c/0x250 [ 2675.089791][ T9742] ? show_regs_print_info+0x20/0x20 [ 2675.095032][ T9742] ? load_image+0x420/0x420 [ 2675.099602][ T9742] sysfs_warn_dup+0x8e/0xa0 [ 2675.104150][ T9742] sysfs_do_create_link_sd+0xc0/0x110 [ 2675.109559][ T9742] device_add_class_symlinks+0x1cf/0x240 [ 2675.115236][ T9742] device_add+0x4f9/0xc40 [ 2675.119590][ T9742] wiphy_register+0x1d99/0x2ac0 [ 2675.124495][ T9742] ? cfg80211_event_work+0x40/0x40 [ 2675.129640][ T9742] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2675.135860][ T9742] ieee80211_register_hw+0x2dd8/0x3b30 [ 2675.141379][ T9742] ? ieee80211_register_hw+0xf11/0x3b30 [ 2675.146990][ T9742] ? ieee80211_tasklet_handler+0x20/0x20 [ 2675.152684][ T9742] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2675.158633][ T9742] ? __debug_object_init+0xec/0x450 [ 2675.163886][ T9742] ? __asan_memset+0x22/0x40 [ 2675.168534][ T9742] ? __hrtimer_init+0x189/0x270 [ 2675.173437][ T9742] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2675.179243][ T9742] ? mac80211_hwsim_free+0x220/0x220 [ 2675.184576][ T9742] ? rcu_is_watching+0x15/0xb0 [ 2675.189390][ T9742] ? kstrndup+0xbd/0x140 [ 2675.193693][ T9742] hwsim_new_radio_nl+0xdad/0x1a70 [ 2675.198858][ T9742] ? __nla_validate+0x50/0x50 [ 2675.203596][ T9742] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2675.209990][ T9742] ? __nla_parse+0x40/0x50 [ 2675.214467][ T9742] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2675.220856][ T9742] genl_family_rcv_msg_doit+0x21a/0x310 [ 2675.226465][ T9742] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2675.232417][ T9742] ? bpf_lsm_capable+0x9/0x10 [ 2675.237135][ T9742] ? security_capable+0x89/0xb0 [ 2675.242042][ T9742] genl_rcv_msg+0x611/0x7a0 [ 2675.246599][ T9742] ? genl_bind+0x360/0x360 [ 2675.251062][ T9742] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2675.257456][ T9742] netlink_rcv_skb+0x235/0x4c0 [ 2675.262279][ T9742] ? genl_bind+0x360/0x360 [ 2675.266743][ T9742] ? netlink_ack+0x1160/0x1160 [ 2675.271551][ T9742] ? __lock_acquire+0x7d80/0x7d80 [ 2675.276577][ T9742] ? net_generic+0x1e/0x240 [ 2675.281108][ T9742] ? down_read+0x1ac/0x2e0 [ 2675.285549][ T9742] genl_rcv+0x28/0x40 [ 2675.289540][ T9742] netlink_unicast+0x7b1/0x930 [ 2675.294311][ T9742] netlink_sendmsg+0x8d0/0xbf0 [ 2675.299075][ T9742] ? netlink_getsockopt+0x590/0x590 [ 2675.304287][ T9742] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2675.309830][ T9742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2675.315113][ T9742] ? security_socket_sendmsg+0x80/0xa0 [ 2675.320588][ T9742] ? netlink_getsockopt+0x590/0x590 [ 2675.326050][ T9742] ____sys_sendmsg+0x61b/0x980 [ 2675.330830][ T9742] ? __asan_memset+0x22/0x40 [ 2675.335424][ T9742] ? __sys_sendmsg_sock+0x30/0x30 [ 2675.340471][ T9742] ? __import_iovec+0x5f2/0x850 [ 2675.345334][ T9742] ? import_iovec+0x73/0xa0 [ 2675.349840][ T9742] ___sys_sendmsg+0x2a6/0x360 [ 2675.354533][ T9742] ? __sys_sendmsg+0x2b0/0x2b0 [ 2675.359356][ T9742] __se_sys_sendmsg+0x1d0/0x2c0 [ 2675.364214][ T9742] ? __x64_sys_sendmsg+0x80/0x80 [ 2675.369178][ T9742] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2675.375076][ T9742] do_syscall_64+0x55/0xb0 [ 2675.379487][ T9742] ? clear_bhb_loop+0x40/0x90 [ 2675.384166][ T9742] ? clear_bhb_loop+0x40/0x90 [ 2675.388866][ T9742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2675.394774][ T9742] RIP: 0033:0x7ff9f819e159 [ 2675.399212][ T9742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2675.418835][ T9742] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2675.427254][ T9742] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2675.435238][ T9742] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2675.443214][ T9742] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2675.451184][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2675.459158][ T9742] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2675.467144][ T9742] [ 2675.504410][ T9752] netlink: 'syz.3.11577': attribute type 4 has an invalid length. [ 2675.513489][ T9752] __nla_validate_parse: 4 callbacks suppressed [ 2675.513527][ T9752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11577'. [ 2675.540192][ T9741] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11571'. [ 2675.558808][ T9750] netlink: 'syz.2.11575': attribute type 4 has an invalid length. [ 2675.583651][ T9750] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11575'. [ 2675.624073][ T9741] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2675.641144][ T9741] CPU: 0 PID: 9741 Comm: syz.1.11571 Not tainted syzkaller #0 [ 2675.648688][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2675.658782][ T9741] Call Trace: [ 2675.662092][ T9741] [ 2675.665045][ T9741] dump_stack_lvl+0x18c/0x250 [ 2675.669764][ T9741] ? show_regs_print_info+0x20/0x20 [ 2675.674982][ T9741] ? load_image+0x420/0x420 [ 2675.679485][ T9741] sysfs_warn_dup+0x8e/0xa0 [ 2675.683992][ T9741] sysfs_do_create_link_sd+0xc0/0x110 [ 2675.689359][ T9741] device_add_class_symlinks+0x1cf/0x240 [ 2675.695004][ T9741] device_add+0x4f9/0xc40 [ 2675.699329][ T9741] wiphy_register+0x1d99/0x2ac0 [ 2675.704223][ T9741] ? cfg80211_event_work+0x40/0x40 [ 2675.709384][ T9741] ? minstrel_ht_alloc+0x88a/0x990 [ 2675.714548][ T9741] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2675.720669][ T9741] ieee80211_register_hw+0x2dd8/0x3b30 [ 2675.726275][ T9741] ? ieee80211_register_hw+0xf11/0x3b30 [ 2675.731849][ T9741] ? ieee80211_tasklet_handler+0x20/0x20 [ 2675.737479][ T9741] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2675.743391][ T9741] ? __debug_object_init+0xec/0x450 [ 2675.748634][ T9741] ? __asan_memset+0x22/0x40 [ 2675.753265][ T9741] ? __hrtimer_init+0x189/0x270 [ 2675.758151][ T9741] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2675.763906][ T9741] ? mac80211_hwsim_free+0x220/0x220 [ 2675.769186][ T9741] ? kstrndup+0xbd/0x140 [ 2675.773451][ T9741] hwsim_new_radio_nl+0xdad/0x1a70 [ 2675.778583][ T9741] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2675.784410][ T9741] ? mark_lock+0x94/0x320 [ 2675.788765][ T9741] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2675.795154][ T9741] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2675.801329][ T9741] ? lockdep_hardirqs_on+0x98/0x150 [ 2675.806541][ T9741] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2675.812719][ T9741] genl_family_rcv_msg_doit+0x21a/0x310 [ 2675.818278][ T9741] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2675.824195][ T9741] ? lockdep_hardirqs_on+0x98/0x150 [ 2675.829439][ T9741] ? genl_rcv_msg+0x5ef/0x7a0 [ 2675.834151][ T9741] genl_rcv_msg+0x611/0x7a0 [ 2675.838686][ T9741] ? genl_bind+0x360/0x360 [ 2675.843118][ T9741] ? perf_trace_lock+0xfc/0x3b0 [ 2675.847980][ T9741] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2675.854412][ T9741] ? perf_trace_lock+0xfc/0x3b0 [ 2675.859283][ T9741] netlink_rcv_skb+0x235/0x4c0 [ 2675.864058][ T9741] ? genl_bind+0x360/0x360 [ 2675.868480][ T9741] ? netlink_ack+0x1160/0x1160 [ 2675.873268][ T9741] ? __lock_acquire+0x7d80/0x7d80 [ 2675.878303][ T9741] ? net_generic+0x1e/0x240 [ 2675.882822][ T9741] ? down_read+0x1ac/0x2e0 [ 2675.887248][ T9741] genl_rcv+0x28/0x40 [ 2675.891240][ T9741] netlink_unicast+0x7b1/0x930 [ 2675.896022][ T9741] netlink_sendmsg+0x8d0/0xbf0 [ 2675.900804][ T9741] ? netlink_getsockopt+0x590/0x590 [ 2675.906016][ T9741] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2675.911571][ T9741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2675.916871][ T9741] ? security_socket_sendmsg+0x80/0xa0 [ 2675.922334][ T9741] ? netlink_getsockopt+0x590/0x590 [ 2675.927541][ T9741] ____sys_sendmsg+0x61b/0x980 [ 2675.932324][ T9741] ? __asan_memset+0x22/0x40 [ 2675.936922][ T9741] ? __sys_sendmsg_sock+0x30/0x30 [ 2675.941954][ T9741] ? __import_iovec+0x5f2/0x850 [ 2675.946822][ T9741] ? import_iovec+0x73/0xa0 [ 2675.951338][ T9741] ___sys_sendmsg+0x2a6/0x360 [ 2675.956029][ T9741] ? __sys_sendmsg+0x2b0/0x2b0 [ 2675.960879][ T9741] __se_sys_sendmsg+0x1d0/0x2c0 [ 2675.965739][ T9741] ? __x64_sys_sendmsg+0x80/0x80 [ 2675.970696][ T9741] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2675.976610][ T9741] do_syscall_64+0x55/0xb0 [ 2675.981042][ T9741] ? clear_bhb_loop+0x40/0x90 [ 2675.985728][ T9741] ? clear_bhb_loop+0x40/0x90 [ 2675.990412][ T9741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2675.996313][ T9741] RIP: 0033:0x7f110779e159 [ 2676.000736][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2676.020363][ T9741] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2676.028787][ T9741] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2676.036764][ T9741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2676.044738][ T9741] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2676.052710][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2676.060684][ T9741] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2676.068682][ T9741] [ 2676.175444][ T9754] netlink: 'syz.3.11578': attribute type 6 has an invalid length. [ 2676.201636][ T9754] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11578'. [ 2676.374028][ T9754] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.11578'. [ 2676.453956][ T9754] netlink: 'syz.3.11578': attribute type 2 has an invalid length. [ 2676.992474][ T9774] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11581'. [ 2677.016492][ T9772] netlink: 'syz.2.11582': attribute type 4 has an invalid length. [ 2677.030350][ T9772] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11582'. [ 2677.059616][ T9774] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2677.093832][ T9774] CPU: 1 PID: 9774 Comm: syz.0.11581 Not tainted syzkaller #0 [ 2677.101376][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2677.111465][ T9774] Call Trace: [ 2677.114767][ T9774] [ 2677.117726][ T9774] dump_stack_lvl+0x18c/0x250 [ 2677.122455][ T9774] ? show_regs_print_info+0x20/0x20 [ 2677.127705][ T9774] ? load_image+0x420/0x420 [ 2677.132265][ T9774] sysfs_warn_dup+0x8e/0xa0 [ 2677.136812][ T9774] sysfs_do_create_link_sd+0xc0/0x110 [ 2677.142231][ T9774] device_add_class_symlinks+0x1cf/0x240 [ 2677.147911][ T9774] device_add+0x4f9/0xc40 [ 2677.152288][ T9774] wiphy_register+0x1d99/0x2ac0 [ 2677.157206][ T9774] ? cfg80211_event_work+0x40/0x40 [ 2677.162356][ T9774] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2677.168576][ T9774] ieee80211_register_hw+0x2dd8/0x3b30 [ 2677.174094][ T9774] ? ieee80211_register_hw+0xf11/0x3b30 [ 2677.179678][ T9774] ? ieee80211_tasklet_handler+0x20/0x20 [ 2677.185313][ T9774] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2677.191221][ T9774] ? __debug_object_init+0xec/0x450 [ 2677.196433][ T9774] ? __asan_memset+0x22/0x40 [ 2677.201042][ T9774] ? __hrtimer_init+0x189/0x270 [ 2677.205933][ T9774] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2677.211683][ T9774] ? mac80211_hwsim_free+0x220/0x220 [ 2677.216970][ T9774] ? rcu_is_watching+0x15/0xb0 [ 2677.221750][ T9774] ? kstrndup+0xbd/0x140 [ 2677.226015][ T9774] hwsim_new_radio_nl+0xdad/0x1a70 [ 2677.231155][ T9774] ? __nla_validate+0x50/0x50 [ 2677.235901][ T9774] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2677.242281][ T9774] ? __nla_parse+0x40/0x50 [ 2677.246745][ T9774] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2677.253124][ T9774] genl_family_rcv_msg_doit+0x21a/0x310 [ 2677.258722][ T9774] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2677.264657][ T9774] ? lockdep_hardirqs_on+0x98/0x150 [ 2677.269917][ T9774] ? genl_rcv_msg+0x5ef/0x7a0 [ 2677.274683][ T9774] genl_rcv_msg+0x611/0x7a0 [ 2677.279223][ T9774] ? genl_bind+0x360/0x360 [ 2677.283680][ T9774] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2677.290023][ T9774] ? perf_trace_lock+0xfc/0x3b0 [ 2677.294889][ T9774] netlink_rcv_skb+0x235/0x4c0 [ 2677.299658][ T9774] ? genl_bind+0x360/0x360 [ 2677.304080][ T9774] ? netlink_ack+0x1160/0x1160 [ 2677.308862][ T9774] ? __lock_acquire+0x7d80/0x7d80 [ 2677.313898][ T9774] ? down_read+0x1ac/0x2e0 [ 2677.318328][ T9774] genl_rcv+0x28/0x40 [ 2677.322310][ T9774] netlink_unicast+0x7b1/0x930 [ 2677.327089][ T9774] netlink_sendmsg+0x8d0/0xbf0 [ 2677.331869][ T9774] ? netlink_getsockopt+0x590/0x590 [ 2677.337076][ T9774] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2677.342625][ T9774] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2677.347920][ T9774] ? security_socket_sendmsg+0x80/0xa0 [ 2677.353383][ T9774] ? netlink_getsockopt+0x590/0x590 [ 2677.358595][ T9774] ____sys_sendmsg+0x61b/0x980 [ 2677.363372][ T9774] ? __asan_memset+0x22/0x40 [ 2677.367967][ T9774] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.373000][ T9774] ? __import_iovec+0x5f2/0x850 [ 2677.377866][ T9774] ? import_iovec+0x73/0xa0 [ 2677.382382][ T9774] ___sys_sendmsg+0x2a6/0x360 [ 2677.387070][ T9774] ? __sys_sendmsg+0x2b0/0x2b0 [ 2677.391887][ T9774] __se_sys_sendmsg+0x1d0/0x2c0 [ 2677.396742][ T9774] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.401701][ T9774] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2677.407607][ T9774] do_syscall_64+0x55/0xb0 [ 2677.412033][ T9774] ? clear_bhb_loop+0x40/0x90 [ 2677.416710][ T9774] ? clear_bhb_loop+0x40/0x90 [ 2677.421394][ T9774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.427287][ T9774] RIP: 0033:0x7ff9f819e159 [ 2677.431705][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.451314][ T9774] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.459730][ T9774] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2677.467700][ T9774] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2677.475668][ T9774] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2677.483641][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2677.491612][ T9774] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2677.499602][ T9774] [ 2677.531776][ T9781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11584'. [ 2677.617442][ T9781] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2677.641436][ T9781] CPU: 0 PID: 9781 Comm: syz.1.11584 Not tainted syzkaller #0 [ 2677.648982][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2677.659078][ T9781] Call Trace: [ 2677.662384][ T9781] [ 2677.665339][ T9781] dump_stack_lvl+0x18c/0x250 [ 2677.670052][ T9781] ? show_regs_print_info+0x20/0x20 [ 2677.675282][ T9781] ? load_image+0x420/0x420 [ 2677.679809][ T9781] sysfs_warn_dup+0x8e/0xa0 [ 2677.684323][ T9781] sysfs_do_create_link_sd+0xc0/0x110 [ 2677.689705][ T9781] device_add_class_symlinks+0x1cf/0x240 [ 2677.695350][ T9781] device_add+0x4f9/0xc40 [ 2677.699689][ T9781] wiphy_register+0x1d99/0x2ac0 [ 2677.704566][ T9781] ? cfg80211_event_work+0x40/0x40 [ 2677.709680][ T9781] ? minstrel_ht_alloc+0x88a/0x990 [ 2677.714804][ T9781] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2677.720894][ T9781] ieee80211_register_hw+0x2dd8/0x3b30 [ 2677.726515][ T9781] ? ieee80211_register_hw+0xf11/0x3b30 [ 2677.732078][ T9781] ? ieee80211_tasklet_handler+0x20/0x20 [ 2677.737712][ T9781] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2677.743611][ T9781] ? __debug_object_init+0xec/0x450 [ 2677.748821][ T9781] ? __asan_memset+0x22/0x40 [ 2677.753424][ T9781] ? __hrtimer_init+0x189/0x270 [ 2677.758309][ T9781] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2677.764057][ T9781] ? mac80211_hwsim_free+0x220/0x220 [ 2677.769348][ T9781] ? rcu_is_watching+0x15/0xb0 [ 2677.774122][ T9781] ? kstrndup+0xbd/0x140 [ 2677.778379][ T9781] hwsim_new_radio_nl+0xdad/0x1a70 [ 2677.783501][ T9781] ? __nla_validate+0x50/0x50 [ 2677.788200][ T9781] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2677.794537][ T9781] ? __nla_parse+0x24/0x50 [ 2677.798968][ T9781] ? __nla_parse+0x40/0x50 [ 2677.803398][ T9781] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2677.809734][ T9781] genl_family_rcv_msg_doit+0x21a/0x310 [ 2677.815291][ T9781] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2677.821200][ T9781] ? bpf_lsm_capable+0x9/0x10 [ 2677.825884][ T9781] ? security_capable+0x89/0xb0 [ 2677.830744][ T9781] genl_rcv_msg+0x611/0x7a0 [ 2677.835267][ T9781] ? genl_bind+0x360/0x360 [ 2677.839683][ T9781] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2677.846015][ T9781] ? perf_trace_lock+0xfc/0x3b0 [ 2677.850876][ T9781] netlink_rcv_skb+0x235/0x4c0 [ 2677.855642][ T9781] ? genl_bind+0x360/0x360 [ 2677.860058][ T9781] ? netlink_ack+0x1160/0x1160 [ 2677.864835][ T9781] ? __lock_acquire+0x7d80/0x7d80 [ 2677.869877][ T9781] ? down_read+0x1ac/0x2e0 [ 2677.874307][ T9781] genl_rcv+0x28/0x40 [ 2677.878300][ T9781] netlink_unicast+0x7b1/0x930 [ 2677.883078][ T9781] netlink_sendmsg+0x8d0/0xbf0 [ 2677.887855][ T9781] ? netlink_getsockopt+0x590/0x590 [ 2677.893061][ T9781] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2677.898614][ T9781] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2677.903904][ T9781] ? security_socket_sendmsg+0x80/0xa0 [ 2677.909368][ T9781] ? netlink_getsockopt+0x590/0x590 [ 2677.914573][ T9781] ____sys_sendmsg+0x61b/0x980 [ 2677.919350][ T9781] ? __asan_memset+0x22/0x40 [ 2677.923951][ T9781] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.928974][ T9781] ? __import_iovec+0x5f2/0x850 [ 2677.933844][ T9781] ? import_iovec+0x73/0xa0 [ 2677.938358][ T9781] ___sys_sendmsg+0x2a6/0x360 [ 2677.943050][ T9781] ? __sys_sendmsg+0x2b0/0x2b0 [ 2677.947836][ T9781] ? ktime_get+0x7f/0x280 [ 2677.952168][ T9781] ? trace_call_bpf+0xc3/0x6c0 [ 2677.956961][ T9781] __se_sys_sendmsg+0x1d0/0x2c0 [ 2677.961817][ T9781] ? perf_trace_preemptirq_template+0x269/0x330 [ 2677.968069][ T9781] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.973025][ T9781] ? lockdep_hardirqs_on+0x98/0x150 [ 2677.978255][ T9781] do_syscall_64+0x55/0xb0 [ 2677.982674][ T9781] ? clear_bhb_loop+0x40/0x90 [ 2677.987364][ T9781] ? clear_bhb_loop+0x40/0x90 [ 2677.992046][ T9781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.997950][ T9781] RIP: 0033:0x7f110779e159 [ 2678.002367][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2678.021981][ T9781] RSP: 002b:00007f1108724028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2678.030402][ T9781] RAX: ffffffffffffffda RBX: 00007f1107a26090 RCX: 00007f110779e159 [ 2678.038405][ T9781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2678.046392][ T9781] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2678.054379][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2678.062363][ T9781] R13: 00007f1107a26128 R14: 00007f1107a26090 R15: 00007ffc6ea53458 [ 2678.070357][ T9781] [ 2678.372368][ T9791] netlink: 'syz.1.11588': attribute type 4 has an invalid length. [ 2678.389356][ T9791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11588'. [ 2678.550501][ T9795] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11591'. [ 2678.566874][ T9798] netlink: 'syz.1.11593': attribute type 4 has an invalid length. [ 2678.605005][ T9795] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2678.631108][ T9795] CPU: 0 PID: 9795 Comm: syz.2.11591 Not tainted syzkaller #0 [ 2678.638648][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2678.648745][ T9795] Call Trace: [ 2678.652067][ T9795] [ 2678.655027][ T9795] dump_stack_lvl+0x18c/0x250 [ 2678.659751][ T9795] ? show_regs_print_info+0x20/0x20 [ 2678.664992][ T9795] ? load_image+0x420/0x420 [ 2678.669557][ T9795] sysfs_warn_dup+0x8e/0xa0 [ 2678.674095][ T9795] sysfs_do_create_link_sd+0xc0/0x110 [ 2678.679492][ T9795] device_add_class_symlinks+0x1cf/0x240 [ 2678.685184][ T9795] device_add+0x4f9/0xc40 [ 2678.689571][ T9795] wiphy_register+0x1d99/0x2ac0 [ 2678.694501][ T9795] ? cfg80211_event_work+0x40/0x40 [ 2678.699670][ T9795] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2678.705901][ T9795] ieee80211_register_hw+0x2dd8/0x3b30 [ 2678.711434][ T9795] ? ieee80211_register_hw+0xf11/0x3b30 [ 2678.717051][ T9795] ? ieee80211_tasklet_handler+0x20/0x20 [ 2678.722736][ T9795] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2678.728667][ T9795] ? __debug_object_init+0xec/0x450 [ 2678.733899][ T9795] ? __asan_memset+0x22/0x40 [ 2678.738509][ T9795] ? __hrtimer_init+0x189/0x270 [ 2678.743393][ T9795] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2678.749190][ T9795] ? mac80211_hwsim_free+0x220/0x220 [ 2678.754516][ T9795] ? rcu_is_watching+0x15/0xb0 [ 2678.759324][ T9795] ? kstrndup+0xbd/0x140 [ 2678.763620][ T9795] hwsim_new_radio_nl+0xdad/0x1a70 [ 2678.768765][ T9795] ? __nla_validate+0x50/0x50 [ 2678.773462][ T9795] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2678.779816][ T9795] ? __nla_parse+0x40/0x50 [ 2678.784251][ T9795] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2678.790590][ T9795] genl_family_rcv_msg_doit+0x21a/0x310 [ 2678.796148][ T9795] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2678.802075][ T9795] ? bpf_lsm_capable+0x9/0x10 [ 2678.806781][ T9795] ? security_capable+0x89/0xb0 [ 2678.811638][ T9795] genl_rcv_msg+0x611/0x7a0 [ 2678.816178][ T9795] ? genl_bind+0x360/0x360 [ 2678.820624][ T9795] ? perf_trace_lock+0xfc/0x3b0 [ 2678.825488][ T9795] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2678.831818][ T9795] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2678.837650][ T9795] netlink_rcv_skb+0x235/0x4c0 [ 2678.842440][ T9795] ? genl_bind+0x360/0x360 [ 2678.846885][ T9795] ? netlink_ack+0x1160/0x1160 [ 2678.851668][ T9795] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2678.857835][ T9795] ? down_read+0x1ac/0x2e0 [ 2678.862270][ T9795] genl_rcv+0x28/0x40 [ 2678.866263][ T9795] netlink_unicast+0x7b1/0x930 [ 2678.871061][ T9795] netlink_sendmsg+0x8d0/0xbf0 [ 2678.875853][ T9795] ? netlink_getsockopt+0x590/0x590 [ 2678.881079][ T9795] ? netlink_getsockopt+0x590/0x590 [ 2678.886309][ T9795] ____sys_sendmsg+0x61b/0x980 [ 2678.891094][ T9795] ? __asan_memset+0x22/0x40 [ 2678.895688][ T9795] ? __sys_sendmsg_sock+0x30/0x30 [ 2678.900708][ T9795] ? __import_iovec+0x5f2/0x850 [ 2678.905574][ T9795] ? import_iovec+0x73/0xa0 [ 2678.910088][ T9795] ___sys_sendmsg+0x2a6/0x360 [ 2678.914796][ T9795] ? __sys_sendmsg+0x2b0/0x2b0 [ 2678.919596][ T9795] ? ktime_get+0x7f/0x280 [ 2678.923955][ T9795] ? trace_call_bpf+0xc3/0x6c0 [ 2678.928782][ T9795] __se_sys_sendmsg+0x1d0/0x2c0 [ 2678.933639][ T9795] ? perf_trace_preemptirq_template+0x269/0x330 [ 2678.939905][ T9795] ? __x64_sys_sendmsg+0x80/0x80 [ 2678.944872][ T9795] ? lockdep_hardirqs_on+0x98/0x150 [ 2678.950087][ T9795] do_syscall_64+0x55/0xb0 [ 2678.954514][ T9795] ? clear_bhb_loop+0x40/0x90 [ 2678.959203][ T9795] ? clear_bhb_loop+0x40/0x90 [ 2678.963932][ T9795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2678.969874][ T9795] RIP: 0033:0x7fe73a39e159 [ 2678.974297][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2678.993907][ T9795] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2679.002355][ T9795] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2679.010328][ T9795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2679.018309][ T9795] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2679.026286][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.034260][ T9795] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2679.042251][ T9795] [ 2679.063064][ T9806] netlink: 'syz.1.11597': attribute type 4 has an invalid length. [ 2679.508808][ T9824] netlink: 'syz.0.11606': attribute type 4 has an invalid length. [ 2679.659914][ T9828] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2679.668435][ T9828] CPU: 0 PID: 9828 Comm: syz.0.11609 Not tainted syzkaller #0 [ 2679.676011][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2679.686078][ T9828] Call Trace: [ 2679.689388][ T9828] [ 2679.692320][ T9828] dump_stack_lvl+0x18c/0x250 [ 2679.696996][ T9828] ? show_regs_print_info+0x20/0x20 [ 2679.702217][ T9828] ? load_image+0x420/0x420 [ 2679.706770][ T9828] sysfs_warn_dup+0x8e/0xa0 [ 2679.711293][ T9828] sysfs_do_create_link_sd+0xc0/0x110 [ 2679.716675][ T9828] device_add_class_symlinks+0x1cf/0x240 [ 2679.722322][ T9828] device_add+0x4f9/0xc40 [ 2679.726668][ T9828] wiphy_register+0x1d99/0x2ac0 [ 2679.731543][ T9828] ? cfg80211_event_work+0x40/0x40 [ 2679.736662][ T9828] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2679.742845][ T9828] ieee80211_register_hw+0x2dd8/0x3b30 [ 2679.748332][ T9828] ? ieee80211_register_hw+0xf11/0x3b30 [ 2679.753893][ T9828] ? ieee80211_tasklet_handler+0x20/0x20 [ 2679.759529][ T9828] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2679.765431][ T9828] ? __debug_object_init+0xec/0x450 [ 2679.770640][ T9828] ? __asan_memset+0x22/0x40 [ 2679.775242][ T9828] ? __hrtimer_init+0x189/0x270 [ 2679.780102][ T9828] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2679.785853][ T9828] ? mac80211_hwsim_free+0x220/0x220 [ 2679.791137][ T9828] ? rcu_is_watching+0x15/0xb0 [ 2679.795905][ T9828] ? kstrndup+0xbd/0x140 [ 2679.800163][ T9828] hwsim_new_radio_nl+0xdad/0x1a70 [ 2679.805286][ T9828] ? __nla_validate+0x50/0x50 [ 2679.809982][ T9828] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2679.816327][ T9828] ? __nla_parse+0x40/0x50 [ 2679.820761][ T9828] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2679.827106][ T9828] genl_family_rcv_msg_doit+0x21a/0x310 [ 2679.832668][ T9828] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2679.838573][ T9828] ? bpf_lsm_capable+0x9/0x10 [ 2679.843263][ T9828] ? security_capable+0x89/0xb0 [ 2679.848131][ T9828] genl_rcv_msg+0x611/0x7a0 [ 2679.852650][ T9828] ? genl_bind+0x360/0x360 [ 2679.857068][ T9828] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2679.863405][ T9828] ? perf_trace_lock+0xfc/0x3b0 [ 2679.868267][ T9828] netlink_rcv_skb+0x235/0x4c0 [ 2679.873040][ T9828] ? genl_bind+0x360/0x360 [ 2679.877467][ T9828] ? netlink_ack+0x1160/0x1160 [ 2679.882245][ T9828] ? __lock_acquire+0x7d80/0x7d80 [ 2679.887284][ T9828] ? down_read+0x1ac/0x2e0 [ 2679.891715][ T9828] genl_rcv+0x28/0x40 [ 2679.895714][ T9828] netlink_unicast+0x7b1/0x930 [ 2679.900492][ T9828] netlink_sendmsg+0x8d0/0xbf0 [ 2679.905273][ T9828] ? netlink_getsockopt+0x590/0x590 [ 2679.910480][ T9828] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2679.916032][ T9828] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2679.921324][ T9828] ? security_socket_sendmsg+0x80/0xa0 [ 2679.926786][ T9828] ? netlink_getsockopt+0x590/0x590 [ 2679.932017][ T9828] ____sys_sendmsg+0x61b/0x980 [ 2679.936794][ T9828] ? __asan_memset+0x22/0x40 [ 2679.941398][ T9828] ? __sys_sendmsg_sock+0x30/0x30 [ 2679.946426][ T9828] ? __import_iovec+0x5f2/0x850 [ 2679.951302][ T9828] ? import_iovec+0x73/0xa0 [ 2679.955852][ T9828] ___sys_sendmsg+0x2a6/0x360 [ 2679.960541][ T9828] ? __sys_sendmsg+0x2b0/0x2b0 [ 2679.965361][ T9828] __se_sys_sendmsg+0x1d0/0x2c0 [ 2679.970218][ T9828] ? __x64_sys_sendmsg+0x80/0x80 [ 2679.975175][ T9828] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2679.981081][ T9828] do_syscall_64+0x55/0xb0 [ 2679.985498][ T9828] ? clear_bhb_loop+0x40/0x90 [ 2679.990175][ T9828] ? clear_bhb_loop+0x40/0x90 [ 2679.994859][ T9828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2680.000762][ T9828] RIP: 0033:0x7ff9f819e159 [ 2680.005192][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2680.024812][ T9828] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2680.033238][ T9828] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2680.041210][ T9828] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2680.049187][ T9828] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2680.057159][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2680.065139][ T9828] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2680.073133][ T9828] [ 2680.437437][ T9838] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2680.446717][ T9838] CPU: 1 PID: 9838 Comm: syz.3.11614 Not tainted syzkaller #0 [ 2680.454251][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2680.464354][ T9838] Call Trace: [ 2680.467671][ T9838] [ 2680.470657][ T9838] dump_stack_lvl+0x18c/0x250 [ 2680.475445][ T9838] ? show_regs_print_info+0x20/0x20 [ 2680.480696][ T9838] ? load_image+0x420/0x420 [ 2680.485263][ T9838] sysfs_warn_dup+0x8e/0xa0 [ 2680.489809][ T9838] sysfs_do_create_link_sd+0xc0/0x110 [ 2680.495234][ T9838] device_add_class_symlinks+0x1cf/0x240 [ 2680.500919][ T9838] device_add+0x4f9/0xc40 [ 2680.505302][ T9838] wiphy_register+0x1d99/0x2ac0 [ 2680.510226][ T9838] ? cfg80211_event_work+0x40/0x40 [ 2680.515381][ T9838] ? minstrel_ht_alloc+0x88a/0x990 [ 2680.520546][ T9838] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2680.526666][ T9838] ieee80211_register_hw+0x2dd8/0x3b30 [ 2680.532191][ T9838] ? ieee80211_register_hw+0xf11/0x3b30 [ 2680.537802][ T9838] ? ieee80211_tasklet_handler+0x20/0x20 [ 2680.543476][ T9838] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2680.549418][ T9838] ? __debug_object_init+0xec/0x450 [ 2680.554668][ T9838] ? __asan_memset+0x22/0x40 [ 2680.559315][ T9838] ? __hrtimer_init+0x189/0x270 [ 2680.564224][ T9838] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2680.570022][ T9838] ? mac80211_hwsim_free+0x220/0x220 [ 2680.575352][ T9838] ? rcu_is_watching+0x15/0xb0 [ 2680.580511][ T9838] ? kstrndup+0xbd/0x140 [ 2680.584813][ T9838] hwsim_new_radio_nl+0xdad/0x1a70 [ 2680.589977][ T9838] ? __nla_validate+0x50/0x50 [ 2680.594784][ T9838] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2680.601185][ T9838] ? __nla_parse+0x40/0x50 [ 2680.605665][ T9838] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2680.612056][ T9838] genl_family_rcv_msg_doit+0x21a/0x310 [ 2680.617666][ T9838] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2680.623623][ T9838] ? bpf_lsm_capable+0x9/0x10 [ 2680.628383][ T9838] ? security_capable+0x89/0xb0 [ 2680.633288][ T9838] genl_rcv_msg+0x611/0x7a0 [ 2680.637848][ T9838] ? genl_bind+0x360/0x360 [ 2680.642314][ T9838] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2680.648676][ T9838] ? lockdep_hardirqs_on+0x98/0x150 [ 2680.653927][ T9838] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2680.660148][ T9838] netlink_rcv_skb+0x235/0x4c0 [ 2680.664958][ T9838] ? genl_bind+0x360/0x360 [ 2680.669417][ T9838] ? netlink_ack+0x1160/0x1160 [ 2680.674237][ T9838] ? __lock_acquire+0x7d80/0x7d80 [ 2680.679305][ T9838] ? net_generic+0x1e/0x240 [ 2680.683864][ T9838] ? down_read+0x1ac/0x2e0 [ 2680.688329][ T9838] genl_rcv+0x28/0x40 [ 2680.692348][ T9838] netlink_unicast+0x7b1/0x930 [ 2680.697163][ T9838] netlink_sendmsg+0x8d0/0xbf0 [ 2680.701977][ T9838] ? netlink_getsockopt+0x590/0x590 [ 2680.707218][ T9838] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2680.712806][ T9838] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2680.718141][ T9838] ? security_socket_sendmsg+0x80/0xa0 [ 2680.723634][ T9838] ? netlink_getsockopt+0x590/0x590 [ 2680.728876][ T9838] ____sys_sendmsg+0x61b/0x980 [ 2680.733690][ T9838] ? __asan_memset+0x22/0x40 [ 2680.738324][ T9838] ? __sys_sendmsg_sock+0x30/0x30 [ 2680.743387][ T9838] ? __import_iovec+0x5f2/0x850 [ 2680.748288][ T9838] ? import_iovec+0x73/0xa0 [ 2680.752838][ T9838] ___sys_sendmsg+0x2a6/0x360 [ 2680.757569][ T9838] ? __sys_sendmsg+0x2b0/0x2b0 [ 2680.762439][ T9838] __se_sys_sendmsg+0x1d0/0x2c0 [ 2680.767328][ T9838] ? __x64_sys_sendmsg+0x80/0x80 [ 2680.772321][ T9838] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2680.778263][ T9838] do_syscall_64+0x55/0xb0 [ 2680.782713][ T9838] ? clear_bhb_loop+0x40/0x90 [ 2680.787425][ T9838] ? clear_bhb_loop+0x40/0x90 [ 2680.792146][ T9838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2680.798089][ T9838] RIP: 0033:0x7ffbf1b9e159 [ 2680.802544][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2680.822225][ T9838] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2680.830689][ T9838] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2680.838703][ T9838] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2680.846719][ T9838] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2680.854730][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2680.862741][ T9838] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2680.870772][ T9838] [ 2681.377269][ T9853] netlink: 'syz.3.11620': attribute type 4 has an invalid length. [ 2681.387203][ T9853] __nla_validate_parse: 5 callbacks suppressed [ 2681.387243][ T9853] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11620'. [ 2682.111575][ T9878] netlink: 'syz.0.11631': attribute type 4 has an invalid length. [ 2682.120209][ T9878] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11631'. [ 2682.960735][ T9904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11642'. [ 2682.983882][ T9904] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2682.992082][ T9904] CPU: 0 PID: 9904 Comm: syz.1.11642 Not tainted syzkaller #0 [ 2682.999543][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2683.009605][ T9904] Call Trace: [ 2683.012899][ T9904] [ 2683.015836][ T9904] dump_stack_lvl+0x18c/0x250 [ 2683.020541][ T9904] ? show_regs_print_info+0x20/0x20 [ 2683.025747][ T9904] ? load_image+0x420/0x420 [ 2683.030262][ T9904] sysfs_warn_dup+0x8e/0xa0 [ 2683.034771][ T9904] sysfs_do_create_link_sd+0xc0/0x110 [ 2683.040149][ T9904] device_add_class_symlinks+0x1cf/0x240 [ 2683.045789][ T9904] device_add+0x4f9/0xc40 [ 2683.050127][ T9904] wiphy_register+0x1d99/0x2ac0 [ 2683.055011][ T9904] ? cfg80211_event_work+0x40/0x40 [ 2683.060126][ T9904] ? minstrel_ht_alloc+0x88a/0x990 [ 2683.065248][ T9904] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2683.071331][ T9904] ieee80211_register_hw+0x2dd8/0x3b30 [ 2683.076806][ T9904] ? ieee80211_register_hw+0xf11/0x3b30 [ 2683.082454][ T9904] ? ieee80211_tasklet_handler+0x20/0x20 [ 2683.088095][ T9904] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2683.093999][ T9904] ? __debug_object_init+0xec/0x450 [ 2683.099204][ T9904] ? __asan_memset+0x22/0x40 [ 2683.103799][ T9904] ? __hrtimer_init+0x189/0x270 [ 2683.108655][ T9904] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2683.114407][ T9904] ? mac80211_hwsim_free+0x220/0x220 [ 2683.119691][ T9904] ? rcu_is_watching+0x15/0xb0 [ 2683.124462][ T9904] ? kstrndup+0xbd/0x140 [ 2683.128722][ T9904] hwsim_new_radio_nl+0xdad/0x1a70 [ 2683.133838][ T9904] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2683.139825][ T9904] ? lock_chain_count+0x20/0x20 [ 2683.144693][ T9904] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2683.151035][ T9904] ? __nla_parse+0x40/0x50 [ 2683.155481][ T9904] ? __nla_parse+0x40/0x50 [ 2683.159958][ T9904] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2683.166310][ T9904] genl_family_rcv_msg_doit+0x21a/0x310 [ 2683.171900][ T9904] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2683.177804][ T9904] ? bpf_lsm_capable+0x9/0x10 [ 2683.182486][ T9904] ? security_capable+0x89/0xb0 [ 2683.187349][ T9904] genl_rcv_msg+0x611/0x7a0 [ 2683.191862][ T9904] ? genl_bind+0x360/0x360 [ 2683.196279][ T9904] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2683.203128][ T9904] ? lockdep_hardirqs_on+0x98/0x150 [ 2683.208330][ T9904] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2683.214499][ T9904] netlink_rcv_skb+0x235/0x4c0 [ 2683.219276][ T9904] ? genl_bind+0x360/0x360 [ 2683.223731][ T9904] ? netlink_ack+0x1160/0x1160 [ 2683.228511][ T9904] ? __lock_acquire+0x7d80/0x7d80 [ 2683.233550][ T9904] ? net_generic+0x1e/0x240 [ 2683.238063][ T9904] ? down_read+0x1ac/0x2e0 [ 2683.242486][ T9904] genl_rcv+0x28/0x40 [ 2683.246506][ T9904] netlink_unicast+0x7b1/0x930 [ 2683.251314][ T9904] netlink_sendmsg+0x8d0/0xbf0 [ 2683.256094][ T9904] ? lockdep_hardirqs_on+0x98/0x150 [ 2683.261313][ T9904] ? netlink_getsockopt+0x590/0x590 [ 2683.266518][ T9904] ? bpf_lsm_socket_accept+0x10/0x10 [ 2683.271817][ T9904] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2683.277110][ T9904] ? security_socket_sendmsg+0x80/0xa0 [ 2683.282569][ T9904] ? netlink_getsockopt+0x590/0x590 [ 2683.287771][ T9904] ____sys_sendmsg+0x61b/0x980 [ 2683.292560][ T9904] ? __asan_memset+0x22/0x40 [ 2683.297155][ T9904] ? __sys_sendmsg_sock+0x30/0x30 [ 2683.302180][ T9904] ? __import_iovec+0x5f2/0x850 [ 2683.307050][ T9904] ? import_iovec+0x73/0xa0 [ 2683.311570][ T9904] ___sys_sendmsg+0x2a6/0x360 [ 2683.316254][ T9904] ? __sys_sendmsg+0x2b0/0x2b0 [ 2683.321042][ T9904] ? ktime_get+0x7f/0x280 [ 2683.325460][ T9904] ? trace_call_bpf+0xc3/0x6c0 [ 2683.330249][ T9904] __se_sys_sendmsg+0x1d0/0x2c0 [ 2683.335101][ T9904] ? perf_trace_preemptirq_template+0x269/0x330 [ 2683.341354][ T9904] ? __x64_sys_sendmsg+0x80/0x80 [ 2683.346315][ T9904] ? lockdep_hardirqs_on+0x98/0x150 [ 2683.351559][ T9904] do_syscall_64+0x55/0xb0 [ 2683.355982][ T9904] ? clear_bhb_loop+0x40/0x90 [ 2683.360658][ T9904] ? clear_bhb_loop+0x40/0x90 [ 2683.365340][ T9904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2683.371236][ T9904] RIP: 0033:0x7f110779e159 [ 2683.375650][ T9904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2683.395259][ T9904] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2683.403680][ T9904] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2683.411653][ T9904] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2683.419623][ T9904] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2683.427610][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2683.435591][ T9904] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2683.443581][ T9904] [ 2683.585674][ T9906] netlink: 'syz.1.11643': attribute type 4 has an invalid length. [ 2683.599279][ T9906] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11643'. [ 2683.924687][ T9920] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11649'. [ 2683.948219][ T9920] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2683.956745][ T9920] CPU: 1 PID: 9920 Comm: syz.1.11649 Not tainted syzkaller #0 [ 2683.964240][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2683.974297][ T9920] Call Trace: [ 2683.977608][ T9920] [ 2683.980548][ T9920] dump_stack_lvl+0x18c/0x250 [ 2683.985247][ T9920] ? show_regs_print_info+0x20/0x20 [ 2683.990471][ T9920] ? load_image+0x420/0x420 [ 2683.995005][ T9920] sysfs_warn_dup+0x8e/0xa0 [ 2683.999514][ T9920] sysfs_do_create_link_sd+0xc0/0x110 [ 2684.004893][ T9920] device_add_class_symlinks+0x1cf/0x240 [ 2684.010579][ T9920] device_add+0x4f9/0xc40 [ 2684.014937][ T9920] wiphy_register+0x1d99/0x2ac0 [ 2684.019835][ T9920] ? cfg80211_event_work+0x40/0x40 [ 2684.024956][ T9920] ? minstrel_ht_alloc+0x88a/0x990 [ 2684.030076][ T9920] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2684.036152][ T9920] ieee80211_register_hw+0x2dd8/0x3b30 [ 2684.041626][ T9920] ? ieee80211_register_hw+0xf11/0x3b30 [ 2684.047185][ T9920] ? ieee80211_tasklet_handler+0x20/0x20 [ 2684.052821][ T9920] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2684.058718][ T9920] ? __debug_object_init+0xec/0x450 [ 2684.063936][ T9920] ? __asan_memset+0x22/0x40 [ 2684.068543][ T9920] ? __hrtimer_init+0x189/0x270 [ 2684.073409][ T9920] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2684.079162][ T9920] ? mac80211_hwsim_free+0x220/0x220 [ 2684.084450][ T9920] ? rcu_is_watching+0x15/0xb0 [ 2684.089222][ T9920] ? kstrndup+0xbd/0x140 [ 2684.093482][ T9920] hwsim_new_radio_nl+0xdad/0x1a70 [ 2684.098601][ T9920] ? __nla_validate+0x50/0x50 [ 2684.103329][ T9920] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2684.109679][ T9920] ? __nla_parse+0x40/0x50 [ 2684.114112][ T9920] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2684.120452][ T9920] genl_family_rcv_msg_doit+0x21a/0x310 [ 2684.126022][ T9920] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2684.131933][ T9920] ? bpf_lsm_capable+0x9/0x10 [ 2684.136617][ T9920] ? security_capable+0x89/0xb0 [ 2684.141479][ T9920] genl_rcv_msg+0x611/0x7a0 [ 2684.145993][ T9920] ? genl_bind+0x360/0x360 [ 2684.150412][ T9920] ? perf_trace_lock+0xfc/0x3b0 [ 2684.155267][ T9920] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2684.161603][ T9920] ? perf_trace_lock+0xfc/0x3b0 [ 2684.166468][ T9920] netlink_rcv_skb+0x235/0x4c0 [ 2684.171239][ T9920] ? genl_bind+0x360/0x360 [ 2684.175663][ T9920] ? netlink_ack+0x1160/0x1160 [ 2684.180465][ T9920] ? __lock_acquire+0x7d80/0x7d80 [ 2684.185500][ T9920] ? net_generic+0x1e/0x240 [ 2684.190031][ T9920] ? down_read+0x1ac/0x2e0 [ 2684.194465][ T9920] genl_rcv+0x28/0x40 [ 2684.198453][ T9920] netlink_unicast+0x7b1/0x930 [ 2684.203232][ T9920] netlink_sendmsg+0x8d0/0xbf0 [ 2684.208007][ T9920] ? netlink_getsockopt+0x590/0x590 [ 2684.213217][ T9920] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2684.218771][ T9920] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2684.224059][ T9920] ? security_socket_sendmsg+0x80/0xa0 [ 2684.229523][ T9920] ? netlink_getsockopt+0x590/0x590 [ 2684.234727][ T9920] ____sys_sendmsg+0x61b/0x980 [ 2684.239502][ T9920] ? __asan_memset+0x22/0x40 [ 2684.244101][ T9920] ? __sys_sendmsg_sock+0x30/0x30 [ 2684.249129][ T9920] ? __import_iovec+0x5f2/0x850 [ 2684.253996][ T9920] ? import_iovec+0x73/0xa0 [ 2684.258545][ T9920] ___sys_sendmsg+0x2a6/0x360 [ 2684.263235][ T9920] ? __sys_sendmsg+0x2b0/0x2b0 [ 2684.268034][ T9920] ? ktime_get+0x7f/0x280 [ 2684.272370][ T9920] ? trace_call_bpf+0xc3/0x6c0 [ 2684.277161][ T9920] __se_sys_sendmsg+0x1d0/0x2c0 [ 2684.282024][ T9920] ? perf_trace_preemptirq_template+0x269/0x330 [ 2684.288274][ T9920] ? __x64_sys_sendmsg+0x80/0x80 [ 2684.293232][ T9920] ? lockdep_hardirqs_on+0x98/0x150 [ 2684.298444][ T9920] do_syscall_64+0x55/0xb0 [ 2684.302862][ T9920] ? clear_bhb_loop+0x40/0x90 [ 2684.307550][ T9920] ? clear_bhb_loop+0x40/0x90 [ 2684.312236][ T9920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2684.318137][ T9920] RIP: 0033:0x7f110779e159 [ 2684.322558][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2684.342173][ T9920] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2684.350590][ T9920] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2684.358567][ T9920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2684.366542][ T9920] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2684.374514][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2684.382490][ T9920] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2684.390501][ T9920] [ 2686.812575][ T9929] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11653'. [ 2686.879192][ T9929] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2686.889687][ T9929] CPU: 0 PID: 9929 Comm: syz.0.11653 Not tainted syzkaller #0 [ 2686.897233][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2686.907300][ T9929] Call Trace: [ 2686.910585][ T9929] [ 2686.913545][ T9929] dump_stack_lvl+0x18c/0x250 [ 2686.918233][ T9929] ? show_regs_print_info+0x20/0x20 [ 2686.923443][ T9929] ? load_image+0x420/0x420 [ 2686.927956][ T9929] sysfs_warn_dup+0x8e/0xa0 [ 2686.932467][ T9929] sysfs_do_create_link_sd+0xc0/0x110 [ 2686.937843][ T9929] device_add_class_symlinks+0x1cf/0x240 [ 2686.943492][ T9929] device_add+0x4f9/0xc40 [ 2686.947836][ T9929] wiphy_register+0x1d99/0x2ac0 [ 2686.952716][ T9929] ? cfg80211_event_work+0x40/0x40 [ 2686.957872][ T9929] ? minstrel_ht_alloc+0x88a/0x990 [ 2686.963071][ T9929] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2686.969154][ T9929] ieee80211_register_hw+0x2dd8/0x3b30 [ 2686.974639][ T9929] ? ieee80211_register_hw+0xf11/0x3b30 [ 2686.980201][ T9929] ? ieee80211_tasklet_handler+0x20/0x20 [ 2686.985837][ T9929] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2686.991747][ T9929] ? __debug_object_init+0xec/0x450 [ 2686.996979][ T9929] ? __asan_memset+0x22/0x40 [ 2687.001579][ T9929] ? __hrtimer_init+0x189/0x270 [ 2687.006448][ T9929] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2687.012220][ T9929] ? mac80211_hwsim_free+0x220/0x220 [ 2687.017534][ T9929] ? rcu_is_watching+0x15/0xb0 [ 2687.022318][ T9929] ? kstrndup+0xbd/0x140 [ 2687.026571][ T9929] hwsim_new_radio_nl+0xdad/0x1a70 [ 2687.031690][ T9929] ? mark_lock+0x94/0x320 [ 2687.036049][ T9929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2687.042060][ T9929] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2687.048418][ T9929] ? lockdep_hardirqs_on+0x98/0x150 [ 2687.053633][ T9929] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2687.059803][ T9929] ? genl_family_rcv_msg_doit+0x106/0x310 [ 2687.065532][ T9929] ? kasan_check_range+0x89/0x290 [ 2687.070572][ T9929] genl_family_rcv_msg_doit+0x21a/0x310 [ 2687.076139][ T9929] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2687.082051][ T9929] ? bpf_lsm_capable+0x9/0x10 [ 2687.086735][ T9929] ? security_capable+0x89/0xb0 [ 2687.091625][ T9929] genl_rcv_msg+0x611/0x7a0 [ 2687.096170][ T9929] ? genl_bind+0x360/0x360 [ 2687.100607][ T9929] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2687.106962][ T9929] ? mark_lock+0x94/0x320 [ 2687.111301][ T9929] netlink_rcv_skb+0x235/0x4c0 [ 2687.116068][ T9929] ? genl_bind+0x360/0x360 [ 2687.120485][ T9929] ? netlink_ack+0x1160/0x1160 [ 2687.125274][ T9929] ? down_read+0x61/0x2e0 [ 2687.129629][ T9929] ? kasan_check_range+0x12/0x290 [ 2687.134668][ T9929] ? down_read+0x1ac/0x2e0 [ 2687.139108][ T9929] genl_rcv+0x28/0x40 [ 2687.143094][ T9929] netlink_unicast+0x7b1/0x930 [ 2687.147889][ T9929] netlink_sendmsg+0x8d0/0xbf0 [ 2687.152671][ T9929] ? netlink_getsockopt+0x590/0x590 [ 2687.157871][ T9929] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2687.163441][ T9929] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2687.168755][ T9929] ? security_socket_sendmsg+0x80/0xa0 [ 2687.174207][ T9929] ? netlink_getsockopt+0x590/0x590 [ 2687.179411][ T9929] ____sys_sendmsg+0x61b/0x980 [ 2687.184181][ T9929] ? __asan_memset+0x22/0x40 [ 2687.188769][ T9929] ? __sys_sendmsg_sock+0x30/0x30 [ 2687.193791][ T9929] ? __import_iovec+0x5f2/0x850 [ 2687.198658][ T9929] ? import_iovec+0x73/0xa0 [ 2687.203167][ T9929] ___sys_sendmsg+0x2a6/0x360 [ 2687.207873][ T9929] ? __sys_sendmsg+0x2b0/0x2b0 [ 2687.212672][ T9929] __se_sys_sendmsg+0x1d0/0x2c0 [ 2687.217545][ T9929] ? __x64_sys_sendmsg+0x80/0x80 [ 2687.222539][ T9929] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2687.228434][ T9929] do_syscall_64+0x55/0xb0 [ 2687.232936][ T9929] ? clear_bhb_loop+0x40/0x90 [ 2687.237620][ T9929] ? clear_bhb_loop+0x40/0x90 [ 2687.242310][ T9929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2687.248226][ T9929] RIP: 0033:0x7ff9f819e159 [ 2687.252661][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2687.272287][ T9929] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2687.280702][ T9929] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2687.288674][ T9929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2687.296655][ T9929] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2687.304626][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.312594][ T9929] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2687.320600][ T9929] [ 2687.384947][ T9932] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11656'. [ 2687.435093][ T9932] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2687.447515][ T9932] CPU: 0 PID: 9932 Comm: syz.3.11656 Not tainted syzkaller #0 [ 2687.455041][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2687.465128][ T9932] Call Trace: [ 2687.468418][ T9932] [ 2687.471362][ T9932] dump_stack_lvl+0x18c/0x250 [ 2687.476056][ T9932] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2687.482231][ T9932] ? show_regs_print_info+0x20/0x20 [ 2687.487483][ T9932] ? load_image+0x420/0x420 [ 2687.492009][ T9932] sysfs_warn_dup+0x8e/0xa0 [ 2687.496526][ T9932] sysfs_do_create_link_sd+0xc0/0x110 [ 2687.501909][ T9932] device_add_class_symlinks+0x1cf/0x240 [ 2687.507557][ T9932] device_add+0x4f9/0xc40 [ 2687.511905][ T9932] wiphy_register+0x1d99/0x2ac0 [ 2687.516787][ T9932] ? cfg80211_event_work+0x40/0x40 [ 2687.521903][ T9932] ? minstrel_ht_alloc+0x88a/0x990 [ 2687.527026][ T9932] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2687.533114][ T9932] ieee80211_register_hw+0x2dd8/0x3b30 [ 2687.538593][ T9932] ? ieee80211_register_hw+0xf11/0x3b30 [ 2687.544151][ T9932] ? ieee80211_tasklet_handler+0x20/0x20 [ 2687.549788][ T9932] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2687.555693][ T9932] ? __debug_object_init+0xec/0x450 [ 2687.560907][ T9932] ? __asan_memset+0x22/0x40 [ 2687.565508][ T9932] ? __hrtimer_init+0x189/0x270 [ 2687.570457][ T9932] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2687.576230][ T9932] ? mac80211_hwsim_free+0x220/0x220 [ 2687.581519][ T9932] ? rcu_is_watching+0x15/0xb0 [ 2687.586309][ T9932] ? kstrndup+0xbd/0x140 [ 2687.590568][ T9932] hwsim_new_radio_nl+0xdad/0x1a70 [ 2687.595690][ T9932] ? mark_lock+0x94/0x320 [ 2687.600033][ T9932] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2687.606035][ T9932] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2687.612396][ T9932] ? lockdep_hardirqs_on+0x98/0x150 [ 2687.617614][ T9932] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2687.623780][ T9932] ? genl_family_rcv_msg_doit+0x19a/0x310 [ 2687.629506][ T9932] ? kasan_check_range+0x67/0x290 [ 2687.634552][ T9932] genl_family_rcv_msg_doit+0x21a/0x310 [ 2687.640110][ T9932] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2687.646017][ T9932] ? bpf_lsm_capable+0x9/0x10 [ 2687.650705][ T9932] ? security_capable+0x89/0xb0 [ 2687.655573][ T9932] genl_rcv_msg+0x611/0x7a0 [ 2687.660089][ T9932] ? genl_bind+0x360/0x360 [ 2687.664510][ T9932] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2687.670843][ T9932] ? lockdep_hardirqs_on+0x98/0x150 [ 2687.676058][ T9932] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2687.682229][ T9932] netlink_rcv_skb+0x235/0x4c0 [ 2687.687002][ T9932] ? genl_bind+0x360/0x360 [ 2687.691427][ T9932] ? netlink_ack+0x1160/0x1160 [ 2687.696231][ T9932] ? __lock_acquire+0x7d80/0x7d80 [ 2687.701266][ T9932] ? net_generic+0x1e/0x240 [ 2687.705783][ T9932] ? down_read+0x1ac/0x2e0 [ 2687.710208][ T9932] genl_rcv+0x28/0x40 [ 2687.714196][ T9932] netlink_unicast+0x7b1/0x930 [ 2687.718975][ T9932] netlink_sendmsg+0x8d0/0xbf0 [ 2687.723751][ T9932] ? netlink_getsockopt+0x590/0x590 [ 2687.728952][ T9932] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2687.734504][ T9932] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2687.739793][ T9932] ? security_socket_sendmsg+0x80/0xa0 [ 2687.745255][ T9932] ? netlink_getsockopt+0x590/0x590 [ 2687.750481][ T9932] ____sys_sendmsg+0x61b/0x980 [ 2687.755263][ T9932] ? __asan_memset+0x22/0x40 [ 2687.759864][ T9932] ? __sys_sendmsg_sock+0x30/0x30 [ 2687.764909][ T9932] ? __import_iovec+0x5f2/0x850 [ 2687.769803][ T9932] ? import_iovec+0x73/0xa0 [ 2687.774332][ T9932] ___sys_sendmsg+0x2a6/0x360 [ 2687.779024][ T9932] ? __sys_sendmsg+0x2b0/0x2b0 [ 2687.783820][ T9932] ? ktime_get+0x7f/0x280 [ 2687.788154][ T9932] ? trace_call_bpf+0xc3/0x6c0 [ 2687.792952][ T9932] __se_sys_sendmsg+0x1d0/0x2c0 [ 2687.797835][ T9932] ? perf_trace_preemptirq_template+0x269/0x330 [ 2687.804088][ T9932] ? __x64_sys_sendmsg+0x80/0x80 [ 2687.809050][ T9932] ? lockdep_hardirqs_on+0x98/0x150 [ 2687.814263][ T9932] do_syscall_64+0x55/0xb0 [ 2687.818684][ T9932] ? clear_bhb_loop+0x40/0x90 [ 2687.823365][ T9932] ? clear_bhb_loop+0x40/0x90 [ 2687.828046][ T9932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2687.833943][ T9932] RIP: 0033:0x7ffbf1b9e159 [ 2687.838361][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2687.857972][ T9932] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2687.866392][ T9932] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2687.874365][ T9932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2687.882336][ T9932] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2687.890308][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.898315][ T9932] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2687.906326][ T9932] [ 2687.958807][ T9934] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11657'. [ 2687.972258][ T9934] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2687.980185][ T9934] CPU: 1 PID: 9934 Comm: syz.1.11657 Not tainted syzkaller #0 [ 2687.987669][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2687.997773][ T9934] Call Trace: [ 2688.001094][ T9934] [ 2688.004056][ T9934] dump_stack_lvl+0x18c/0x250 [ 2688.008780][ T9934] ? show_regs_print_info+0x20/0x20 [ 2688.014008][ T9934] ? load_image+0x420/0x420 [ 2688.018519][ T9934] sysfs_warn_dup+0x8e/0xa0 [ 2688.023039][ T9934] sysfs_do_create_link_sd+0xc0/0x110 [ 2688.028460][ T9934] device_add_class_symlinks+0x1cf/0x240 [ 2688.034140][ T9934] device_add+0x4f9/0xc40 [ 2688.038493][ T9934] wiphy_register+0x1d99/0x2ac0 [ 2688.043373][ T9934] ? cfg80211_event_work+0x40/0x40 [ 2688.048502][ T9934] ? minstrel_ht_alloc+0x88a/0x990 [ 2688.053629][ T9934] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2688.059712][ T9934] ieee80211_register_hw+0x2dd8/0x3b30 [ 2688.065200][ T9934] ? ieee80211_register_hw+0xf11/0x3b30 [ 2688.070768][ T9934] ? ieee80211_tasklet_handler+0x20/0x20 [ 2688.076409][ T9934] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2688.082313][ T9934] ? __debug_object_init+0xec/0x450 [ 2688.087525][ T9934] ? __asan_memset+0x22/0x40 [ 2688.092129][ T9934] ? __hrtimer_init+0x189/0x270 [ 2688.096988][ T9934] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2688.102734][ T9934] ? mac80211_hwsim_free+0x220/0x220 [ 2688.108053][ T9934] ? rcu_is_watching+0x15/0xb0 [ 2688.112828][ T9934] ? kstrndup+0xbd/0x140 [ 2688.117091][ T9934] hwsim_new_radio_nl+0xdad/0x1a70 [ 2688.122221][ T9934] ? __nla_validate+0x50/0x50 [ 2688.126922][ T9934] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2688.133269][ T9934] ? __nla_parse+0x40/0x50 [ 2688.137701][ T9934] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2688.144045][ T9934] genl_family_rcv_msg_doit+0x21a/0x310 [ 2688.149604][ T9934] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2688.155512][ T9934] ? bpf_lsm_capable+0x9/0x10 [ 2688.160201][ T9934] ? security_capable+0x89/0xb0 [ 2688.165086][ T9934] genl_rcv_msg+0x611/0x7a0 [ 2688.169605][ T9934] ? genl_bind+0x360/0x360 [ 2688.174030][ T9934] ? perf_trace_lock+0xfc/0x3b0 [ 2688.178883][ T9934] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2688.185217][ T9934] ? perf_trace_lock+0xfc/0x3b0 [ 2688.190081][ T9934] netlink_rcv_skb+0x235/0x4c0 [ 2688.194856][ T9934] ? genl_bind+0x360/0x360 [ 2688.199278][ T9934] ? netlink_ack+0x1160/0x1160 [ 2688.204056][ T9934] ? __lock_acquire+0x7d80/0x7d80 [ 2688.209087][ T9934] ? net_generic+0x1e/0x240 [ 2688.213604][ T9934] ? down_read+0x1ac/0x2e0 [ 2688.218038][ T9934] genl_rcv+0x28/0x40 [ 2688.222030][ T9934] netlink_unicast+0x7b1/0x930 [ 2688.226899][ T9934] netlink_sendmsg+0x8d0/0xbf0 [ 2688.231678][ T9934] ? netlink_getsockopt+0x590/0x590 [ 2688.236888][ T9934] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2688.242443][ T9934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2688.247737][ T9934] ? security_socket_sendmsg+0x80/0xa0 [ 2688.253201][ T9934] ? netlink_getsockopt+0x590/0x590 [ 2688.258401][ T9934] ____sys_sendmsg+0x61b/0x980 [ 2688.263186][ T9934] ? __asan_memset+0x22/0x40 [ 2688.267790][ T9934] ? __sys_sendmsg_sock+0x30/0x30 [ 2688.272820][ T9934] ? __import_iovec+0x5f2/0x850 [ 2688.277689][ T9934] ? import_iovec+0x73/0xa0 [ 2688.282204][ T9934] ___sys_sendmsg+0x2a6/0x360 [ 2688.286897][ T9934] ? __sys_sendmsg+0x2b0/0x2b0 [ 2688.291688][ T9934] ? trace_call_bpf+0xc3/0x6c0 [ 2688.296485][ T9934] __se_sys_sendmsg+0x1d0/0x2c0 [ 2688.301339][ T9934] ? perf_trace_preemptirq_template+0x269/0x330 [ 2688.307590][ T9934] ? __x64_sys_sendmsg+0x80/0x80 [ 2688.312553][ T9934] ? lockdep_hardirqs_on+0x98/0x150 [ 2688.317764][ T9934] do_syscall_64+0x55/0xb0 [ 2688.322192][ T9934] ? clear_bhb_loop+0x40/0x90 [ 2688.326873][ T9934] ? clear_bhb_loop+0x40/0x90 [ 2688.331558][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2688.337456][ T9934] RIP: 0033:0x7f110779e159 [ 2688.341879][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2688.361534][ T9934] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2688.369960][ T9934] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2688.377936][ T9934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2688.385912][ T9934] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2688.393887][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2688.401875][ T9934] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2688.409868][ T9934] [ 2692.032748][ T9964] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11678'. [ 2692.087267][ T9964] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2692.101445][ T9964] CPU: 1 PID: 9964 Comm: syz.2.11678 Not tainted syzkaller #0 [ 2692.108981][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2692.119071][ T9964] Call Trace: [ 2692.122420][ T9964] [ 2692.125359][ T9964] dump_stack_lvl+0x18c/0x250 [ 2692.130052][ T9964] ? show_regs_print_info+0x20/0x20 [ 2692.135257][ T9964] ? load_image+0x420/0x420 [ 2692.139772][ T9964] sysfs_warn_dup+0x8e/0xa0 [ 2692.144318][ T9964] sysfs_do_create_link_sd+0xc0/0x110 [ 2692.149695][ T9964] device_add_class_symlinks+0x1cf/0x240 [ 2692.155338][ T9964] device_add+0x4f9/0xc40 [ 2692.159682][ T9964] wiphy_register+0x1d99/0x2ac0 [ 2692.164564][ T9964] ? cfg80211_event_work+0x40/0x40 [ 2692.169681][ T9964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2692.175847][ T9964] ? ieee80211_register_hw+0x29bb/0x3b30 [ 2692.181492][ T9964] ieee80211_register_hw+0x2dd8/0x3b30 [ 2692.186970][ T9964] ? ieee80211_register_hw+0xf11/0x3b30 [ 2692.192530][ T9964] ? ieee80211_tasklet_handler+0x20/0x20 [ 2692.198165][ T9964] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2692.204062][ T9964] ? __debug_object_init+0xec/0x450 [ 2692.209278][ T9964] ? __asan_memset+0x22/0x40 [ 2692.213878][ T9964] ? __hrtimer_init+0x189/0x270 [ 2692.218738][ T9964] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2692.224483][ T9964] ? mac80211_hwsim_free+0x220/0x220 [ 2692.229773][ T9964] ? rcu_is_watching+0x15/0xb0 [ 2692.234542][ T9964] ? kstrndup+0xbd/0x140 [ 2692.238798][ T9964] hwsim_new_radio_nl+0xdad/0x1a70 [ 2692.243914][ T9964] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2692.249744][ T9964] ? mark_lock+0x94/0x320 [ 2692.254088][ T9964] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2692.260423][ T9964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2692.266587][ T9964] ? lockdep_hardirqs_on+0x98/0x150 [ 2692.271791][ T9964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2692.277968][ T9964] genl_family_rcv_msg_doit+0x21a/0x310 [ 2692.283527][ T9964] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2692.289431][ T9964] ? bpf_lsm_capable+0x9/0x10 [ 2692.294120][ T9964] ? security_capable+0x89/0xb0 [ 2692.298982][ T9964] genl_rcv_msg+0x611/0x7a0 [ 2692.303497][ T9964] ? genl_bind+0x360/0x360 [ 2692.307913][ T9964] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2692.314270][ T9964] netlink_rcv_skb+0x235/0x4c0 [ 2692.319035][ T9964] ? genl_bind+0x360/0x360 [ 2692.323452][ T9964] ? netlink_ack+0x1160/0x1160 [ 2692.328239][ T9964] ? down_read+0x1ac/0x2e0 [ 2692.332672][ T9964] genl_rcv+0x28/0x40 [ 2692.336656][ T9964] netlink_unicast+0x7b1/0x930 [ 2692.341433][ T9964] netlink_sendmsg+0x8d0/0xbf0 [ 2692.346207][ T9964] ? netlink_getsockopt+0x590/0x590 [ 2692.351411][ T9964] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2692.356965][ T9964] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2692.362254][ T9964] ? security_socket_sendmsg+0x80/0xa0 [ 2692.367711][ T9964] ? netlink_getsockopt+0x590/0x590 [ 2692.372910][ T9964] ____sys_sendmsg+0x61b/0x980 [ 2692.377692][ T9964] ? __asan_memset+0x22/0x40 [ 2692.382289][ T9964] ? __sys_sendmsg_sock+0x30/0x30 [ 2692.387311][ T9964] ? __import_iovec+0x5f2/0x850 [ 2692.392181][ T9964] ? import_iovec+0x73/0xa0 [ 2692.396697][ T9964] ___sys_sendmsg+0x2a6/0x360 [ 2692.401387][ T9964] ? __sys_sendmsg+0x2b0/0x2b0 [ 2692.406203][ T9964] __se_sys_sendmsg+0x1d0/0x2c0 [ 2692.411061][ T9964] ? __x64_sys_sendmsg+0x80/0x80 [ 2692.416017][ T9964] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2692.421920][ T9964] do_syscall_64+0x55/0xb0 [ 2692.426345][ T9964] ? clear_bhb_loop+0x40/0x90 [ 2692.431024][ T9964] ? clear_bhb_loop+0x40/0x90 [ 2692.435725][ T9964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.441640][ T9964] RIP: 0033:0x7fe73a39e159 [ 2692.446074][ T9964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2692.465693][ T9964] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2692.474124][ T9964] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2692.482096][ T9964] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2692.490071][ T9964] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2692.498042][ T9964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.506017][ T9964] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2692.514010][ T9964] [ 2692.557137][ T9969] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11669'. [ 2692.619258][ T9969] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2692.632179][ T9969] CPU: 0 PID: 9969 Comm: syz.3.11669 Not tainted syzkaller #0 [ 2692.639711][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2692.649806][ T9969] Call Trace: [ 2692.653116][ T9969] [ 2692.656074][ T9969] dump_stack_lvl+0x18c/0x250 [ 2692.660794][ T9969] ? show_regs_print_info+0x20/0x20 [ 2692.666040][ T9969] ? load_image+0x420/0x420 [ 2692.670585][ T9969] sysfs_warn_dup+0x8e/0xa0 [ 2692.675127][ T9969] sysfs_do_create_link_sd+0xc0/0x110 [ 2692.680542][ T9969] device_add_class_symlinks+0x1cf/0x240 [ 2692.686223][ T9969] device_add+0x4f9/0xc40 [ 2692.690582][ T9969] wiphy_register+0x1d99/0x2ac0 [ 2692.695462][ T9969] ? cfg80211_event_work+0x40/0x40 [ 2692.700583][ T9969] ? minstrel_ht_alloc+0x88a/0x990 [ 2692.705705][ T9969] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2692.711785][ T9969] ieee80211_register_hw+0x2dd8/0x3b30 [ 2692.717260][ T9969] ? ieee80211_register_hw+0xf11/0x3b30 [ 2692.722817][ T9969] ? ieee80211_tasklet_handler+0x20/0x20 [ 2692.728456][ T9969] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2692.734355][ T9969] ? __debug_object_init+0xec/0x450 [ 2692.739561][ T9969] ? __asan_memset+0x22/0x40 [ 2692.744156][ T9969] ? __hrtimer_init+0x189/0x270 [ 2692.749012][ T9969] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2692.754761][ T9969] ? mac80211_hwsim_free+0x220/0x220 [ 2692.760070][ T9969] ? rcu_is_watching+0x15/0xb0 [ 2692.764862][ T9969] ? kstrndup+0xbd/0x140 [ 2692.769131][ T9969] hwsim_new_radio_nl+0xdad/0x1a70 [ 2692.774275][ T9969] ? __nla_validate+0x50/0x50 [ 2692.778996][ T9969] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2692.785351][ T9969] ? __nla_parse+0x40/0x50 [ 2692.789779][ T9969] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2692.796118][ T9969] genl_family_rcv_msg_doit+0x21a/0x310 [ 2692.801693][ T9969] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2692.807597][ T9969] ? bpf_lsm_capable+0x9/0x10 [ 2692.812280][ T9969] ? security_capable+0x89/0xb0 [ 2692.817146][ T9969] genl_rcv_msg+0x611/0x7a0 [ 2692.821662][ T9969] ? genl_bind+0x360/0x360 [ 2692.826079][ T9969] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2692.832412][ T9969] ? mark_lock+0x94/0x320 [ 2692.836755][ T9969] netlink_rcv_skb+0x235/0x4c0 [ 2692.841535][ T9969] ? genl_bind+0x360/0x360 [ 2692.845956][ T9969] ? netlink_ack+0x1160/0x1160 [ 2692.850723][ T9969] ? lockdep_hardirqs_on+0x98/0x150 [ 2692.855956][ T9969] ? kasan_check_range+0x6a/0x290 [ 2692.861011][ T9969] ? down_read+0x1ac/0x2e0 [ 2692.865435][ T9969] genl_rcv+0x28/0x40 [ 2692.869424][ T9969] netlink_unicast+0x7b1/0x930 [ 2692.874202][ T9969] netlink_sendmsg+0x8d0/0xbf0 [ 2692.878972][ T9969] ? lockdep_hardirqs_on+0x98/0x150 [ 2692.884210][ T9969] ? netlink_getsockopt+0x590/0x590 [ 2692.889449][ T9969] ? security_socket_sendmsg+0x5a/0xa0 [ 2692.894946][ T9969] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2692.900253][ T9969] ? security_socket_sendmsg+0x80/0xa0 [ 2692.905723][ T9969] ? netlink_getsockopt+0x590/0x590 [ 2692.910954][ T9969] ____sys_sendmsg+0x61b/0x980 [ 2692.915730][ T9969] ? __asan_memset+0x22/0x40 [ 2692.920327][ T9969] ? __sys_sendmsg_sock+0x30/0x30 [ 2692.925354][ T9969] ? __import_iovec+0x5f2/0x850 [ 2692.930221][ T9969] ? import_iovec+0x73/0xa0 [ 2692.934732][ T9969] ___sys_sendmsg+0x2a6/0x360 [ 2692.939420][ T9969] ? __sys_sendmsg+0x2b0/0x2b0 [ 2692.944239][ T9969] __se_sys_sendmsg+0x1d0/0x2c0 [ 2692.949097][ T9969] ? __x64_sys_sendmsg+0x80/0x80 [ 2692.954062][ T9969] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2692.959967][ T9969] do_syscall_64+0x55/0xb0 [ 2692.964393][ T9969] ? clear_bhb_loop+0x40/0x90 [ 2692.969069][ T9969] ? clear_bhb_loop+0x40/0x90 [ 2692.973775][ T9969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.979673][ T9969] RIP: 0033:0x7ffbf1b9e159 [ 2692.984092][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2693.003711][ T9969] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.012133][ T9969] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2693.020103][ T9969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2693.028074][ T9969] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2693.036042][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2693.044015][ T9969] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2693.052012][ T9969] [ 2693.093695][ T9973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11671'. [ 2693.129930][ T9973] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2693.142619][ T9973] CPU: 1 PID: 9973 Comm: syz.1.11671 Not tainted syzkaller #0 [ 2693.150160][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2693.160249][ T9973] Call Trace: [ 2693.163548][ T9973] [ 2693.166505][ T9973] dump_stack_lvl+0x18c/0x250 [ 2693.171231][ T9973] ? show_regs_print_info+0x20/0x20 [ 2693.176463][ T9973] ? load_image+0x420/0x420 [ 2693.181012][ T9973] sysfs_warn_dup+0x8e/0xa0 [ 2693.185543][ T9973] sysfs_do_create_link_sd+0xc0/0x110 [ 2693.190935][ T9973] device_add_class_symlinks+0x1cf/0x240 [ 2693.196580][ T9973] device_add+0x4f9/0xc40 [ 2693.200915][ T9973] wiphy_register+0x1d99/0x2ac0 [ 2693.205789][ T9973] ? cfg80211_event_work+0x40/0x40 [ 2693.210903][ T9973] ? minstrel_ht_alloc+0x88a/0x990 [ 2693.216023][ T9973] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2693.222105][ T9973] ieee80211_register_hw+0x2dd8/0x3b30 [ 2693.227602][ T9973] ? ieee80211_register_hw+0xf11/0x3b30 [ 2693.233161][ T9973] ? ieee80211_tasklet_handler+0x20/0x20 [ 2693.238799][ T9973] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2693.244697][ T9973] ? __debug_object_init+0xec/0x450 [ 2693.249903][ T9973] ? __asan_memset+0x22/0x40 [ 2693.254502][ T9973] ? __hrtimer_init+0x189/0x270 [ 2693.259363][ T9973] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2693.265113][ T9973] ? mac80211_hwsim_free+0x220/0x220 [ 2693.270400][ T9973] ? rcu_is_watching+0x15/0xb0 [ 2693.275196][ T9973] ? kstrndup+0xbd/0x140 [ 2693.279452][ T9973] hwsim_new_radio_nl+0xdad/0x1a70 [ 2693.284575][ T9973] ? __nla_validate+0x50/0x50 [ 2693.289276][ T9973] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2693.295622][ T9973] ? __nla_parse+0x40/0x50 [ 2693.300048][ T9973] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2693.306386][ T9973] genl_family_rcv_msg_doit+0x21a/0x310 [ 2693.311946][ T9973] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2693.317860][ T9973] ? ns_capable+0x9d/0xe0 [ 2693.322208][ T9973] genl_rcv_msg+0x611/0x7a0 [ 2693.326725][ T9973] ? genl_bind+0x360/0x360 [ 2693.331142][ T9973] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2693.337469][ T9973] ? lockdep_hardirqs_on+0x98/0x150 [ 2693.342675][ T9973] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2693.348846][ T9973] netlink_rcv_skb+0x235/0x4c0 [ 2693.353620][ T9973] ? genl_bind+0x360/0x360 [ 2693.358039][ T9973] ? netlink_ack+0x1160/0x1160 [ 2693.362819][ T9973] ? __lock_acquire+0x7d80/0x7d80 [ 2693.367861][ T9973] ? net_generic+0x1e/0x240 [ 2693.372382][ T9973] ? down_read+0x1ac/0x2e0 [ 2693.376813][ T9973] genl_rcv+0x28/0x40 [ 2693.380816][ T9973] netlink_unicast+0x7b1/0x930 [ 2693.385600][ T9973] netlink_sendmsg+0x8d0/0xbf0 [ 2693.390372][ T9973] ? netlink_getsockopt+0x590/0x590 [ 2693.395595][ T9973] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2693.401173][ T9973] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2693.406482][ T9973] ? security_socket_sendmsg+0x80/0xa0 [ 2693.411951][ T9973] ? netlink_getsockopt+0x590/0x590 [ 2693.417160][ T9973] ____sys_sendmsg+0x61b/0x980 [ 2693.421940][ T9973] ? __asan_memset+0x22/0x40 [ 2693.426537][ T9973] ? __sys_sendmsg_sock+0x30/0x30 [ 2693.431562][ T9973] ? __import_iovec+0x5f2/0x850 [ 2693.436424][ T9973] ? import_iovec+0x73/0xa0 [ 2693.440934][ T9973] ___sys_sendmsg+0x2a6/0x360 [ 2693.445616][ T9973] ? __sys_sendmsg+0x2b0/0x2b0 [ 2693.450430][ T9973] __se_sys_sendmsg+0x1d0/0x2c0 [ 2693.455284][ T9973] ? __x64_sys_sendmsg+0x80/0x80 [ 2693.460240][ T9973] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2693.466143][ T9973] do_syscall_64+0x55/0xb0 [ 2693.470570][ T9973] ? clear_bhb_loop+0x40/0x90 [ 2693.475248][ T9973] ? clear_bhb_loop+0x40/0x90 [ 2693.479929][ T9973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2693.485833][ T9973] RIP: 0033:0x7f110779e159 [ 2693.490251][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2693.509859][ T9973] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.518370][ T9973] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2693.526343][ T9973] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2693.534317][ T9973] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2693.542287][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2693.550257][ T9973] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2693.558285][ T9973] [ 2693.618419][ T9966] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11677'. [ 2693.639752][ T9966] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2693.649122][ T9966] CPU: 1 PID: 9966 Comm: syz.0.11677 Not tainted syzkaller #0 [ 2693.656645][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2693.666715][ T9966] Call Trace: [ 2693.670004][ T9966] [ 2693.672958][ T9966] dump_stack_lvl+0x18c/0x250 [ 2693.677667][ T9966] ? show_regs_print_info+0x20/0x20 [ 2693.682886][ T9966] ? load_image+0x420/0x420 [ 2693.687420][ T9966] sysfs_warn_dup+0x8e/0xa0 [ 2693.691937][ T9966] sysfs_do_create_link_sd+0xc0/0x110 [ 2693.697326][ T9966] device_add_class_symlinks+0x1cf/0x240 [ 2693.702976][ T9966] device_add+0x4f9/0xc40 [ 2693.707315][ T9966] wiphy_register+0x1d99/0x2ac0 [ 2693.712194][ T9966] ? cfg80211_event_work+0x40/0x40 [ 2693.717311][ T9966] ? minstrel_ht_alloc+0x88a/0x990 [ 2693.722438][ T9966] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2693.728525][ T9966] ieee80211_register_hw+0x2dd8/0x3b30 [ 2693.734010][ T9966] ? ieee80211_register_hw+0xf11/0x3b30 [ 2693.739573][ T9966] ? ieee80211_tasklet_handler+0x20/0x20 [ 2693.745211][ T9966] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2693.751114][ T9966] ? __debug_object_init+0xec/0x450 [ 2693.756325][ T9966] ? __asan_memset+0x22/0x40 [ 2693.760926][ T9966] ? __hrtimer_init+0x189/0x270 [ 2693.765788][ T9966] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2693.771542][ T9966] ? mac80211_hwsim_free+0x220/0x220 [ 2693.776830][ T9966] ? rcu_is_watching+0x15/0xb0 [ 2693.781617][ T9966] ? kstrndup+0xbd/0x140 [ 2693.785901][ T9966] hwsim_new_radio_nl+0xdad/0x1a70 [ 2693.791040][ T9966] ? __nla_validate+0x50/0x50 [ 2693.795748][ T9966] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2693.802100][ T9966] ? __nla_parse+0x40/0x50 [ 2693.806535][ T9966] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2693.812888][ T9966] genl_family_rcv_msg_doit+0x21a/0x310 [ 2693.818449][ T9966] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2693.824364][ T9966] ? bpf_lsm_capable+0x9/0x10 [ 2693.829064][ T9966] ? security_capable+0x89/0xb0 [ 2693.834018][ T9966] genl_rcv_msg+0x611/0x7a0 [ 2693.838535][ T9966] ? genl_bind+0x360/0x360 [ 2693.842982][ T9966] ? perf_trace_lock+0xfc/0x3b0 [ 2693.847841][ T9966] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2693.854179][ T9966] ? perf_trace_lock+0xfc/0x3b0 [ 2693.859040][ T9966] netlink_rcv_skb+0x235/0x4c0 [ 2693.863818][ T9966] ? genl_bind+0x360/0x360 [ 2693.868245][ T9966] ? netlink_ack+0x1160/0x1160 [ 2693.873028][ T9966] ? __lock_acquire+0x7d80/0x7d80 [ 2693.878060][ T9966] ? net_generic+0x1e/0x240 [ 2693.882581][ T9966] ? down_read+0x1ac/0x2e0 [ 2693.887015][ T9966] genl_rcv+0x28/0x40 [ 2693.891010][ T9966] netlink_unicast+0x7b1/0x930 [ 2693.895798][ T9966] netlink_sendmsg+0x8d0/0xbf0 [ 2693.900566][ T9966] ? lockdep_hardirqs_on+0x98/0x150 [ 2693.905821][ T9966] ? netlink_getsockopt+0x590/0x590 [ 2693.911031][ T9966] ? bpf_lsm_socket_accept+0x10/0x10 [ 2693.916330][ T9966] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2693.921624][ T9966] ? security_socket_sendmsg+0x80/0xa0 [ 2693.927084][ T9966] ? netlink_getsockopt+0x590/0x590 [ 2693.932288][ T9966] ____sys_sendmsg+0x61b/0x980 [ 2693.937058][ T9966] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2693.943227][ T9966] ? __asan_memset+0x22/0x40 [ 2693.947823][ T9966] ? __sys_sendmsg_sock+0x30/0x30 [ 2693.952858][ T9966] ? __import_iovec+0x5f2/0x850 [ 2693.957726][ T9966] ? import_iovec+0x73/0xa0 [ 2693.962242][ T9966] ___sys_sendmsg+0x2a6/0x360 [ 2693.966930][ T9966] ? __sys_sendmsg+0x2b0/0x2b0 [ 2693.971762][ T9966] __se_sys_sendmsg+0x1d0/0x2c0 [ 2693.976627][ T9966] ? __x64_sys_sendmsg+0x80/0x80 [ 2693.981587][ T9966] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2693.987494][ T9966] do_syscall_64+0x55/0xb0 [ 2693.991915][ T9966] ? clear_bhb_loop+0x40/0x90 [ 2693.996597][ T9966] ? clear_bhb_loop+0x40/0x90 [ 2694.001288][ T9966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2694.007190][ T9966] RIP: 0033:0x7ff9f819e159 [ 2694.011609][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2694.031224][ T9966] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2694.039645][ T9966] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2694.047619][ T9966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2694.055594][ T9966] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2694.063654][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2694.071627][ T9966] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2694.079620][ T9966] [ 2695.207926][T10003] netlink: 'syz.0.11683': attribute type 4 has an invalid length. [ 2695.227872][T10003] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11683'. [ 2695.246540][T10001] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11684'. [ 2695.277781][T10001] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2695.290994][T10001] CPU: 0 PID: 10001 Comm: syz.3.11684 Not tainted syzkaller #0 [ 2695.298619][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2695.308711][T10001] Call Trace: [ 2695.312014][T10001] [ 2695.314972][T10001] dump_stack_lvl+0x18c/0x250 [ 2695.319695][T10001] ? show_regs_print_info+0x20/0x20 [ 2695.324934][T10001] ? load_image+0x420/0x420 [ 2695.329496][T10001] sysfs_warn_dup+0x8e/0xa0 [ 2695.334041][T10001] sysfs_do_create_link_sd+0xc0/0x110 [ 2695.339456][T10001] device_add_class_symlinks+0x1cf/0x240 [ 2695.345131][T10001] device_add+0x4f9/0xc40 [ 2695.349508][T10001] wiphy_register+0x1d99/0x2ac0 [ 2695.354440][T10001] ? cfg80211_event_work+0x40/0x40 [ 2695.359585][T10001] ? minstrel_ht_alloc+0x88a/0x990 [ 2695.364738][T10001] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2695.370855][T10001] ieee80211_register_hw+0x2dd8/0x3b30 [ 2695.376386][T10001] ? ieee80211_register_hw+0xf11/0x3b30 [ 2695.381988][T10001] ? ieee80211_tasklet_handler+0x20/0x20 [ 2695.387656][T10001] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2695.393592][T10001] ? __debug_object_init+0xec/0x450 [ 2695.398834][T10001] ? __asan_memset+0x22/0x40 [ 2695.403473][T10001] ? __hrtimer_init+0x189/0x270 [ 2695.408341][T10001] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2695.414094][T10001] ? mac80211_hwsim_free+0x220/0x220 [ 2695.419398][T10001] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 2695.424703][T10001] hwsim_new_radio_nl+0xdad/0x1a70 [ 2695.429827][T10001] ? __nla_validate+0x50/0x50 [ 2695.434528][T10001] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2695.440530][T10001] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2695.446862][T10001] ? lockdep_hardirqs_on+0x98/0x150 [ 2695.452075][T10001] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2695.458254][T10001] ? __nla_parse+0x40/0x50 [ 2695.462684][T10001] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2695.469025][T10001] genl_family_rcv_msg_doit+0x21a/0x310 [ 2695.474587][T10001] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2695.480495][T10001] ? bpf_lsm_capable+0x9/0x10 [ 2695.485179][T10001] ? security_capable+0x89/0xb0 [ 2695.490048][T10001] genl_rcv_msg+0x611/0x7a0 [ 2695.494560][T10001] ? genl_bind+0x360/0x360 [ 2695.498986][T10001] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2695.505324][T10001] ? perf_trace_lock+0xfc/0x3b0 [ 2695.510196][T10001] netlink_rcv_skb+0x235/0x4c0 [ 2695.515241][T10001] ? genl_bind+0x360/0x360 [ 2695.519676][T10001] ? netlink_ack+0x1160/0x1160 [ 2695.524478][T10001] ? __lock_acquire+0x7d80/0x7d80 [ 2695.529519][T10001] ? down_read+0x1ac/0x2e0 [ 2695.533951][T10001] genl_rcv+0x28/0x40 [ 2695.537940][T10001] netlink_unicast+0x7b1/0x930 [ 2695.542747][T10001] netlink_sendmsg+0x8d0/0xbf0 [ 2695.547520][T10001] ? netlink_getsockopt+0x590/0x590 [ 2695.552728][T10001] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2695.558281][T10001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2695.563571][T10001] ? security_socket_sendmsg+0x80/0xa0 [ 2695.569031][T10001] ? netlink_getsockopt+0x590/0x590 [ 2695.574255][T10001] ____sys_sendmsg+0x61b/0x980 [ 2695.579061][T10001] ? __asan_memset+0x22/0x40 [ 2695.583669][T10001] ? __sys_sendmsg_sock+0x30/0x30 [ 2695.588704][T10001] ? __import_iovec+0x5f2/0x850 [ 2695.593597][T10001] ? import_iovec+0x73/0xa0 [ 2695.598191][T10001] ___sys_sendmsg+0x2a6/0x360 [ 2695.602891][T10001] ? __sys_sendmsg+0x2b0/0x2b0 [ 2695.607711][T10001] __se_sys_sendmsg+0x1d0/0x2c0 [ 2695.612569][T10001] ? __x64_sys_sendmsg+0x80/0x80 [ 2695.617533][T10001] do_syscall_64+0x55/0xb0 [ 2695.621954][T10001] ? clear_bhb_loop+0x40/0x90 [ 2695.626634][T10001] ? clear_bhb_loop+0x40/0x90 [ 2695.631323][T10001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2695.637244][T10001] RIP: 0033:0x7ffbf1b9e159 [ 2695.641678][T10001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2695.661299][T10001] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2695.669725][T10001] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2695.677701][T10001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2695.685675][T10001] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2695.693656][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2695.701628][T10001] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2695.709620][T10001] [ 2695.868727][T10013] netlink: 'syz.1.11688': attribute type 4 has an invalid length. [ 2695.877496][T10013] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11688'. [ 2695.880687][T10012] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11687'. [ 2695.919186][T10012] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2695.928096][T10012] CPU: 0 PID: 10012 Comm: syz.0.11687 Not tainted syzkaller #0 [ 2695.935698][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2695.945784][T10012] Call Trace: [ 2695.949101][T10012] [ 2695.952064][T10012] dump_stack_lvl+0x18c/0x250 [ 2695.956782][T10012] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2695.962990][T10012] ? show_regs_print_info+0x20/0x20 [ 2695.968239][T10012] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2695.974449][T10012] ? dump_stack+0x9/0x20 [ 2695.978740][T10012] sysfs_warn_dup+0x8e/0xa0 [ 2695.983278][T10012] sysfs_do_create_link_sd+0xc0/0x110 [ 2695.988685][T10012] device_add_class_symlinks+0x1cf/0x240 [ 2695.994355][T10012] device_add+0x4f9/0xc40 [ 2695.998723][T10012] wiphy_register+0x1d99/0x2ac0 [ 2696.003645][T10012] ? cfg80211_event_work+0x40/0x40 [ 2696.008801][T10012] ? minstrel_ht_alloc+0x88a/0x990 [ 2696.013963][T10012] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2696.020077][T10012] ieee80211_register_hw+0x2dd8/0x3b30 [ 2696.025572][T10012] ? ieee80211_register_hw+0xf11/0x3b30 [ 2696.031146][T10012] ? ieee80211_tasklet_handler+0x20/0x20 [ 2696.036811][T10012] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2696.042721][T10012] ? __debug_object_init+0xec/0x450 [ 2696.047938][T10012] ? __asan_memset+0x22/0x40 [ 2696.052526][T10012] ? __hrtimer_init+0x189/0x270 [ 2696.057374][T10012] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2696.063190][T10012] ? mac80211_hwsim_free+0x220/0x220 [ 2696.068495][T10012] ? rcu_is_watching+0x15/0xb0 [ 2696.073296][T10012] ? kstrndup+0xbd/0x140 [ 2696.077590][T10012] hwsim_new_radio_nl+0xdad/0x1a70 [ 2696.082749][T10012] ? __nla_validate+0x50/0x50 [ 2696.087484][T10012] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2696.093860][T10012] ? __nla_parse+0x40/0x50 [ 2696.098306][T10012] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2696.104650][T10012] genl_family_rcv_msg_doit+0x21a/0x310 [ 2696.110216][T10012] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2696.116108][T10012] ? bpf_lsm_capable+0x9/0x10 [ 2696.120793][T10012] ? security_capable+0x89/0xb0 [ 2696.125660][T10012] genl_rcv_msg+0x611/0x7a0 [ 2696.130162][T10012] ? genl_bind+0x360/0x360 [ 2696.134599][T10012] ? perf_trace_lock+0xfc/0x3b0 [ 2696.139480][T10012] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2696.145823][T10012] ? perf_trace_lock+0xfc/0x3b0 [ 2696.150700][T10012] netlink_rcv_skb+0x235/0x4c0 [ 2696.155460][T10012] ? genl_bind+0x360/0x360 [ 2696.159872][T10012] ? netlink_ack+0x1160/0x1160 [ 2696.164664][T10012] ? __lock_acquire+0x7d80/0x7d80 [ 2696.169685][T10012] ? net_generic+0x1e/0x240 [ 2696.174187][T10012] ? down_read+0x1ac/0x2e0 [ 2696.178608][T10012] genl_rcv+0x28/0x40 [ 2696.182604][T10012] netlink_unicast+0x7b1/0x930 [ 2696.187393][T10012] netlink_sendmsg+0x8d0/0xbf0 [ 2696.192186][T10012] ? aa_sock_msg_perm+0x4d/0x150 [ 2696.197139][T10012] ? netlink_getsockopt+0x590/0x590 [ 2696.202424][T10012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2696.207971][T10012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2696.213252][T10012] ? security_socket_sendmsg+0x80/0xa0 [ 2696.218717][T10012] ? netlink_getsockopt+0x590/0x590 [ 2696.223927][T10012] ____sys_sendmsg+0x61b/0x980 [ 2696.228753][T10012] ? __asan_memset+0x22/0x40 [ 2696.233371][T10012] ? __sys_sendmsg_sock+0x30/0x30 [ 2696.238419][T10012] ? __import_iovec+0x5f2/0x850 [ 2696.243297][T10012] ? import_iovec+0x73/0xa0 [ 2696.247799][T10012] ___sys_sendmsg+0x2a6/0x360 [ 2696.252478][T10012] ? __fget_files+0x28/0x460 [ 2696.257087][T10012] ? __fget_files+0x28/0x460 [ 2696.261693][T10012] ? __sys_sendmsg+0x2b0/0x2b0 [ 2696.266466][T10012] ? ktime_get+0x7f/0x280 [ 2696.270802][T10012] ? trace_call_bpf+0xc3/0x6c0 [ 2696.275580][T10012] __se_sys_sendmsg+0x1d0/0x2c0 [ 2696.280445][T10012] ? perf_trace_preemptirq_template+0x269/0x330 [ 2696.286693][T10012] ? __x64_sys_sendmsg+0x80/0x80 [ 2696.291649][T10012] ? lockdep_hardirqs_on+0x98/0x150 [ 2696.296874][T10012] do_syscall_64+0x55/0xb0 [ 2696.301289][T10012] ? clear_bhb_loop+0x40/0x90 [ 2696.305962][T10012] ? clear_bhb_loop+0x40/0x90 [ 2696.310638][T10012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2696.316537][T10012] RIP: 0033:0x7ff9f819e159 [ 2696.320961][T10012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2696.340584][T10012] RSP: 002b:00007ff9f90f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2696.349000][T10012] RAX: ffffffffffffffda RBX: 00007ff9f8426090 RCX: 00007ff9f819e159 [ 2696.356975][T10012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2696.364948][T10012] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2696.372929][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2696.380936][T10012] R13: 00007ff9f8426128 R14: 00007ff9f8426090 R15: 00007ffed6ae4598 [ 2696.388938][T10012] [ 2696.409656][T10017] sit0: entered promiscuous mode [ 2697.256766][T10033] netlink: 'syz.2.11694': attribute type 4 has an invalid length. [ 2697.274408][T10033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11694'. [ 2697.834067][T10045] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11698'. [ 2697.905951][T10045] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2697.915180][T10045] CPU: 0 PID: 10045 Comm: syz.2.11698 Not tainted syzkaller #0 [ 2697.922765][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2697.932820][T10045] Call Trace: [ 2697.936094][T10045] [ 2697.939020][T10045] dump_stack_lvl+0x18c/0x250 [ 2697.943697][T10045] ? show_regs_print_info+0x20/0x20 [ 2697.948901][T10045] ? load_image+0x420/0x420 [ 2697.953409][T10045] sysfs_warn_dup+0x8e/0xa0 [ 2697.957912][T10045] sysfs_do_create_link_sd+0xc0/0x110 [ 2697.963286][T10045] device_add_class_symlinks+0x1cf/0x240 [ 2697.968962][T10045] device_add+0x4f9/0xc40 [ 2697.973320][T10045] wiphy_register+0x1d99/0x2ac0 [ 2697.978191][T10045] ? cfg80211_event_work+0x40/0x40 [ 2697.983330][T10045] ? minstrel_ht_alloc+0x88a/0x990 [ 2697.988449][T10045] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2697.994530][T10045] ieee80211_register_hw+0x2dd8/0x3b30 [ 2698.000006][T10045] ? ieee80211_register_hw+0xf11/0x3b30 [ 2698.005578][T10045] ? ieee80211_tasklet_handler+0x20/0x20 [ 2698.011217][T10045] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2698.017115][T10045] ? __debug_object_init+0xec/0x450 [ 2698.022323][T10045] ? __asan_memset+0x22/0x40 [ 2698.026952][T10045] ? __hrtimer_init+0x189/0x270 [ 2698.031829][T10045] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2698.037565][T10045] ? mac80211_hwsim_free+0x220/0x220 [ 2698.042851][T10045] ? rcu_is_watching+0x15/0xb0 [ 2698.047638][T10045] ? kstrndup+0xbd/0x140 [ 2698.051890][T10045] hwsim_new_radio_nl+0xdad/0x1a70 [ 2698.057017][T10045] ? __nla_validate+0x50/0x50 [ 2698.061695][T10045] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2698.067715][T10045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2698.074053][T10045] ? lockdep_hardirqs_on+0x98/0x150 [ 2698.079271][T10045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2698.085450][T10045] ? __nla_parse+0x40/0x50 [ 2698.089879][T10045] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2698.096220][T10045] genl_family_rcv_msg_doit+0x21a/0x310 [ 2698.101775][T10045] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2698.107680][T10045] ? bpf_lsm_capable+0x9/0x10 [ 2698.112365][T10045] ? security_capable+0x89/0xb0 [ 2698.117228][T10045] genl_rcv_msg+0x611/0x7a0 [ 2698.121746][T10045] ? genl_bind+0x360/0x360 [ 2698.126164][T10045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2698.132518][T10045] netlink_rcv_skb+0x235/0x4c0 [ 2698.137288][T10045] ? genl_bind+0x360/0x360 [ 2698.141712][T10045] ? netlink_ack+0x1160/0x1160 [ 2698.146489][T10045] ? __lock_acquire+0x7d80/0x7d80 [ 2698.151525][T10045] ? net_generic+0x1e/0x240 [ 2698.156046][T10045] ? down_read+0x1ac/0x2e0 [ 2698.160556][T10045] genl_rcv+0x28/0x40 [ 2698.164539][T10045] netlink_unicast+0x7b1/0x930 [ 2698.169317][T10045] netlink_sendmsg+0x8d0/0xbf0 [ 2698.174083][T10045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2698.180264][T10045] ? netlink_getsockopt+0x590/0x590 [ 2698.185507][T10045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2698.190832][T10045] ? security_socket_sendmsg+0x80/0xa0 [ 2698.196301][T10045] ? netlink_getsockopt+0x590/0x590 [ 2698.201510][T10045] ____sys_sendmsg+0x61b/0x980 [ 2698.206315][T10045] ? __asan_memset+0x22/0x40 [ 2698.210915][T10045] ? __sys_sendmsg_sock+0x30/0x30 [ 2698.215963][T10045] ? __import_iovec+0x5f2/0x850 [ 2698.220838][T10045] ? import_iovec+0x73/0xa0 [ 2698.225365][T10045] ___sys_sendmsg+0x2a6/0x360 [ 2698.230053][T10045] ? __sys_sendmsg+0x2b0/0x2b0 [ 2698.234868][T10045] __se_sys_sendmsg+0x1d0/0x2c0 [ 2698.239724][T10045] ? perf_trace_preemptirq_template+0x269/0x330 [ 2698.245977][T10045] ? __x64_sys_sendmsg+0x80/0x80 [ 2698.250931][T10045] ? lockdep_hardirqs_on+0x98/0x150 [ 2698.256145][T10045] do_syscall_64+0x55/0xb0 [ 2698.260562][T10045] ? clear_bhb_loop+0x40/0x90 [ 2698.265242][T10045] ? clear_bhb_loop+0x40/0x90 [ 2698.269924][T10045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2698.275824][T10045] RIP: 0033:0x7fe73a39e159 [ 2698.280243][T10045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2698.299855][T10045] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2698.308273][T10045] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2698.316248][T10045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2698.324247][T10045] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2698.332234][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2698.340207][T10045] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2698.348201][T10045] [ 2698.385222][T10050] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11699'. [ 2698.414259][T10050] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2698.429016][T10050] CPU: 1 PID: 10050 Comm: syz.3.11699 Not tainted syzkaller #0 [ 2698.436637][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2698.446729][T10050] Call Trace: [ 2698.450047][T10050] [ 2698.453014][T10050] dump_stack_lvl+0x18c/0x250 [ 2698.457735][T10050] ? show_regs_print_info+0x20/0x20 [ 2698.462970][T10050] ? load_image+0x420/0x420 [ 2698.467532][T10050] sysfs_warn_dup+0x8e/0xa0 [ 2698.472076][T10050] sysfs_do_create_link_sd+0xc0/0x110 [ 2698.477500][T10050] device_add_class_symlinks+0x1cf/0x240 [ 2698.483179][T10050] device_add+0x4f9/0xc40 [ 2698.487553][T10050] wiphy_register+0x1d99/0x2ac0 [ 2698.492476][T10050] ? cfg80211_event_work+0x40/0x40 [ 2698.497629][T10050] ? minstrel_ht_alloc+0x88a/0x990 [ 2698.502793][T10050] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2698.508909][T10050] ieee80211_register_hw+0x2dd8/0x3b30 [ 2698.514413][T10050] ? ieee80211_register_hw+0xf11/0x3b30 [ 2698.519982][T10050] ? ieee80211_tasklet_handler+0x20/0x20 [ 2698.525626][T10050] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2698.531530][T10050] ? __debug_object_init+0xec/0x450 [ 2698.536736][T10050] ? __asan_memset+0x22/0x40 [ 2698.541337][T10050] ? __hrtimer_init+0x189/0x270 [ 2698.546195][T10050] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2698.551944][T10050] ? mac80211_hwsim_free+0x220/0x220 [ 2698.557242][T10050] ? rcu_is_watching+0x15/0xb0 [ 2698.562015][T10050] ? kstrndup+0xbd/0x140 [ 2698.566367][T10050] hwsim_new_radio_nl+0xdad/0x1a70 [ 2698.571515][T10050] ? __nla_validate+0x50/0x50 [ 2698.576255][T10050] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2698.582612][T10050] ? __nla_parse+0x40/0x50 [ 2698.587048][T10050] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2698.593391][T10050] genl_family_rcv_msg_doit+0x21a/0x310 [ 2698.598952][T10050] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2698.604855][T10050] ? bpf_lsm_capable+0x9/0x10 [ 2698.609547][T10050] ? security_capable+0x89/0xb0 [ 2698.614411][T10050] genl_rcv_msg+0x611/0x7a0 [ 2698.618926][T10050] ? genl_bind+0x360/0x360 [ 2698.623342][T10050] ? perf_trace_lock+0xfc/0x3b0 [ 2698.628192][T10050] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2698.634527][T10050] ? perf_trace_lock+0xfc/0x3b0 [ 2698.639395][T10050] netlink_rcv_skb+0x235/0x4c0 [ 2698.644164][T10050] ? genl_bind+0x360/0x360 [ 2698.648591][T10050] ? netlink_ack+0x1160/0x1160 [ 2698.653370][T10050] ? __lock_acquire+0x7d80/0x7d80 [ 2698.658402][T10050] ? net_generic+0x1e/0x240 [ 2698.662916][T10050] ? down_read+0x1ac/0x2e0 [ 2698.667339][T10050] genl_rcv+0x28/0x40 [ 2698.671334][T10050] netlink_unicast+0x7b1/0x930 [ 2698.676111][T10050] netlink_sendmsg+0x8d0/0xbf0 [ 2698.680895][T10050] ? netlink_getsockopt+0x590/0x590 [ 2698.686114][T10050] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2698.691673][T10050] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2698.696970][T10050] ? security_socket_sendmsg+0x80/0xa0 [ 2698.702429][T10050] ? netlink_getsockopt+0x590/0x590 [ 2698.707630][T10050] ____sys_sendmsg+0x61b/0x980 [ 2698.712407][T10050] ? __asan_memset+0x22/0x40 [ 2698.717002][T10050] ? __sys_sendmsg_sock+0x30/0x30 [ 2698.722028][T10050] ? __import_iovec+0x5f2/0x850 [ 2698.726891][T10050] ? import_iovec+0x73/0xa0 [ 2698.731403][T10050] ___sys_sendmsg+0x2a6/0x360 [ 2698.736091][T10050] ? __sys_sendmsg+0x2b0/0x2b0 [ 2698.740884][T10050] ? trace_call_bpf+0xc3/0x6c0 [ 2698.745676][T10050] __se_sys_sendmsg+0x1d0/0x2c0 [ 2698.750538][T10050] ? perf_trace_preemptirq_template+0x269/0x330 [ 2698.756789][T10050] ? __x64_sys_sendmsg+0x80/0x80 [ 2698.761768][T10050] ? lockdep_hardirqs_on+0x98/0x150 [ 2698.766976][T10050] do_syscall_64+0x55/0xb0 [ 2698.771415][T10050] ? clear_bhb_loop+0x40/0x90 [ 2698.776096][T10050] ? clear_bhb_loop+0x40/0x90 [ 2698.780784][T10050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2698.786679][T10050] RIP: 0033:0x7ffbf1b9e159 [ 2698.791098][T10050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2698.810706][T10050] RSP: 002b:00007ffbf2a25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2698.819137][T10050] RAX: ffffffffffffffda RBX: 00007ffbf1e26090 RCX: 00007ffbf1b9e159 [ 2698.827108][T10050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2698.835077][T10050] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2698.843048][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2698.851018][T10050] R13: 00007ffbf1e26128 R14: 00007ffbf1e26090 R15: 00007fffe01ffd68 [ 2698.859007][T10050] [ 2698.914308][T10052] netlink: 'syz.0.11701': attribute type 4 has an invalid length. [ 2698.936134][T10052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11701'. [ 2699.517237][T10076] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11714'. [ 2699.546251][T10076] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2699.555250][T10076] CPU: 1 PID: 10076 Comm: syz.3.11714 Not tainted syzkaller #0 [ 2699.562849][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2699.572941][T10076] Call Trace: [ 2699.576233][T10076] [ 2699.579157][T10076] dump_stack_lvl+0x18c/0x250 [ 2699.583848][T10076] ? show_regs_print_info+0x20/0x20 [ 2699.589045][T10076] ? load_image+0x420/0x420 [ 2699.593551][T10076] sysfs_warn_dup+0x8e/0xa0 [ 2699.598066][T10076] sysfs_do_create_link_sd+0xc0/0x110 [ 2699.603446][T10076] device_add_class_symlinks+0x1cf/0x240 [ 2699.609107][T10076] device_add+0x4f9/0xc40 [ 2699.613446][T10076] wiphy_register+0x1d99/0x2ac0 [ 2699.618334][T10076] ? cfg80211_event_work+0x40/0x40 [ 2699.623446][T10076] ? minstrel_ht_alloc+0x88a/0x990 [ 2699.628573][T10076] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2699.634655][T10076] ieee80211_register_hw+0x2dd8/0x3b30 [ 2699.640131][T10076] ? ieee80211_register_hw+0xf11/0x3b30 [ 2699.645708][T10076] ? ieee80211_tasklet_handler+0x20/0x20 [ 2699.651351][T10076] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2699.657250][T10076] ? __debug_object_init+0xec/0x450 [ 2699.662463][T10076] ? __asan_memset+0x22/0x40 [ 2699.667099][T10076] ? __hrtimer_init+0x189/0x270 [ 2699.671969][T10076] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2699.677715][T10076] ? mac80211_hwsim_free+0x220/0x220 [ 2699.683005][T10076] ? rcu_is_watching+0x15/0xb0 [ 2699.687775][T10076] ? kstrndup+0xbd/0x140 [ 2699.692034][T10076] hwsim_new_radio_nl+0xdad/0x1a70 [ 2699.697155][T10076] ? __nla_validate+0x50/0x50 [ 2699.701854][T10076] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2699.708199][T10076] ? __nla_parse+0x40/0x50 [ 2699.712631][T10076] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2699.718973][T10076] genl_family_rcv_msg_doit+0x21a/0x310 [ 2699.724531][T10076] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2699.730439][T10076] ? bpf_lsm_capable+0x9/0x10 [ 2699.735131][T10076] ? security_capable+0x89/0xb0 [ 2699.739991][T10076] genl_rcv_msg+0x611/0x7a0 [ 2699.744504][T10076] ? genl_bind+0x360/0x360 [ 2699.748919][T10076] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2699.755249][T10076] ? lockdep_hardirqs_on+0x98/0x150 [ 2699.760458][T10076] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2699.766629][T10076] netlink_rcv_skb+0x235/0x4c0 [ 2699.771401][T10076] ? genl_bind+0x360/0x360 [ 2699.775820][T10076] ? netlink_ack+0x1160/0x1160 [ 2699.780602][T10076] ? __lock_acquire+0x7d80/0x7d80 [ 2699.785636][T10076] ? net_generic+0x1e/0x240 [ 2699.790150][T10076] ? down_read+0x1ac/0x2e0 [ 2699.794577][T10076] genl_rcv+0x28/0x40 [ 2699.798586][T10076] netlink_unicast+0x7b1/0x930 [ 2699.803363][T10076] netlink_sendmsg+0x8d0/0xbf0 [ 2699.808136][T10076] ? netlink_getsockopt+0x590/0x590 [ 2699.813338][T10076] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2699.818888][T10076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2699.824179][T10076] ? security_socket_sendmsg+0x80/0xa0 [ 2699.829639][T10076] ? netlink_getsockopt+0x590/0x590 [ 2699.834848][T10076] ____sys_sendmsg+0x61b/0x980 [ 2699.839626][T10076] ? __asan_memset+0x22/0x40 [ 2699.844223][T10076] ? __sys_sendmsg_sock+0x30/0x30 [ 2699.849246][T10076] ? __import_iovec+0x5f2/0x850 [ 2699.854109][T10076] ? import_iovec+0x73/0xa0 [ 2699.858623][T10076] ___sys_sendmsg+0x2a6/0x360 [ 2699.863307][T10076] ? __sys_sendmsg+0x2b0/0x2b0 [ 2699.868090][T10076] ? trace_call_bpf+0xc3/0x6c0 [ 2699.872876][T10076] __se_sys_sendmsg+0x1d0/0x2c0 [ 2699.877726][T10076] ? perf_trace_preemptirq_template+0x269/0x330 [ 2699.883975][T10076] ? __x64_sys_sendmsg+0x80/0x80 [ 2699.888931][T10076] ? lockdep_hardirqs_on+0x98/0x150 [ 2699.894141][T10076] do_syscall_64+0x55/0xb0 [ 2699.898562][T10076] ? clear_bhb_loop+0x40/0x90 [ 2699.903241][T10076] ? clear_bhb_loop+0x40/0x90 [ 2699.907921][T10076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2699.913818][T10076] RIP: 0033:0x7ffbf1b9e159 [ 2699.918236][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2699.937849][T10076] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2699.946269][T10076] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2699.954241][T10076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2699.962216][T10076] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2699.970184][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2699.978152][T10076] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2699.986143][T10076] [ 2700.022546][T10075] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11713'. [ 2700.069096][T10075] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2700.078167][T10075] CPU: 0 PID: 10075 Comm: syz.2.11713 Not tainted syzkaller #0 [ 2700.085766][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2700.095842][T10075] Call Trace: [ 2700.099121][T10075] [ 2700.102050][T10075] dump_stack_lvl+0x18c/0x250 [ 2700.106727][T10075] ? show_regs_print_info+0x20/0x20 [ 2700.111941][T10075] ? load_image+0x420/0x420 [ 2700.116451][T10075] sysfs_warn_dup+0x8e/0xa0 [ 2700.120956][T10075] sysfs_do_create_link_sd+0xc0/0x110 [ 2700.126325][T10075] device_add_class_symlinks+0x1cf/0x240 [ 2700.131980][T10075] device_add+0x4f9/0xc40 [ 2700.136322][T10075] wiphy_register+0x1d99/0x2ac0 [ 2700.141200][T10075] ? cfg80211_event_work+0x40/0x40 [ 2700.146312][T10075] ? minstrel_ht_alloc+0x88a/0x990 [ 2700.151433][T10075] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2700.157508][T10075] ieee80211_register_hw+0x2dd8/0x3b30 [ 2700.162982][T10075] ? ieee80211_register_hw+0xf11/0x3b30 [ 2700.168539][T10075] ? ieee80211_tasklet_handler+0x20/0x20 [ 2700.174174][T10075] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2700.180070][T10075] ? __debug_object_init+0xec/0x450 [ 2700.185278][T10075] ? __asan_memset+0x22/0x40 [ 2700.189875][T10075] ? __hrtimer_init+0x189/0x270 [ 2700.194732][T10075] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2700.200478][T10075] ? mac80211_hwsim_free+0x220/0x220 [ 2700.205765][T10075] ? rcu_is_watching+0x15/0xb0 [ 2700.210535][T10075] ? kstrndup+0xbd/0x140 [ 2700.214793][T10075] hwsim_new_radio_nl+0xdad/0x1a70 [ 2700.219954][T10075] ? __nla_validate+0x50/0x50 [ 2700.224653][T10075] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2700.230999][T10075] ? __nla_parse+0x40/0x50 [ 2700.235430][T10075] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2700.241767][T10075] genl_family_rcv_msg_doit+0x21a/0x310 [ 2700.247325][T10075] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2700.253230][T10075] ? bpf_lsm_capable+0x9/0x10 [ 2700.257911][T10075] ? security_capable+0x89/0xb0 [ 2700.262776][T10075] genl_rcv_msg+0x611/0x7a0 [ 2700.267294][T10075] ? genl_bind+0x360/0x360 [ 2700.271708][T10075] ? perf_trace_lock+0xfc/0x3b0 [ 2700.276557][T10075] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2700.282892][T10075] ? perf_trace_lock+0xfc/0x3b0 [ 2700.287759][T10075] netlink_rcv_skb+0x235/0x4c0 [ 2700.292526][T10075] ? genl_bind+0x360/0x360 [ 2700.296948][T10075] ? netlink_ack+0x1160/0x1160 [ 2700.301763][T10075] ? __lock_acquire+0x7d80/0x7d80 [ 2700.306797][T10075] ? net_generic+0x1e/0x240 [ 2700.311312][T10075] ? down_read+0x1ac/0x2e0 [ 2700.315736][T10075] genl_rcv+0x28/0x40 [ 2700.319719][T10075] netlink_unicast+0x7b1/0x930 [ 2700.324497][T10075] netlink_sendmsg+0x8d0/0xbf0 [ 2700.329276][T10075] ? netlink_getsockopt+0x590/0x590 [ 2700.334482][T10075] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2700.340033][T10075] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2700.345323][T10075] ? security_socket_sendmsg+0x80/0xa0 [ 2700.350783][T10075] ? netlink_getsockopt+0x590/0x590 [ 2700.355986][T10075] ____sys_sendmsg+0x61b/0x980 [ 2700.360764][T10075] ? __asan_memset+0x22/0x40 [ 2700.365366][T10075] ? __sys_sendmsg_sock+0x30/0x30 [ 2700.370389][T10075] ? __import_iovec+0x5f2/0x850 [ 2700.375259][T10075] ? import_iovec+0x73/0xa0 [ 2700.379773][T10075] ___sys_sendmsg+0x2a6/0x360 [ 2700.384464][T10075] ? __sys_sendmsg+0x2b0/0x2b0 [ 2700.389283][T10075] __se_sys_sendmsg+0x1d0/0x2c0 [ 2700.394144][T10075] ? __x64_sys_sendmsg+0x80/0x80 [ 2700.399109][T10075] do_syscall_64+0x55/0xb0 [ 2700.403534][T10075] ? clear_bhb_loop+0x40/0x90 [ 2700.408215][T10075] ? clear_bhb_loop+0x40/0x90 [ 2700.412896][T10075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2700.418801][T10075] RIP: 0033:0x7fe73a39e159 [ 2700.423216][T10075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2700.442825][T10075] RSP: 002b:00007fe73b1c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2700.451243][T10075] RAX: ffffffffffffffda RBX: 00007fe73a625fa0 RCX: 00007fe73a39e159 [ 2700.459215][T10075] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2700.467185][T10075] RBP: 00007fe73a435024 R08: 0000000000000000 R09: 0000000000000000 [ 2700.475155][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2700.483129][T10075] R13: 00007fe73a626038 R14: 00007fe73a625fa0 R15: 00007ffee7a7f708 [ 2700.491118][T10075] [ 2700.753105][T10086] netlink: 'syz.3.11718': attribute type 4 has an invalid length. [ 2700.770001][T10086] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11718'. [ 2700.893132][T10091] netlink: 'syz.3.11721': attribute type 4 has an invalid length. [ 2700.901625][T10091] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11721'. [ 2701.206450][T10101] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11725'. [ 2701.245328][T10101] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2701.254032][T10101] CPU: 0 PID: 10101 Comm: syz.1.11725 Not tainted syzkaller #0 [ 2701.261645][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2701.271729][T10101] Call Trace: [ 2701.275038][T10101] [ 2701.277988][T10101] dump_stack_lvl+0x18c/0x250 [ 2701.282684][T10101] ? show_regs_print_info+0x20/0x20 [ 2701.287898][T10101] ? load_image+0x420/0x420 [ 2701.292456][T10101] sysfs_warn_dup+0x8e/0xa0 [ 2701.297002][T10101] sysfs_do_create_link_sd+0xc0/0x110 [ 2701.302424][T10101] device_add_class_symlinks+0x1cf/0x240 [ 2701.308095][T10101] device_add+0x4f9/0xc40 [ 2701.312449][T10101] wiphy_register+0x1d99/0x2ac0 [ 2701.317319][T10101] ? cfg80211_event_work+0x40/0x40 [ 2701.322432][T10101] ? minstrel_ht_alloc+0x88a/0x990 [ 2701.327547][T10101] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2701.333627][T10101] ieee80211_register_hw+0x2dd8/0x3b30 [ 2701.339099][T10101] ? ieee80211_register_hw+0xf11/0x3b30 [ 2701.344660][T10101] ? ieee80211_tasklet_handler+0x20/0x20 [ 2701.350321][T10101] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2701.356225][T10101] ? __debug_object_init+0xec/0x450 [ 2701.361428][T10101] ? __asan_memset+0x22/0x40 [ 2701.366036][T10101] ? __hrtimer_init+0x189/0x270 [ 2701.370902][T10101] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2701.376647][T10101] ? mac80211_hwsim_free+0x220/0x220 [ 2701.381947][T10101] ? rcu_is_watching+0x15/0xb0 [ 2701.386734][T10101] ? kstrndup+0xbd/0x140 [ 2701.391014][T10101] hwsim_new_radio_nl+0xdad/0x1a70 [ 2701.396127][T10101] ? __nla_validate+0x50/0x50 [ 2701.400819][T10101] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2701.407190][T10101] ? __nla_parse+0x40/0x50 [ 2701.411616][T10101] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2701.417953][T10101] genl_family_rcv_msg_doit+0x21a/0x310 [ 2701.423506][T10101] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2701.429426][T10101] ? bpf_lsm_capable+0x9/0x10 [ 2701.434118][T10101] ? security_capable+0x89/0xb0 [ 2701.438979][T10101] genl_rcv_msg+0x611/0x7a0 [ 2701.443489][T10101] ? genl_bind+0x360/0x360 [ 2701.447901][T10101] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2701.454250][T10101] netlink_rcv_skb+0x235/0x4c0 [ 2701.459016][T10101] ? genl_bind+0x360/0x360 [ 2701.463442][T10101] ? netlink_ack+0x1160/0x1160 [ 2701.468213][T10101] ? __lock_acquire+0x7d80/0x7d80 [ 2701.473242][T10101] ? net_generic+0x1e/0x240 [ 2701.477790][T10101] ? down_read+0x1ac/0x2e0 [ 2701.482229][T10101] genl_rcv+0x28/0x40 [ 2701.486220][T10101] netlink_unicast+0x7b1/0x930 [ 2701.490986][T10101] netlink_sendmsg+0x8d0/0xbf0 [ 2701.495748][T10101] ? apparmor_socket_sendmsg+0x19/0x330 [ 2701.501318][T10101] ? netlink_getsockopt+0x590/0x590 [ 2701.506517][T10101] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2701.512058][T10101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2701.517350][T10101] ? security_socket_sendmsg+0x80/0xa0 [ 2701.522873][T10101] ? netlink_getsockopt+0x590/0x590 [ 2701.528080][T10101] ____sys_sendmsg+0x61b/0x980 [ 2701.532853][T10101] ? __asan_memset+0x22/0x40 [ 2701.537450][T10101] ? __sys_sendmsg_sock+0x30/0x30 [ 2701.542491][T10101] ? __import_iovec+0x5f2/0x850 [ 2701.547347][T10101] ? import_iovec+0x73/0xa0 [ 2701.551857][T10101] ___sys_sendmsg+0x2a6/0x360 [ 2701.556543][T10101] ? __sys_sendmsg+0x2b0/0x2b0 [ 2701.561356][T10101] __se_sys_sendmsg+0x1d0/0x2c0 [ 2701.566229][T10101] ? __x64_sys_sendmsg+0x80/0x80 [ 2701.571182][T10101] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2701.577090][T10101] do_syscall_64+0x55/0xb0 [ 2701.581516][T10101] ? clear_bhb_loop+0x40/0x90 [ 2701.586223][T10101] ? clear_bhb_loop+0x40/0x90 [ 2701.590900][T10101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2701.596793][T10101] RIP: 0033:0x7f110779e159 [ 2701.601213][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2701.620836][T10101] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2701.629251][T10101] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2701.637224][T10101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2701.645198][T10101] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2701.653164][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2701.661133][T10101] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2701.669145][T10101] [ 2701.918868][T10110] netlink: 'syz.1.11729': attribute type 4 has an invalid length. [ 2701.928695][T10110] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11729'. [ 2702.044485][T10115] netlink: 'syz.1.11732': attribute type 4 has an invalid length. [ 2702.145799][T10119] sit0: left promiscuous mode [ 2702.579404][T10132] __nla_validate_parse: 1 callbacks suppressed [ 2702.579441][T10132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11739'. [ 2702.629842][T10132] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2702.682995][T10132] CPU: 0 PID: 10132 Comm: syz.0.11739 Not tainted syzkaller #0 [ 2702.690639][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2702.700735][T10132] Call Trace: [ 2702.704300][T10132] [ 2702.707252][T10132] dump_stack_lvl+0x18c/0x250 [ 2702.711974][T10132] ? show_regs_print_info+0x20/0x20 [ 2702.717208][T10132] ? load_image+0x420/0x420 [ 2702.721765][T10132] sysfs_warn_dup+0x8e/0xa0 [ 2702.726308][T10132] sysfs_do_create_link_sd+0xc0/0x110 [ 2702.731719][T10132] device_add_class_symlinks+0x1cf/0x240 [ 2702.737379][T10132] device_add+0x4f9/0xc40 [ 2702.741733][T10132] wiphy_register+0x1d99/0x2ac0 [ 2702.746680][T10132] ? cfg80211_event_work+0x40/0x40 [ 2702.751860][T10132] ? minstrel_ht_alloc+0x88a/0x990 [ 2702.756999][T10132] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2702.763081][T10132] ieee80211_register_hw+0x2dd8/0x3b30 [ 2702.768564][T10132] ? ieee80211_register_hw+0xf11/0x3b30 [ 2702.774125][T10132] ? ieee80211_tasklet_handler+0x20/0x20 [ 2702.779766][T10132] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2702.785952][T10132] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2702.791718][T10132] ? mac80211_hwsim_free+0x220/0x220 [ 2702.797007][T10132] ? rcu_is_watching+0x15/0xb0 [ 2702.801779][T10132] ? kstrndup+0xbd/0x140 [ 2702.806038][T10132] hwsim_new_radio_nl+0xdad/0x1a70 [ 2702.811163][T10132] ? __nla_validate+0x50/0x50 [ 2702.815864][T10132] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2702.822207][T10132] ? __nla_parse+0x40/0x50 [ 2702.826636][T10132] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2702.833002][T10132] genl_family_rcv_msg_doit+0x21a/0x310 [ 2702.838595][T10132] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2702.844513][T10132] ? bpf_lsm_capable+0x9/0x10 [ 2702.849200][T10132] ? security_capable+0x89/0xb0 [ 2702.854065][T10132] genl_rcv_msg+0x611/0x7a0 [ 2702.858596][T10132] ? genl_bind+0x360/0x360 [ 2702.863022][T10132] ? perf_trace_lock+0xfc/0x3b0 [ 2702.867869][T10132] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2702.874204][T10132] ? perf_trace_lock+0xfc/0x3b0 [ 2702.879096][T10132] netlink_rcv_skb+0x235/0x4c0 [ 2702.883869][T10132] ? genl_bind+0x360/0x360 [ 2702.888291][T10132] ? netlink_ack+0x1160/0x1160 [ 2702.893070][T10132] ? __lock_acquire+0x7d80/0x7d80 [ 2702.898102][T10132] ? net_generic+0x1e/0x240 [ 2702.902623][T10132] ? down_read+0x1ac/0x2e0 [ 2702.907047][T10132] genl_rcv+0x28/0x40 [ 2702.911037][T10132] netlink_unicast+0x7b1/0x930 [ 2702.915816][T10132] netlink_sendmsg+0x8d0/0xbf0 [ 2702.920592][T10132] ? netlink_getsockopt+0x590/0x590 [ 2702.925798][T10132] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2702.931352][T10132] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2702.936639][T10132] ? security_socket_sendmsg+0x80/0xa0 [ 2702.942102][T10132] ? netlink_getsockopt+0x590/0x590 [ 2702.947310][T10132] ____sys_sendmsg+0x61b/0x980 [ 2702.952086][T10132] ? __asan_memset+0x22/0x40 [ 2702.956687][T10132] ? __sys_sendmsg_sock+0x30/0x30 [ 2702.961710][T10132] ? __import_iovec+0x5f2/0x850 [ 2702.966576][T10132] ? import_iovec+0x73/0xa0 [ 2702.971095][T10132] ___sys_sendmsg+0x2a6/0x360 [ 2702.975784][T10132] ? __sys_sendmsg+0x2b0/0x2b0 [ 2702.980597][T10132] __se_sys_sendmsg+0x1d0/0x2c0 [ 2702.985456][T10132] ? __x64_sys_sendmsg+0x80/0x80 [ 2702.990416][T10132] do_syscall_64+0x55/0xb0 [ 2702.994834][T10132] ? clear_bhb_loop+0x40/0x90 [ 2702.999511][T10132] ? clear_bhb_loop+0x40/0x90 [ 2703.004215][T10132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2703.010155][T10132] RIP: 0033:0x7ff9f819e159 [ 2703.014602][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2703.034230][T10132] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2703.042674][T10132] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2703.050659][T10132] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2703.058637][T10132] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2703.066613][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2703.074585][T10132] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2703.082575][T10132] [ 2703.150218][T10138] sit0: entered promiscuous mode [ 2703.591066][T10137] sit0: left promiscuous mode [ 2703.653259][T10144] netlink: 'syz.0.11745': attribute type 4 has an invalid length. [ 2703.662539][T10144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11745'. [ 2705.322680][T10170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2705.331707][T20886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2705.340201][T20886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2705.351902][T20886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2705.361594][T20886] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2705.369742][T20886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2705.583565][T10168] chnl_net:caif_netlink_parms(): no params data found [ 2705.687376][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.695113][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.702759][T10168] bridge_slave_0: entered allmulticast mode [ 2705.710338][T10168] bridge_slave_0: entered promiscuous mode [ 2705.719978][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.727375][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 2705.734885][T10168] bridge_slave_1: entered allmulticast mode [ 2705.742492][T10168] bridge_slave_1: entered promiscuous mode [ 2705.775253][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2705.788599][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2705.824996][T10168] team0: Port device team_slave_0 added [ 2705.834160][T10168] team0: Port device team_slave_1 added [ 2705.922475][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2705.933279][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2705.965664][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2705.991275][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2705.998621][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2706.025903][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2706.037921][T30852] tipc: Left network mode [ 2706.087247][T10168] hsr_slave_0: entered promiscuous mode [ 2706.095067][T10168] hsr_slave_1: entered promiscuous mode [ 2706.178413][T30852] ip6gretap0 (unregistering): left allmulticast mode [ 2706.188476][T30852] ip6gretap0 (unregistering): left promiscuous mode [ 2706.197440][T30852] Ÿë: port 2(ip6gretap0) entered disabled state [ 2706.947432][T30852] gretap0 (unregistering): left allmulticast mode [ 2706.954078][T30852] gretap0 (unregistering): left promiscuous mode [ 2706.960866][T30852] Ÿë: port 1(gretap0) entered disabled state [ 2707.398417][T10168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2707.412721][T20886] Bluetooth: hci4: command tx timeout [ 2707.425787][T10168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2707.459682][T10168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2707.494760][T10168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2707.716256][T10213] sit0: entered promiscuous mode [ 2707.830643][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2707.903701][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 2707.996504][T30860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2708.003728][T30860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2708.029546][T10220] sit0: entered promiscuous mode [ 2708.308371][T10227] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11763'. [ 2709.029512][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2709.036792][ T6853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2709.058280][T10227] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2709.071181][T10227] CPU: 0 PID: 10227 Comm: syz.1.11763 Not tainted syzkaller #0 [ 2709.078808][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2709.088902][T10227] Call Trace: [ 2709.092190][T10227] [ 2709.095122][T10227] dump_stack_lvl+0x18c/0x250 [ 2709.099811][T10227] ? show_regs_print_info+0x20/0x20 [ 2709.105020][T10227] ? load_image+0x420/0x420 [ 2709.109534][T10227] sysfs_warn_dup+0x8e/0xa0 [ 2709.114040][T10227] sysfs_do_create_link_sd+0xc0/0x110 [ 2709.119415][T10227] device_add_class_symlinks+0x1cf/0x240 [ 2709.125060][T10227] device_add+0x4f9/0xc40 [ 2709.129395][T10227] wiphy_register+0x1d99/0x2ac0 [ 2709.134279][T10227] ? cfg80211_event_work+0x40/0x40 [ 2709.139393][T10227] ? minstrel_ht_alloc+0x88a/0x990 [ 2709.144540][T10227] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2709.150614][T10227] ieee80211_register_hw+0x2dd8/0x3b30 [ 2709.156089][T10227] ? ieee80211_register_hw+0xf11/0x3b30 [ 2709.161644][T10227] ? ieee80211_tasklet_handler+0x20/0x20 [ 2709.167275][T10227] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2709.173176][T10227] ? __debug_object_init+0xec/0x450 [ 2709.178379][T10227] ? __asan_memset+0x22/0x40 [ 2709.182973][T10227] ? __hrtimer_init+0x189/0x270 [ 2709.187832][T10227] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2709.193582][T10227] ? mac80211_hwsim_free+0x220/0x220 [ 2709.198864][T10227] ? rcu_is_watching+0x15/0xb0 [ 2709.203633][T10227] ? kstrndup+0xbd/0x140 [ 2709.207888][T10227] hwsim_new_radio_nl+0xdad/0x1a70 [ 2709.213003][T10227] ? mark_lock+0x94/0x320 [ 2709.217339][T10227] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2709.223335][T10227] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2709.229677][T10227] ? lockdep_hardirqs_on+0x98/0x150 [ 2709.234892][T10227] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2709.241064][T10227] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 2709.247406][T10227] genl_family_rcv_msg_doit+0x21a/0x310 [ 2709.252966][T10227] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2709.258861][T10227] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 2709.264413][T10227] ? bpf_lsm_capable+0x9/0x10 [ 2709.269090][T10227] ? security_capable+0x89/0xb0 [ 2709.273948][T10227] genl_rcv_msg+0x611/0x7a0 [ 2709.278472][T10227] ? genl_bind+0x360/0x360 [ 2709.282892][T10227] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2709.289220][T10227] ? perf_trace_lock+0xfc/0x3b0 [ 2709.294088][T10227] netlink_rcv_skb+0x235/0x4c0 [ 2709.298856][T10227] ? genl_bind+0x360/0x360 [ 2709.303279][T10227] ? netlink_ack+0x1160/0x1160 [ 2709.308055][T10227] ? __lock_acquire+0x7d80/0x7d80 [ 2709.313088][T10227] ? net_generic+0x1e/0x240 [ 2709.317600][T10227] ? down_read+0x1ac/0x2e0 [ 2709.322025][T10227] genl_rcv+0x28/0x40 [ 2709.326009][T10227] netlink_unicast+0x7b1/0x930 [ 2709.330796][T10227] netlink_sendmsg+0x8d0/0xbf0 [ 2709.335586][T10227] ? netlink_getsockopt+0x590/0x590 [ 2709.340789][T10227] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2709.346374][T10227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2709.351666][T10227] ? security_socket_sendmsg+0x80/0xa0 [ 2709.357125][T10227] ? netlink_getsockopt+0x590/0x590 [ 2709.362330][T10227] ____sys_sendmsg+0x61b/0x980 [ 2709.367102][T10227] ? __asan_memset+0x22/0x40 [ 2709.371694][T10227] ? __sys_sendmsg_sock+0x30/0x30 [ 2709.376717][T10227] ? __import_iovec+0x5f2/0x850 [ 2709.381584][T10227] ? import_iovec+0x73/0xa0 [ 2709.386095][T10227] ___sys_sendmsg+0x2a6/0x360 [ 2709.390782][T10227] ? __sys_sendmsg+0x2b0/0x2b0 [ 2709.395568][T10227] ? ktime_get+0x7f/0x280 [ 2709.399898][T10227] ? trace_call_bpf+0xc3/0x6c0 [ 2709.404685][T10227] __se_sys_sendmsg+0x1d0/0x2c0 [ 2709.409540][T10227] ? perf_trace_preemptirq_template+0x269/0x330 [ 2709.415788][T10227] ? __x64_sys_sendmsg+0x80/0x80 [ 2709.420746][T10227] ? lockdep_hardirqs_on+0x98/0x150 [ 2709.425969][T10227] do_syscall_64+0x55/0xb0 [ 2709.430395][T10227] ? clear_bhb_loop+0x40/0x90 [ 2709.435094][T10227] ? clear_bhb_loop+0x40/0x90 [ 2709.439773][T10227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2709.445671][T10227] RIP: 0033:0x7f110779e159 [ 2709.450112][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2709.469721][T10227] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2709.478141][T10227] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2709.486115][T10227] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2709.494084][T10227] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2709.502057][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2709.510027][T10227] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2709.518014][T10227] [ 2709.554597][T20886] Bluetooth: hci4: command tx timeout [ 2709.799257][T10252] sit0: entered promiscuous mode [ 2709.949240][T10255] netlink: 'syz.1.11769': attribute type 4 has an invalid length. [ 2709.988149][T10255] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11769'. [ 2710.282448][T10269] sit0: left promiscuous mode [ 2710.465660][T10272] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11773'. [ 2710.497955][T10269] sit0: entered promiscuous mode [ 2710.665257][T10272] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2710.694347][T10272] CPU: 1 PID: 10272 Comm: syz.1.11773 Not tainted syzkaller #0 [ 2710.702146][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2710.712232][T10272] Call Trace: [ 2710.715546][T10272] [ 2710.718488][T10272] dump_stack_lvl+0x18c/0x250 [ 2710.723189][T10272] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2710.729412][T10272] ? show_regs_print_info+0x20/0x20 [ 2710.734656][T10272] ? load_image+0x420/0x420 [ 2710.739196][T10272] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2710.745279][T10272] sysfs_warn_dup+0x8e/0xa0 [ 2710.749808][T10272] sysfs_do_create_link_sd+0xc0/0x110 [ 2710.755200][T10272] device_add_class_symlinks+0x1cf/0x240 [ 2710.760877][T10272] device_add+0x4f9/0xc40 [ 2710.765264][T10272] wiphy_register+0x1d99/0x2ac0 [ 2710.770186][T10272] ? cfg80211_event_work+0x40/0x40 [ 2710.775353][T10272] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2710.781556][T10272] ieee80211_register_hw+0x2dd8/0x3b30 [ 2710.787049][T10272] ? ieee80211_register_hw+0xf11/0x3b30 [ 2710.792622][T10272] ? ieee80211_tasklet_handler+0x20/0x20 [ 2710.798258][T10272] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2710.804164][T10272] ? __debug_object_init+0xec/0x450 [ 2710.809394][T10272] ? __asan_memset+0x22/0x40 [ 2710.814012][T10272] ? __hrtimer_init+0x189/0x270 [ 2710.818879][T10272] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2710.824623][T10272] ? mac80211_hwsim_free+0x220/0x220 [ 2710.829918][T10272] ? rcu_is_watching+0x15/0xb0 [ 2710.834691][T10272] ? kstrndup+0xbd/0x140 [ 2710.838965][T10272] hwsim_new_radio_nl+0xdad/0x1a70 [ 2710.844098][T10272] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2710.850096][T10272] ? lock_chain_count+0x20/0x20 [ 2710.855010][T10272] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2710.861381][T10272] ? __nla_parse+0x40/0x50 [ 2710.865820][T10272] ? __nla_parse+0x40/0x50 [ 2710.870271][T10272] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2710.876625][T10272] genl_family_rcv_msg_doit+0x21a/0x310 [ 2710.882180][T10272] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2710.888104][T10272] ? bpf_lsm_capable+0x9/0x10 [ 2710.892789][T10272] ? security_capable+0x89/0xb0 [ 2710.897648][T10272] genl_rcv_msg+0x611/0x7a0 [ 2710.902181][T10272] ? genl_bind+0x360/0x360 [ 2710.906622][T10272] ? perf_trace_lock+0xfc/0x3b0 [ 2710.911474][T10272] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2710.917805][T10272] ? perf_trace_lock+0xfc/0x3b0 [ 2710.922698][T10272] netlink_rcv_skb+0x235/0x4c0 [ 2710.927472][T10272] ? genl_bind+0x360/0x360 [ 2710.931895][T10272] ? netlink_ack+0x1160/0x1160 [ 2710.936661][T10272] ? __lock_acquire+0x7d80/0x7d80 [ 2710.941684][T10272] ? net_generic+0x1e/0x240 [ 2710.946196][T10272] ? down_read+0x1ac/0x2e0 [ 2710.950634][T10272] genl_rcv+0x28/0x40 [ 2710.954635][T10272] netlink_unicast+0x7b1/0x930 [ 2710.959431][T10272] netlink_sendmsg+0x8d0/0xbf0 [ 2710.964211][T10272] ? netlink_getsockopt+0x590/0x590 [ 2710.969434][T10272] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2710.974986][T10272] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2710.980268][T10272] ? security_socket_sendmsg+0x80/0xa0 [ 2710.985726][T10272] ? netlink_getsockopt+0x590/0x590 [ 2710.990961][T10272] ____sys_sendmsg+0x61b/0x980 [ 2710.995749][T10272] ? __asan_memset+0x22/0x40 [ 2711.000344][T10272] ? __sys_sendmsg_sock+0x30/0x30 [ 2711.005370][T10272] ? __import_iovec+0x5f2/0x850 [ 2711.010239][T10272] ? import_iovec+0x73/0xa0 [ 2711.014746][T10272] ___sys_sendmsg+0x2a6/0x360 [ 2711.019427][T10272] ? __sys_sendmsg+0x2b0/0x2b0 [ 2711.024206][T10272] ? trace_call_bpf+0xc3/0x6c0 [ 2711.028983][T10272] __se_sys_sendmsg+0x1d0/0x2c0 [ 2711.033836][T10272] ? perf_trace_preemptirq_template+0x269/0x330 [ 2711.040078][T10272] ? __x64_sys_sendmsg+0x80/0x80 [ 2711.045023][T10272] ? lockdep_hardirqs_on+0x98/0x150 [ 2711.050225][T10272] do_syscall_64+0x55/0xb0 [ 2711.054642][T10272] ? clear_bhb_loop+0x40/0x90 [ 2711.059321][T10272] ? clear_bhb_loop+0x40/0x90 [ 2711.063999][T10272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2711.069889][T10272] RIP: 0033:0x7f110779e159 [ 2711.074299][T10272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2711.093914][T10272] RSP: 002b:00007f1108745028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2711.102337][T10272] RAX: ffffffffffffffda RBX: 00007f1107a25fa0 RCX: 00007f110779e159 [ 2711.110329][T10272] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2711.118325][T10272] RBP: 00007f1107835024 R08: 0000000000000000 R09: 0000000000000000 [ 2711.126296][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2711.134262][T10272] R13: 00007f1107a26038 R14: 00007f1107a25fa0 R15: 00007ffc6ea53458 [ 2711.142247][T10272] [ 2711.300586][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2711.520452][T10168] veth0_vlan: entered promiscuous mode [ 2711.571459][T20886] Bluetooth: hci4: command tx timeout [ 2712.549749][T10289] sit0: left promiscuous mode [ 2712.570234][T10291] sit0: left promiscuous mode [ 2712.617262][T10296] sit0: entered promiscuous mode [ 2712.716404][T10168] veth1_vlan: entered promiscuous mode [ 2712.884000][T10305] netlink: 'syz.3.11778': attribute type 4 has an invalid length. [ 2712.903130][T10305] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11778'. [ 2712.953586][T10168] veth0_macvtap: entered promiscuous mode [ 2712.972572][T10168] veth1_macvtap: entered promiscuous mode [ 2713.005917][T10168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2713.067969][T10168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2713.118781][T10168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.152134][T10168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.161965][T10168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.170710][T10168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2713.230591][T10317] sit0: left promiscuous mode [ 2713.384139][T10323] sit0: left promiscuous mode [ 2713.407595][T10324] sit0: entered promiscuous mode [ 2713.660920][T20886] Bluetooth: hci4: command tx timeout [ 2713.662844][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.681528][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.912140][T10326] sit0: entered promiscuous mode [ 2714.100357][T10335] sit0: left promiscuous mode [ 2714.191549][T30861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2714.199432][T30861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.345223][T10397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2714.357058][T10397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2714.513209][T10347] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11791'. [ 2714.545500][T10351] sit0: entered allmulticast mode [ 2714.583000][T10347] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2714.609251][T10347] CPU: 0 PID: 10347 Comm: syz.3.11791 Not tainted syzkaller #0 [ 2714.616901][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2714.626999][T10347] Call Trace: [ 2714.630306][T10347] [ 2714.633264][T10347] dump_stack_lvl+0x18c/0x250 [ 2714.637990][T10347] ? show_regs_print_info+0x20/0x20 [ 2714.643233][T10347] ? load_image+0x420/0x420 [ 2714.647797][T10347] sysfs_warn_dup+0x8e/0xa0 [ 2714.652343][T10347] sysfs_do_create_link_sd+0xc0/0x110 [ 2714.657810][T10347] device_add_class_symlinks+0x1cf/0x240 [ 2714.663498][T10347] device_add+0x4f9/0xc40 [ 2714.667868][T10347] wiphy_register+0x1d99/0x2ac0 [ 2714.672777][T10347] ? cfg80211_event_work+0x40/0x40 [ 2714.677935][T10347] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2714.684046][T10347] ieee80211_register_hw+0x2dd8/0x3b30 [ 2714.689555][T10347] ? ieee80211_register_hw+0xf11/0x3b30 [ 2714.695139][T10347] ? ieee80211_tasklet_handler+0x20/0x20 [ 2714.700782][T10347] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2714.706688][T10347] ? __debug_object_init+0xec/0x450 [ 2714.711899][T10347] ? __asan_memset+0x22/0x40 [ 2714.716503][T10347] ? __hrtimer_init+0x189/0x270 [ 2714.721361][T10347] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2714.727107][T10347] ? mac80211_hwsim_free+0x220/0x220 [ 2714.732392][T10347] ? rcu_is_watching+0x15/0xb0 [ 2714.737162][T10347] ? kstrndup+0xbd/0x140 [ 2714.741417][T10347] hwsim_new_radio_nl+0xdad/0x1a70 [ 2714.746535][T10347] ? __nla_validate+0x50/0x50 [ 2714.751231][T10347] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2714.757578][T10347] ? __nla_parse+0x40/0x50 [ 2714.762005][T10347] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2714.768354][T10347] genl_family_rcv_msg_doit+0x21a/0x310 [ 2714.773909][T10347] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2714.779819][T10347] ? bpf_lsm_capable+0x9/0x10 [ 2714.784504][T10347] ? security_capable+0x89/0xb0 [ 2714.789368][T10347] genl_rcv_msg+0x611/0x7a0 [ 2714.793882][T10347] ? genl_bind+0x360/0x360 [ 2714.798305][T10347] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2714.804637][T10347] ? netlink_rcv_skb+0x214/0x4c0 [ 2714.809581][T10347] netlink_rcv_skb+0x235/0x4c0 [ 2714.814347][T10347] ? genl_bind+0x360/0x360 [ 2714.818767][T10347] ? netlink_ack+0x1160/0x1160 [ 2714.823545][T10347] ? __lock_acquire+0x7d80/0x7d80 [ 2714.828574][T10347] ? net_generic+0x1e/0x240 [ 2714.833089][T10347] ? down_read+0x1ac/0x2e0 [ 2714.837512][T10347] genl_rcv+0x28/0x40 [ 2714.841499][T10347] netlink_unicast+0x7b1/0x930 [ 2714.846278][T10347] netlink_sendmsg+0x8d0/0xbf0 [ 2714.851056][T10347] ? netlink_getsockopt+0x590/0x590 [ 2714.856260][T10347] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2714.861817][T10347] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2714.867105][T10347] ? security_socket_sendmsg+0x80/0xa0 [ 2714.872561][T10347] ? netlink_getsockopt+0x590/0x590 [ 2714.877762][T10347] ____sys_sendmsg+0x61b/0x980 [ 2714.882539][T10347] ? __asan_memset+0x22/0x40 [ 2714.887136][T10347] ? __sys_sendmsg_sock+0x30/0x30 [ 2714.892159][T10347] ? __import_iovec+0x5f2/0x850 [ 2714.897024][T10347] ? import_iovec+0x73/0xa0 [ 2714.901537][T10347] ___sys_sendmsg+0x2a6/0x360 [ 2714.906251][T10347] ? __sys_sendmsg+0x2b0/0x2b0 [ 2714.911070][T10347] __se_sys_sendmsg+0x1d0/0x2c0 [ 2714.915926][T10347] ? __x64_sys_sendmsg+0x80/0x80 [ 2714.920888][T10347] do_syscall_64+0x55/0xb0 [ 2714.925304][T10347] ? clear_bhb_loop+0x40/0x90 [ 2714.929981][T10347] ? clear_bhb_loop+0x40/0x90 [ 2714.934668][T10347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2714.940565][T10347] RIP: 0033:0x7ffbf1b9e159 [ 2714.944984][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2714.964598][T10347] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2714.973015][T10347] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2714.980986][T10347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2714.988965][T10347] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2714.996941][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2715.004911][T10347] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2715.012903][T10347] [ 2715.167323][T10351] sit0: entered promiscuous mode [ 2715.533563][T10355] netlink: 'syz.3.11793': attribute type 4 has an invalid length. [ 2715.593042][T10355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11793'. [ 2715.888430][T26481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2715.898608][T26481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2715.907706][T26481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2715.916454][T26481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2715.925073][T26481] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2715.933038][T26481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2715.935225][T10361] sit0: entered promiscuous mode [ 2715.980617][T10365] sit0: left promiscuous mode [ 2716.195723][T10366] sit0: entered promiscuous mode [ 2716.307914][T10370] sit0: left promiscuous mode [ 2716.489525][T30849] team0: Port device ÿÿÿÿÿÿ removed [ 2716.637833][T10362] chnl_net:caif_netlink_parms(): no params data found [ 2716.707073][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 2716.714668][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.722789][T10362] bridge_slave_0: entered allmulticast mode [ 2716.729645][T10362] bridge_slave_0: entered promiscuous mode [ 2716.738196][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 2716.745863][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.753345][T10362] bridge_slave_1: entered allmulticast mode [ 2716.760121][T10362] bridge_slave_1: entered promiscuous mode [ 2716.787578][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2716.799294][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2716.835838][T10362] team0: Port device team_slave_0 added [ 2716.849442][T10362] team0: Port device team_slave_1 added [ 2716.878048][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2716.885808][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2716.911891][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2716.925042][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2716.932627][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2716.958756][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2717.000012][T10362] hsr_slave_0: entered promiscuous mode [ 2717.006459][T10362] hsr_slave_1: entered promiscuous mode [ 2717.013431][T10362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2717.021126][T10362] Cannot create hsr debugfs directory [ 2717.279919][T10385] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11803'. [ 2717.308513][T10385] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2717.326398][T10385] CPU: 1 PID: 10385 Comm: syz.0.11803 Not tainted syzkaller #0 [ 2717.334023][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2717.344121][T10385] Call Trace: [ 2717.347423][T10385] [ 2717.350380][T10385] dump_stack_lvl+0x18c/0x250 [ 2717.355156][T10385] ? show_regs_print_info+0x20/0x20 [ 2717.360398][T10385] ? load_image+0x420/0x420 [ 2717.364964][T10385] sysfs_warn_dup+0x8e/0xa0 [ 2717.369515][T10385] sysfs_do_create_link_sd+0xc0/0x110 [ 2717.374936][T10385] device_add_class_symlinks+0x1cf/0x240 [ 2717.380718][T10385] device_add+0x4f9/0xc40 [ 2717.385095][T10385] wiphy_register+0x1d99/0x2ac0 [ 2717.390015][T10385] ? cfg80211_event_work+0x40/0x40 [ 2717.395170][T10385] ? minstrel_ht_alloc+0x88a/0x990 [ 2717.400338][T10385] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2717.406465][T10385] ieee80211_register_hw+0x2dd8/0x3b30 [ 2717.411969][T10385] ? ieee80211_register_hw+0xf11/0x3b30 [ 2717.417541][T10385] ? ieee80211_tasklet_handler+0x20/0x20 [ 2717.423194][T10385] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2717.429119][T10385] ? __debug_object_init+0xec/0x450 [ 2717.434341][T10385] ? __asan_memset+0x22/0x40 [ 2717.438949][T10385] ? __hrtimer_init+0x189/0x270 [ 2717.443802][T10385] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2717.449542][T10385] ? mac80211_hwsim_free+0x220/0x220 [ 2717.454827][T10385] ? rcu_is_watching+0x15/0xb0 [ 2717.459617][T10385] ? kstrndup+0xbd/0x140 [ 2717.463873][T10385] hwsim_new_radio_nl+0xdad/0x1a70 [ 2717.469003][T10385] ? __nla_validate+0x50/0x50 [ 2717.473695][T10385] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2717.480061][T10385] ? __nla_parse+0x40/0x50 [ 2717.484502][T10385] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2717.490835][T10385] genl_family_rcv_msg_doit+0x21a/0x310 [ 2717.496386][T10385] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2717.502306][T10385] ? bpf_lsm_capable+0x9/0x10 [ 2717.506983][T10385] ? security_capable+0x89/0xb0 [ 2717.511860][T10385] genl_rcv_msg+0x611/0x7a0 [ 2717.516391][T10385] ? genl_bind+0x360/0x360 [ 2717.520813][T10385] ? perf_trace_lock+0xfc/0x3b0 [ 2717.525715][T10385] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2717.532112][T10385] ? perf_trace_lock+0xfc/0x3b0 [ 2717.536981][T10385] netlink_rcv_skb+0x235/0x4c0 [ 2717.541776][T10385] ? genl_bind+0x360/0x360 [ 2717.546212][T10385] ? netlink_ack+0x1160/0x1160 [ 2717.550986][T10385] ? __lock_acquire+0x7d80/0x7d80 [ 2717.556005][T10385] ? net_generic+0x1e/0x240 [ 2717.560512][T10385] ? down_read+0x1ac/0x2e0 [ 2717.564937][T10385] genl_rcv+0x28/0x40 [ 2717.568915][T10385] netlink_unicast+0x7b1/0x930 [ 2717.573687][T10385] netlink_sendmsg+0x8d0/0xbf0 [ 2717.578481][T10385] ? netlink_getsockopt+0x590/0x590 [ 2717.583680][T10385] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2717.589251][T10385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2717.594574][T10385] ? security_socket_sendmsg+0x80/0xa0 [ 2717.600044][T10385] ? netlink_getsockopt+0x590/0x590 [ 2717.605246][T10385] ____sys_sendmsg+0x61b/0x980 [ 2717.610044][T10385] ? __asan_memset+0x22/0x40 [ 2717.614641][T10385] ? __sys_sendmsg_sock+0x30/0x30 [ 2717.619685][T10385] ? __import_iovec+0x5f2/0x850 [ 2717.624575][T10385] ? import_iovec+0x73/0xa0 [ 2717.629092][T10385] ___sys_sendmsg+0x2a6/0x360 [ 2717.633779][T10385] ? __sys_sendmsg+0x2b0/0x2b0 [ 2717.638622][T10385] __se_sys_sendmsg+0x1d0/0x2c0 [ 2717.643496][T10385] ? __x64_sys_sendmsg+0x80/0x80 [ 2717.648447][T10385] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2717.654346][T10385] do_syscall_64+0x55/0xb0 [ 2717.658761][T10385] ? clear_bhb_loop+0x40/0x90 [ 2717.663434][T10385] ? clear_bhb_loop+0x40/0x90 [ 2717.668113][T10385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2717.674007][T10385] RIP: 0033:0x7ff9f819e159 [ 2717.678421][T10385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2717.698046][T10385] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2717.706481][T10385] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2717.714450][T10385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2717.722433][T10385] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2717.730428][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2717.738398][T10385] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2717.746420][T10385] [ 2717.972170][T26481] Bluetooth: hci1: command tx timeout [ 2718.008141][T10391] netlink: 'syz.0.11806': attribute type 4 has an invalid length. [ 2718.016369][T10391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11806'. [ 2718.093972][T10395] sit0: entered promiscuous mode [ 2718.123325][T10398] sit0: left promiscuous mode [ 2718.231906][T10398] sit0: entered promiscuous mode [ 2718.292584][T10401] sit0: left promiscuous mode [ 2718.418537][T10401] sit0: entered promiscuous mode [ 2718.732653][T30849] tipc: Left network mode [ 2718.967279][T30849] ip6gretap0 (unregistering): left allmulticast mode [ 2718.991146][T30849] ip6gretap0 (unregistering): left promiscuous mode [ 2718.997918][T30849] Ÿë: port 2(ip6gretap0) entered disabled state [ 2719.022066][T10414] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11815'. [ 2719.409641][T10414] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2719.442306][T10414] CPU: 1 PID: 10414 Comm: syz.0.11815 Not tainted syzkaller #0 [ 2719.449921][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2719.460012][T10414] Call Trace: [ 2719.463329][T10414] [ 2719.466290][T10414] dump_stack_lvl+0x18c/0x250 [ 2719.471016][T10414] ? show_regs_print_info+0x20/0x20 [ 2719.476257][T10414] ? load_image+0x420/0x420 [ 2719.480816][T10414] sysfs_warn_dup+0x8e/0xa0 [ 2719.485362][T10414] sysfs_do_create_link_sd+0xc0/0x110 [ 2719.490775][T10414] device_add_class_symlinks+0x1cf/0x240 [ 2719.496466][T10414] device_add+0x4f9/0xc40 [ 2719.500837][T10414] wiphy_register+0x1d99/0x2ac0 [ 2719.505736][T10414] ? cfg80211_event_work+0x40/0x40 [ 2719.510860][T10414] ? minstrel_ht_alloc+0x88a/0x990 [ 2719.515985][T10414] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2719.522096][T10414] ieee80211_register_hw+0x2dd8/0x3b30 [ 2719.527569][T10414] ? ieee80211_register_hw+0xf11/0x3b30 [ 2719.533129][T10414] ? ieee80211_tasklet_handler+0x20/0x20 [ 2719.538760][T10414] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2719.544654][T10414] ? __debug_object_init+0xec/0x450 [ 2719.549862][T10414] ? __asan_memset+0x22/0x40 [ 2719.554468][T10414] ? __hrtimer_init+0x189/0x270 [ 2719.559328][T10414] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2719.565071][T10414] ? mac80211_hwsim_free+0x220/0x220 [ 2719.570380][T10414] ? rcu_is_watching+0x15/0xb0 [ 2719.575167][T10414] ? kstrndup+0xbd/0x140 [ 2719.579438][T10414] hwsim_new_radio_nl+0xdad/0x1a70 [ 2719.584574][T10414] ? __nla_validate+0x50/0x50 [ 2719.589300][T10414] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2719.595675][T10414] ? __nla_parse+0x40/0x50 [ 2719.600116][T10414] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2719.606462][T10414] genl_family_rcv_msg_doit+0x21a/0x310 [ 2719.612030][T10414] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2719.617925][T10414] ? aa_get_newest_label+0xa/0x5c0 [ 2719.623097][T10414] ? bpf_lsm_capable+0x9/0x10 [ 2719.627789][T10414] ? security_capable+0x89/0xb0 [ 2719.632652][T10414] genl_rcv_msg+0x611/0x7a0 [ 2719.637202][T10414] ? genl_bind+0x360/0x360 [ 2719.641647][T10414] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2719.647991][T10414] ? perf_trace_lock+0xfc/0x3b0 [ 2719.652863][T10414] ? lockdep_hardirqs_on+0x98/0x150 [ 2719.658084][T10414] netlink_rcv_skb+0x235/0x4c0 [ 2719.662950][T10414] ? genl_bind+0x360/0x360 [ 2719.667373][T10414] ? netlink_ack+0x1160/0x1160 [ 2719.672152][T10414] ? __lock_acquire+0x7d80/0x7d80 [ 2719.677179][T10414] ? net_generic+0x1e/0x240 [ 2719.681698][T10414] ? down_read+0x1ac/0x2e0 [ 2719.686124][T10414] genl_rcv+0x28/0x40 [ 2719.690110][T10414] netlink_unicast+0x7b1/0x930 [ 2719.694893][T10414] netlink_sendmsg+0x8d0/0xbf0 [ 2719.699668][T10414] ? aa_sock_msg_perm+0x94/0x150 [ 2719.704612][T10414] ? netlink_getsockopt+0x590/0x590 [ 2719.709816][T10414] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2719.715367][T10414] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2719.720657][T10414] ? security_socket_sendmsg+0x80/0xa0 [ 2719.726116][T10414] ? netlink_getsockopt+0x590/0x590 [ 2719.731321][T10414] ____sys_sendmsg+0x61b/0x980 [ 2719.736093][T10414] ? __asan_memset+0x22/0x40 [ 2719.740689][T10414] ? __sys_sendmsg_sock+0x30/0x30 [ 2719.745709][T10414] ? __import_iovec+0x5f2/0x850 [ 2719.750571][T10414] ? import_iovec+0x73/0xa0 [ 2719.755081][T10414] ___sys_sendmsg+0x2a6/0x360 [ 2719.759803][T10414] ? __sys_sendmsg+0x2b0/0x2b0 [ 2719.764625][T10414] __se_sys_sendmsg+0x1d0/0x2c0 [ 2719.769489][T10414] ? __x64_sys_sendmsg+0x80/0x80 [ 2719.774456][T10414] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2719.780361][T10414] do_syscall_64+0x55/0xb0 [ 2719.784781][T10414] ? clear_bhb_loop+0x40/0x90 [ 2719.789467][T10414] ? clear_bhb_loop+0x40/0x90 [ 2719.794158][T10414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2719.800057][T10414] RIP: 0033:0x7ff9f819e159 [ 2719.804476][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2719.824088][T10414] RSP: 002b:00007ff9f9119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2719.832507][T10414] RAX: ffffffffffffffda RBX: 00007ff9f8425fa0 RCX: 00007ff9f819e159 [ 2719.840479][T10414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2719.848454][T10414] RBP: 00007ff9f8235024 R08: 0000000000000000 R09: 0000000000000000 [ 2719.856429][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2719.864399][T10414] R13: 00007ff9f8426038 R14: 00007ff9f8425fa0 R15: 00007ffed6ae4598 [ 2719.872390][T10414] [ 2720.061114][T26481] Bluetooth: hci1: command tx timeout [ 2720.187403][T10362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2720.225090][T30849] gretap0 (unregistering): left allmulticast mode [ 2720.234483][T30849] gretap0 (unregistering): left promiscuous mode [ 2720.241386][T30849] Ÿë: port 1(gretap0) entered disabled state [ 2720.256358][T10362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2720.267755][T10362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2720.282056][T10362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2720.460029][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2720.520455][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 2720.542440][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2720.549632][T10397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2720.568512][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2720.575741][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2720.838290][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2720.906873][T10362] veth0_vlan: entered promiscuous mode [ 2720.945008][T10362] veth1_vlan: entered promiscuous mode [ 2721.007185][T10362] veth0_macvtap: entered promiscuous mode [ 2721.030375][T10362] veth1_macvtap: entered promiscuous mode [ 2721.063206][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2721.077404][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.088769][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2721.106449][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2721.119888][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2721.132340][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2721.153143][T10362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.162693][T10362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.172589][T10362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.181466][T10362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.300314][T30861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2721.308398][T30861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2721.366172][T10397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2721.374635][T10397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2721.795863][T30849] team0 (unregistering): Port device geneve1 removed [ 2721.968873][T30849] team0 (unregistering): Port device hsr_slave_0 removed [ 2722.078342][T20886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2722.088281][T20886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2722.100226][T20886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2722.118080][T20886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2722.126184][T20886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2722.138333][T20886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2722.146046][T10170] Bluetooth: hci1: command tx timeout [ 2722.194517][T30849] team0 (unregistering): Port device 76žÿ removed [ 2722.560967][T10453] sit0: left promiscuous mode [ 2722.605226][T10455] sit0: entered promiscuous mode [ 2722.650644][T10456] netlink: 'syz.1.11817': attribute type 4 has an invalid length. [ 2722.661042][T10456] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11817'. [ 2722.714675][T10456] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2722.878507][T10465] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11821'. [ 2723.025975][T10465] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2723.048452][T10465] CPU: 0 PID: 10465 Comm: syz.3.11821 Not tainted syzkaller #0 [ 2723.056082][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2723.066168][T10465] Call Trace: [ 2723.069484][T10465] [ 2723.072444][T10465] dump_stack_lvl+0x18c/0x250 [ 2723.077154][T10465] ? show_regs_print_info+0x20/0x20 [ 2723.082369][T10465] ? load_image+0x420/0x420 [ 2723.086886][T10465] sysfs_warn_dup+0x8e/0xa0 [ 2723.091405][T10465] sysfs_do_create_link_sd+0xc0/0x110 [ 2723.096785][T10465] device_add_class_symlinks+0x1cf/0x240 [ 2723.102423][T10465] device_add+0x4f9/0xc40 [ 2723.106759][T10465] wiphy_register+0x1d99/0x2ac0 [ 2723.111635][T10465] ? cfg80211_event_work+0x40/0x40 [ 2723.116747][T10465] ? minstrel_ht_alloc+0x88a/0x990 [ 2723.121864][T10465] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2723.127947][T10465] ieee80211_register_hw+0x2dd8/0x3b30 [ 2723.133434][T10465] ? ieee80211_register_hw+0xf11/0x3b30 [ 2723.139029][T10465] ? ieee80211_tasklet_handler+0x20/0x20 [ 2723.144668][T10465] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2723.150590][T10465] ? __debug_object_init+0xec/0x450 [ 2723.155799][T10465] ? __asan_memset+0x22/0x40 [ 2723.160395][T10465] ? __hrtimer_init+0x189/0x270 [ 2723.165271][T10465] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2723.171055][T10465] ? mac80211_hwsim_free+0x220/0x220 [ 2723.176368][T10465] ? rcu_is_watching+0x15/0xb0 [ 2723.181155][T10465] ? kstrndup+0xbd/0x140 [ 2723.185419][T10465] hwsim_new_radio_nl+0xdad/0x1a70 [ 2723.190543][T10465] ? __nla_validate+0x50/0x50 [ 2723.195238][T10465] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2723.201576][T10465] ? kasan_poison+0x70/0x70 [ 2723.206088][T10465] ? __nla_parse+0x40/0x50 [ 2723.210515][T10465] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2723.216857][T10465] genl_family_rcv_msg_doit+0x21a/0x310 [ 2723.222414][T10465] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2723.228319][T10465] ? bpf_lsm_capable+0x9/0x10 [ 2723.233005][T10465] ? security_capable+0x89/0xb0 [ 2723.237864][T10465] genl_rcv_msg+0x611/0x7a0 [ 2723.242376][T10465] ? genl_bind+0x360/0x360 [ 2723.246793][T10465] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2723.253167][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 2723.258466][T10465] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2723.264632][T10465] netlink_rcv_skb+0x235/0x4c0 [ 2723.269401][T10465] ? genl_bind+0x360/0x360 [ 2723.273823][T10465] ? netlink_ack+0x1160/0x1160 [ 2723.278609][T10465] ? __lock_acquire+0x7d80/0x7d80 [ 2723.283641][T10465] ? net_generic+0x1e/0x240 [ 2723.288160][T10465] ? down_read+0x1ac/0x2e0 [ 2723.292603][T10465] genl_rcv+0x28/0x40 [ 2723.296586][T10465] netlink_unicast+0x7b1/0x930 [ 2723.301365][T10465] netlink_sendmsg+0x8d0/0xbf0 [ 2723.306138][T10465] ? netlink_getsockopt+0x590/0x590 [ 2723.311341][T10465] ? __sanitizer_cov_trace_const_cmp2+0x90/0x90 [ 2723.317589][T10465] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2723.323140][T10465] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2723.328432][T10465] ? security_socket_sendmsg+0x80/0xa0 [ 2723.333892][T10465] ? netlink_getsockopt+0x590/0x590 [ 2723.339098][T10465] ____sys_sendmsg+0x61b/0x980 [ 2723.343871][T10465] ? __asan_memset+0x22/0x40 [ 2723.348466][T10465] ? __sys_sendmsg_sock+0x30/0x30 [ 2723.353489][T10465] ? __import_iovec+0x5f2/0x850 [ 2723.358351][T10465] ? import_iovec+0x73/0xa0 [ 2723.362866][T10465] ___sys_sendmsg+0x2a6/0x360 [ 2723.367550][T10465] ? __sys_sendmsg+0x2b0/0x2b0 [ 2723.372365][T10465] __se_sys_sendmsg+0x1d0/0x2c0 [ 2723.377214][T10465] ? perf_trace_preemptirq_template+0x269/0x330 [ 2723.383492][T10465] ? __x64_sys_sendmsg+0x80/0x80 [ 2723.388450][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 2723.393663][T10465] do_syscall_64+0x55/0xb0 [ 2723.398086][T10465] ? clear_bhb_loop+0x40/0x90 [ 2723.402767][T10465] ? clear_bhb_loop+0x40/0x90 [ 2723.407447][T10465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2723.413341][T10465] RIP: 0033:0x7ffbf1b9e159 [ 2723.417759][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2723.437371][T10465] RSP: 002b:00007ffbf2a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2723.445790][T10465] RAX: ffffffffffffffda RBX: 00007ffbf1e25fa0 RCX: 00007ffbf1b9e159 [ 2723.453766][T10465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2723.461742][T10465] RBP: 00007ffbf1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2723.469712][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2723.477681][T10465] R13: 00007ffbf1e26038 R14: 00007ffbf1e25fa0 R15: 00007fffe01ffd68 [ 2723.485704][T10465] [ 2724.128462][T10457] chnl_net:caif_netlink_parms(): no params data found [ 2724.211074][T20886] Bluetooth: hci1: command tx timeout [ 2724.211266][T26481] Bluetooth: hci0: command tx timeout [ 2724.449577][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2724.470467][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 2724.478582][T10457] bridge_slave_0: entered allmulticast mode [ 2724.486571][T10457] bridge_slave_0: entered promiscuous mode [ 2724.501031][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 2724.509327][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 2724.521787][T10457] bridge_slave_1: entered allmulticast mode [ 2724.530104][T10457] bridge_slave_1: entered promiscuous mode [ 2724.718553][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2724.800545][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2724.969228][T10457] team0: Port device team_slave_0 added [ 2725.009162][T10457] team0: Port device team_slave_1 added [ 2725.073077][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2725.083046][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2725.125275][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2725.138548][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2725.145807][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2725.173974][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2725.318000][T10457] hsr_slave_0: entered promiscuous mode [ 2725.349482][T10457] hsr_slave_1: entered promiscuous mode [ 2725.371230][T10457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2725.378977][T10457] Cannot create hsr debugfs directory [ 2726.298021][T26481] Bluetooth: hci0: command tx timeout [ 2727.300098][T10537] syzkaller0: entered promiscuous mode [ 2727.309461][T10537] syzkaller0: entered allmulticast mode [ 2727.336682][T30849] tipc: Left network mode [ 2727.754537][T30849] ip6gretap0 (unregistering): left allmulticast mode [ 2727.761715][T30849] ip6gretap0 (unregistering): left promiscuous mode [ 2727.768439][T30849] Ÿë: port 2(ip6gretap0) entered disabled state [ 2727.878491][T10558] úØ: renamed from bond_slave_0 (while UP) [ 2728.379089][T26481] Bluetooth: hci0: command tx timeout [ 2730.467670][T26481] Bluetooth: hci0: command tx timeout [ 2731.176587][T10457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2731.285328][T10457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2731.843657][T10457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2732.071984][T30849] gretap0 (unregistering): left allmulticast mode [ 2732.078491][T30849] gretap0 (unregistering): left promiscuous mode [ 2732.093158][T30849] Ÿë: port 1(gretap0) entered disabled state [ 2732.119884][T10457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2732.576782][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2732.605421][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 2732.649757][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.657030][T10565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2732.707042][T30860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.714258][T30860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2733.589369][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2733.882329][T10457] veth0_vlan: entered promiscuous mode [ 2734.159716][T10457] veth1_vlan: entered promiscuous mode [ 2734.212641][T10457] veth0_macvtap: entered promiscuous mode [ 2734.226826][T10457] veth1_macvtap: entered promiscuous mode [ 2734.336165][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2734.351475][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.370682][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2734.418514][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.440232][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2734.517130][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.537151][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.551378][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2734.562459][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.578863][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2734.636567][T10637] syzkaller0: entered promiscuous mode [ 2734.647758][T10637] syzkaller0: entered allmulticast mode [ 2736.519962][T10457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2736.530792][T10457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2736.539529][T10457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2736.570520][T10457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2737.688812][T30852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2737.709645][T30852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2737.777977][T30852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2737.798742][T30852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2738.863605][T20886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2738.872799][T20886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2738.880656][T20886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2738.895596][T20886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2738.941153][T20886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2738.948925][T20886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2739.895939][T10672] chnl_net:caif_netlink_parms(): no params data found [ 2740.298625][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.331282][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2740.338951][T10672] bridge_slave_0: entered allmulticast mode [ 2740.352033][T10672] bridge_slave_0: entered promiscuous mode [ 2740.381805][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.389289][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2740.412210][T10672] bridge_slave_1: entered allmulticast mode [ 2740.429380][T10672] bridge_slave_1: entered promiscuous mode [ 2740.483238][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2740.508898][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2740.837879][T10672] team0: Port device team_slave_0 added [ 2741.153383][T26481] Bluetooth: hci3: command tx timeout [ 2741.210283][T10672] team0: Port device team_slave_1 added [ 2741.348570][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2741.362223][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2741.444035][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2741.565720][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2741.605283][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2741.639859][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2741.909284][T10672] hsr_slave_0: entered promiscuous mode [ 2741.930507][T10672] hsr_slave_1: entered promiscuous mode [ 2741.944716][T10672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2741.962510][T10672] Cannot create hsr debugfs directory [ 2742.729919][T10639] tipc: Left network mode [ 2742.957770][T10639] ip6gretap0 (unregistering): left allmulticast mode [ 2743.005711][T10639] ip6gretap0 (unregistering): left promiscuous mode [ 2743.045763][T10639] Ÿë: port 2(ip6gretap0) entered disabled state [ 2743.171995][T26481] Bluetooth: hci3: command tx timeout [ 2744.220311][T10639] gretap0 (unregistering): left allmulticast mode [ 2744.226866][T10639] gretap0 (unregistering): left promiscuous mode [ 2744.234572][T10639] Ÿë: port 1(gretap0) entered disabled state [ 2744.284728][T10672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2744.419431][T10766] syzkaller0: entered promiscuous mode [ 2744.432011][T10766] syzkaller0: entered allmulticast mode [ 2744.438976][T10672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2744.508509][T10672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2744.568943][T10672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2745.261030][T26481] Bluetooth: hci3: command tx timeout [ 2746.607321][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2746.636700][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2746.648294][T30860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2746.655448][T30860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2746.670680][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 2746.677894][T10565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2746.758650][T10672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2747.329272][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2747.367130][T26481] Bluetooth: hci3: command tx timeout [ 2747.672210][T10672] veth0_vlan: entered promiscuous mode [ 2747.709354][T10672] veth1_vlan: entered promiscuous mode [ 2748.433596][T10672] veth0_macvtap: entered promiscuous mode [ 2748.502546][T10672] veth1_macvtap: entered promiscuous mode [ 2748.628543][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.639353][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.649576][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.660213][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.670111][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2748.682504][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.695968][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2748.755126][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2748.770369][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.790810][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2748.820439][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.830586][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2748.841658][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2748.853501][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2748.907057][T10807] syzkaller0: entered promiscuous mode [ 2748.915034][T10807] syzkaller0: entered allmulticast mode [ 2748.959891][T10672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.969458][T10672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.978681][T10672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2748.987605][T10672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.399468][T10397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2754.432583][T10397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2754.538361][ T6853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2754.569297][ T6853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2760.478545][T10854] @0Ù: renamed from bond_slave_1 (while UP) [ 2765.998658][T10882] veth0_vlan: entered allmulticast mode [ 2766.061315][T10883] veth0_vlan: left promiscuous mode [ 2766.076827][T10883] veth0_vlan: entered promiscuous mode [ 2772.646554][T10895] @0Ù: renamed from bond_slave_1 (while UP) [ 2774.282758][T10905] syzkaller0: entered promiscuous mode [ 2774.288276][T10905] syzkaller0: entered allmulticast mode [ 2775.014897][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.023637][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.829954][T20886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2776.846789][T20886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2776.855169][T20886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2776.868426][T20886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2776.876583][T20886] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2776.887533][T20886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2777.330511][T10922] chnl_net:caif_netlink_parms(): no params data found [ 2779.042280][T10939] @0Ù: renamed from bond_slave_1 (while UP) [ 2779.101167][T20886] Bluetooth: hci2: command tx timeout [ 2779.117407][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2779.136168][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2779.143765][T10922] bridge_slave_0: entered allmulticast mode [ 2779.150489][T10922] bridge_slave_0: entered promiscuous mode [ 2779.179006][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2779.187866][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2779.195433][T10922] bridge_slave_1: entered allmulticast mode [ 2779.203418][T10922] bridge_slave_1: entered promiscuous mode [ 2779.250372][T10922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2779.412876][T10922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2779.455675][T10922] team0: Port device team_slave_0 added [ 2779.470395][T10922] team0: Port device team_slave_1 added [ 2779.499150][T10922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2779.594068][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2779.629067][T10922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2779.686979][T10922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2779.715523][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2779.782738][T10922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2779.880155][T10922] hsr_slave_0: entered promiscuous mode [ 2779.892639][T10922] hsr_slave_1: entered promiscuous mode [ 2779.899037][T10922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2779.927132][T10922] Cannot create hsr debugfs directory [ 2780.204667][T10922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2780.239759][T10922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2780.268336][T10922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2780.288336][T10922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2780.455172][T10922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2780.476068][T10922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2780.487480][T30861] bridge0: port 1(bridge_slave_0) entered blocking state [ 2780.494610][T30861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2780.512924][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2780.520089][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2780.699953][T10397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.733100][T10922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2780.787786][T10397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.858027][T10397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.927716][T10397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2780.988851][T10922] veth0_vlan: entered promiscuous mode [ 2781.006004][T10922] veth1_vlan: entered promiscuous mode [ 2781.040090][T10922] veth0_macvtap: entered promiscuous mode [ 2781.050382][T10922] veth1_macvtap: entered promiscuous mode [ 2781.070676][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.082470][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.092546][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.103247][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.116126][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.126939][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.138486][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2781.149391][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.160712][T10922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2781.171016][T20886] Bluetooth: hci2: command tx timeout [ 2781.209436][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2781.220262][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.230713][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2781.242204][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.252780][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2781.263278][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.273301][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2781.283768][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2781.295210][T10922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2781.312257][T10922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.321623][T10922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.330340][T10922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.343765][T10922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.570510][T10639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2781.590890][T10639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2781.649549][T30861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2781.666520][T30861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2782.894798][T10397] hsr_slave_0: left promiscuous mode [ 2782.908363][T10397] hsr_slave_1: left promiscuous mode [ 2782.914835][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2782.922824][T10397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2782.930675][T10397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2782.938281][T10397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2782.946406][T10397] bridge_slave_1: left allmulticast mode [ 2782.952185][T10397] bridge_slave_1: left promiscuous mode [ 2782.957855][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.967992][T10397] bridge_slave_0: left allmulticast mode [ 2782.974191][T10397] bridge_slave_0: left promiscuous mode [ 2782.980353][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 2783.003740][T10397] veth1_macvtap: left promiscuous mode [ 2783.009551][T10397] veth0_macvtap: left promiscuous mode [ 2783.016019][T10397] veth1_vlan: left promiscuous mode [ 2783.021633][T10397] veth0_vlan: left promiscuous mode [ 2783.261038][T20886] Bluetooth: hci2: command tx timeout [ 2783.588082][T10397] team0 (unregistering): Port device team_slave_1 removed [ 2783.633450][T10397] team0 (unregistering): Port device team_slave_0 removed [ 2783.675043][T10397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2783.722187][T10397] bond0 (unregistering): (slave 5úØ): Releasing backup interface [ 2784.045037][T10397] bond0 (unregistering): Released all slaves [ 2785.336703][T20886] Bluetooth: hci2: command tx timeout [ 2828.291335][T26481] Bluetooth: hci4: command 0x0406 tx timeout [ 2836.453522][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.459925][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2848.770942][T26481] Bluetooth: hci0: command 0x0406 tx timeout [ 2864.131293][T26481] Bluetooth: hci3: command 0x0406 tx timeout [ 2897.899247][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.906233][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.970945][T26481] Bluetooth: hci2: command 0x0406 tx timeout [ 2959.333410][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.339778][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.775585][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.782409][ T1281] ieee802154 phy1 wpan1: encryption failed: -22