ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000100)=0x24) [ 1927.353200][T10812] netlink_unicast+0x533/0x7d0 [ 1927.357975][T10812] ? netlink_attachskb+0x810/0x810 [ 1927.363093][T10812] ? __phys_addr_symbol+0x2c/0x70 [ 1927.368128][T10812] ? __check_object_size+0x171/0x3e4 [ 1927.373423][T10812] netlink_sendmsg+0x856/0xd90 [ 1927.378198][T10812] ? netlink_unicast+0x7d0/0x7d0 [ 1927.383145][T10812] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1927.388434][T10812] ? netlink_unicast+0x7d0/0x7d0 [ 1927.393376][T10812] sock_sendmsg+0xcf/0x120 [ 1927.397800][T10812] ____sys_sendmsg+0x6e8/0x810 [ 1927.402575][T10812] ? kernel_sendmsg+0x50/0x50 [ 1927.407254][T10812] ? do_recvmmsg+0x6d0/0x6d0 [ 1927.411855][T10812] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1927.417843][T10812] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1927.423823][T10812] ? __lock_acquire+0xb5e/0x5570 [ 1927.428770][T10812] ___sys_sendmsg+0xf3/0x170 [ 1927.433366][T10812] ? sendmsg_copy_msghdr+0x160/0x160 [ 1927.438655][T10812] ? __fget_files+0x272/0x400 [ 1927.443333][T10812] ? lock_downgrade+0x830/0x830 [ 1927.448177][T10812] ? find_held_lock+0x2d/0x110 [ 1927.452970][T10812] ? __fget_files+0x294/0x400 [ 1927.457663][T10812] ? __fget_light+0xea/0x280 [ 1927.462268][T10812] __sys_sendmsg+0xe5/0x1b0 [ 1927.466775][T10812] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1927.471823][T10812] ? syscall_enter_from_user_mode+0x20/0x290 [ 1927.477803][T10812] ? lockdep_hardirqs_on+0x53/0x100 [ 1927.483004][T10812] do_syscall_64+0x2d/0x70 [ 1927.487424][T10812] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1927.493321][T10812] RIP: 0033:0x45d5b9 [ 1927.497216][T10812] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1927.516819][T10812] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1927.525232][T10812] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1927.533210][T10812] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1927.541192][T10812] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1927.549162][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:33 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001f79113000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1927.557134][T10812] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) 15:04:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x7, 0x0, 0x4) 15:04:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:33 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:04:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4d}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x48) 15:04:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x15}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:33 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x11, &(0x7f0000000000), 0x20a154cc) 15:04:33 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000340)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:04:33 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:33 executing program 1: syz_emit_ethernet(0x4f, &(0x7f0000000280)={@multicast, @empty=[0x5, 0xfc], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private1, [{0x0, 0x0, "bc32e7"}]}}}}}}, 0x0) [ 1927.882752][T10852] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1927.945050][T10852] CPU: 1 PID: 10852 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1927.953748][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1927.963803][T10852] Call Trace: [ 1927.967102][T10852] dump_stack+0x198/0x1fd [ 1927.971468][T10852] sysfs_warn_dup.cold+0x1c/0x2d [ 1927.976421][T10852] sysfs_do_create_link_sd+0x11e/0x140 [ 1927.981887][T10852] sysfs_create_link+0x5f/0xc0 [ 1927.986662][T10852] device_add+0x6ff/0x1c40 [ 1927.991093][T10852] ? devlink_add_symlinks+0x450/0x450 [ 1927.996638][T10852] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1928.002634][T10852] wiphy_register+0x1d66/0x2850 [ 1928.007504][T10852] ? wiphy_unregister+0xc10/0xc10 [ 1928.012537][T10852] ? generic_xdp_install+0x700/0x700 [ 1928.017842][T10852] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1928.023922][T10852] ieee80211_register_hw+0x22c9/0x39a0 [ 1928.029408][T10852] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1928.034782][T10852] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1928.040686][T10852] ? lock_downgrade+0x830/0x830 [ 1928.045543][T10852] ? lock_is_held_type+0xbb/0xf0 [ 1928.050488][T10852] ? memset+0x20/0x40 [ 1928.054478][T10852] ? __hrtimer_init+0x12c/0x260 [ 1928.059339][T10852] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1928.065088][T10852] ? hwsim_virtio_rx_work+0x350/0x350 [ 1928.070466][T10852] ? memcpy+0x39/0x60 [ 1928.074460][T10852] hwsim_new_radio_nl+0x93e/0xf8c [ 1928.079498][T10852] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1928.085417][T10852] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1928.092358][T10852] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1928.099249][T10852] genl_rcv_msg+0x61d/0x980 [ 1928.103769][T10852] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1928.110723][T10852] ? lock_release+0x8f0/0x8f0 [ 1928.115407][T10852] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1928.120711][T10852] netlink_rcv_skb+0x15a/0x430 [ 1928.125483][T10852] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1928.132430][T10852] ? netlink_ack+0xa10/0xa10 [ 1928.137043][T10852] genl_rcv+0x24/0x40 [ 1928.141040][T10852] netlink_unicast+0x533/0x7d0 [ 1928.145823][T10852] ? netlink_attachskb+0x810/0x810 [ 1928.150951][T10852] ? __phys_addr_symbol+0x2c/0x70 [ 1928.155976][T10852] ? __check_object_size+0x171/0x3e4 [ 1928.161270][T10852] netlink_sendmsg+0x856/0xd90 [ 1928.166050][T10852] ? netlink_unicast+0x7d0/0x7d0 [ 1928.171004][T10852] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1928.176296][T10852] ? netlink_unicast+0x7d0/0x7d0 [ 1928.181236][T10852] sock_sendmsg+0xcf/0x120 [ 1928.185659][T10852] ____sys_sendmsg+0x6e8/0x810 [ 1928.190431][T10852] ? kernel_sendmsg+0x50/0x50 [ 1928.195109][T10852] ? do_recvmmsg+0x6d0/0x6d0 [ 1928.199709][T10852] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1928.205697][T10852] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1928.211677][T10852] ? __lock_acquire+0xb5e/0x5570 [ 1928.216647][T10852] ___sys_sendmsg+0xf3/0x170 [ 1928.221245][T10852] ? sendmsg_copy_msghdr+0x160/0x160 [ 1928.226536][T10852] ? __fget_files+0x272/0x400 [ 1928.231221][T10852] ? lock_downgrade+0x830/0x830 [ 1928.236075][T10852] ? find_held_lock+0x2d/0x110 [ 1928.240859][T10852] ? __fget_files+0x294/0x400 15:04:33 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 15:04:33 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xd, 0x0, 0x0) 15:04:33 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0xc, 0x0, 0x0) [ 1928.245551][T10852] ? __fget_light+0xea/0x280 [ 1928.250154][T10852] __sys_sendmsg+0xe5/0x1b0 [ 1928.254662][T10852] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1928.259702][T10852] ? syscall_enter_from_user_mode+0x20/0x290 [ 1928.265687][T10852] ? lockdep_hardirqs_on+0x53/0x100 [ 1928.270897][T10852] do_syscall_64+0x2d/0x70 [ 1928.275323][T10852] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1928.281311][T10852] RIP: 0033:0x45d5b9 [ 1928.285210][T10852] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1928.304818][T10852] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1928.313234][T10852] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1928.321293][T10852] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1928.329264][T10852] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1928.337236][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1928.345210][T10852] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:34 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000200007021dfffd946f610500810000e8fe0208010001080008000e000400ff7e", 0x24}], 0x1}, 0x0) 15:04:34 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:34 executing program 5: unshare(0x60400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40003, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0}, 0x20) 15:04:34 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x9a, 0x4) 15:04:34 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000001940)={{{@in=@local, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@dev}}, 0xe8) 15:04:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x16}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) [ 1928.797780][T10903] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1928.835289][T10903] CPU: 0 PID: 10903 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1928.843993][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1928.854046][T10903] Call Trace: [ 1928.857345][T10903] dump_stack+0x198/0x1fd [ 1928.861694][T10903] sysfs_warn_dup.cold+0x1c/0x2d [ 1928.866641][T10903] sysfs_do_create_link_sd+0x11e/0x140 [ 1928.872108][T10903] sysfs_create_link+0x5f/0xc0 [ 1928.876881][T10903] device_add+0x6ff/0x1c40 [ 1928.881311][T10903] ? devlink_add_symlinks+0x450/0x450 [ 1928.886692][T10903] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1928.892686][T10903] wiphy_register+0x1d66/0x2850 [ 1928.897556][T10903] ? wiphy_unregister+0xc10/0xc10 [ 1928.902593][T10903] ? generic_xdp_install+0x700/0x700 [ 1928.907892][T10903] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1928.913972][T10903] ieee80211_register_hw+0x22c9/0x39a0 [ 1928.919450][T10903] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1928.924830][T10903] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1928.930736][T10903] ? lock_downgrade+0x830/0x830 [ 1928.935590][T10903] ? lock_is_held_type+0xbb/0xf0 [ 1928.940533][T10903] ? memset+0x20/0x40 [ 1928.944524][T10903] ? __hrtimer_init+0x12c/0x260 [ 1928.949387][T10903] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1928.955128][T10903] ? hwsim_virtio_rx_work+0x350/0x350 [ 1928.960507][T10903] ? memcpy+0x39/0x60 [ 1928.964494][T10903] hwsim_new_radio_nl+0x93e/0xf8c [ 1928.969537][T10903] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1928.975447][T10903] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1928.982394][T10903] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1928.989257][T10903] genl_rcv_msg+0x61d/0x980 [ 1928.993772][T10903] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1929.000737][T10903] ? lock_release+0x8f0/0x8f0 [ 1929.005419][T10903] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1929.010717][T10903] netlink_rcv_skb+0x15a/0x430 [ 1929.015489][T10903] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1929.022430][T10903] ? netlink_ack+0xa10/0xa10 [ 1929.027039][T10903] genl_rcv+0x24/0x40 [ 1929.031024][T10903] netlink_unicast+0x533/0x7d0 [ 1929.035800][T10903] ? netlink_attachskb+0x810/0x810 [ 1929.040923][T10903] ? __phys_addr_symbol+0x2c/0x70 [ 1929.045950][T10903] ? __check_object_size+0x171/0x3e4 [ 1929.051246][T10903] netlink_sendmsg+0x856/0xd90 [ 1929.056023][T10903] ? netlink_unicast+0x7d0/0x7d0 [ 1929.060973][T10903] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1929.066263][T10903] ? netlink_unicast+0x7d0/0x7d0 [ 1929.071207][T10903] sock_sendmsg+0xcf/0x120 [ 1929.075632][T10903] ____sys_sendmsg+0x6e8/0x810 [ 1929.080404][T10903] ? kernel_sendmsg+0x50/0x50 [ 1929.085084][T10903] ? do_recvmmsg+0x6d0/0x6d0 [ 1929.089688][T10903] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1929.095675][T10903] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1929.101654][T10903] ? __lock_acquire+0xb5e/0x5570 [ 1929.106598][T10903] ___sys_sendmsg+0xf3/0x170 [ 1929.111308][T10903] ? sendmsg_copy_msghdr+0x160/0x160 [ 1929.116599][T10903] ? __fget_files+0x272/0x400 [ 1929.121286][T10903] ? lock_downgrade+0x830/0x830 [ 1929.126143][T10903] ? find_held_lock+0x2d/0x110 [ 1929.130937][T10903] ? __fget_files+0x294/0x400 [ 1929.135654][T10903] ? __fget_light+0xea/0x280 [ 1929.140261][T10903] __sys_sendmsg+0xe5/0x1b0 [ 1929.144770][T10903] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1929.149818][T10903] ? syscall_enter_from_user_mode+0x20/0x290 [ 1929.155801][T10903] ? lockdep_hardirqs_on+0x53/0x100 [ 1929.161013][T10903] do_syscall_64+0x2d/0x70 [ 1929.165445][T10903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1929.171334][T10903] RIP: 0033:0x45d5b9 [ 1929.175233][T10903] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:04:34 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 15:04:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_coalesce={0x1}}) 15:04:34 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 1929.194849][T10903] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.203434][T10903] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1929.211407][T10903] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1929.219378][T10903] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1929.227353][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1929.235328][T10903] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:35 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 15:04:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x5, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 15:04:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:04:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 15:04:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x17}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010003904f5ffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0300f5ff000000002000128008000100736974001400028008000100", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 15:04:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 1929.664331][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1929.748495][T10942] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1929.782890][T10942] CPU: 1 PID: 10942 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1929.791604][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1929.801664][T10942] Call Trace: [ 1929.805127][T10942] dump_stack+0x198/0x1fd [ 1929.809460][T10942] sysfs_warn_dup.cold+0x1c/0x2d [ 1929.814407][T10942] sysfs_do_create_link_sd+0x11e/0x140 [ 1929.819862][T10942] sysfs_create_link+0x5f/0xc0 [ 1929.824614][T10942] device_add+0x6ff/0x1c40 [ 1929.829009][T10942] ? devlink_add_symlinks+0x450/0x450 [ 1929.834358][T10942] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1929.840321][T10942] wiphy_register+0x1d66/0x2850 [ 1929.845169][T10942] ? wiphy_unregister+0xc10/0xc10 [ 1929.850172][T10942] ? generic_xdp_install+0x700/0x700 [ 1929.855442][T10942] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1929.861489][T10942] ieee80211_register_hw+0x22c9/0x39a0 [ 1929.866947][T10942] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1929.872293][T10942] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1929.878174][T10942] ? lock_downgrade+0x830/0x830 [ 1929.883000][T10942] ? lock_is_held_type+0xbb/0xf0 [ 1929.887915][T10942] ? memset+0x20/0x40 [ 1929.891873][T10942] ? __hrtimer_init+0x12c/0x260 [ 1929.896717][T10942] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1929.902421][T10942] ? hwsim_virtio_rx_work+0x350/0x350 [ 1929.907781][T10942] ? memcpy+0x39/0x60 [ 1929.911743][T10942] hwsim_new_radio_nl+0x93e/0xf8c [ 1929.916756][T10942] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1929.922633][T10942] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1929.929541][T10942] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1929.936366][T10942] genl_rcv_msg+0x61d/0x980 [ 1929.940850][T10942] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1929.948473][T10942] ? lock_release+0x8f0/0x8f0 [ 1929.953124][T10942] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1929.958390][T10942] netlink_rcv_skb+0x15a/0x430 [ 1929.963132][T10942] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1929.970044][T10942] ? netlink_ack+0xa10/0xa10 [ 1929.974629][T10942] genl_rcv+0x24/0x40 [ 1929.978589][T10942] netlink_unicast+0x533/0x7d0 [ 1929.983333][T10942] ? netlink_attachskb+0x810/0x810 [ 1929.988421][T10942] ? __phys_addr_symbol+0x2c/0x70 [ 1929.993439][T10942] ? __check_object_size+0x171/0x3e4 [ 1929.998736][T10942] netlink_sendmsg+0x856/0xd90 [ 1930.003522][T10942] ? netlink_unicast+0x7d0/0x7d0 [ 1930.008471][T10942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1930.013757][T10942] ? netlink_unicast+0x7d0/0x7d0 [ 1930.018698][T10942] sock_sendmsg+0xcf/0x120 [ 1930.023144][T10942] ____sys_sendmsg+0x6e8/0x810 [ 1930.027916][T10942] ? kernel_sendmsg+0x50/0x50 [ 1930.032596][T10942] ? do_recvmmsg+0x6d0/0x6d0 [ 1930.037196][T10942] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1930.043179][T10942] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1930.049161][T10942] ? __lock_acquire+0xb5e/0x5570 [ 1930.054112][T10942] ___sys_sendmsg+0xf3/0x170 [ 1930.058717][T10942] ? sendmsg_copy_msghdr+0x160/0x160 [ 1930.064006][T10942] ? __fget_files+0x272/0x400 [ 1930.068696][T10942] ? lock_downgrade+0x830/0x830 [ 1930.073550][T10942] ? find_held_lock+0x2d/0x110 [ 1930.078334][T10942] ? __fget_files+0x294/0x400 [ 1930.083027][T10942] ? __fget_light+0xea/0x280 [ 1930.088171][T10942] __sys_sendmsg+0xe5/0x1b0 [ 1930.092689][T10942] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1930.097738][T10942] ? syscall_enter_from_user_mode+0x20/0x290 [ 1930.103723][T10942] ? lockdep_hardirqs_on+0x53/0x100 [ 1930.108928][T10942] do_syscall_64+0x2d/0x70 [ 1930.113400][T10942] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1930.119289][T10942] RIP: 0033:0x45d5b9 [ 1930.123191][T10942] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1930.142801][T10942] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1930.151218][T10942] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1930.159198][T10942] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1930.167169][T10942] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1930.175145][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1930.183120][T10942] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1930.203128][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1930.213105][ T29] audit: type=1804 audit(1599663875.877:669): pid=10919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir780382854/syzkaller.j7BeY5/1878/cgroup.controllers" dev="sda1" ino=15686 res=1 errno=0 15:04:35 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 15:04:35 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0) 15:04:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 1930.282014][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 15:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15:04:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x18}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1930.489077][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1930.527021][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}}}, 0x1c}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x138, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100251911b100000000000010000000", @ANYRES32=r9], 0x20}}, 0x0) 15:04:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000280)) [ 1930.548838][T10972] sctp: [Deprecated]: syz-executor.1 (pid 10972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1930.548838][T10972] Use struct sctp_sack_info instead [ 1930.558421][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15:04:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) [ 1930.662915][T10983] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1930.707755][T10983] CPU: 0 PID: 10983 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1930.716453][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1930.726513][T10983] Call Trace: [ 1930.729814][T10983] dump_stack+0x198/0x1fd [ 1930.734160][T10983] sysfs_warn_dup.cold+0x1c/0x2d [ 1930.739111][T10983] sysfs_do_create_link_sd+0x11e/0x140 [ 1930.744584][T10983] sysfs_create_link+0x5f/0xc0 [ 1930.749368][T10983] device_add+0x6ff/0x1c40 [ 1930.753796][T10983] ? devlink_add_symlinks+0x450/0x450 [ 1930.759179][T10983] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1930.765175][T10983] wiphy_register+0x1d66/0x2850 [ 1930.770047][T10983] ? wiphy_unregister+0xc10/0xc10 [ 1930.775079][T10983] ? generic_xdp_install+0x700/0x700 [ 1930.780386][T10983] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1930.786499][T10983] ieee80211_register_hw+0x22c9/0x39a0 [ 1930.791990][T10983] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1930.797368][T10983] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1930.803283][T10983] ? lock_downgrade+0x830/0x830 [ 1930.808141][T10983] ? lock_is_held_type+0xbb/0xf0 [ 1930.813086][T10983] ? memset+0x20/0x40 [ 1930.817079][T10983] ? __hrtimer_init+0x12c/0x260 [ 1930.821942][T10983] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1930.827691][T10983] ? hwsim_virtio_rx_work+0x350/0x350 [ 1930.833071][T10983] ? memcpy+0x39/0x60 [ 1930.837066][T10983] hwsim_new_radio_nl+0x93e/0xf8c [ 1930.842102][T10983] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1930.848012][T10983] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1930.854951][T10983] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1930.861808][T10983] genl_rcv_msg+0x61d/0x980 [ 1930.866329][T10983] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1930.873287][T10983] ? lock_release+0x8f0/0x8f0 [ 1930.877966][T10983] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1930.883263][T10983] netlink_rcv_skb+0x15a/0x430 [ 1930.888035][T10983] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1930.894981][T10983] ? netlink_ack+0xa10/0xa10 [ 1930.899594][T10983] genl_rcv+0x24/0x40 [ 1930.903600][T10983] netlink_unicast+0x533/0x7d0 [ 1930.908385][T10983] ? netlink_attachskb+0x810/0x810 [ 1930.913507][T10983] ? __phys_addr_symbol+0x2c/0x70 [ 1930.918538][T10983] ? __check_object_size+0x171/0x3e4 [ 1930.923833][T10983] netlink_sendmsg+0x856/0xd90 [ 1930.928691][T10983] ? netlink_unicast+0x7d0/0x7d0 [ 1930.933650][T10983] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1930.938943][T10983] ? netlink_unicast+0x7d0/0x7d0 [ 1930.943886][T10983] sock_sendmsg+0xcf/0x120 [ 1930.948312][T10983] ____sys_sendmsg+0x6e8/0x810 [ 1930.953083][T10983] ? kernel_sendmsg+0x50/0x50 [ 1930.958543][T10983] ? do_recvmmsg+0x6d0/0x6d0 [ 1930.963142][T10983] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1930.969128][T10983] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1930.975112][T10983] ? __lock_acquire+0xb5e/0x5570 [ 1930.980057][T10983] ___sys_sendmsg+0xf3/0x170 [ 1930.984667][T10983] ? sendmsg_copy_msghdr+0x160/0x160 [ 1930.989964][T10983] ? __fget_files+0x272/0x400 [ 1930.994656][T10983] ? lock_downgrade+0x830/0x830 [ 1930.999509][T10983] ? find_held_lock+0x2d/0x110 [ 1931.004295][T10983] ? __fget_files+0x294/0x400 [ 1931.008987][T10983] ? __fget_light+0xea/0x280 [ 1931.013584][T10983] __sys_sendmsg+0xe5/0x1b0 [ 1931.018083][T10983] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1931.023101][T10983] ? syscall_enter_from_user_mode+0x20/0x290 [ 1931.029066][T10983] ? lockdep_hardirqs_on+0x53/0x100 [ 1931.034253][T10983] do_syscall_64+0x2d/0x70 [ 1931.038653][T10983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1931.044523][T10983] RIP: 0033:0x45d5b9 [ 1931.048400][T10983] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1931.067986][T10983] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1931.076401][T10983] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1931.084355][T10983] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1931.092305][T10983] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1931.100257][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x3, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 15:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1931.108212][T10983] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:04:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x10}}], 0x10}, 0x0) 15:04:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000004a005f0014f9f407000909000a0080", 0x13) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1931.245242][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:04:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @empty}}, @IFA_CACHEINFO={0x28}]}, 0x40}}, 0x0) [ 1931.409631][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:04:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x19}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1931.806666][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1931.838479][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1932.108882][T11050] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1932.120872][T11050] CPU: 1 PID: 11050 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1932.129564][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1932.139616][T11050] Call Trace: [ 1932.142913][T11050] dump_stack+0x198/0x1fd [ 1932.147258][T11050] sysfs_warn_dup.cold+0x1c/0x2d [ 1932.152199][T11050] sysfs_do_create_link_sd+0x11e/0x140 [ 1932.157668][T11050] sysfs_create_link+0x5f/0xc0 [ 1932.162439][T11050] device_add+0x6ff/0x1c40 [ 1932.166874][T11050] ? devlink_add_symlinks+0x450/0x450 [ 1932.172258][T11050] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1932.178254][T11050] wiphy_register+0x1d66/0x2850 [ 1932.183125][T11050] ? wiphy_unregister+0xc10/0xc10 [ 1932.188154][T11050] ? generic_xdp_install+0x700/0x700 [ 1932.193453][T11050] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1932.199540][T11050] ieee80211_register_hw+0x22c9/0x39a0 [ 1932.205027][T11050] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1932.210401][T11050] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1932.216304][T11050] ? lock_downgrade+0x830/0x830 [ 1932.221164][T11050] ? lock_is_held_type+0xbb/0xf0 [ 1932.226297][T11050] ? memset+0x20/0x40 [ 1932.230287][T11050] ? __hrtimer_init+0x12c/0x260 [ 1932.235149][T11050] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1932.240898][T11050] ? hwsim_virtio_rx_work+0x350/0x350 [ 1932.246281][T11050] ? memcpy+0x39/0x60 [ 1932.250275][T11050] hwsim_new_radio_nl+0x93e/0xf8c [ 1932.255308][T11050] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1932.261223][T11050] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1932.268166][T11050] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1932.275032][T11050] genl_rcv_msg+0x61d/0x980 [ 1932.279555][T11050] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1932.286632][T11050] ? lock_release+0x8f0/0x8f0 [ 1932.291314][T11050] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1932.296613][T11050] netlink_rcv_skb+0x15a/0x430 [ 1932.301475][T11050] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1932.309294][T11050] ? netlink_ack+0xa10/0xa10 [ 1932.313911][T11050] genl_rcv+0x24/0x40 [ 1932.317900][T11050] netlink_unicast+0x533/0x7d0 [ 1932.322683][T11050] ? netlink_attachskb+0x810/0x810 [ 1932.327801][T11050] ? __phys_addr_symbol+0x2c/0x70 [ 1932.332834][T11050] ? __check_object_size+0x171/0x3e4 [ 1932.338136][T11050] netlink_sendmsg+0x856/0xd90 [ 1932.342915][T11050] ? netlink_unicast+0x7d0/0x7d0 [ 1932.347990][T11050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1932.353288][T11050] ? netlink_unicast+0x7d0/0x7d0 [ 1932.358232][T11050] sock_sendmsg+0xcf/0x120 [ 1932.362673][T11050] ____sys_sendmsg+0x6e8/0x810 [ 1932.367444][T11050] ? kernel_sendmsg+0x50/0x50 [ 1932.372120][T11050] ? do_recvmmsg+0x6d0/0x6d0 [ 1932.376722][T11050] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1932.382711][T11050] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1932.388696][T11050] ? __lock_acquire+0xb5e/0x5570 [ 1932.393644][T11050] ___sys_sendmsg+0xf3/0x170 [ 1932.398244][T11050] ? sendmsg_copy_msghdr+0x160/0x160 [ 1932.403550][T11050] ? __fget_files+0x272/0x400 [ 1932.408234][T11050] ? lock_downgrade+0x830/0x830 [ 1932.413084][T11050] ? find_held_lock+0x2d/0x110 [ 1932.417868][T11050] ? __fget_files+0x294/0x400 [ 1932.422561][T11050] ? __fget_light+0xea/0x280 [ 1932.427164][T11050] __sys_sendmsg+0xe5/0x1b0 [ 1932.431673][T11050] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1932.436718][T11050] ? syscall_enter_from_user_mode+0x20/0x290 [ 1932.442702][T11050] ? lockdep_hardirqs_on+0x53/0x100 [ 1932.447906][T11050] do_syscall_64+0x2d/0x70 [ 1932.452328][T11050] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1932.458217][T11050] RIP: 0033:0x45d5b9 [ 1932.462115][T11050] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1932.481720][T11050] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1932.490133][T11050] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1932.498109][T11050] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1932.506083][T11050] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1932.514061][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1932.522037][T11050] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:38 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x10000000000001e0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x5, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:04:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15:04:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) 15:04:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x34}}, 0x0) 15:04:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@bridge_setlink={0x24, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 15:04:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x23}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1932.817110][T11076] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1932.835740][T11076] CPU: 1 PID: 11076 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1932.844441][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1932.854502][T11076] Call Trace: [ 1932.857803][T11076] dump_stack+0x198/0x1fd [ 1932.862142][T11076] sysfs_warn_dup.cold+0x1c/0x2d [ 1932.867088][T11076] sysfs_do_create_link_sd+0x11e/0x140 [ 1932.872554][T11076] sysfs_create_link+0x5f/0xc0 [ 1932.877327][T11076] device_add+0x6ff/0x1c40 [ 1932.881758][T11076] ? devlink_add_symlinks+0x450/0x450 [ 1932.887148][T11076] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1932.893144][T11076] wiphy_register+0x1d66/0x2850 [ 1932.898019][T11076] ? wiphy_unregister+0xc10/0xc10 [ 1932.903053][T11076] ? generic_xdp_install+0x700/0x700 [ 1932.908357][T11076] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1932.914434][T11076] ieee80211_register_hw+0x22c9/0x39a0 [ 1932.919917][T11076] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1932.925291][T11076] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1932.931191][T11076] ? lock_downgrade+0x830/0x830 [ 1932.936047][T11076] ? lock_is_held_type+0xbb/0xf0 [ 1932.940994][T11076] ? memset+0x20/0x40 [ 1932.944989][T11076] ? __hrtimer_init+0x12c/0x260 [ 1932.949852][T11076] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1932.955593][T11076] ? hwsim_virtio_rx_work+0x350/0x350 [ 1932.961001][T11076] ? memcpy+0x39/0x60 [ 1932.965002][T11076] hwsim_new_radio_nl+0x93e/0xf8c [ 1932.970036][T11076] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1932.975946][T11076] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1932.982887][T11076] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1932.989745][T11076] genl_rcv_msg+0x61d/0x980 [ 1932.994271][T11076] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1933.001309][T11076] ? lock_release+0x8f0/0x8f0 [ 1933.005992][T11076] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1933.011290][T11076] netlink_rcv_skb+0x15a/0x430 [ 1933.016060][T11076] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1933.023002][T11076] ? netlink_ack+0xa10/0xa10 [ 1933.027592][T11076] genl_rcv+0x24/0x40 [ 1933.031568][T11076] netlink_unicast+0x533/0x7d0 [ 1933.036339][T11076] ? netlink_attachskb+0x810/0x810 [ 1933.041453][T11076] ? __phys_addr_symbol+0x2c/0x70 [ 1933.046578][T11076] ? __check_object_size+0x171/0x3e4 [ 1933.051846][T11076] netlink_sendmsg+0x856/0xd90 [ 1933.056590][T11076] ? netlink_unicast+0x7d0/0x7d0 [ 1933.061508][T11076] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1933.066781][T11076] ? netlink_unicast+0x7d0/0x7d0 [ 1933.071706][T11076] sock_sendmsg+0xcf/0x120 [ 1933.076102][T11076] ____sys_sendmsg+0x6e8/0x810 [ 1933.080886][T11076] ? kernel_sendmsg+0x50/0x50 [ 1933.085540][T11076] ? do_recvmmsg+0x6d0/0x6d0 [ 1933.090114][T11076] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1933.096070][T11076] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1933.102029][T11076] ? __lock_acquire+0xb5e/0x5570 [ 1933.106987][T11076] ___sys_sendmsg+0xf3/0x170 [ 1933.111613][T11076] ? sendmsg_copy_msghdr+0x160/0x160 [ 1933.116889][T11076] ? __fget_files+0x272/0x400 [ 1933.121548][T11076] ? lock_downgrade+0x830/0x830 [ 1933.126429][T11076] ? find_held_lock+0x2d/0x110 [ 1933.131182][T11076] ? __fget_files+0x294/0x400 [ 1933.135843][T11076] ? __fget_light+0xea/0x280 [ 1933.140439][T11076] __sys_sendmsg+0xe5/0x1b0 [ 1933.144940][T11076] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1933.149952][T11076] ? syscall_enter_from_user_mode+0x20/0x290 [ 1933.155924][T11076] ? lockdep_hardirqs_on+0x53/0x100 [ 1933.161104][T11076] do_syscall_64+0x2d/0x70 [ 1933.165501][T11076] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1933.171369][T11076] RIP: 0033:0x45d5b9 [ 1933.175249][T11076] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1933.194841][T11076] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1933.203753][T11076] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:04:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, "b7"}, @mss={0x3, 0x21}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x8, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) 15:04:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0100f0010100c1001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x300, 0x1ff}}]}, 0x40}}, 0x0) 15:04:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 1933.211704][T11076] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1933.219659][T11076] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1933.227611][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1933.235561][T11076] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x54, 0x30, 0x0, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x4}]}, {0x4}}}]}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x54, 0x30, 0xffff, 0x0, 0x0, {}, [{0x40, 0x1, [@m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x4}]}, {0x4}}}]}]}, 0x54}}, 0x0) 15:04:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000000180)) 15:04:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x24}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:39 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000240)="48000000140081fb7059ae08030c04000a1100b9eb1b870100000001dbd78fc0adbd7c493872f750371ed08a562ad692c3170f787a0346a25ac6bfe74703c48f93b82a0200000046", 0x48}], 0x1}, 0x0) 15:04:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 1933.542839][T11105] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1933.570257][T11105] CPU: 0 PID: 11105 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1933.578955][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1933.589010][T11105] Call Trace: [ 1933.592310][T11105] dump_stack+0x198/0x1fd [ 1933.596654][T11105] sysfs_warn_dup.cold+0x1c/0x2d [ 1933.601611][T11105] sysfs_do_create_link_sd+0x11e/0x140 [ 1933.607080][T11105] sysfs_create_link+0x5f/0xc0 [ 1933.611857][T11105] device_add+0x6ff/0x1c40 [ 1933.616290][T11105] ? devlink_add_symlinks+0x450/0x450 [ 1933.621673][T11105] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1933.627666][T11105] wiphy_register+0x1d66/0x2850 [ 1933.632537][T11105] ? wiphy_unregister+0xc10/0xc10 [ 1933.637572][T11105] ? generic_xdp_install+0x700/0x700 [ 1933.642873][T11105] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1933.648954][T11105] ieee80211_register_hw+0x22c9/0x39a0 [ 1933.654443][T11105] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1933.659819][T11105] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1933.665724][T11105] ? lock_downgrade+0x830/0x830 [ 1933.670580][T11105] ? lock_is_held_type+0xbb/0xf0 [ 1933.675552][T11105] ? memset+0x20/0x40 [ 1933.679544][T11105] ? __hrtimer_init+0x12c/0x260 [ 1933.684397][T11105] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1933.690126][T11105] ? hwsim_virtio_rx_work+0x350/0x350 [ 1933.695486][T11105] ? memcpy+0x39/0x60 [ 1933.699459][T11105] hwsim_new_radio_nl+0x93e/0xf8c [ 1933.704572][T11105] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1933.710459][T11105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1933.717376][T11105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1933.724213][T11105] genl_rcv_msg+0x61d/0x980 [ 1933.728705][T11105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1933.735631][T11105] ? lock_release+0x8f0/0x8f0 [ 1933.740288][T11105] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1933.745558][T11105] netlink_rcv_skb+0x15a/0x430 [ 1933.750306][T11105] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1933.757225][T11105] ? netlink_ack+0xa10/0xa10 [ 1933.761809][T11105] genl_rcv+0x24/0x40 [ 1933.765773][T11105] netlink_unicast+0x533/0x7d0 [ 1933.770522][T11105] ? netlink_attachskb+0x810/0x810 [ 1933.775614][T11105] ? __phys_addr_symbol+0x2c/0x70 [ 1933.780619][T11105] ? __check_object_size+0x171/0x3e4 [ 1933.785889][T11105] netlink_sendmsg+0x856/0xd90 [ 1933.790641][T11105] ? netlink_unicast+0x7d0/0x7d0 [ 1933.795825][T11105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1933.801092][T11105] ? netlink_unicast+0x7d0/0x7d0 [ 1933.806012][T11105] sock_sendmsg+0xcf/0x120 [ 1933.810415][T11105] ____sys_sendmsg+0x6e8/0x810 [ 1933.815767][T11105] ? kernel_sendmsg+0x50/0x50 [ 1933.820449][T11105] ? do_recvmmsg+0x6d0/0x6d0 [ 1933.825020][T11105] ? find_held_lock+0x2d/0x110 [ 1933.829767][T11105] ? rcu_preempt_deferred_qs_irqrestore+0x4c2/0xa60 [ 1933.836350][T11105] ? lock_downgrade+0x830/0x830 [ 1933.841184][T11105] ___sys_sendmsg+0xf3/0x170 [ 1933.845756][T11105] ? sendmsg_copy_msghdr+0x160/0x160 [ 1933.851023][T11105] ? __fget_files+0x272/0x400 [ 1933.855682][T11105] ? lock_downgrade+0x830/0x830 [ 1933.860528][T11105] ? __fget_files+0x294/0x400 [ 1933.865209][T11105] ? __fget_light+0xea/0x280 [ 1933.869791][T11105] __sys_sendmsg+0xe5/0x1b0 [ 1933.874286][T11105] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1933.879304][T11105] ? syscall_enter_from_user_mode+0x20/0x290 [ 1933.885266][T11105] ? lockdep_hardirqs_on+0x53/0x100 [ 1933.890446][T11105] do_syscall_64+0x2d/0x70 [ 1933.894847][T11105] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1933.900718][T11105] RIP: 0033:0x45d5b9 [ 1933.904595][T11105] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1933.924179][T11105] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1933.932581][T11105] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:04:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000073013300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) 15:04:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x20, 0x4) 15:04:39 executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth0_macvtap\x00'}}, 0x80) 15:04:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 1933.940534][T11105] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1933.948588][T11105] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1933.956549][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1933.964500][T11105] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}}, 0x0) 15:04:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 15:04:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000000)) 15:04:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 15:04:40 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x1}], 0x1}}], 0x1, 0x0) 15:04:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x25}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb7}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x5323, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:04:40 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0x3) 15:04:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) 15:04:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x8}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x3c}}, 0x0) 15:04:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x727, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 15:04:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x2}]}}}]}, 0x3c}}, 0x0) 15:04:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) [ 1934.615069][T11156] IPVS: ftp: loaded support on port[0] = 21 [ 1934.637008][T11157] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1934.707390][T11157] CPU: 0 PID: 11157 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1934.716101][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1934.726169][T11157] Call Trace: [ 1934.729475][T11157] dump_stack+0x198/0x1fd [ 1934.733819][T11157] sysfs_warn_dup.cold+0x1c/0x2d [ 1934.738772][T11157] sysfs_do_create_link_sd+0x11e/0x140 [ 1934.744240][T11157] sysfs_create_link+0x5f/0xc0 [ 1934.749013][T11157] device_add+0x6ff/0x1c40 [ 1934.753448][T11157] ? devlink_add_symlinks+0x450/0x450 [ 1934.758996][T11157] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1934.764991][T11157] wiphy_register+0x1d66/0x2850 [ 1934.769861][T11157] ? wiphy_unregister+0xc10/0xc10 [ 1934.774895][T11157] ? generic_xdp_install+0x700/0x700 [ 1934.780215][T11157] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1934.786295][T11157] ieee80211_register_hw+0x22c9/0x39a0 [ 1934.791778][T11157] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1934.797161][T11157] ? lock_is_held_type+0xbb/0xf0 [ 1934.802108][T11157] ? memset+0x20/0x40 [ 1934.806099][T11157] ? __hrtimer_init+0x12c/0x260 [ 1934.810959][T11157] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1934.816701][T11157] ? hwsim_virtio_rx_work+0x350/0x350 [ 1934.822085][T11157] ? memcpy+0x39/0x60 [ 1934.826080][T11157] hwsim_new_radio_nl+0x93e/0xf8c [ 1934.831116][T11157] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1934.837030][T11157] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1934.843969][T11157] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1934.850826][T11157] genl_rcv_msg+0x61d/0x980 [ 1934.855342][T11157] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1934.862299][T11157] ? lock_release+0x8f0/0x8f0 [ 1934.866977][T11157] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1934.872272][T11157] netlink_rcv_skb+0x15a/0x430 [ 1934.877047][T11157] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1934.883986][T11157] ? netlink_ack+0xa10/0xa10 [ 1934.888585][T11157] genl_rcv+0x24/0x40 [ 1934.892567][T11157] netlink_unicast+0x533/0x7d0 [ 1934.897344][T11157] ? netlink_attachskb+0x810/0x810 [ 1934.902462][T11157] ? __phys_addr_symbol+0x2c/0x70 [ 1934.907490][T11157] ? __check_object_size+0x171/0x3e4 [ 1934.912784][T11157] netlink_sendmsg+0x856/0xd90 [ 1934.917561][T11157] ? netlink_unicast+0x7d0/0x7d0 [ 1934.922512][T11157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1934.927806][T11157] ? netlink_unicast+0x7d0/0x7d0 [ 1934.932745][T11157] sock_sendmsg+0xcf/0x120 [ 1934.937167][T11157] ____sys_sendmsg+0x6e8/0x810 [ 1934.941939][T11157] ? kernel_sendmsg+0x50/0x50 [ 1934.946618][T11157] ? do_recvmmsg+0x6d0/0x6d0 [ 1934.951220][T11157] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1934.957209][T11157] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1934.963196][T11157] ___sys_sendmsg+0xf3/0x170 [ 1934.967795][T11157] ? sendmsg_copy_msghdr+0x160/0x160 [ 1934.973086][T11157] ? __fget_files+0x272/0x400 [ 1934.977773][T11157] ? lock_downgrade+0x830/0x830 [ 1934.982623][T11157] ? find_held_lock+0x2d/0x110 [ 1934.987409][T11157] ? __fget_files+0x294/0x400 [ 1934.992108][T11157] ? __fget_light+0xea/0x280 [ 1934.996710][T11157] __sys_sendmsg+0xe5/0x1b0 [ 1935.001223][T11157] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1935.006271][T11157] ? syscall_enter_from_user_mode+0x20/0x290 [ 1935.012265][T11157] ? lockdep_hardirqs_on+0x53/0x100 [ 1935.017476][T11157] do_syscall_64+0x2d/0x70 [ 1935.021905][T11157] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1935.027807][T11157] RIP: 0033:0x45d5b9 [ 1935.031702][T11157] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1935.051308][T11157] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1935.059726][T11157] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1935.067719][T11157] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1935.075803][T11157] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1935.083794][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1935.091770][T11157] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x26}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1935.131063][T11171] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1935.143222][T11156] lo speed is unknown, defaulting to 1000 15:04:40 executing program 1: syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 15:04:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffebc2}]}}]}, 0x38}}, 0x0) 15:04:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 15:04:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x7, 0x6, 0x801}, 0x14}}, 0x0) 15:04:41 executing program 1: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f0000000100)={r1}, 0x8) [ 1935.664745][T11184] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1935.670535][T11180] IPVS: ftp: loaded support on port[0] = 21 [ 1935.680617][T11184] CPU: 0 PID: 11184 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1935.689301][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1935.699354][T11184] Call Trace: [ 1935.702652][T11184] dump_stack+0x198/0x1fd [ 1935.706989][T11184] sysfs_warn_dup.cold+0x1c/0x2d [ 1935.711935][T11184] sysfs_do_create_link_sd+0x11e/0x140 [ 1935.717405][T11184] sysfs_create_link+0x5f/0xc0 [ 1935.722177][T11184] device_add+0x6ff/0x1c40 [ 1935.726608][T11184] ? devlink_add_symlinks+0x450/0x450 [ 1935.731991][T11184] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1935.737994][T11184] wiphy_register+0x1d66/0x2850 [ 1935.742868][T11184] ? wiphy_unregister+0xc10/0xc10 [ 1935.747899][T11184] ? generic_xdp_install+0x700/0x700 [ 1935.753201][T11184] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1935.759277][T11184] ieee80211_register_hw+0x22c9/0x39a0 [ 1935.764766][T11184] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1935.770142][T11184] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1935.776047][T11184] ? lock_downgrade+0x830/0x830 [ 1935.780903][T11184] ? lock_is_held_type+0xbb/0xf0 [ 1935.785847][T11184] ? memset+0x20/0x40 [ 1935.789839][T11184] ? __hrtimer_init+0x12c/0x260 [ 1935.794699][T11184] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1935.800448][T11184] ? hwsim_virtio_rx_work+0x350/0x350 [ 1935.805830][T11184] ? memcpy+0x39/0x60 [ 1935.809824][T11184] hwsim_new_radio_nl+0x93e/0xf8c [ 1935.814866][T11184] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1935.820785][T11184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1935.827727][T11184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1935.834583][T11184] genl_rcv_msg+0x61d/0x980 [ 1935.839098][T11184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1935.846051][T11184] ? lock_release+0x8f0/0x8f0 [ 1935.850726][T11184] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1935.856005][T11184] netlink_rcv_skb+0x15a/0x430 [ 1935.860767][T11184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1935.867711][T11184] ? netlink_ack+0xa10/0xa10 [ 1935.872333][T11184] genl_rcv+0x24/0x40 [ 1935.876322][T11184] netlink_unicast+0x533/0x7d0 [ 1935.881098][T11184] ? netlink_attachskb+0x810/0x810 [ 1935.886221][T11184] ? __phys_addr_symbol+0x2c/0x70 [ 1935.891247][T11184] ? __check_object_size+0x171/0x3e4 [ 1935.896542][T11184] netlink_sendmsg+0x856/0xd90 [ 1935.901325][T11184] ? netlink_unicast+0x7d0/0x7d0 [ 1935.906274][T11184] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1935.911565][T11184] ? netlink_unicast+0x7d0/0x7d0 [ 1935.916509][T11184] sock_sendmsg+0xcf/0x120 [ 1935.920933][T11184] ____sys_sendmsg+0x6e8/0x810 [ 1935.925704][T11184] ? kernel_sendmsg+0x50/0x50 [ 1935.930387][T11184] ? do_recvmmsg+0x6d0/0x6d0 [ 1935.934989][T11184] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1935.940982][T11184] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1935.946962][T11184] ? __lock_acquire+0xb5e/0x5570 [ 1935.951909][T11184] ___sys_sendmsg+0xf3/0x170 [ 1935.956506][T11184] ? sendmsg_copy_msghdr+0x160/0x160 [ 1935.961804][T11184] ? __fget_files+0x272/0x400 [ 1935.966487][T11184] ? lock_downgrade+0x830/0x830 [ 1935.971437][T11184] ? find_held_lock+0x2d/0x110 [ 1935.976225][T11184] ? __fget_files+0x294/0x400 [ 1935.980919][T11184] ? __fget_light+0xea/0x280 [ 1935.985519][T11184] __sys_sendmsg+0xe5/0x1b0 [ 1935.990025][T11184] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1935.995068][T11184] ? syscall_enter_from_user_mode+0x20/0x290 [ 1936.001051][T11184] ? lockdep_hardirqs_on+0x53/0x100 [ 1936.006259][T11184] do_syscall_64+0x2d/0x70 [ 1936.010683][T11184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1936.016579][T11184] RIP: 0033:0x45d5b9 [ 1936.020476][T11184] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1936.040078][T11184] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1936.048489][T11184] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1936.056463][T11184] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1936.064441][T11184] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1936.072418][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1936.080393][T11184] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1936.097137][T11156] lo speed is unknown, defaulting to 1000 [ 1936.116349][T11192] IPVS: Unknown mcast interface: rose0 [ 1936.127766][T11156] virt_wifi0 speed is unknown, defaulting to 1000 [ 1936.652952][ T7] tipc: TX() has been purged, node left! 15:04:43 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @remote}, {}, 0x5a, {}, 'dummy0\x00'}) 15:04:43 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x14, 0x2, [@TCA_CODEL_ECN={0x4}, @TCA_CODEL_LIMIT={0x8}]}}]}, 0x44}}, 0x0) 15:04:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x27}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:43 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0x3) 15:04:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0014f9f407000909000a00800000000100050000000800020000000000", 0x24) [ 1938.163502][T11244] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1938.214171][T11244] CPU: 1 PID: 11244 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1938.222871][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1938.232930][T11244] Call Trace: [ 1938.236231][T11244] dump_stack+0x198/0x1fd [ 1938.240583][T11244] sysfs_warn_dup.cold+0x1c/0x2d [ 1938.245531][T11244] sysfs_do_create_link_sd+0x11e/0x140 [ 1938.251001][T11244] sysfs_create_link+0x5f/0xc0 [ 1938.255779][T11244] device_add+0x6ff/0x1c40 [ 1938.260215][T11244] ? devlink_add_symlinks+0x450/0x450 [ 1938.265602][T11244] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1938.271607][T11244] wiphy_register+0x1d66/0x2850 [ 1938.276486][T11244] ? wiphy_unregister+0xc10/0xc10 [ 1938.281516][T11244] ? generic_xdp_install+0x700/0x700 [ 1938.286820][T11244] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1938.292905][T11244] ieee80211_register_hw+0x22c9/0x39a0 [ 1938.298389][T11244] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1938.303767][T11244] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1938.309676][T11244] ? lock_downgrade+0x830/0x830 [ 1938.314534][T11244] ? lock_is_held_type+0xbb/0xf0 [ 1938.319484][T11244] ? memset+0x20/0x40 [ 1938.323477][T11244] ? __hrtimer_init+0x12c/0x260 [ 1938.328336][T11244] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1938.334111][T11244] ? hwsim_virtio_rx_work+0x350/0x350 [ 1938.339495][T11244] ? memcpy+0x39/0x60 [ 1938.343487][T11244] hwsim_new_radio_nl+0x93e/0xf8c [ 1938.348520][T11244] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1938.354431][T11244] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1938.357593][T11256] IPVS: ftp: loaded support on port[0] = 21 [ 1938.361367][T11244] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1938.361389][T11244] genl_rcv_msg+0x61d/0x980 [ 1938.361415][T11244] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1938.361450][T11244] ? lock_release+0x8f0/0x8f0 [ 1938.390221][T11244] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1938.395520][T11244] netlink_rcv_skb+0x15a/0x430 [ 1938.400292][T11244] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1938.407233][T11244] ? netlink_ack+0xa10/0xa10 [ 1938.411842][T11244] genl_rcv+0x24/0x40 [ 1938.415826][T11244] netlink_unicast+0x533/0x7d0 [ 1938.420600][T11244] ? netlink_attachskb+0x810/0x810 [ 1938.425720][T11244] ? __phys_addr_symbol+0x2c/0x70 [ 1938.430744][T11244] ? __check_object_size+0x171/0x3e4 [ 1938.436044][T11244] netlink_sendmsg+0x856/0xd90 [ 1938.440821][T11244] ? netlink_unicast+0x7d0/0x7d0 [ 1938.445777][T11244] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1938.451065][T11244] ? netlink_unicast+0x7d0/0x7d0 [ 1938.456006][T11244] sock_sendmsg+0xcf/0x120 [ 1938.460428][T11244] ____sys_sendmsg+0x6e8/0x810 [ 1938.465199][T11244] ? kernel_sendmsg+0x50/0x50 [ 1938.469895][T11244] ? do_recvmmsg+0x6d0/0x6d0 [ 1938.474494][T11244] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1938.480488][T11244] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1938.486470][T11244] ? __lock_acquire+0xb5e/0x5570 [ 1938.491430][T11244] ___sys_sendmsg+0xf3/0x170 [ 1938.496025][T11244] ? sendmsg_copy_msghdr+0x160/0x160 [ 1938.501316][T11244] ? __fget_files+0x272/0x400 [ 1938.506001][T11244] ? lock_downgrade+0x830/0x830 [ 1938.510880][T11244] ? find_held_lock+0x2d/0x110 [ 1938.515665][T11244] ? __fget_files+0x294/0x400 [ 1938.520357][T11244] ? __fget_light+0xea/0x280 [ 1938.524959][T11244] __sys_sendmsg+0xe5/0x1b0 [ 1938.529468][T11244] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1938.534514][T11244] ? syscall_enter_from_user_mode+0x20/0x290 [ 1938.540498][T11244] ? lockdep_hardirqs_on+0x53/0x100 [ 1938.545710][T11244] do_syscall_64+0x2d/0x70 [ 1938.550129][T11244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1938.556006][T11244] RIP: 0033:0x45d5b9 [ 1938.559897][T11244] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1938.579764][T11244] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1938.588176][T11244] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1938.596164][T11244] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1938.604139][T11244] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 15:04:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}]}, 0x48}}, 0x0) 15:04:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001300)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 1938.612107][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1938.620077][T11244] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x28}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1938.727509][T11248] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 15:04:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:44 executing program 5: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1939.194549][T11262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1939.277095][T11256] lo speed is unknown, defaulting to 1000 [ 1939.277140][T11271] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1939.323420][T11275] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1939.350202][T11275] CPU: 0 PID: 11275 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1939.358928][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1939.368988][T11275] Call Trace: [ 1939.372289][T11275] dump_stack+0x198/0x1fd [ 1939.376642][T11275] sysfs_warn_dup.cold+0x1c/0x2d [ 1939.381641][T11275] sysfs_do_create_link_sd+0x11e/0x140 [ 1939.387141][T11275] sysfs_create_link+0x5f/0xc0 [ 1939.391922][T11275] device_add+0x6ff/0x1c40 [ 1939.396352][T11275] ? devlink_add_symlinks+0x450/0x450 [ 1939.401746][T11275] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1939.407787][T11275] wiphy_register+0x1d66/0x2850 [ 1939.412677][T11275] ? wiphy_unregister+0xc10/0xc10 [ 1939.417715][T11275] ? generic_xdp_install+0x700/0x700 [ 1939.423040][T11275] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1939.429139][T11275] ieee80211_register_hw+0x22c9/0x39a0 [ 1939.434636][T11275] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1939.440038][T11275] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1939.445970][T11275] ? lock_downgrade+0x830/0x830 [ 1939.450829][T11275] ? lock_is_held_type+0xbb/0xf0 [ 1939.455780][T11275] ? memset+0x20/0x40 [ 1939.459767][T11275] ? __hrtimer_init+0x12c/0x260 [ 1939.464622][T11275] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1939.470371][T11275] ? hwsim_virtio_rx_work+0x350/0x350 [ 1939.475779][T11275] ? memcpy+0x39/0x60 [ 1939.479836][T11275] hwsim_new_radio_nl+0x93e/0xf8c [ 1939.484923][T11275] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1939.490859][T11275] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1939.497794][T11275] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1939.504658][T11275] genl_rcv_msg+0x61d/0x980 [ 1939.509180][T11275] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1939.516134][T11275] ? lock_release+0x8f0/0x8f0 [ 1939.520838][T11275] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1939.526137][T11275] netlink_rcv_skb+0x15a/0x430 [ 1939.530937][T11275] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1939.537907][T11275] ? netlink_ack+0xa10/0xa10 [ 1939.542515][T11275] genl_rcv+0x24/0x40 [ 1939.546502][T11275] netlink_unicast+0x533/0x7d0 [ 1939.551275][T11275] ? netlink_attachskb+0x810/0x810 [ 1939.556405][T11275] ? __phys_addr_symbol+0x2c/0x70 [ 1939.561432][T11275] ? __check_object_size+0x171/0x3e4 [ 1939.566761][T11275] netlink_sendmsg+0x856/0xd90 [ 1939.571563][T11275] ? netlink_unicast+0x7d0/0x7d0 [ 1939.576507][T11275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1939.581798][T11275] ? netlink_unicast+0x7d0/0x7d0 [ 1939.586736][T11275] sock_sendmsg+0xcf/0x120 [ 1939.591263][T11275] ____sys_sendmsg+0x6e8/0x810 [ 1939.596030][T11275] ? kernel_sendmsg+0x50/0x50 [ 1939.600879][T11275] ? do_recvmmsg+0x6d0/0x6d0 [ 1939.605477][T11275] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1939.611462][T11275] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1939.617441][T11275] ? __lock_acquire+0xb5e/0x5570 [ 1939.622398][T11275] ___sys_sendmsg+0xf3/0x170 [ 1939.626992][T11275] ? sendmsg_copy_msghdr+0x160/0x160 [ 1939.632285][T11275] ? __fget_files+0x272/0x400 [ 1939.636965][T11275] ? lock_downgrade+0x830/0x830 [ 1939.641904][T11275] ? find_held_lock+0x2d/0x110 [ 1939.646691][T11275] ? __fget_files+0x294/0x400 [ 1939.651389][T11275] ? __fget_light+0xea/0x280 [ 1939.655989][T11275] __sys_sendmsg+0xe5/0x1b0 [ 1939.660492][T11275] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1939.665512][T11275] ? syscall_enter_from_user_mode+0x20/0x290 [ 1939.671472][T11275] ? lockdep_hardirqs_on+0x53/0x100 [ 1939.676653][T11275] do_syscall_64+0x2d/0x70 [ 1939.681054][T11275] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1939.686927][T11275] RIP: 0033:0x45d5b9 [ 1939.690804][T11275] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1939.710389][T11275] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:04:45 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000080)="7bb53e9324938157a9d6f324fc3bf509e9c77883b86b9a359f2af626b4a57c6668", 0x21) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 15:04:45 executing program 5: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:45 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xd52acb2d9e) [ 1939.718781][T11275] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1939.726732][T11275] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1939.734683][T11275] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1939.742636][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1939.750600][T11275] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1940.162022][T11262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1940.258739][T11256] lo speed is unknown, defaulting to 1000 [ 1940.265280][T11256] virt_wifi0 speed is unknown, defaulting to 1000 15:04:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110690000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15:04:46 executing program 5: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:46 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000340)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:04:46 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) 15:04:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x29}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:46 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000008c0)="d9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="07b23571db25a7d50b103807ed4d1b362b844e1c005b9e62d7c1e47f7f3739405b151d8f5f4120cceef4b9b1d976ea6e6f51d1dc9cd11956d9d9447710d6d832e0ec4c816befb8612f", 0x49}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="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", 0xfa}, {&(0x7f0000000100)="e18b1757e719fa514c89ac5d57d797", 0xf}, {&(0x7f0000000900)="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", 0x459}], 0x3}}], 0x5, 0x240090c0) write$binfmt_misc(r0, 0x0, 0x0) [ 1940.834419][T11340] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1940.865198][T11340] CPU: 1 PID: 11340 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1940.873902][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1940.883957][T11340] Call Trace: [ 1940.887256][T11340] dump_stack+0x198/0x1fd [ 1940.891600][T11340] sysfs_warn_dup.cold+0x1c/0x2d [ 1940.896552][T11340] sysfs_do_create_link_sd+0x11e/0x140 [ 1940.902021][T11340] sysfs_create_link+0x5f/0xc0 [ 1940.906796][T11340] device_add+0x6ff/0x1c40 [ 1940.911218][T11340] ? devlink_add_symlinks+0x450/0x450 [ 1940.916598][T11340] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1940.922592][T11340] wiphy_register+0x1d66/0x2850 [ 1940.927462][T11340] ? wiphy_unregister+0xc10/0xc10 [ 1940.932494][T11340] ? generic_xdp_install+0x700/0x700 [ 1940.937799][T11340] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1940.943882][T11340] ieee80211_register_hw+0x22c9/0x39a0 [ 1940.949363][T11340] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1940.954740][T11340] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1940.960643][T11340] ? lock_downgrade+0x830/0x830 [ 1940.965498][T11340] ? lock_is_held_type+0xbb/0xf0 [ 1940.970443][T11340] ? memset+0x20/0x40 [ 1940.974436][T11340] ? __hrtimer_init+0x12c/0x260 [ 1940.979300][T11340] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1940.985046][T11340] ? hwsim_virtio_rx_work+0x350/0x350 [ 1940.990427][T11340] ? memcpy+0x39/0x60 [ 1940.994420][T11340] hwsim_new_radio_nl+0x93e/0xf8c [ 1940.999455][T11340] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1941.005368][T11340] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1941.012305][T11340] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1941.019160][T11340] genl_rcv_msg+0x61d/0x980 [ 1941.023676][T11340] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1941.030631][T11340] ? lock_release+0x8f0/0x8f0 [ 1941.035328][T11340] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1941.040628][T11340] netlink_rcv_skb+0x15a/0x430 [ 1941.045399][T11340] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1941.052342][T11340] ? netlink_ack+0xa10/0xa10 [ 1941.056953][T11340] genl_rcv+0x24/0x40 [ 1941.060941][T11340] netlink_unicast+0x533/0x7d0 [ 1941.065718][T11340] ? netlink_attachskb+0x810/0x810 [ 1941.070851][T11340] ? __phys_addr_symbol+0x2c/0x70 [ 1941.075892][T11340] ? __check_object_size+0x171/0x3e4 [ 1941.081192][T11340] netlink_sendmsg+0x856/0xd90 [ 1941.085970][T11340] ? netlink_unicast+0x7d0/0x7d0 [ 1941.090921][T11340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1941.096216][T11340] ? netlink_unicast+0x7d0/0x7d0 [ 1941.101167][T11340] sock_sendmsg+0xcf/0x120 [ 1941.105768][T11340] ____sys_sendmsg+0x6e8/0x810 [ 1941.110542][T11340] ? kernel_sendmsg+0x50/0x50 [ 1941.115230][T11340] ? do_recvmmsg+0x6d0/0x6d0 [ 1941.119835][T11340] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1941.125823][T11340] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1941.131806][T11340] ? __lock_acquire+0xb5e/0x5570 [ 1941.136751][T11340] ___sys_sendmsg+0xf3/0x170 [ 1941.141353][T11340] ? sendmsg_copy_msghdr+0x160/0x160 [ 1941.146734][T11340] ? __fget_files+0x272/0x400 [ 1941.151421][T11340] ? lock_downgrade+0x830/0x830 [ 1941.156275][T11340] ? find_held_lock+0x2d/0x110 [ 1941.161067][T11340] ? __fget_files+0x294/0x400 [ 1941.165885][T11340] ? __fget_light+0xea/0x280 [ 1941.170491][T11340] __sys_sendmsg+0xe5/0x1b0 [ 1941.175004][T11340] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1941.180047][T11340] ? syscall_enter_from_user_mode+0x20/0x290 [ 1941.186033][T11340] ? lockdep_hardirqs_on+0x53/0x100 [ 1941.191250][T11340] do_syscall_64+0x2d/0x70 [ 1941.195676][T11340] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1941.201656][T11340] RIP: 0033:0x45d5b9 [ 1941.205556][T11340] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1941.225161][T11340] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:04:46 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x0, 0x200, 0x170, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 15:04:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000140081563ee454ce34384a6605ff0100000060003f03547906a6bdcfd5e47e17", 0x24}], 0x1}, 0x0) 15:04:46 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x18, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) [ 1941.233579][T11340] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1941.241555][T11340] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1941.249531][T11340] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1941.257515][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1941.265488][T11340] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x82, &(0x7f0000000300)=""/178, &(0x7f0000000100)=0xb2) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r1, 0x0, 0x82, 0x0, &(0x7f0000000100)) 15:04:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x45c}]}, &(0x7f0000000180)=0xc) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x77, &(0x7f00000001c0)={r4}, 0x14) [ 1941.380374][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2a}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1941.441111][ T7] tipc: TX() has been purged, node left! 15:04:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 15:04:47 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="aa56887914d63f5c03a93de072932ec4", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="5b68e94b3bfa9c19be52ffd7e71bb369", 0x10) 15:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x38}}, 0x0) 15:04:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)={0x20, 0x35, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x20}], 0x1}, 0x0) [ 1941.615818][T11377] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:04:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="aa56887914d63f5c03a93de072932ec4", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="5b68e94b3bfa9c19be52ffd7e71bb369", 0x10) [ 1941.671541][T11377] CPU: 0 PID: 11377 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1941.680249][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1941.690308][T11377] Call Trace: [ 1941.693605][T11377] dump_stack+0x198/0x1fd [ 1941.697951][T11377] sysfs_warn_dup.cold+0x1c/0x2d [ 1941.702911][T11377] sysfs_do_create_link_sd+0x11e/0x140 [ 1941.708388][T11377] sysfs_create_link+0x5f/0xc0 [ 1941.713159][T11377] device_add+0x6ff/0x1c40 [ 1941.717587][T11377] ? devlink_add_symlinks+0x450/0x450 [ 1941.723136][T11377] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1941.729132][T11377] wiphy_register+0x1d66/0x2850 [ 1941.734006][T11377] ? wiphy_unregister+0xc10/0xc10 [ 1941.739039][T11377] ? generic_xdp_install+0x700/0x700 [ 1941.744343][T11377] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1941.750418][T11377] ieee80211_register_hw+0x22c9/0x39a0 [ 1941.755899][T11377] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1941.761272][T11377] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1941.767170][T11377] ? lock_downgrade+0x830/0x830 [ 1941.772033][T11377] ? lock_is_held_type+0xbb/0xf0 [ 1941.776977][T11377] ? memset+0x20/0x40 [ 1941.780969][T11377] ? __hrtimer_init+0x12c/0x260 [ 1941.785832][T11377] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1941.791577][T11377] ? hwsim_virtio_rx_work+0x350/0x350 [ 1941.796957][T11377] ? memcpy+0x39/0x60 [ 1941.800950][T11377] hwsim_new_radio_nl+0x93e/0xf8c [ 1941.805981][T11377] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1941.811892][T11377] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1941.818830][T11377] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1941.825711][T11377] genl_rcv_msg+0x61d/0x980 [ 1941.830229][T11377] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1941.837189][T11377] ? lock_release+0x8f0/0x8f0 [ 1941.841872][T11377] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1941.847179][T11377] netlink_rcv_skb+0x15a/0x430 [ 1941.851953][T11377] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1941.858902][T11377] ? netlink_ack+0xa10/0xa10 [ 1941.863514][T11377] genl_rcv+0x24/0x40 [ 1941.867501][T11377] netlink_unicast+0x533/0x7d0 [ 1941.872281][T11377] ? netlink_attachskb+0x810/0x810 [ 1941.877402][T11377] ? __phys_addr_symbol+0x2c/0x70 [ 1941.882432][T11377] ? __check_object_size+0x171/0x3e4 [ 1941.887819][T11377] netlink_sendmsg+0x856/0xd90 [ 1941.892597][T11377] ? netlink_unicast+0x7d0/0x7d0 [ 1941.897545][T11377] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1941.902838][T11377] ? netlink_unicast+0x7d0/0x7d0 [ 1941.907786][T11377] sock_sendmsg+0xcf/0x120 [ 1941.912209][T11377] ____sys_sendmsg+0x6e8/0x810 [ 1941.916981][T11377] ? kernel_sendmsg+0x50/0x50 [ 1941.921663][T11377] ? do_recvmmsg+0x6d0/0x6d0 [ 1941.926263][T11377] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1941.932252][T11377] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1941.938235][T11377] ? __lock_acquire+0xb5e/0x5570 [ 1941.943189][T11377] ___sys_sendmsg+0xf3/0x170 [ 1941.947785][T11377] ? sendmsg_copy_msghdr+0x160/0x160 [ 1941.953085][T11377] ? __fget_files+0x272/0x400 [ 1941.957769][T11377] ? lock_downgrade+0x830/0x830 [ 1941.962620][T11377] ? find_held_lock+0x2d/0x110 [ 1941.967411][T11377] ? __fget_files+0x294/0x400 [ 1941.972102][T11377] ? __fget_light+0xea/0x280 [ 1941.976707][T11377] __sys_sendmsg+0xe5/0x1b0 [ 1941.981216][T11377] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1941.986261][T11377] ? syscall_enter_from_user_mode+0x20/0x290 [ 1941.992244][T11377] ? lockdep_hardirqs_on+0x53/0x100 [ 1941.997449][T11377] do_syscall_64+0x2d/0x70 [ 1942.001871][T11377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1942.007764][T11377] RIP: 0033:0x45d5b9 [ 1942.011664][T11377] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1942.031267][T11377] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1942.039681][T11377] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1942.047654][T11377] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1942.055626][T11377] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1942.063598][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x40, 0x4, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000007c0)}, 0x10) [ 1942.071571][T11377] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:47 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x101, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:04:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2d}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:04:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) 15:04:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2b}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:48 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], {0x0, 0x0, 0x3, 0x0, @wg=@data}}}}}}, 0x0) 15:04:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x61}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:04:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32], 0x40}}, 0x0) 15:04:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 15:04:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) [ 1942.520471][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:48 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x8) [ 1942.576827][T11419] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1942.604306][T11419] CPU: 0 PID: 11419 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1942.613003][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1942.623056][T11419] Call Trace: [ 1942.626356][T11419] dump_stack+0x198/0x1fd [ 1942.630704][T11419] sysfs_warn_dup.cold+0x1c/0x2d [ 1942.635654][T11419] sysfs_do_create_link_sd+0x11e/0x140 [ 1942.641125][T11419] sysfs_create_link+0x5f/0xc0 [ 1942.645901][T11419] device_add+0x6ff/0x1c40 [ 1942.650334][T11419] ? devlink_add_symlinks+0x450/0x450 [ 1942.655721][T11419] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1942.661721][T11419] wiphy_register+0x1d66/0x2850 [ 1942.666597][T11419] ? wiphy_unregister+0xc10/0xc10 [ 1942.671629][T11419] ? generic_xdp_install+0x700/0x700 [ 1942.676970][T11419] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1942.683048][T11419] ieee80211_register_hw+0x22c9/0x39a0 [ 1942.688526][T11419] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1942.693901][T11419] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1942.699806][T11419] ? lock_downgrade+0x830/0x830 [ 1942.704664][T11419] ? lock_is_held_type+0xbb/0xf0 [ 1942.709609][T11419] ? memset+0x20/0x40 [ 1942.713596][T11419] ? __hrtimer_init+0x12c/0x260 [ 1942.718453][T11419] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1942.724195][T11419] ? hwsim_virtio_rx_work+0x350/0x350 [ 1942.729579][T11419] ? memcpy+0x39/0x60 [ 1942.733570][T11419] hwsim_new_radio_nl+0x93e/0xf8c [ 1942.738621][T11419] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1942.744536][T11419] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1942.751470][T11419] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1942.758323][T11419] genl_rcv_msg+0x61d/0x980 [ 1942.762834][T11419] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1942.769792][T11419] ? lock_release+0x8f0/0x8f0 15:04:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) [ 1942.774469][T11419] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1942.779769][T11419] netlink_rcv_skb+0x15a/0x430 [ 1942.784536][T11419] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1942.791477][T11419] ? netlink_ack+0xa10/0xa10 [ 1942.796087][T11419] genl_rcv+0x24/0x40 [ 1942.800071][T11419] netlink_unicast+0x533/0x7d0 [ 1942.804849][T11419] ? netlink_attachskb+0x810/0x810 [ 1942.809970][T11419] ? __phys_addr_symbol+0x2c/0x70 [ 1942.814999][T11419] ? __check_object_size+0x171/0x3e4 [ 1942.820302][T11419] netlink_sendmsg+0x856/0xd90 [ 1942.825078][T11419] ? netlink_unicast+0x7d0/0x7d0 [ 1942.830023][T11419] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1942.835318][T11419] ? netlink_unicast+0x7d0/0x7d0 [ 1942.840262][T11419] sock_sendmsg+0xcf/0x120 [ 1942.844685][T11419] ____sys_sendmsg+0x6e8/0x810 [ 1942.849457][T11419] ? kernel_sendmsg+0x50/0x50 [ 1942.854133][T11419] ? do_recvmmsg+0x6d0/0x6d0 [ 1942.858739][T11419] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1942.864734][T11419] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1942.870718][T11419] ? __lock_acquire+0xb5e/0x5570 [ 1942.875664][T11419] ___sys_sendmsg+0xf3/0x170 [ 1942.880262][T11419] ? sendmsg_copy_msghdr+0x160/0x160 [ 1942.885551][T11419] ? __fget_files+0x272/0x400 [ 1942.890241][T11419] ? lock_downgrade+0x830/0x830 [ 1942.895671][T11419] ? find_held_lock+0x2d/0x110 [ 1942.900454][T11419] ? __fget_files+0x294/0x400 [ 1942.905145][T11419] ? __fget_light+0xea/0x280 [ 1942.909753][T11419] __sys_sendmsg+0xe5/0x1b0 [ 1942.914260][T11419] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1942.919305][T11419] ? syscall_enter_from_user_mode+0x20/0x290 15:04:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) [ 1942.925315][T11419] ? lockdep_hardirqs_on+0x53/0x100 [ 1942.930518][T11419] do_syscall_64+0x2d/0x70 [ 1942.934940][T11419] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1942.940835][T11419] RIP: 0033:0x45d5b9 [ 1942.944734][T11419] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1942.964346][T11419] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:04:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmsg$qrtr(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/188, 0xbc}], 0x2, 0x0, 0x1240}, 0x38, 0x0) 15:04:48 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="9cabbf0400cbb140419b80008100501d8906", 0x12}], 0x1}, 0x0) [ 1942.972764][T11419] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1942.980736][T11419] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1942.988709][T11419] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1942.996683][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1943.004658][T11419] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x34, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe1}}}]}}]}, 0x60}}, 0x0) 15:04:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x30}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) 15:04:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) [ 1943.246741][T11445] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 1943.273455][T11448] sch_tbf: burst 0 is lower than device lo mtu (14) ! 15:04:49 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xfffffff7, 0xd2, 0x4}, 0x10) 15:04:49 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x4, 0x4, 0x3}]}}}}}}, 0x0) 15:04:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) [ 1943.462302][T11458] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1943.518418][T11458] CPU: 0 PID: 11458 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1943.527117][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.537173][T11458] Call Trace: [ 1943.540468][T11458] dump_stack+0x198/0x1fd [ 1943.544814][T11458] sysfs_warn_dup.cold+0x1c/0x2d [ 1943.549761][T11458] sysfs_do_create_link_sd+0x11e/0x140 [ 1943.555232][T11458] sysfs_create_link+0x5f/0xc0 [ 1943.560029][T11458] device_add+0x6ff/0x1c40 [ 1943.564459][T11458] ? devlink_add_symlinks+0x450/0x450 [ 1943.569841][T11458] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1943.575830][T11458] wiphy_register+0x1d66/0x2850 [ 1943.580701][T11458] ? wiphy_unregister+0xc10/0xc10 [ 1943.585726][T11458] ? generic_xdp_install+0x700/0x700 [ 1943.591024][T11458] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1943.597102][T11458] ieee80211_register_hw+0x22c9/0x39a0 [ 1943.602582][T11458] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1943.607955][T11458] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1943.613859][T11458] ? lock_downgrade+0x830/0x830 [ 1943.618718][T11458] ? lock_is_held_type+0xbb/0xf0 [ 1943.623658][T11458] ? memset+0x20/0x40 [ 1943.627650][T11458] ? __hrtimer_init+0x12c/0x260 [ 1943.632507][T11458] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1943.638257][T11458] ? hwsim_virtio_rx_work+0x350/0x350 [ 1943.643646][T11458] ? memcpy+0x39/0x60 [ 1943.647642][T11458] hwsim_new_radio_nl+0x93e/0xf8c [ 1943.652678][T11458] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1943.658590][T11458] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1943.665535][T11458] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1943.672394][T11458] genl_rcv_msg+0x61d/0x980 [ 1943.676913][T11458] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1943.683866][T11458] ? lock_release+0x8f0/0x8f0 [ 1943.688555][T11458] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1943.693852][T11458] netlink_rcv_skb+0x15a/0x430 [ 1943.698625][T11458] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1943.705566][T11458] ? netlink_ack+0xa10/0xa10 [ 1943.710176][T11458] genl_rcv+0x24/0x40 [ 1943.714164][T11458] netlink_unicast+0x533/0x7d0 [ 1943.718941][T11458] ? netlink_attachskb+0x810/0x810 [ 1943.724057][T11458] ? __phys_addr_symbol+0x2c/0x70 [ 1943.729083][T11458] ? __check_object_size+0x171/0x3e4 [ 1943.734377][T11458] netlink_sendmsg+0x856/0xd90 [ 1943.739157][T11458] ? netlink_unicast+0x7d0/0x7d0 [ 1943.744110][T11458] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1943.749398][T11458] ? netlink_unicast+0x7d0/0x7d0 [ 1943.754341][T11458] sock_sendmsg+0xcf/0x120 [ 1943.758766][T11458] ____sys_sendmsg+0x6e8/0x810 [ 1943.763545][T11458] ? kernel_sendmsg+0x50/0x50 [ 1943.768221][T11458] ? do_recvmmsg+0x6d0/0x6d0 [ 1943.772819][T11458] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1943.778809][T11458] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1943.784789][T11458] ? __lock_acquire+0xb5e/0x5570 [ 1943.789737][T11458] ___sys_sendmsg+0xf3/0x170 [ 1943.794333][T11458] ? sendmsg_copy_msghdr+0x160/0x160 [ 1943.799624][T11458] ? __fget_files+0x272/0x400 [ 1943.804309][T11458] ? lock_downgrade+0x830/0x830 [ 1943.809157][T11458] ? find_held_lock+0x2d/0x110 [ 1943.813938][T11458] ? __fget_files+0x294/0x400 [ 1943.818640][T11458] ? __fget_light+0xea/0x280 [ 1943.823243][T11458] __sys_sendmsg+0xe5/0x1b0 [ 1943.827751][T11458] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1943.832795][T11458] ? syscall_enter_from_user_mode+0x20/0x290 [ 1943.838778][T11458] ? lockdep_hardirqs_on+0x53/0x100 [ 1943.843991][T11458] do_syscall_64+0x2d/0x70 [ 1943.848417][T11458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1943.854308][T11458] RIP: 0033:0x45d5b9 15:04:49 executing program 2: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e4, 0xfc, 0x304, 0xfc, 0x304, 0x304, 0x304, 0x4, 0x0, {[{{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'team0\x00'}, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'ip6_vti0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x430) [ 1943.858203][T11458] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1943.877806][T11458] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.886223][T11458] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1943.894195][T11458] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1943.902168][T11458] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1943.910141][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) [ 1943.918111][T11458] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1943.981563][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1944.001604][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1944.011842][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:04:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x2, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 15:04:49 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c10300000300000000030000400100000000000040010000400100000000000030020000300200003002000030020000300200000300000000000000000000000000004d4700000000000000000000000000004c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000060000000000000000000000f8004001000000000000000000000000000000000000000000000000280061646472747970650000000000000000000000000000000000000000000100000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000dd00d0"], 0x1) 15:04:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 15:04:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x48}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x0, 0x10e8, 0x10e8, 0x10c, 0x0, 0x1d8, 0x11a0, 0x11a0, 0x1d8, 0x11a0, 0x3, 0x0, {[{{@uncond, 0x0, 0xac, 0x10c, 0x0, {}, [@common=@unspec=@limit={{0x3c, 'limit\x00'}, {0x0, 0xda}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, 'batadv_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c8) 15:04:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110680000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15:04:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 15:04:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WIPHY={0x8, 0x110}]}, 0x23}}, 0x0) 15:04:49 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) 15:04:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05034600fc0f3e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x1054, 0x0, 0x0, 0x1d3) 15:04:50 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e20, @empty}], 0x2c) [ 1944.412424][T11498] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1944.464204][T11498] CPU: 0 PID: 11498 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1944.472901][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1944.482960][T11498] Call Trace: [ 1944.486259][T11498] dump_stack+0x198/0x1fd [ 1944.490606][T11498] sysfs_warn_dup.cold+0x1c/0x2d [ 1944.495552][T11498] sysfs_do_create_link_sd+0x11e/0x140 [ 1944.501023][T11498] sysfs_create_link+0x5f/0xc0 [ 1944.505800][T11498] device_add+0x6ff/0x1c40 [ 1944.510231][T11498] ? devlink_add_symlinks+0x450/0x450 [ 1944.515611][T11498] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1944.521601][T11498] wiphy_register+0x1d66/0x2850 [ 1944.526478][T11498] ? wiphy_unregister+0xc10/0xc10 [ 1944.531513][T11498] ? generic_xdp_install+0x700/0x700 [ 1944.536812][T11498] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1944.542886][T11498] ieee80211_register_hw+0x22c9/0x39a0 [ 1944.548370][T11498] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1944.553756][T11498] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1944.559659][T11498] ? lock_downgrade+0x830/0x830 [ 1944.564519][T11498] ? lock_is_held_type+0xbb/0xf0 [ 1944.569467][T11498] ? memset+0x20/0x40 [ 1944.573464][T11498] ? __hrtimer_init+0x12c/0x260 [ 1944.578321][T11498] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1944.584061][T11498] ? hwsim_virtio_rx_work+0x350/0x350 [ 1944.589448][T11498] ? memcpy+0x39/0x60 [ 1944.593447][T11498] hwsim_new_radio_nl+0x93e/0xf8c [ 1944.598484][T11498] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1944.604396][T11498] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1944.611339][T11498] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1944.618192][T11498] genl_rcv_msg+0x61d/0x980 [ 1944.622713][T11498] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1944.629671][T11498] ? lock_release+0x8f0/0x8f0 [ 1944.634347][T11498] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1944.639643][T11498] netlink_rcv_skb+0x15a/0x430 [ 1944.644411][T11498] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1944.651356][T11498] ? netlink_ack+0xa10/0xa10 [ 1944.655965][T11498] genl_rcv+0x24/0x40 [ 1944.659952][T11498] netlink_unicast+0x533/0x7d0 [ 1944.664728][T11498] ? netlink_attachskb+0x810/0x810 [ 1944.669847][T11498] ? __phys_addr_symbol+0x2c/0x70 [ 1944.674874][T11498] ? __check_object_size+0x171/0x3e4 [ 1944.680173][T11498] netlink_sendmsg+0x856/0xd90 [ 1944.684950][T11498] ? netlink_unicast+0x7d0/0x7d0 [ 1944.689903][T11498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1944.695194][T11498] ? netlink_unicast+0x7d0/0x7d0 [ 1944.700143][T11498] sock_sendmsg+0xcf/0x120 [ 1944.704570][T11498] ____sys_sendmsg+0x6e8/0x810 [ 1944.709341][T11498] ? kernel_sendmsg+0x50/0x50 [ 1944.714016][T11498] ? do_recvmmsg+0x6d0/0x6d0 [ 1944.718618][T11498] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1944.724605][T11498] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1944.730586][T11498] ? __lock_acquire+0xb5e/0x5570 [ 1944.735532][T11498] ___sys_sendmsg+0xf3/0x170 [ 1944.740129][T11498] ? sendmsg_copy_msghdr+0x160/0x160 [ 1944.745424][T11498] ? __fget_files+0x272/0x400 [ 1944.750111][T11498] ? lock_downgrade+0x830/0x830 [ 1944.754963][T11498] ? find_held_lock+0x2d/0x110 [ 1944.759746][T11498] ? __fget_files+0x294/0x400 [ 1944.764441][T11498] ? __fget_light+0xea/0x280 [ 1944.769046][T11498] __sys_sendmsg+0xe5/0x1b0 [ 1944.773558][T11498] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1944.778605][T11498] ? syscall_enter_from_user_mode+0x20/0x290 [ 1944.784591][T11498] ? lockdep_hardirqs_on+0x53/0x100 [ 1944.789799][T11498] do_syscall_64+0x2d/0x70 [ 1944.794220][T11498] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1944.800110][T11498] RIP: 0033:0x45d5b9 15:04:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x4}}}}}]}, 0x40}}, 0x0) [ 1944.804012][T11498] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1944.823611][T11498] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1944.832021][T11498] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1944.839998][T11498] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1944.847973][T11498] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1944.855949][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) [ 1944.863927][T11498] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:50 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="e827a43cb16caaad67453329f83cc404", 0x10) 15:04:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x0, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 15:04:50 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @multicast1, 0x0, 0x0, 'wrr\x00'}, {@loopback, 0x0, 0x0, 0x10001}}, 0x44) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff5d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b80ca0aa1c0009b3ebea8653b1cc7e6397", 0x4c}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @multicast1, 0x0, 0x0, 'none\x00'}, 0x2c) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @multicast1, 0x0, 0x0, 'none\x00'}, 0x2c) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x6, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r7 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'none\x00', 0x0, 0x1, 0x57}, 0x2c) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r3, 0x2038}, {r4, 0x300}, {r1, 0x102}, {r5, 0x2000}, {r6, 0x40}, {r7, 0x228a}, {r2, 0x9}, {r8, 0x22}, {r9, 0x100}], 0x9, 0x2) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000080)={0x3d, 0x1}) 15:04:50 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="552968034bfa", @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @rand_addr, @link_local, @local}}}}, 0x0) 15:04:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x4c}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x25}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:04:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x0, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1945.186646][T11527] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:0 15:04:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000003e40)={0x16, 0x0, 0x75, 0x1, 0x4}, 0x40) [ 1945.252039][T11532] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1945.297080][T11532] CPU: 0 PID: 11532 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1945.305779][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1945.315831][T11532] Call Trace: [ 1945.319134][T11532] dump_stack+0x198/0x1fd [ 1945.323481][T11532] sysfs_warn_dup.cold+0x1c/0x2d [ 1945.328427][T11532] sysfs_do_create_link_sd+0x11e/0x140 [ 1945.333897][T11532] sysfs_create_link+0x5f/0xc0 [ 1945.338669][T11532] device_add+0x6ff/0x1c40 15:04:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x2}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 15:04:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}]}, 0x44}}, 0x0) [ 1945.343099][T11532] ? devlink_add_symlinks+0x450/0x450 [ 1945.348485][T11532] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1945.354480][T11532] wiphy_register+0x1d66/0x2850 [ 1945.366995][T11532] ? wiphy_unregister+0xc10/0xc10 [ 1945.372029][T11532] ? generic_xdp_install+0x700/0x700 [ 1945.377332][T11532] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1945.383410][T11532] ieee80211_register_hw+0x22c9/0x39a0 [ 1945.388900][T11532] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1945.394273][T11532] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1945.400182][T11532] ? lock_downgrade+0x830/0x830 [ 1945.405038][T11532] ? lock_is_held_type+0xbb/0xf0 [ 1945.409986][T11532] ? memset+0x20/0x40 [ 1945.413974][T11532] ? __hrtimer_init+0x12c/0x260 [ 1945.418835][T11532] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1945.424668][T11532] ? hwsim_virtio_rx_work+0x350/0x350 [ 1945.430052][T11532] ? memcpy+0x39/0x60 [ 1945.434044][T11532] hwsim_new_radio_nl+0x93e/0xf8c [ 1945.439084][T11532] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1945.444998][T11532] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1945.452903][T11532] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1945.459759][T11532] genl_rcv_msg+0x61d/0x980 [ 1945.464274][T11532] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1945.471227][T11532] ? lock_release+0x8f0/0x8f0 [ 1945.475903][T11532] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1945.481325][T11532] netlink_rcv_skb+0x15a/0x430 [ 1945.486094][T11532] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1945.493040][T11532] ? netlink_ack+0xa10/0xa10 15:04:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x20, 0x7, 0xa, 0x0, 0x0, 0x34000, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) [ 1945.497652][T11532] genl_rcv+0x24/0x40 [ 1945.501639][T11532] netlink_unicast+0x533/0x7d0 [ 1945.506412][T11532] ? netlink_attachskb+0x810/0x810 [ 1945.511533][T11532] ? __phys_addr_symbol+0x2c/0x70 [ 1945.516562][T11532] ? __check_object_size+0x171/0x3e4 [ 1945.521863][T11532] netlink_sendmsg+0x856/0xd90 [ 1945.526642][T11532] ? netlink_unicast+0x7d0/0x7d0 [ 1945.531594][T11532] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1945.536889][T11532] ? netlink_unicast+0x7d0/0x7d0 [ 1945.541831][T11532] sock_sendmsg+0xcf/0x120 [ 1945.546261][T11532] ____sys_sendmsg+0x6e8/0x810 [ 1945.551027][T11532] ? kernel_sendmsg+0x50/0x50 [ 1945.555701][T11532] ? do_recvmmsg+0x6d0/0x6d0 [ 1945.560304][T11532] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1945.566325][T11532] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1945.572309][T11532] ? __lock_acquire+0xb5e/0x5570 [ 1945.577258][T11532] ___sys_sendmsg+0xf3/0x170 [ 1945.581861][T11532] ? sendmsg_copy_msghdr+0x160/0x160 [ 1945.587157][T11532] ? __fget_files+0x272/0x400 [ 1945.591843][T11532] ? lock_downgrade+0x830/0x830 [ 1945.596703][T11532] ? find_held_lock+0x2d/0x110 [ 1945.601488][T11532] ? __fget_files+0x294/0x400 [ 1945.606337][T11532] ? __fget_light+0xea/0x280 [ 1945.610944][T11532] __sys_sendmsg+0xe5/0x1b0 [ 1945.615453][T11532] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1945.620500][T11532] ? syscall_enter_from_user_mode+0x20/0x290 [ 1945.626485][T11532] ? lockdep_hardirqs_on+0x53/0x100 [ 1945.631692][T11532] do_syscall_64+0x2d/0x70 [ 1945.636125][T11532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1945.642021][T11532] RIP: 0033:0x45d5b9 15:04:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0x22}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) [ 1945.645917][T11532] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1945.665518][T11532] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1945.673933][T11532] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1945.681908][T11532] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1945.689883][T11532] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 15:04:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x14, 0x7, 0xa, 0x101, 0x0, 0x34000}, 0x14}}, 0x0) [ 1945.697862][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1945.705847][T11532] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:51 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000001c0)={'bond0\x00', @ifru_flags}) [ 1946.370765][T11527] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:0 15:04:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000080)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local, {[@timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@empty}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2}, {@multicast2}, {@loopback}, {@loopback}, {@private}]}]}}}}}}}, 0x0) 15:04:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x14, 0x7, 0xa, 0x101, 0x0, 0x34000}, 0x14}}, 0x0) 15:04:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x7, 0x4) 15:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x4c}}, 0x0) 15:04:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbmod={0x38, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20}]}, {0x4}}}]}]}, 0x50}}, 0x0) 15:04:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x60}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c00)={0x14, 0x7, 0xa, 0x101, 0x0, 0x34000}, 0x14}}, 0x0) [ 1946.585757][T11572] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 15:04:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xffffffffb0000005}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1946.669484][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1946.702378][T11574] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:04:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1946.762167][T11574] CPU: 1 PID: 11574 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1946.770869][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1946.780929][T11574] Call Trace: [ 1946.784232][T11574] dump_stack+0x198/0x1fd [ 1946.788584][T11574] sysfs_warn_dup.cold+0x1c/0x2d [ 1946.793537][T11574] sysfs_do_create_link_sd+0x11e/0x140 [ 1946.799006][T11574] sysfs_create_link+0x5f/0xc0 [ 1946.803779][T11574] device_add+0x6ff/0x1c40 [ 1946.808226][T11574] ? devlink_add_symlinks+0x450/0x450 [ 1946.813612][T11574] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1946.819616][T11574] wiphy_register+0x1d66/0x2850 [ 1946.824488][T11574] ? wiphy_unregister+0xc10/0xc10 [ 1946.829520][T11574] ? generic_xdp_install+0x700/0x700 [ 1946.834820][T11574] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1946.840898][T11574] ieee80211_register_hw+0x22c9/0x39a0 [ 1946.846378][T11574] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1946.851754][T11574] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1946.857656][T11574] ? lock_downgrade+0x830/0x830 [ 1946.862511][T11574] ? lock_is_held_type+0xbb/0xf0 [ 1946.867454][T11574] ? memset+0x20/0x40 [ 1946.871470][T11574] ? __hrtimer_init+0x12c/0x260 [ 1946.876330][T11574] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1946.882077][T11574] ? hwsim_virtio_rx_work+0x350/0x350 [ 1946.887457][T11574] ? memcpy+0x39/0x60 [ 1946.891449][T11574] hwsim_new_radio_nl+0x93e/0xf8c [ 1946.896487][T11574] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1946.902397][T11574] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1946.909334][T11574] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1946.916186][T11574] genl_rcv_msg+0x61d/0x980 [ 1946.920699][T11574] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1946.927653][T11574] ? lock_release+0x8f0/0x8f0 [ 1946.932331][T11574] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1946.937625][T11574] netlink_rcv_skb+0x15a/0x430 [ 1946.942395][T11574] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1946.949339][T11574] ? netlink_ack+0xa10/0xa10 [ 1946.953959][T11574] genl_rcv+0x24/0x40 [ 1946.957943][T11574] netlink_unicast+0x533/0x7d0 [ 1946.962718][T11574] ? netlink_attachskb+0x810/0x810 [ 1946.967844][T11574] ? __phys_addr_symbol+0x2c/0x70 [ 1946.972928][T11574] ? __check_object_size+0x171/0x3e4 [ 1946.978240][T11574] netlink_sendmsg+0x856/0xd90 [ 1946.983034][T11574] ? netlink_unicast+0x7d0/0x7d0 [ 1946.987991][T11574] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1946.993292][T11574] ? netlink_unicast+0x7d0/0x7d0 [ 1946.998253][T11574] sock_sendmsg+0xcf/0x120 [ 1947.002674][T11574] ____sys_sendmsg+0x6e8/0x810 [ 1947.007459][T11574] ? kernel_sendmsg+0x50/0x50 [ 1947.012141][T11574] ? do_recvmmsg+0x6d0/0x6d0 [ 1947.016739][T11574] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1947.022725][T11574] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1947.028709][T11574] ? __lock_acquire+0xb5e/0x5570 [ 1947.033653][T11574] ___sys_sendmsg+0xf3/0x170 [ 1947.038265][T11574] ? sendmsg_copy_msghdr+0x160/0x160 [ 1947.043554][T11574] ? __fget_files+0x272/0x400 [ 1947.048274][T11574] ? lock_downgrade+0x830/0x830 [ 1947.053125][T11574] ? find_held_lock+0x2d/0x110 [ 1947.057918][T11574] ? __fget_files+0x294/0x400 [ 1947.062609][T11574] ? __fget_light+0xea/0x280 [ 1947.067209][T11574] __sys_sendmsg+0xe5/0x1b0 [ 1947.071721][T11574] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1947.076762][T11574] ? syscall_enter_from_user_mode+0x20/0x290 [ 1947.082745][T11574] ? lockdep_hardirqs_on+0x53/0x100 [ 1947.087947][T11574] do_syscall_64+0x2d/0x70 [ 1947.092367][T11574] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1947.098258][T11574] RIP: 0033:0x45d5b9 [ 1947.102153][T11574] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1947.121756][T11574] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1947.130171][T11574] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1947.138150][T11574] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1947.146120][T11574] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1947.154092][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 15:04:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000f97331346926348c8a8ad4bfa7489a58a3a5fc32fe91d00287e765581eaa231970bde1a7497796fef75b5658bfc1c669eb2ef359211498b2784a9470e3bd05be41c39aacd9f526fe0101c9b941d00692ccfbabc84748997b40e3fb8c0ce396a35ab32e7c700f90910932c6c465780c01c07558511ad77a330974898f84b66644cfff7ac5ad39fd1c52da498700c84725fb9f9f8b25df77d0214a74f2676cb5bac80afb10f717c54b3e5dabde0da3bd70f73712f7464bda0824e4083dfcdb959c188ecd60163a9b23d9a41313adfa0ff4a16004c6247ac793dd9e4859f1c90c0000000000000000000000000000000000000000000000000000000000000a5a883d7b320bcb457fadfa7a2769dfa6e6e82268f8bb7c969c3ed556fed74b8942"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000010000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) [ 1947.162065][T11574] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:52 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="f60000000d14250f"], 0x114}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000300), 0x1}, 0x0) 15:04:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 15:04:53 executing program 2: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) sendmmsg$unix(r0, &(0x7f0000002b40)=[{&(0x7f00000000c0)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x20000840) 15:04:53 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xb}, @generic={0x86, 0x2}]}}}}}}, 0x0) [ 1947.376362][T11607] netlink: 230 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1947.405767][T11610] netlink: 230 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 1947.577840][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2}, &(0x7f0000000300)=0x8) [ 1947.621265][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:53 executing program 5: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'lc\x00'}, 0x2) r0 = socket(0x2000000000000022, 0x2, 0x10000000000002) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r2}, &(0x7f0000000300)=0x8) 15:04:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x68}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1947.694623][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1947.718831][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 15:04:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 1947.825885][T11637] sctp: [Deprecated]: syz-executor.3 (pid 11637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1947.825885][T11637] Use struct sctp_sack_info instead 15:04:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000005c0)) [ 1947.892522][T11640] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1947.942644][T11640] CPU: 1 PID: 11640 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1947.951346][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1947.961398][T11640] Call Trace: [ 1947.964698][T11640] dump_stack+0x198/0x1fd [ 1947.969045][T11640] sysfs_warn_dup.cold+0x1c/0x2d [ 1947.973990][T11640] sysfs_do_create_link_sd+0x11e/0x140 [ 1947.979460][T11640] sysfs_create_link+0x5f/0xc0 [ 1947.984231][T11640] device_add+0x6ff/0x1c40 [ 1947.988662][T11640] ? devlink_add_symlinks+0x450/0x450 [ 1947.994043][T11640] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1948.000042][T11640] wiphy_register+0x1d66/0x2850 [ 1948.004923][T11640] ? wiphy_unregister+0xc10/0xc10 [ 1948.009955][T11640] ? minstrel_ht_alloc+0x513/0x6a0 [ 1948.015071][T11640] ? generic_xdp_install+0x700/0x700 [ 1948.020373][T11640] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1948.026449][T11640] ieee80211_register_hw+0x22c9/0x39a0 [ 1948.031927][T11640] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1948.037304][T11640] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1948.043221][T11640] ? lock_downgrade+0x830/0x830 [ 1948.048083][T11640] ? lock_is_held_type+0xbb/0xf0 [ 1948.053032][T11640] ? memset+0x20/0x40 [ 1948.057022][T11640] ? __hrtimer_init+0x12c/0x260 [ 1948.061879][T11640] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1948.067621][T11640] ? hwsim_virtio_rx_work+0x350/0x350 [ 1948.073012][T11640] ? memcpy+0x39/0x60 [ 1948.077003][T11640] hwsim_new_radio_nl+0x93e/0xf8c [ 1948.082036][T11640] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1948.087950][T11640] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1948.094891][T11640] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1948.101873][T11640] genl_rcv_msg+0x61d/0x980 [ 1948.106395][T11640] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1948.113440][T11640] ? lock_release+0x8f0/0x8f0 [ 1948.118139][T11640] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1948.123441][T11640] netlink_rcv_skb+0x15a/0x430 [ 1948.128217][T11640] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1948.135164][T11640] ? netlink_ack+0xa10/0xa10 [ 1948.139777][T11640] genl_rcv+0x24/0x40 [ 1948.143763][T11640] netlink_unicast+0x533/0x7d0 [ 1948.148538][T11640] ? netlink_attachskb+0x810/0x810 [ 1948.153659][T11640] ? __phys_addr_symbol+0x2c/0x70 [ 1948.158687][T11640] ? __check_object_size+0x171/0x3e4 [ 1948.163996][T11640] netlink_sendmsg+0x856/0xd90 [ 1948.168774][T11640] ? netlink_unicast+0x7d0/0x7d0 [ 1948.173733][T11640] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1948.179022][T11640] ? netlink_unicast+0x7d0/0x7d0 [ 1948.183985][T11640] sock_sendmsg+0xcf/0x120 [ 1948.188406][T11640] ____sys_sendmsg+0x6e8/0x810 [ 1948.193179][T11640] ? kernel_sendmsg+0x50/0x50 [ 1948.197858][T11640] ? do_recvmmsg+0x6d0/0x6d0 [ 1948.202460][T11640] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1948.208449][T11640] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1948.214428][T11640] ? __lock_acquire+0xb5e/0x5570 [ 1948.219374][T11640] ___sys_sendmsg+0xf3/0x170 [ 1948.223972][T11640] ? sendmsg_copy_msghdr+0x160/0x160 [ 1948.229265][T11640] ? __fget_files+0x272/0x400 [ 1948.233951][T11640] ? lock_downgrade+0x830/0x830 [ 1948.238806][T11640] ? find_held_lock+0x2d/0x110 [ 1948.243596][T11640] ? __fget_files+0x294/0x400 [ 1948.248372][T11640] ? __fget_light+0xea/0x280 [ 1948.252978][T11640] __sys_sendmsg+0xe5/0x1b0 [ 1948.257488][T11640] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1948.262534][T11640] ? syscall_enter_from_user_mode+0x20/0x290 [ 1948.268520][T11640] ? lockdep_hardirqs_on+0x53/0x100 [ 1948.273734][T11640] do_syscall_64+0x2d/0x70 [ 1948.278156][T11640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1948.284050][T11640] RIP: 0033:0x45d5b9 [ 1948.287948][T11640] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1948.307553][T11640] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1948.315969][T11640] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1948.323940][T11640] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1948.331913][T11640] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1948.339887][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1948.347859][T11640] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x587}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:04:54 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc6, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1948.564397][T11661] sctp: [Deprecated]: syz-executor.3 (pid 11661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1948.564397][T11661] Use struct sctp_sack_info instead [ 1948.583858][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7e}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 15:04:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@assoc={0x10}, @assoc={0x10}, @op={0x10}], 0x30}, 0x0) 15:04:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x6c}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:54 executing program 4: pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b8020", 0x12, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 15:04:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0xe8, &(0x7f0000000080)=""/232, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:04:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000005c0)) [ 1948.852794][T11682] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1948.893270][T11682] CPU: 1 PID: 11682 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1948.901978][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1948.912033][T11682] Call Trace: [ 1948.915340][T11682] dump_stack+0x198/0x1fd [ 1948.919682][T11682] sysfs_warn_dup.cold+0x1c/0x2d [ 1948.924632][T11682] sysfs_do_create_link_sd+0x11e/0x140 [ 1948.930104][T11682] sysfs_create_link+0x5f/0xc0 [ 1948.934881][T11682] device_add+0x6ff/0x1c40 [ 1948.939397][T11682] ? devlink_add_symlinks+0x450/0x450 [ 1948.944775][T11682] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1948.950774][T11682] wiphy_register+0x1d66/0x2850 [ 1948.955646][T11682] ? wiphy_unregister+0xc10/0xc10 [ 1948.960675][T11682] ? generic_xdp_install+0x700/0x700 [ 1948.965978][T11682] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1948.972062][T11682] ieee80211_register_hw+0x22c9/0x39a0 [ 1948.977541][T11682] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1948.982916][T11682] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1948.988820][T11682] ? lock_downgrade+0x830/0x830 [ 1948.993676][T11682] ? lock_is_held_type+0xbb/0xf0 [ 1948.998619][T11682] ? memset+0x20/0x40 [ 1949.002612][T11682] ? __hrtimer_init+0x12c/0x260 [ 1949.007472][T11682] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1949.013215][T11682] ? hwsim_virtio_rx_work+0x350/0x350 [ 1949.018596][T11682] ? memcpy+0x39/0x60 [ 1949.022588][T11682] hwsim_new_radio_nl+0x93e/0xf8c [ 1949.027624][T11682] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1949.033536][T11682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1949.040473][T11682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1949.047321][T11682] genl_rcv_msg+0x61d/0x980 [ 1949.051815][T11682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1949.058743][T11682] ? lock_release+0x8f0/0x8f0 [ 1949.063402][T11682] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1949.068673][T11682] netlink_rcv_skb+0x15a/0x430 [ 1949.073418][T11682] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1949.080338][T11682] ? netlink_ack+0xa10/0xa10 [ 1949.084923][T11682] genl_rcv+0x24/0x40 [ 1949.088891][T11682] netlink_unicast+0x533/0x7d0 [ 1949.093641][T11682] ? netlink_attachskb+0x810/0x810 [ 1949.098738][T11682] ? __phys_addr_symbol+0x2c/0x70 [ 1949.103741][T11682] ? __check_object_size+0x171/0x3e4 [ 1949.109011][T11682] netlink_sendmsg+0x856/0xd90 [ 1949.113892][T11682] ? netlink_unicast+0x7d0/0x7d0 [ 1949.118825][T11682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1949.124095][T11682] ? netlink_unicast+0x7d0/0x7d0 [ 1949.129018][T11682] sock_sendmsg+0xcf/0x120 [ 1949.133422][T11682] ____sys_sendmsg+0x6e8/0x810 [ 1949.138176][T11682] ? kernel_sendmsg+0x50/0x50 [ 1949.142837][T11682] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.147416][T11682] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1949.153381][T11682] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1949.159343][T11682] ? __lock_acquire+0xb5e/0x5570 [ 1949.164266][T11682] ___sys_sendmsg+0xf3/0x170 [ 1949.168840][T11682] ? sendmsg_copy_msghdr+0x160/0x160 [ 1949.174110][T11682] ? __fget_files+0x272/0x400 [ 1949.178773][T11682] ? lock_downgrade+0x830/0x830 [ 1949.183603][T11682] ? find_held_lock+0x2d/0x110 [ 1949.188358][T11682] ? __fget_files+0x294/0x400 [ 1949.193021][T11682] ? __fget_light+0xea/0x280 [ 1949.197597][T11682] __sys_sendmsg+0xe5/0x1b0 [ 1949.202081][T11682] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1949.207186][T11682] ? syscall_enter_from_user_mode+0x20/0x290 [ 1949.213153][T11682] ? lockdep_hardirqs_on+0x53/0x100 [ 1949.218336][T11682] do_syscall_64+0x2d/0x70 [ 1949.222736][T11682] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1949.228607][T11682] RIP: 0033:0x45d5b9 15:04:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x30) 15:04:54 executing program 2: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, [0x0, 0x0, 0x20800]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1f, 0x400, 0x4}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x400, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x3, r0}, 0x38) 15:04:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110980000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 1949.232490][T11682] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1949.252078][T11682] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.260483][T11682] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1949.268559][T11682] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1949.276522][T11682] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1949.284488][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1949.292446][T11682] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:55 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18, &(0x7f0000000b80)={0x0}}, 0x0) 15:04:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0xa, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 15:04:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}]}, 0x34}}, 0x0) [ 1949.427162][T11685] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000005c0)) 15:04:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x74}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1949.545357][T11706] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) 15:04:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x4, 0xa}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 15:04:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x88}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:04:55 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x11, 0x0, 0x0, 0x0, 0x2f}, 0x20) [ 1949.686817][T11716] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1949.731221][T11716] CPU: 1 PID: 11716 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1949.739911][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1949.749965][T11716] Call Trace: [ 1949.753262][T11716] dump_stack+0x198/0x1fd [ 1949.757605][T11716] sysfs_warn_dup.cold+0x1c/0x2d [ 1949.762553][T11716] sysfs_do_create_link_sd+0x11e/0x140 [ 1949.768022][T11716] sysfs_create_link+0x5f/0xc0 [ 1949.772800][T11716] device_add+0x6ff/0x1c40 [ 1949.777231][T11716] ? devlink_add_symlinks+0x450/0x450 [ 1949.782612][T11716] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1949.788605][T11716] wiphy_register+0x1d66/0x2850 [ 1949.793476][T11716] ? wiphy_unregister+0xc10/0xc10 [ 1949.798506][T11716] ? generic_xdp_install+0x700/0x700 [ 1949.803808][T11716] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1949.809887][T11716] ieee80211_register_hw+0x22c9/0x39a0 [ 1949.815376][T11716] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1949.820752][T11716] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1949.826656][T11716] ? lock_downgrade+0x830/0x830 [ 1949.831517][T11716] ? lock_is_held_type+0xbb/0xf0 [ 1949.836461][T11716] ? memset+0x20/0x40 [ 1949.840455][T11716] ? __hrtimer_init+0x12c/0x260 [ 1949.845325][T11716] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1949.851071][T11716] ? hwsim_virtio_rx_work+0x350/0x350 [ 1949.856452][T11716] ? memcpy+0x39/0x60 [ 1949.860445][T11716] hwsim_new_radio_nl+0x93e/0xf8c [ 1949.865484][T11716] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1949.871396][T11716] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1949.878333][T11716] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1949.885192][T11716] genl_rcv_msg+0x61d/0x980 [ 1949.889718][T11716] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1949.896668][T11716] ? lock_release+0x8f0/0x8f0 [ 1949.901345][T11716] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1949.906643][T11716] netlink_rcv_skb+0x15a/0x430 [ 1949.911411][T11716] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1949.918353][T11716] ? netlink_ack+0xa10/0xa10 [ 1949.922961][T11716] genl_rcv+0x24/0x40 [ 1949.926952][T11716] netlink_unicast+0x533/0x7d0 [ 1949.931729][T11716] ? netlink_attachskb+0x810/0x810 [ 1949.936844][T11716] ? __phys_addr_symbol+0x2c/0x70 [ 1949.941873][T11716] ? __check_object_size+0x171/0x3e4 [ 1949.947166][T11716] netlink_sendmsg+0x856/0xd90 [ 1949.951942][T11716] ? netlink_unicast+0x7d0/0x7d0 [ 1949.956887][T11716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1949.962180][T11716] ? netlink_unicast+0x7d0/0x7d0 [ 1949.967120][T11716] sock_sendmsg+0xcf/0x120 [ 1949.971539][T11716] ____sys_sendmsg+0x6e8/0x810 [ 1949.976311][T11716] ? kernel_sendmsg+0x50/0x50 [ 1949.980991][T11716] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.985597][T11716] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1949.991589][T11716] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1949.997571][T11716] ? __lock_acquire+0xb5e/0x5570 [ 1950.002715][T11716] ___sys_sendmsg+0xf3/0x170 [ 1950.007313][T11716] ? sendmsg_copy_msghdr+0x160/0x160 [ 1950.012603][T11716] ? __fget_files+0x272/0x400 [ 1950.017291][T11716] ? lock_downgrade+0x830/0x830 [ 1950.022145][T11716] ? find_held_lock+0x2d/0x110 [ 1950.026926][T11716] ? __fget_files+0x294/0x400 [ 1950.031619][T11716] ? __fget_light+0xea/0x280 [ 1950.036227][T11716] __sys_sendmsg+0xe5/0x1b0 [ 1950.040734][T11716] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1950.045778][T11716] ? syscall_enter_from_user_mode+0x20/0x290 [ 1950.051763][T11716] ? lockdep_hardirqs_on+0x53/0x100 [ 1950.056971][T11716] do_syscall_64+0x2d/0x70 [ 1950.061393][T11716] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1950.067280][T11716] RIP: 0033:0x45d5b9 [ 1950.071182][T11716] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1950.091740][T11716] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1950.100173][T11716] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1950.108146][T11716] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1950.116122][T11716] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1950.124098][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x20000000) [ 1950.132070][T11716] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x14, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x8}, @__IFLA_CAIF_HSI_TAIL_ALIGN={0x8, 0x6}]}}}]}, 0x44}}, 0x0) 15:04:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 15:04:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10) [ 1950.411686][T11738] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 15:04:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x7a}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="2e0000001c008105e00f80ecdb4ce1ff07a07e4f1e0000000a0306fb0a000200050a1457467721000300c50083b8", 0x2e}], 0x1}, 0x0) 15:04:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="55000000000000002900000002000000798fd06f1ad06da56a3df5e06ff9522e07d5462c998b3683ffc11441f0c37d9ba97ed24d2b18e51aa82b413b84aa3e97d9c41b96b766ed98b5ff1ea62e26159a9bf83b872e", 0x55) 15:04:56 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:04:56 executing program 4: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a0003f0feff000000020200000000000c00000008000a"], 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:04:56 executing program 1: socket$inet(0x2b, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x23c, 0x14, 0x101, 0x0, 0x0, "", [@nested={0x22b, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @generic="024f6edd634d74146a1ac0ef53a90aa9c74de12324fdbcf1d2a7cfa50191d97e8ae00b750aaf7de8072aef7eba42cddf169d50b4baab78dd29cb083589329182eabfccaa471c567f03b6430272997a20e90edb157f35ad7a77d27af767cb762c0962b221f8a1d154df88e59a06673d591d89fff4e3329d27734e849c39e2ac734c23e019bba140b6f786ba614d4ff13c050d7a7e17352c5fa99dfa39a6f6926ce720dc6a08b66d7a49e16122bfb4ab09d7ef66a906f1be94815eff4ed0ef9e97ffaf3089818e96bdd766a730d3", @generic="ca9ebfb9638b7380e066839d6cca299ac34021f187e7a8b7ee6c29ee4bc785b37f7d492c1eb6c644547f05f0d5d4a5a5f55c71fbb06af70603f854461f6511176d2b2c4ac601df44fb3cc71b4e8651cff251dbbb168feecbae5a295d153318fb2c0026177cfb311bdfd58641ad4bb3e5da219947f0e50fddcac9440c9a7d3f8415079d1db3843fddb3a7496b7bebf810f55d7d0f0ea1d4c84c0f166c52e36d247441810be507739ebc2eacba00935f378b35416dfc33acd955ae0c73ed3441e00e5cf2051dcbcd2567bb5b", @generic="560d1ac397b7c5ef484c721edc75fcf6e017473414d23aee33d4740954f04c09685b736357e73d45f93f88178bca3b345bf310e795931a916b8335a3317a7b802445048e23329fc70b19afdf4ae36ca1f94e238c6f4a680982a94fdf284ac7d7e4a031ddbe4587abe130e0b0cebfea0fbad94b", @typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x23c}], 0x1}, 0x0) 15:04:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x40}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1950.644805][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1950.732201][T11761] bridge_slave_0: FDB only supports static addresses [ 1950.757648][T11762] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:04:56 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r1, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 1950.790428][T11762] CPU: 0 PID: 11762 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1950.799118][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.809173][T11762] Call Trace: [ 1950.812472][T11762] dump_stack+0x198/0x1fd [ 1950.816830][T11762] sysfs_warn_dup.cold+0x1c/0x2d [ 1950.821781][T11762] sysfs_do_create_link_sd+0x11e/0x140 [ 1950.827257][T11762] sysfs_create_link+0x5f/0xc0 [ 1950.832043][T11762] device_add+0x6ff/0x1c40 [ 1950.836476][T11762] ? devlink_add_symlinks+0x450/0x450 [ 1950.841867][T11762] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1950.847869][T11762] wiphy_register+0x1d66/0x2850 [ 1950.852746][T11762] ? wiphy_unregister+0xc10/0xc10 [ 1950.857781][T11762] ? generic_xdp_install+0x700/0x700 [ 1950.863083][T11762] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1950.869160][T11762] ieee80211_register_hw+0x22c9/0x39a0 [ 1950.874637][T11762] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1950.880012][T11762] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1950.885919][T11762] ? lock_downgrade+0x830/0x830 15:04:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1d0, 0x1fc, 0x1fc, 0x1d0, 0x1fc, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6gre0\x00', 'bond_slave_0\x00'}, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @remote, [], [], 'bridge_slave_0\x00', 'macsec0\x00', {}, {}, 0x2f}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f4) [ 1950.890777][T11762] ? lock_is_held_type+0xbb/0xf0 [ 1950.895724][T11762] ? memset+0x20/0x40 [ 1950.899712][T11762] ? __hrtimer_init+0x12c/0x260 [ 1950.904571][T11762] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1950.910318][T11762] ? hwsim_virtio_rx_work+0x350/0x350 [ 1950.915699][T11762] ? memcpy+0x39/0x60 [ 1950.919720][T11762] hwsim_new_radio_nl+0x93e/0xf8c [ 1950.924759][T11762] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1950.930670][T11762] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1950.937608][T11762] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1950.944466][T11762] genl_rcv_msg+0x61d/0x980 [ 1950.948985][T11762] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1950.955938][T11762] ? lock_release+0x8f0/0x8f0 [ 1950.960615][T11762] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1950.965930][T11762] netlink_rcv_skb+0x15a/0x430 [ 1950.970700][T11762] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1950.977644][T11762] ? netlink_ack+0xa10/0xa10 [ 1950.982254][T11762] genl_rcv+0x24/0x40 [ 1950.986241][T11762] netlink_unicast+0x533/0x7d0 15:04:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc6, 0x4) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1950.991021][T11762] ? netlink_attachskb+0x810/0x810 [ 1950.996139][T11762] ? __phys_addr_symbol+0x2c/0x70 [ 1951.001166][T11762] ? __check_object_size+0x171/0x3e4 [ 1951.006463][T11762] netlink_sendmsg+0x856/0xd90 [ 1951.011240][T11762] ? netlink_unicast+0x7d0/0x7d0 [ 1951.016186][T11762] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1951.021478][T11762] ? netlink_unicast+0x7d0/0x7d0 [ 1951.026416][T11762] sock_sendmsg+0xcf/0x120 [ 1951.030839][T11762] ____sys_sendmsg+0x6e8/0x810 [ 1951.035611][T11762] ? kernel_sendmsg+0x50/0x50 [ 1951.040306][T11762] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.044908][T11762] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1951.051589][T11762] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1951.057573][T11762] ? __lock_acquire+0xb5e/0x5570 [ 1951.062519][T11762] ___sys_sendmsg+0xf3/0x170 [ 1951.067120][T11762] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.072416][T11762] ? __fget_files+0x272/0x400 [ 1951.077101][T11762] ? lock_downgrade+0x830/0x830 [ 1951.081953][T11762] ? find_held_lock+0x2d/0x110 [ 1951.086737][T11762] ? __fget_files+0x294/0x400 [ 1951.091432][T11762] ? __fget_light+0xea/0x280 [ 1951.096038][T11762] __sys_sendmsg+0xe5/0x1b0 [ 1951.100546][T11762] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1951.105598][T11762] ? syscall_enter_from_user_mode+0x20/0x290 [ 1951.111583][T11762] ? lockdep_hardirqs_on+0x53/0x100 [ 1951.116790][T11762] do_syscall_64+0x2d/0x70 [ 1951.121217][T11762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1951.127109][T11762] RIP: 0033:0x45d5b9 [ 1951.131006][T11762] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1951.150609][T11762] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1951.159022][T11762] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1951.166993][T11762] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1951.174973][T11762] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1951.182948][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:04:56 executing program 3: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1951.190930][T11762] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc6, 0x4) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xf0}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:57 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "45a27e", 0x0, 0x6c, 0x0, @loopback, @mcast2, [], "28788d4588c6d974"}}}}}}}, 0x0) 15:04:57 executing program 2: r0 = socket(0x848000000015, 0x805, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @func_proto={0x0, 0x0, 0x0, 0xa}]}}, &(0x7f00000002c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20) 15:04:57 executing program 4: unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x1}, 0x10) [ 1951.482134][T11798] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1951.504375][T11798] CPU: 0 PID: 11798 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1951.513066][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1951.523118][T11798] Call Trace: [ 1951.526421][T11798] dump_stack+0x198/0x1fd [ 1951.530768][T11798] sysfs_warn_dup.cold+0x1c/0x2d [ 1951.535717][T11798] sysfs_do_create_link_sd+0x11e/0x140 [ 1951.541188][T11798] sysfs_create_link+0x5f/0xc0 [ 1951.545962][T11798] device_add+0x6ff/0x1c40 [ 1951.550391][T11798] ? devlink_add_symlinks+0x450/0x450 [ 1951.555774][T11798] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1951.561771][T11798] wiphy_register+0x1d66/0x2850 [ 1951.566647][T11798] ? wiphy_unregister+0xc10/0xc10 [ 1951.571683][T11798] ? generic_xdp_install+0x700/0x700 [ 1951.576986][T11798] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1951.583065][T11798] ieee80211_register_hw+0x22c9/0x39a0 [ 1951.588546][T11798] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1951.593920][T11798] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1951.599825][T11798] ? lock_downgrade+0x830/0x830 [ 1951.604694][T11798] ? lock_is_held_type+0xbb/0xf0 [ 1951.609643][T11798] ? memset+0x20/0x40 [ 1951.613634][T11798] ? __hrtimer_init+0x12c/0x260 [ 1951.618497][T11798] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1951.624238][T11798] ? hwsim_virtio_rx_work+0x350/0x350 [ 1951.629627][T11798] ? memcpy+0x39/0x60 [ 1951.633621][T11798] hwsim_new_radio_nl+0x93e/0xf8c [ 1951.639352][T11798] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1951.645268][T11798] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1951.652213][T11798] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1951.659073][T11798] genl_rcv_msg+0x61d/0x980 [ 1951.663603][T11798] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1951.670556][T11798] ? lock_release+0x8f0/0x8f0 [ 1951.675240][T11798] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1951.680542][T11798] netlink_rcv_skb+0x15a/0x430 [ 1951.685321][T11798] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1951.692374][T11798] ? netlink_ack+0xa10/0xa10 [ 1951.696989][T11798] genl_rcv+0x24/0x40 [ 1951.700978][T11798] netlink_unicast+0x533/0x7d0 [ 1951.705754][T11798] ? netlink_attachskb+0x810/0x810 [ 1951.710872][T11798] ? __phys_addr_symbol+0x2c/0x70 [ 1951.715901][T11798] ? __check_object_size+0x171/0x3e4 [ 1951.721199][T11798] netlink_sendmsg+0x856/0xd90 [ 1951.725977][T11798] ? netlink_unicast+0x7d0/0x7d0 [ 1951.730928][T11798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1951.736222][T11798] ? netlink_unicast+0x7d0/0x7d0 [ 1951.741164][T11798] sock_sendmsg+0xcf/0x120 [ 1951.745588][T11798] ____sys_sendmsg+0x6e8/0x810 [ 1951.750359][T11798] ? kernel_sendmsg+0x50/0x50 [ 1951.755038][T11798] ? do_recvmmsg+0x6d0/0x6d0 [ 1951.759641][T11798] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1951.765631][T11798] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1951.771614][T11798] ? __lock_acquire+0xb5e/0x5570 [ 1951.776559][T11798] ___sys_sendmsg+0xf3/0x170 15:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r1, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x30}}, 0x0) 15:04:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc6, 0x4) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1951.781161][T11798] ? sendmsg_copy_msghdr+0x160/0x160 [ 1951.786451][T11798] ? __fget_files+0x272/0x400 [ 1951.791136][T11798] ? lock_downgrade+0x830/0x830 [ 1951.796074][T11798] ? find_held_lock+0x2d/0x110 [ 1951.800874][T11798] ? __fget_files+0x294/0x400 [ 1951.805569][T11798] ? __fget_light+0xea/0x280 [ 1951.810172][T11798] __sys_sendmsg+0xe5/0x1b0 [ 1951.814683][T11798] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1951.819732][T11798] ? syscall_enter_from_user_mode+0x20/0x290 [ 1951.825717][T11798] ? lockdep_hardirqs_on+0x53/0x100 [ 1951.830928][T11798] do_syscall_64+0x2d/0x70 [ 1951.835351][T11798] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1951.841244][T11798] RIP: 0033:0x45d5b9 [ 1951.845141][T11798] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1951.864747][T11798] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1951.874033][T11798] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:04:57 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x300, 0x0, 0x20000000) 15:04:57 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000003e00)=[{0xc, 0x84, 0x8}], 0xc}, 0x0) [ 1951.882015][T11798] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1951.889988][T11798] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1951.897970][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1951.905941][T11798] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x300000c, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000013000)) 15:04:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc6, 0x4) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x300}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:57 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0xfffffddb, 0x0, 0x0, 0x0) 15:04:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000040)={0x28, 0x6a, 0xd13, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x10, 0x4, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x28}], 0x1}, 0x0) [ 1952.236404][T11834] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1952.248493][T11834] CPU: 0 PID: 11834 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1952.257180][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1952.267234][T11834] Call Trace: [ 1952.270535][T11834] dump_stack+0x198/0x1fd [ 1952.274881][T11834] sysfs_warn_dup.cold+0x1c/0x2d [ 1952.279831][T11834] sysfs_do_create_link_sd+0x11e/0x140 [ 1952.285304][T11834] sysfs_create_link+0x5f/0xc0 [ 1952.290077][T11834] device_add+0x6ff/0x1c40 [ 1952.294502][T11834] ? devlink_add_symlinks+0x450/0x450 [ 1952.299888][T11834] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1952.305891][T11834] wiphy_register+0x1d66/0x2850 [ 1952.310762][T11834] ? wiphy_unregister+0xc10/0xc10 [ 1952.315797][T11834] ? generic_xdp_install+0x700/0x700 [ 1952.321103][T11834] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1952.327183][T11834] ieee80211_register_hw+0x22c9/0x39a0 [ 1952.332665][T11834] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1952.338040][T11834] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1952.343944][T11834] ? lock_downgrade+0x830/0x830 [ 1952.348803][T11834] ? lock_is_held_type+0xbb/0xf0 [ 1952.353755][T11834] ? memset+0x20/0x40 [ 1952.357761][T11834] ? __hrtimer_init+0x12c/0x260 [ 1952.362621][T11834] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1952.368363][T11834] ? hwsim_virtio_rx_work+0x350/0x350 [ 1952.373742][T11834] ? memcpy+0x39/0x60 [ 1952.377784][T11834] hwsim_new_radio_nl+0x93e/0xf8c [ 1952.382820][T11834] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1952.388740][T11834] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1952.395678][T11834] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1952.402531][T11834] genl_rcv_msg+0x61d/0x980 [ 1952.407049][T11834] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1952.413997][T11834] ? lock_release+0x8f0/0x8f0 [ 1952.418673][T11834] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1952.423979][T11834] netlink_rcv_skb+0x15a/0x430 [ 1952.428749][T11834] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1952.435694][T11834] ? netlink_ack+0xa10/0xa10 [ 1952.440305][T11834] genl_rcv+0x24/0x40 [ 1952.444289][T11834] netlink_unicast+0x533/0x7d0 [ 1952.449066][T11834] ? netlink_attachskb+0x810/0x810 [ 1952.454185][T11834] ? __phys_addr_symbol+0x2c/0x70 [ 1952.459214][T11834] ? __check_object_size+0x171/0x3e4 [ 1952.464508][T11834] netlink_sendmsg+0x856/0xd90 [ 1952.469287][T11834] ? netlink_unicast+0x7d0/0x7d0 [ 1952.474235][T11834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1952.479523][T11834] ? netlink_unicast+0x7d0/0x7d0 [ 1952.484474][T11834] sock_sendmsg+0xcf/0x120 [ 1952.488895][T11834] ____sys_sendmsg+0x6e8/0x810 [ 1952.493666][T11834] ? kernel_sendmsg+0x50/0x50 [ 1952.498343][T11834] ? do_recvmmsg+0x6d0/0x6d0 [ 1952.502940][T11834] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1952.508926][T11834] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1952.514908][T11834] ? __lock_acquire+0xb5e/0x5570 [ 1952.519862][T11834] ___sys_sendmsg+0xf3/0x170 [ 1952.524459][T11834] ? sendmsg_copy_msghdr+0x160/0x160 [ 1952.529753][T11834] ? __fget_files+0x272/0x400 [ 1952.534446][T11834] ? lock_downgrade+0x830/0x830 [ 1952.539297][T11834] ? find_held_lock+0x2d/0x110 [ 1952.544083][T11834] ? __fget_files+0x294/0x400 [ 1952.548780][T11834] ? __fget_light+0xea/0x280 [ 1952.553384][T11834] __sys_sendmsg+0xe5/0x1b0 [ 1952.557899][T11834] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1952.562944][T11834] ? syscall_enter_from_user_mode+0x20/0x290 [ 1952.568929][T11834] ? lockdep_hardirqs_on+0x53/0x100 [ 1952.574132][T11834] do_syscall_64+0x2d/0x70 [ 1952.578552][T11834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1952.584439][T11834] RIP: 0033:0x45d5b9 [ 1952.588334][T11834] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1952.607937][T11834] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1952.616350][T11834] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1952.624319][T11834] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 15:04:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1952.632289][T11834] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1952.640262][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1952.648235][T11834] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:58 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000", @ANYRES16], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x60, &(0x7f0000000540)={0x0, @dev, 0x0, 0x0, 'nq\x00', 0x0, 0x0, 0x54}, 0x2c) 15:04:58 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040), 0x400000) 15:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x3, {0x81000000}}]}]}]}, 0x50}}, 0x0) 15:04:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x3e7}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x204, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1d4, 0x2, {{}, [@TCA_NETEM_REORDER={0xc}, @TCA_NETEM_DELAY_DIST={0x1b, 0x2, "c755efca651338b69077170780912ad54641d3e85cc33a"}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0xe0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0xfffffffffffffda1}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI]}]}}}]}, 0x204}}, 0x0) 15:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0) [ 1953.061935][T11865] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1953.086998][T11865] CPU: 1 PID: 11865 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1953.095702][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1953.105757][T11865] Call Trace: [ 1953.109065][T11865] dump_stack+0x198/0x1fd [ 1953.113419][T11865] sysfs_warn_dup.cold+0x1c/0x2d [ 1953.118384][T11865] sysfs_do_create_link_sd+0x11e/0x140 [ 1953.123853][T11865] sysfs_create_link+0x5f/0xc0 [ 1953.128629][T11865] device_add+0x6ff/0x1c40 [ 1953.133065][T11865] ? devlink_add_symlinks+0x450/0x450 [ 1953.138446][T11865] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1953.144441][T11865] wiphy_register+0x1d66/0x2850 [ 1953.149315][T11865] ? wiphy_unregister+0xc10/0xc10 [ 1953.154349][T11865] ? generic_xdp_install+0x700/0x700 [ 1953.159667][T11865] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1953.165757][T11865] ieee80211_register_hw+0x22c9/0x39a0 [ 1953.171239][T11865] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1953.176615][T11865] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1953.182520][T11865] ? lock_downgrade+0x830/0x830 [ 1953.187376][T11865] ? lock_is_held_type+0xbb/0xf0 [ 1953.192320][T11865] ? memset+0x20/0x40 [ 1953.196310][T11865] ? __hrtimer_init+0x12c/0x260 [ 1953.201172][T11865] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1953.206917][T11865] ? hwsim_virtio_rx_work+0x350/0x350 [ 1953.212300][T11865] ? memcpy+0x39/0x60 [ 1953.216292][T11865] hwsim_new_radio_nl+0x93e/0xf8c [ 1953.221327][T11865] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1953.227237][T11865] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1953.234698][T11865] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1953.241569][T11865] genl_rcv_msg+0x61d/0x980 [ 1953.246085][T11865] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1953.253074][T11865] ? lock_release+0x8f0/0x8f0 [ 1953.257755][T11865] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1953.263051][T11865] netlink_rcv_skb+0x15a/0x430 [ 1953.267821][T11865] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1953.274765][T11865] ? netlink_ack+0xa10/0xa10 [ 1953.279379][T11865] genl_rcv+0x24/0x40 [ 1953.283365][T11865] netlink_unicast+0x533/0x7d0 [ 1953.288143][T11865] ? netlink_attachskb+0x810/0x810 [ 1953.293265][T11865] ? __phys_addr_symbol+0x2c/0x70 [ 1953.298295][T11865] ? __check_object_size+0x171/0x3e4 [ 1953.303591][T11865] netlink_sendmsg+0x856/0xd90 [ 1953.308524][T11865] ? netlink_unicast+0x7d0/0x7d0 [ 1953.313475][T11865] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1953.318766][T11865] ? netlink_unicast+0x7d0/0x7d0 [ 1953.323712][T11865] sock_sendmsg+0xcf/0x120 [ 1953.328135][T11865] ____sys_sendmsg+0x6e8/0x810 [ 1953.332911][T11865] ? kernel_sendmsg+0x50/0x50 [ 1953.337590][T11865] ? do_recvmmsg+0x6d0/0x6d0 [ 1953.342196][T11865] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1953.348188][T11865] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1953.354171][T11865] ? __lock_acquire+0xb5e/0x5570 [ 1953.359119][T11865] ___sys_sendmsg+0xf3/0x170 [ 1953.363728][T11865] ? sendmsg_copy_msghdr+0x160/0x160 [ 1953.369022][T11865] ? __fget_files+0x272/0x400 [ 1953.373720][T11865] ? lock_downgrade+0x830/0x830 [ 1953.378574][T11865] ? find_held_lock+0x2d/0x110 [ 1953.383355][T11865] ? __fget_files+0x294/0x400 [ 1953.388047][T11865] ? __fget_light+0xea/0x280 [ 1953.392649][T11865] __sys_sendmsg+0xe5/0x1b0 [ 1953.397158][T11865] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1953.402202][T11865] ? syscall_enter_from_user_mode+0x20/0x290 [ 1953.408185][T11865] ? lockdep_hardirqs_on+0x53/0x100 [ 1953.413392][T11865] do_syscall_64+0x2d/0x70 [ 1953.417814][T11865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1953.423708][T11865] RIP: 0033:0x45d5b9 [ 1953.427602][T11865] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1953.447198][T11865] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1953.455609][T11865] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:04:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:58 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000240)={'nr0\x00'}) 15:04:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x3ff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 15:04:58 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000300)) 15:04:59 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 1953.463582][T11865] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1953.471555][T11865] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1953.479528][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1953.487501][T11865] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:04:59 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan1\x00', 0x400}) close(r0) [ 1953.769382][T11890] __nla_validate_parse: 2 callbacks suppressed [ 1953.769396][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) [ 1953.888303][T11892] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1953.957690][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1953.967416][T11890] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:04:59 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdd, &(0x7f000079bffc), &(0x7f0000000000)=0xd) 15:04:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x500}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:04:59 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:04:59 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x7409}) [ 1954.104907][T11917] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1954.133168][T11917] CPU: 1 PID: 11917 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1954.141885][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1954.151943][T11917] Call Trace: [ 1954.155257][T11917] dump_stack+0x198/0x1fd [ 1954.159615][T11917] sysfs_warn_dup.cold+0x1c/0x2d [ 1954.164570][T11917] sysfs_do_create_link_sd+0x11e/0x140 [ 1954.170045][T11917] sysfs_create_link+0x5f/0xc0 [ 1954.174829][T11917] device_add+0x6ff/0x1c40 [ 1954.179266][T11917] ? devlink_add_symlinks+0x450/0x450 [ 1954.184650][T11917] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1954.190753][T11917] wiphy_register+0x1d66/0x2850 [ 1954.195632][T11917] ? wiphy_unregister+0xc10/0xc10 [ 1954.200665][T11917] ? generic_xdp_install+0x700/0x700 [ 1954.206074][T11917] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1954.212151][T11917] ieee80211_register_hw+0x22c9/0x39a0 [ 1954.217651][T11917] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1954.223052][T11917] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1954.228963][T11917] ? lock_downgrade+0x830/0x830 [ 1954.233823][T11917] ? lock_is_held_type+0xbb/0xf0 [ 1954.238768][T11917] ? memset+0x20/0x40 [ 1954.242757][T11917] ? __hrtimer_init+0x12c/0x260 [ 1954.247618][T11917] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1954.253362][T11917] ? hwsim_virtio_rx_work+0x350/0x350 [ 1954.258747][T11917] ? memcpy+0x39/0x60 [ 1954.262739][T11917] hwsim_new_radio_nl+0x93e/0xf8c [ 1954.267778][T11917] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1954.273691][T11917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1954.280628][T11917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1954.287493][T11917] genl_rcv_msg+0x61d/0x980 [ 1954.292050][T11917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1954.299036][T11917] ? lock_release+0x8f0/0x8f0 [ 1954.303721][T11917] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1954.309018][T11917] netlink_rcv_skb+0x15a/0x430 [ 1954.313788][T11917] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1954.320739][T11917] ? netlink_ack+0xa10/0xa10 [ 1954.325349][T11917] genl_rcv+0x24/0x40 [ 1954.329342][T11917] netlink_unicast+0x533/0x7d0 [ 1954.334119][T11917] ? netlink_attachskb+0x810/0x810 [ 1954.339245][T11917] ? __phys_addr_symbol+0x2c/0x70 [ 1954.344297][T11917] ? __check_object_size+0x171/0x3e4 [ 1954.349607][T11917] netlink_sendmsg+0x856/0xd90 [ 1954.354382][T11917] ? netlink_unicast+0x7d0/0x7d0 [ 1954.359332][T11917] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1954.364622][T11917] ? netlink_unicast+0x7d0/0x7d0 [ 1954.369570][T11917] sock_sendmsg+0xcf/0x120 [ 1954.373993][T11917] ____sys_sendmsg+0x6e8/0x810 [ 1954.378763][T11917] ? kernel_sendmsg+0x50/0x50 [ 1954.383437][T11917] ? do_recvmmsg+0x6d0/0x6d0 [ 1954.388038][T11917] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1954.394027][T11917] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1954.400010][T11917] ? __lock_acquire+0xb5e/0x5570 [ 1954.404957][T11917] ___sys_sendmsg+0xf3/0x170 [ 1954.409564][T11917] ? sendmsg_copy_msghdr+0x160/0x160 [ 1954.414855][T11917] ? __fget_files+0x272/0x400 [ 1954.419545][T11917] ? lock_downgrade+0x830/0x830 [ 1954.424419][T11917] ? find_held_lock+0x2d/0x110 [ 1954.429213][T11917] ? __fget_files+0x294/0x400 [ 1954.433904][T11917] ? __fget_light+0xea/0x280 [ 1954.438512][T11917] __sys_sendmsg+0xe5/0x1b0 [ 1954.443024][T11917] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1954.448069][T11917] ? syscall_enter_from_user_mode+0x20/0x290 [ 1954.454055][T11917] ? lockdep_hardirqs_on+0x53/0x100 [ 1954.459262][T11917] do_syscall_64+0x2d/0x70 [ 1954.463688][T11917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1954.469585][T11917] RIP: 0033:0x45d5b9 [ 1954.473483][T11917] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1954.493086][T11917] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:00 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x10, 0x0, 0x6}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1954.501502][T11917] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1954.509474][T11917] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1954.517455][T11917] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1954.525431][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1954.533402][T11917] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040), &(0x7f0000000180)=0x8) 15:05:00 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:00 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xcc, &(0x7f0000000100), &(0x7f00000000c0)=0x4) 15:05:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 15:05:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x7) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc4, &(0x7f0000000100), &(0x7f0000000080)=0x4) 15:05:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = epoll_create1(0x0) r2 = socket(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa000100a}) 15:05:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x600}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x4, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 15:05:01 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x21, 0x5, 0x2, 0x8, 0x1, 0x5, 0x7, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x5c}}, 0x0) 15:05:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x9effffff}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 15:05:01 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @local, @local, {[@hopopts={0x29}], {0x0, 0x0, 0x8}}}}}}, 0x0) 15:05:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1955.556731][T11985] lo: Caught tx_queue_len zero misconfig [ 1955.593685][T11988] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1955.633073][T11988] CPU: 0 PID: 11988 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1955.641769][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.651824][T11988] Call Trace: [ 1955.655123][T11988] dump_stack+0x198/0x1fd [ 1955.659468][T11988] sysfs_warn_dup.cold+0x1c/0x2d [ 1955.664417][T11988] sysfs_do_create_link_sd+0x11e/0x140 [ 1955.669884][T11988] sysfs_create_link+0x5f/0xc0 [ 1955.674658][T11988] device_add+0x6ff/0x1c40 [ 1955.679089][T11988] ? devlink_add_symlinks+0x450/0x450 [ 1955.684474][T11988] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1955.690474][T11988] wiphy_register+0x1d66/0x2850 [ 1955.695346][T11988] ? wiphy_unregister+0xc10/0xc10 [ 1955.700379][T11988] ? generic_xdp_install+0x700/0x700 [ 1955.705683][T11988] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1955.711760][T11988] ieee80211_register_hw+0x22c9/0x39a0 [ 1955.717243][T11988] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1955.722619][T11988] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1955.728524][T11988] ? lock_downgrade+0x830/0x830 [ 1955.733381][T11988] ? lock_is_held_type+0xbb/0xf0 [ 1955.738326][T11988] ? memset+0x20/0x40 [ 1955.742344][T11988] ? __hrtimer_init+0x12c/0x260 [ 1955.747207][T11988] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1955.752959][T11988] ? hwsim_virtio_rx_work+0x350/0x350 [ 1955.758343][T11988] ? memcpy+0x39/0x60 [ 1955.762337][T11988] hwsim_new_radio_nl+0x93e/0xf8c [ 1955.767369][T11988] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1955.773278][T11988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1955.780217][T11988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1955.787073][T11988] genl_rcv_msg+0x61d/0x980 [ 1955.791594][T11988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1955.798559][T11988] ? lock_release+0x8f0/0x8f0 [ 1955.803239][T11988] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1955.808537][T11988] netlink_rcv_skb+0x15a/0x430 [ 1955.813306][T11988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1955.820252][T11988] ? netlink_ack+0xa10/0xa10 [ 1955.824869][T11988] genl_rcv+0x24/0x40 [ 1955.828860][T11988] netlink_unicast+0x533/0x7d0 [ 1955.833638][T11988] ? netlink_attachskb+0x810/0x810 [ 1955.838760][T11988] ? __phys_addr_symbol+0x2c/0x70 [ 1955.843788][T11988] ? __check_object_size+0x171/0x3e4 [ 1955.849082][T11988] netlink_sendmsg+0x856/0xd90 [ 1955.853861][T11988] ? netlink_unicast+0x7d0/0x7d0 [ 1955.858810][T11988] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1955.864096][T11988] ? netlink_unicast+0x7d0/0x7d0 [ 1955.869038][T11988] sock_sendmsg+0xcf/0x120 [ 1955.873459][T11988] ____sys_sendmsg+0x6e8/0x810 [ 1955.878233][T11988] ? kernel_sendmsg+0x50/0x50 [ 1955.882912][T11988] ? do_recvmmsg+0x6d0/0x6d0 [ 1955.887517][T11988] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1955.893517][T11988] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1955.899502][T11988] ? __lock_acquire+0xb5e/0x5570 [ 1955.904449][T11988] ___sys_sendmsg+0xf3/0x170 [ 1955.909048][T11988] ? sendmsg_copy_msghdr+0x160/0x160 [ 1955.914340][T11988] ? __fget_files+0x272/0x400 [ 1955.919026][T11988] ? lock_downgrade+0x830/0x830 [ 1955.923878][T11988] ? find_held_lock+0x2d/0x110 [ 1955.928666][T11988] ? __fget_files+0x294/0x400 [ 1955.933356][T11988] ? __fget_light+0xea/0x280 [ 1955.937997][T11988] __sys_sendmsg+0xe5/0x1b0 [ 1955.942507][T11988] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1955.947552][T11988] ? syscall_enter_from_user_mode+0x20/0x290 [ 1955.953535][T11988] ? lockdep_hardirqs_on+0x53/0x100 [ 1955.958743][T11988] do_syscall_64+0x2d/0x70 [ 1955.963168][T11988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1955.969061][T11988] RIP: 0033:0x45d5b9 [ 1955.972962][T11988] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1955.992566][T11988] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1956.000981][T11988] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1956.008953][T11988] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1956.016932][T11988] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1956.024907][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1956.032897][T11988] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000160001ff7f0000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) 15:05:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:02 executing program 5: socket$inet6(0xa, 0x3, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:02 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000000), 0x4) 15:05:02 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00', 0x6}, &(0x7f00000000c0)=0x1e) 15:05:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) 15:05:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x700}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="17010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:05:02 executing program 5: socket$inet6(0xa, 0x3, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:02 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@private0, @dev}, {0x0, @dev}, @ah_ip4_spec={@broadcast, @multicast2}, {0x0, @remote}}}}) [ 1956.691035][T12032] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1956.702690][T12030] IPVS: ftp: loaded support on port[0] = 21 15:05:02 executing program 5: socket$inet6(0xa, 0x3, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x80000, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1956.741205][T12032] CPU: 1 PID: 12032 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1956.749907][T12032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.759962][T12032] Call Trace: [ 1956.763266][T12032] dump_stack+0x198/0x1fd [ 1956.767612][T12032] sysfs_warn_dup.cold+0x1c/0x2d [ 1956.772570][T12032] sysfs_do_create_link_sd+0x11e/0x140 [ 1956.778038][T12032] sysfs_create_link+0x5f/0xc0 [ 1956.782813][T12032] device_add+0x6ff/0x1c40 [ 1956.787249][T12032] ? devlink_add_symlinks+0x450/0x450 [ 1956.792634][T12032] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1956.798628][T12032] wiphy_register+0x1d66/0x2850 [ 1956.803502][T12032] ? wiphy_unregister+0xc10/0xc10 [ 1956.808537][T12032] ? generic_xdp_install+0x700/0x700 [ 1956.813841][T12032] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1956.819925][T12032] ieee80211_register_hw+0x22c9/0x39a0 [ 1956.825406][T12032] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1956.830788][T12032] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1956.836695][T12032] ? lock_downgrade+0x830/0x830 [ 1956.841556][T12032] ? lock_is_held_type+0xbb/0xf0 [ 1956.846500][T12032] ? memset+0x20/0x40 [ 1956.850488][T12032] ? __hrtimer_init+0x12c/0x260 [ 1956.855352][T12032] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1956.861098][T12032] ? hwsim_virtio_rx_work+0x350/0x350 [ 1956.866480][T12032] ? memcpy+0x39/0x60 [ 1956.870473][T12032] hwsim_new_radio_nl+0x93e/0xf8c [ 1956.875513][T12032] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1956.881423][T12032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1956.888359][T12032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1956.895225][T12032] genl_rcv_msg+0x61d/0x980 [ 1956.899745][T12032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1956.906705][T12032] ? lock_release+0x8f0/0x8f0 [ 1956.911385][T12032] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1956.916693][T12032] netlink_rcv_skb+0x15a/0x430 [ 1956.921465][T12032] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1956.928493][T12032] ? netlink_ack+0xa10/0xa10 [ 1956.933108][T12032] genl_rcv+0x24/0x40 [ 1956.937273][T12032] netlink_unicast+0x533/0x7d0 15:05:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1956.942053][T12032] ? netlink_attachskb+0x810/0x810 [ 1956.947172][T12032] ? __phys_addr_symbol+0x2c/0x70 [ 1956.952201][T12032] ? __check_object_size+0x171/0x3e4 [ 1956.957489][T12032] netlink_sendmsg+0x856/0xd90 [ 1956.962262][T12032] ? netlink_unicast+0x7d0/0x7d0 [ 1956.967212][T12032] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1956.972501][T12032] ? netlink_unicast+0x7d0/0x7d0 [ 1956.977442][T12032] sock_sendmsg+0xcf/0x120 [ 1956.981864][T12032] ____sys_sendmsg+0x6e8/0x810 [ 1956.986638][T12032] ? kernel_sendmsg+0x50/0x50 [ 1956.991316][T12032] ? do_recvmmsg+0x6d0/0x6d0 [ 1956.995918][T12032] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1957.001910][T12032] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1957.007894][T12032] ? __lock_acquire+0xb5e/0x5570 [ 1957.012842][T12032] ___sys_sendmsg+0xf3/0x170 [ 1957.017446][T12032] ? sendmsg_copy_msghdr+0x160/0x160 [ 1957.022883][T12032] ? __fget_files+0x272/0x400 [ 1957.027568][T12032] ? lock_downgrade+0x830/0x830 [ 1957.032414][T12032] ? find_held_lock+0x2d/0x110 [ 1957.037387][T12032] ? __fget_files+0x294/0x400 15:05:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1957.042080][T12032] ? __fget_light+0xea/0x280 [ 1957.046685][T12032] __sys_sendmsg+0xe5/0x1b0 [ 1957.051194][T12032] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1957.056239][T12032] ? syscall_enter_from_user_mode+0x20/0x290 [ 1957.062235][T12032] ? lockdep_hardirqs_on+0x53/0x100 [ 1957.067440][T12032] do_syscall_64+0x2d/0x70 [ 1957.071869][T12032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1957.077758][T12032] RIP: 0033:0x45d5b9 [ 1957.081656][T12032] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1957.101263][T12032] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1957.109682][T12032] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1957.117661][T12032] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1957.125743][T12032] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1957.133717][T12032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 15:05:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) [ 1957.141693][T12032] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:02 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2, 0x0}}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 1957.218154][T12030] lo speed is unknown, defaulting to 1000 15:05:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x900}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1957.317743][T12054] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1957.340582][T12054] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 15:05:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) [ 1957.450495][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1957.485582][T12038] bond4 (uninitialized): Released all slaves [ 1957.521195][T12064] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1957.544583][T12064] CPU: 0 PID: 12064 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1957.553292][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.563356][T12064] Call Trace: [ 1957.566668][T12064] dump_stack+0x198/0x1fd [ 1957.571030][T12064] sysfs_warn_dup.cold+0x1c/0x2d [ 1957.576105][T12064] sysfs_do_create_link_sd+0x11e/0x140 [ 1957.581589][T12064] sysfs_create_link+0x5f/0xc0 [ 1957.586374][T12064] device_add+0x6ff/0x1c40 [ 1957.590819][T12064] ? devlink_add_symlinks+0x450/0x450 [ 1957.596301][T12064] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1957.602465][T12064] wiphy_register+0x1d66/0x2850 [ 1957.607415][T12064] ? wiphy_unregister+0xc10/0xc10 [ 1957.612459][T12064] ? generic_xdp_install+0x700/0x700 [ 1957.617913][T12064] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1957.624177][T12064] ieee80211_register_hw+0x22c9/0x39a0 [ 1957.629667][T12064] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1957.635051][T12064] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1957.641057][T12064] ? lock_downgrade+0x830/0x830 [ 1957.645927][T12064] ? lock_is_held_type+0xbb/0xf0 [ 1957.650880][T12064] ? memset+0x20/0x40 [ 1957.654881][T12064] ? __hrtimer_init+0x12c/0x260 [ 1957.659752][T12064] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1957.665521][T12064] ? hwsim_virtio_rx_work+0x350/0x350 [ 1957.670909][T12064] ? memcpy+0x39/0x60 [ 1957.674912][T12064] hwsim_new_radio_nl+0x93e/0xf8c [ 1957.679960][T12064] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1957.685883][T12064] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1957.692831][T12064] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1957.699697][T12064] genl_rcv_msg+0x61d/0x980 [ 1957.704232][T12064] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1957.711200][T12064] ? lock_release+0x8f0/0x8f0 [ 1957.715891][T12064] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1957.721199][T12064] netlink_rcv_skb+0x15a/0x430 [ 1957.725981][T12064] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1957.732933][T12064] ? netlink_ack+0xa10/0xa10 [ 1957.737557][T12064] genl_rcv+0x24/0x40 [ 1957.741556][T12064] netlink_unicast+0x533/0x7d0 [ 1957.746349][T12064] ? netlink_attachskb+0x810/0x810 [ 1957.751476][T12064] ? __phys_addr_symbol+0x2c/0x70 [ 1957.756511][T12064] ? __check_object_size+0x171/0x3e4 [ 1957.761818][T12064] netlink_sendmsg+0x856/0xd90 [ 1957.766607][T12064] ? netlink_unicast+0x7d0/0x7d0 [ 1957.771648][T12064] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1957.776951][T12064] ? netlink_unicast+0x7d0/0x7d0 [ 1957.781906][T12064] sock_sendmsg+0xcf/0x120 [ 1957.786339][T12064] ____sys_sendmsg+0x6e8/0x810 [ 1957.791118][T12064] ? kernel_sendmsg+0x50/0x50 [ 1957.795808][T12064] ? do_recvmmsg+0x6d0/0x6d0 [ 1957.800422][T12064] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1957.806422][T12064] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1957.812414][T12064] ? __lock_acquire+0xb5e/0x5570 [ 1957.817367][T12064] ___sys_sendmsg+0xf3/0x170 [ 1957.821972][T12064] ? sendmsg_copy_msghdr+0x160/0x160 [ 1957.827267][T12064] ? __fget_files+0x272/0x400 [ 1957.831965][T12064] ? lock_downgrade+0x830/0x830 [ 1957.836827][T12064] ? find_held_lock+0x2d/0x110 [ 1957.841626][T12064] ? __fget_files+0x294/0x400 [ 1957.846333][T12064] ? __fget_light+0xea/0x280 [ 1957.850947][T12064] __sys_sendmsg+0xe5/0x1b0 [ 1957.855476][T12064] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1957.860620][T12064] ? syscall_enter_from_user_mode+0x20/0x290 [ 1957.866617][T12064] ? lockdep_hardirqs_on+0x53/0x100 [ 1957.871830][T12064] do_syscall_64+0x2d/0x70 [ 1957.876262][T12064] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1957.882163][T12064] RIP: 0033:0x45d5b9 [ 1957.886070][T12064] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1957.905682][T12064] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1957.914108][T12064] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1957.922091][T12064] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1957.930076][T12064] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1957.938069][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1957.946053][T12064] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1958.095895][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1958.138572][T12030] lo speed is unknown, defaulting to 1000 [ 1958.145159][T12030] virt_wifi0 speed is unknown, defaulting to 1000 15:05:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/152, 0x98, 0x0, 0x0, 0x0) 15:05:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240), 0x8) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000840)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5", 0xffffff4a, 0x20008044, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) 15:05:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x48}}, 0x0) 15:05:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010001, 0x0) 15:05:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480), 0x0, 0x0) 15:05:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xa00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1958.556368][ T161] tipc: TX() has been purged, node left! 15:05:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480), 0x0, 0x0) 15:05:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="3e37c5c156656bebbeeb0717edd8b8670401b2edd1efc8a933d4be2dbff04069fd2ecba9d951fdfe749e7d9c55f3f9fb", 0x30) [ 1958.688420][T12118] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1958.746639][T12118] CPU: 0 PID: 12118 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1958.755353][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1958.765420][T12118] Call Trace: [ 1958.768731][T12118] dump_stack+0x198/0x1fd [ 1958.773087][T12118] sysfs_warn_dup.cold+0x1c/0x2d [ 1958.778048][T12118] sysfs_do_create_link_sd+0x11e/0x140 [ 1958.783529][T12118] sysfs_create_link+0x5f/0xc0 [ 1958.788313][T12118] device_add+0x6ff/0x1c40 [ 1958.792756][T12118] ? devlink_add_symlinks+0x450/0x450 [ 1958.798154][T12118] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1958.804158][T12118] wiphy_register+0x1d66/0x2850 [ 1958.809036][T12118] ? wiphy_unregister+0xc10/0xc10 [ 1958.814083][T12118] ? generic_xdp_install+0x700/0x700 [ 1958.819402][T12118] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1958.825489][T12118] ieee80211_register_hw+0x22c9/0x39a0 [ 1958.830979][T12118] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1958.836367][T12118] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1958.842282][T12118] ? lock_downgrade+0x830/0x830 [ 1958.847146][T12118] ? lock_is_held_type+0xbb/0xf0 [ 1958.852101][T12118] ? memset+0x20/0x40 [ 1958.856126][T12118] ? __hrtimer_init+0x12c/0x260 [ 1958.860997][T12118] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1958.866747][T12118] ? hwsim_virtio_rx_work+0x350/0x350 [ 1958.872130][T12118] ? memcpy+0x39/0x60 [ 1958.876130][T12118] hwsim_new_radio_nl+0x93e/0xf8c [ 1958.881176][T12118] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1958.887098][T12118] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 15:05:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3e}}]}, 0x40}}, 0x0) 15:05:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480), 0x0, 0x0) [ 1958.894048][T12118] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1958.900915][T12118] genl_rcv_msg+0x61d/0x980 [ 1958.905544][T12118] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1958.912510][T12118] ? lock_release+0x8f0/0x8f0 [ 1958.917252][T12118] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1958.922561][T12118] netlink_rcv_skb+0x15a/0x430 [ 1958.927340][T12118] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1958.934466][T12118] ? netlink_ack+0xa10/0xa10 [ 1958.939088][T12118] genl_rcv+0x24/0x40 [ 1958.943085][T12118] netlink_unicast+0x533/0x7d0 [ 1958.947869][T12118] ? netlink_attachskb+0x810/0x810 [ 1958.953003][T12118] ? __phys_addr_symbol+0x2c/0x70 [ 1958.958159][T12118] ? __check_object_size+0x171/0x3e4 [ 1958.963463][T12118] netlink_sendmsg+0x856/0xd90 [ 1958.968249][T12118] ? netlink_unicast+0x7d0/0x7d0 [ 1958.973206][T12118] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1958.978508][T12118] ? netlink_unicast+0x7d0/0x7d0 [ 1958.983456][T12118] sock_sendmsg+0xcf/0x120 [ 1958.987884][T12118] ____sys_sendmsg+0x6e8/0x810 [ 1958.992663][T12118] ? kernel_sendmsg+0x50/0x50 15:05:04 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000801, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 1958.997350][T12118] ? do_recvmmsg+0x6d0/0x6d0 [ 1959.001984][T12118] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1959.007993][T12118] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1959.013987][T12118] ? __lock_acquire+0xb5e/0x5570 [ 1959.018945][T12118] ___sys_sendmsg+0xf3/0x170 [ 1959.023556][T12118] ? sendmsg_copy_msghdr+0x160/0x160 [ 1959.028857][T12118] ? __fget_files+0x272/0x400 [ 1959.033552][T12118] ? lock_downgrade+0x830/0x830 [ 1959.038413][T12118] ? find_held_lock+0x2d/0x110 [ 1959.043211][T12118] ? __fget_files+0x294/0x400 [ 1959.047914][T12118] ? __fget_light+0xea/0x280 [ 1959.052528][T12118] __sys_sendmsg+0xe5/0x1b0 [ 1959.057047][T12118] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1959.062099][T12118] ? syscall_enter_from_user_mode+0x20/0x290 [ 1959.068097][T12118] ? lockdep_hardirqs_on+0x53/0x100 [ 1959.073314][T12118] do_syscall_64+0x2d/0x70 [ 1959.077748][T12118] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1959.083655][T12118] RIP: 0033:0x45d5b9 [ 1959.087731][T12118] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1959.107345][T12118] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1959.115768][T12118] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1959.123750][T12118] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1959.132251][T12118] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1959.140243][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1959.148234][T12118] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:04 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) [ 1959.355985][T12143] tipc: Started in network mode [ 1959.361380][T12143] tipc: Own node identity , cluster identity 4711 [ 1959.371315][T12143] tipc: Failed to set node id, please configure manually [ 1959.379463][T12143] tipc: Enabling of bearer rejected, failed to enable media [ 1959.397348][T12144] tipc: Started in network mode [ 1959.402377][T12144] tipc: Own node identity , cluster identity 4711 [ 1959.409844][T12144] tipc: Failed to set node id, please configure manually [ 1959.417021][T12144] tipc: Enabling of bearer rejected, failed to enable media 15:05:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@setneightbl={0x13, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xc, 0x1, ')\\^\\+*}\x00'}]}, 0x20}}, 0x0) 15:05:05 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900050200000000000000001d01"], 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) 15:05:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xb00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:05:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0xff, 0x1}, 0x20) 15:05:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r1, &(0x7f00000001c0)={@void, @void, @eth={@dev, @local, @val, {@mpls_uc={0x8847, {[], @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}}, 0x56) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c26236925000400fe7f", 0x22}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 1959.656281][T12159] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1959.702360][T12159] CPU: 1 PID: 12159 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1959.711074][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1959.721140][T12159] Call Trace: [ 1959.724455][T12159] dump_stack+0x198/0x1fd [ 1959.728807][T12159] sysfs_warn_dup.cold+0x1c/0x2d [ 1959.733766][T12159] sysfs_do_create_link_sd+0x11e/0x140 [ 1959.739244][T12159] sysfs_create_link+0x5f/0xc0 [ 1959.744028][T12159] device_add+0x6ff/0x1c40 [ 1959.748476][T12159] ? devlink_add_symlinks+0x450/0x450 [ 1959.753871][T12159] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1959.759877][T12159] wiphy_register+0x1d66/0x2850 [ 1959.764758][T12159] ? wiphy_unregister+0xc10/0xc10 [ 1959.769801][T12159] ? generic_xdp_install+0x700/0x700 [ 1959.775113][T12159] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1959.781213][T12159] ieee80211_register_hw+0x22c9/0x39a0 [ 1959.786707][T12159] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1959.792088][T12159] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1959.798004][T12159] ? lock_downgrade+0x830/0x830 [ 1959.802874][T12159] ? lock_is_held_type+0xbb/0xf0 [ 1959.807844][T12159] ? memset+0x20/0x40 [ 1959.811850][T12159] ? __hrtimer_init+0x12c/0x260 [ 1959.816721][T12159] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1959.822481][T12159] ? hwsim_virtio_rx_work+0x350/0x350 [ 1959.827875][T12159] ? memcpy+0x39/0x60 [ 1959.831879][T12159] hwsim_new_radio_nl+0x93e/0xf8c [ 1959.836922][T12159] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1959.842841][T12159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1959.849787][T12159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1959.856653][T12159] genl_rcv_msg+0x61d/0x980 [ 1959.861179][T12159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1959.868143][T12159] ? lock_release+0x8f0/0x8f0 [ 1959.872832][T12159] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1959.878141][T12159] netlink_rcv_skb+0x15a/0x430 [ 1959.882918][T12159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1959.889868][T12159] ? netlink_ack+0xa10/0xa10 [ 1959.894488][T12159] genl_rcv+0x24/0x40 [ 1959.898634][T12159] netlink_unicast+0x533/0x7d0 [ 1959.903423][T12159] ? netlink_attachskb+0x810/0x810 [ 1959.908553][T12159] ? __phys_addr_symbol+0x2c/0x70 [ 1959.913592][T12159] ? __check_object_size+0x171/0x3e4 [ 1959.918906][T12159] netlink_sendmsg+0x856/0xd90 [ 1959.923707][T12159] ? netlink_unicast+0x7d0/0x7d0 [ 1959.928670][T12159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1959.933977][T12159] ? netlink_unicast+0x7d0/0x7d0 [ 1959.938929][T12159] sock_sendmsg+0xcf/0x120 [ 1959.943360][T12159] ____sys_sendmsg+0x6e8/0x810 [ 1959.948144][T12159] ? kernel_sendmsg+0x50/0x50 [ 1959.952830][T12159] ? do_recvmmsg+0x6d0/0x6d0 [ 1959.957439][T12159] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1959.963438][T12159] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1959.969431][T12159] ? __lock_acquire+0xb5e/0x5570 [ 1959.974386][T12159] ___sys_sendmsg+0xf3/0x170 [ 1959.978996][T12159] ? sendmsg_copy_msghdr+0x160/0x160 [ 1959.984294][T12159] ? __fget_files+0x272/0x400 [ 1959.988989][T12159] ? lock_downgrade+0x830/0x830 [ 1959.993852][T12159] ? find_held_lock+0x2d/0x110 [ 1959.998645][T12159] ? __fget_files+0x294/0x400 [ 1960.003347][T12159] ? __fget_light+0xea/0x280 [ 1960.007958][T12159] __sys_sendmsg+0xe5/0x1b0 [ 1960.012478][T12159] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1960.017531][T12159] ? syscall_enter_from_user_mode+0x20/0x290 [ 1960.023521][T12159] ? lockdep_hardirqs_on+0x53/0x100 [ 1960.028736][T12159] do_syscall_64+0x2d/0x70 [ 1960.033167][T12159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1960.039070][T12159] RIP: 0033:0x45d5b9 [ 1960.042977][T12159] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1960.062593][T12159] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.071018][T12159] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1960.079000][T12159] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1960.087067][T12159] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1960.095050][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1960.103033][T12159] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1960.216829][T12161] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:05 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="db", 0x1}], 0x1}, 0x0) close(r0) 15:05:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xc00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 15:05:06 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="db", 0x1}], 0x1}, 0x0) close(r0) [ 1960.431586][T12177] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1960.452653][T12177] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x57}, [@call={0x64}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 15:05:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt(r0, 0x1, 0x24, &(0x7f0000000000)=""/244, &(0x7f0000000100)=0xf4) 15:05:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)) 15:05:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1961.126243][T12192] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1961.141153][T12192] CPU: 0 PID: 12192 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1961.149851][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.159918][T12192] Call Trace: [ 1961.163233][T12192] dump_stack+0x198/0x1fd [ 1961.167760][T12192] sysfs_warn_dup.cold+0x1c/0x2d [ 1961.172722][T12192] sysfs_do_create_link_sd+0x11e/0x140 [ 1961.178213][T12192] sysfs_create_link+0x5f/0xc0 [ 1961.182997][T12192] device_add+0x6ff/0x1c40 [ 1961.188054][T12192] ? devlink_add_symlinks+0x450/0x450 [ 1961.193542][T12192] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1961.199547][T12192] wiphy_register+0x1d66/0x2850 [ 1961.204498][T12192] ? wiphy_unregister+0xc10/0xc10 [ 1961.209557][T12192] ? generic_xdp_install+0x700/0x700 [ 1961.214869][T12192] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1961.220957][T12192] ieee80211_register_hw+0x22c9/0x39a0 [ 1961.226449][T12192] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1961.231832][T12192] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1961.237744][T12192] ? lock_downgrade+0x830/0x830 [ 1961.242613][T12192] ? lock_is_held_type+0xbb/0xf0 [ 1961.247567][T12192] ? memset+0x20/0x40 [ 1961.251566][T12192] ? __hrtimer_init+0x12c/0x260 [ 1961.256434][T12192] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1961.262190][T12192] ? hwsim_virtio_rx_work+0x350/0x350 [ 1961.267579][T12192] ? memcpy+0x39/0x60 [ 1961.271586][T12192] hwsim_new_radio_nl+0x93e/0xf8c [ 1961.276618][T12192] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1961.282509][T12192] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1961.289447][T12192] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1961.296297][T12192] genl_rcv_msg+0x61d/0x980 [ 1961.300796][T12192] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1961.307880][T12192] ? lock_release+0x8f0/0x8f0 [ 1961.312557][T12192] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1961.317855][T12192] netlink_rcv_skb+0x15a/0x430 [ 1961.322622][T12192] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1961.329562][T12192] ? netlink_ack+0xa10/0xa10 [ 1961.334161][T12192] genl_rcv+0x24/0x40 [ 1961.338133][T12192] netlink_unicast+0x533/0x7d0 [ 1961.342887][T12192] ? netlink_attachskb+0x810/0x810 [ 1961.347999][T12192] ? __phys_addr_symbol+0x2c/0x70 [ 1961.353022][T12192] ? __check_object_size+0x171/0x3e4 [ 1961.358301][T12192] netlink_sendmsg+0x856/0xd90 [ 1961.363059][T12192] ? netlink_unicast+0x7d0/0x7d0 [ 1961.368002][T12192] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1961.373286][T12192] ? netlink_unicast+0x7d0/0x7d0 [ 1961.378226][T12192] sock_sendmsg+0xcf/0x120 [ 1961.382649][T12192] ____sys_sendmsg+0x6e8/0x810 [ 1961.387592][T12192] ? kernel_sendmsg+0x50/0x50 [ 1961.392398][T12192] ? do_recvmmsg+0x6d0/0x6d0 [ 1961.397032][T12192] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1961.403033][T12192] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1961.409074][T12192] ? __lock_acquire+0xb5e/0x5570 [ 1961.414030][T12192] ___sys_sendmsg+0xf3/0x170 [ 1961.418841][T12192] ? sendmsg_copy_msghdr+0x160/0x160 [ 1961.424187][T12192] ? __fget_files+0x272/0x400 [ 1961.428868][T12192] ? lock_downgrade+0x830/0x830 [ 1961.433725][T12192] ? find_held_lock+0x2d/0x110 [ 1961.438500][T12192] ? __fget_files+0x294/0x400 [ 1961.443172][T12192] ? __fget_light+0xea/0x280 [ 1961.447882][T12192] __sys_sendmsg+0xe5/0x1b0 [ 1961.452402][T12192] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1961.457444][T12192] ? syscall_enter_from_user_mode+0x20/0x290 [ 1961.463691][T12192] ? lockdep_hardirqs_on+0x53/0x100 [ 1961.468902][T12192] do_syscall_64+0x2d/0x70 [ 1961.473332][T12192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1961.479221][T12192] RIP: 0033:0x45d5b9 [ 1961.483193][T12192] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1961.502786][T12192] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1961.511184][T12192] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1961.519154][T12192] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1961.527258][T12192] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1961.535262][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1961.543231][T12192] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1961.587076][T12194] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1961.595178][T12194] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005400)=[{{&(0x7f0000001900)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffff}, 0x1c, 0x0}}], 0x2, 0x0) 15:05:07 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22901b30677c8100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000008009"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "89fda6e87678b76f"}}, 0x48}}, 0x0) 15:05:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f00000000c0)) 15:05:07 executing program 4: r0 = socket$inet(0x2, 0x100000000805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@prinfo={0x14, 0x84, 0x5, {0x20}}, @prinfo={0x14, 0x84, 0x5, {0x70}}], 0x28}], 0x1, 0x0) 15:05:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xd00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfe08) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3}, 0x0) [ 1961.985712][T12230] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1962.039607][T12230] CPU: 1 PID: 12230 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1962.048314][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.058379][T12230] Call Trace: [ 1962.061688][T12230] dump_stack+0x198/0x1fd [ 1962.066046][T12230] sysfs_warn_dup.cold+0x1c/0x2d [ 1962.071007][T12230] sysfs_do_create_link_sd+0x11e/0x140 [ 1962.076492][T12230] sysfs_create_link+0x5f/0xc0 [ 1962.081272][T12230] device_add+0x6ff/0x1c40 [ 1962.085711][T12230] ? devlink_add_symlinks+0x450/0x450 [ 1962.091102][T12230] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1962.097109][T12230] wiphy_register+0x1d66/0x2850 [ 1962.101992][T12230] ? wiphy_unregister+0xc10/0xc10 [ 1962.107033][T12230] ? generic_xdp_install+0x700/0x700 [ 1962.112344][T12230] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1962.118427][T12230] ieee80211_register_hw+0x22c9/0x39a0 [ 1962.123920][T12230] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1962.129303][T12230] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1962.135301][T12230] ? lock_downgrade+0x830/0x830 [ 1962.140163][T12230] ? lock_is_held_type+0xbb/0xf0 [ 1962.145112][T12230] ? memset+0x20/0x40 [ 1962.149105][T12230] ? __hrtimer_init+0x12c/0x260 [ 1962.153978][T12230] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1962.159731][T12230] ? hwsim_virtio_rx_work+0x350/0x350 [ 1962.165116][T12230] ? memcpy+0x39/0x60 [ 1962.169116][T12230] hwsim_new_radio_nl+0x93e/0xf8c [ 1962.174167][T12230] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1962.180085][T12230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1962.187027][T12230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1962.193887][T12230] genl_rcv_msg+0x61d/0x980 [ 1962.198413][T12230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1962.205550][T12230] ? lock_release+0x8f0/0x8f0 [ 1962.210321][T12230] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1962.215621][T12230] netlink_rcv_skb+0x15a/0x430 [ 1962.220397][T12230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1962.227343][T12230] ? netlink_ack+0xa10/0xa10 [ 1962.231957][T12230] genl_rcv+0x24/0x40 [ 1962.235949][T12230] netlink_unicast+0x533/0x7d0 [ 1962.240733][T12230] ? netlink_attachskb+0x810/0x810 [ 1962.245964][T12230] ? __phys_addr_symbol+0x2c/0x70 [ 1962.251178][T12230] ? __check_object_size+0x171/0x3e4 [ 1962.256494][T12230] netlink_sendmsg+0x856/0xd90 [ 1962.261280][T12230] ? netlink_unicast+0x7d0/0x7d0 [ 1962.266415][T12230] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1962.271710][T12230] ? netlink_unicast+0x7d0/0x7d0 [ 1962.276786][T12230] sock_sendmsg+0xcf/0x120 [ 1962.281334][T12230] ____sys_sendmsg+0x6e8/0x810 [ 1962.286120][T12230] ? kernel_sendmsg+0x50/0x50 [ 1962.290809][T12230] ? do_recvmmsg+0x6d0/0x6d0 [ 1962.295417][T12230] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1962.301414][T12230] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1962.307406][T12230] ? __lock_acquire+0xb5e/0x5570 [ 1962.312356][T12230] ___sys_sendmsg+0xf3/0x170 [ 1962.316964][T12230] ? sendmsg_copy_msghdr+0x160/0x160 [ 1962.322259][T12230] ? __fget_files+0x272/0x400 [ 1962.326952][T12230] ? lock_downgrade+0x830/0x830 [ 1962.331810][T12230] ? find_held_lock+0x2d/0x110 [ 1962.336603][T12230] ? __fget_files+0x294/0x400 [ 1962.341303][T12230] ? __fget_light+0xea/0x280 [ 1962.345914][T12230] __sys_sendmsg+0xe5/0x1b0 [ 1962.350426][T12230] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1962.355476][T12230] ? syscall_enter_from_user_mode+0x20/0x290 [ 1962.361473][T12230] ? lockdep_hardirqs_on+0x53/0x100 [ 1962.366686][T12230] do_syscall_64+0x2d/0x70 [ 1962.371111][T12230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1962.377009][T12230] RIP: 0033:0x45d5b9 [ 1962.380915][T12230] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1962.400524][T12230] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.408940][T12230] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1962.416919][T12230] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1962.424893][T12230] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1962.432867][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3d, 0x0, "a3cc25cd8b71fce55c57f9175e48ffc428397f4a9dbd18410dfb81c120bfd02561190478d6fbfdc53ddf937aaf10b37198d6b03d74d942046c39507f84990c0678099971f64ac90a954914b81f9c1ecb"}, 0xd8) syz_emit_ethernet(0x8a, &(0x7f0000001880)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x54, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "cf317901c738b823619bc18f06ead949"}, @mss={0x2, 0x4}, @md5sig={0x13, 0x12, "9c8651100c69818a6e5813a85d730de8"}, @mptcp=@ack={0x1e, 0xb, 0x0, 0x4, "a6acbba1a9cc2a"}, @sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 15:05:08 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) [ 1962.440843][T12230] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000038000505d25a80648c63940d0224fc6b10000a400a000048053582c137153e370348018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 15:05:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x4, 0x4, 0x3}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00'}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 15:05:08 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) 15:05:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xd29}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1962.671663][T12250] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1962.704605][T12250] netlink: 23558 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.841336][T12257] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1962.883838][T12257] CPU: 0 PID: 12257 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1962.892570][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.902626][T12257] Call Trace: [ 1962.905928][T12257] dump_stack+0x198/0x1fd [ 1962.910276][T12257] sysfs_warn_dup.cold+0x1c/0x2d [ 1962.915266][T12257] sysfs_do_create_link_sd+0x11e/0x140 [ 1962.920726][T12257] sysfs_create_link+0x5f/0xc0 [ 1962.925486][T12257] device_add+0x6ff/0x1c40 [ 1962.929916][T12257] ? devlink_add_symlinks+0x450/0x450 [ 1962.935296][T12257] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1962.941290][T12257] wiphy_register+0x1d66/0x2850 [ 1962.946156][T12257] ? wiphy_unregister+0xc10/0xc10 [ 1962.951208][T12257] ? generic_xdp_install+0x700/0x700 [ 1962.956512][T12257] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1962.962586][T12257] ieee80211_register_hw+0x22c9/0x39a0 [ 1962.968066][T12257] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1962.973437][T12257] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1962.979339][T12257] ? lock_downgrade+0x830/0x830 [ 1962.984192][T12257] ? lock_is_held_type+0xbb/0xf0 [ 1962.989142][T12257] ? memset+0x20/0x40 [ 1962.993131][T12257] ? __hrtimer_init+0x12c/0x260 [ 1962.997989][T12257] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1963.003730][T12257] ? hwsim_virtio_rx_work+0x350/0x350 [ 1963.009117][T12257] ? memcpy+0x39/0x60 [ 1963.013109][T12257] hwsim_new_radio_nl+0x93e/0xf8c [ 1963.018143][T12257] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1963.024062][T12257] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1963.030993][T12257] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1963.037847][T12257] genl_rcv_msg+0x61d/0x980 [ 1963.042360][T12257] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1963.049308][T12257] ? lock_release+0x8f0/0x8f0 [ 1963.053981][T12257] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1963.059275][T12257] netlink_rcv_skb+0x15a/0x430 [ 1963.064041][T12257] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1963.070980][T12257] ? netlink_ack+0xa10/0xa10 [ 1963.075761][T12257] genl_rcv+0x24/0x40 [ 1963.079744][T12257] netlink_unicast+0x533/0x7d0 [ 1963.084526][T12257] ? netlink_attachskb+0x810/0x810 [ 1963.089645][T12257] ? __phys_addr_symbol+0x2c/0x70 [ 1963.094670][T12257] ? __check_object_size+0x171/0x3e4 [ 1963.099964][T12257] netlink_sendmsg+0x856/0xd90 [ 1963.104739][T12257] ? netlink_unicast+0x7d0/0x7d0 [ 1963.109686][T12257] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1963.115091][T12257] ? netlink_unicast+0x7d0/0x7d0 [ 1963.120035][T12257] sock_sendmsg+0xcf/0x120 [ 1963.124455][T12257] ____sys_sendmsg+0x6e8/0x810 [ 1963.129225][T12257] ? kernel_sendmsg+0x50/0x50 [ 1963.133901][T12257] ? do_recvmmsg+0x6d0/0x6d0 [ 1963.138505][T12257] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1963.144488][T12257] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1963.150468][T12257] ? __lock_acquire+0xb5e/0x5570 [ 1963.155410][T12257] ___sys_sendmsg+0xf3/0x170 [ 1963.160006][T12257] ? sendmsg_copy_msghdr+0x160/0x160 [ 1963.165294][T12257] ? __fget_files+0x272/0x400 [ 1963.169977][T12257] ? lock_downgrade+0x830/0x830 [ 1963.174829][T12257] ? find_held_lock+0x2d/0x110 [ 1963.179612][T12257] ? __fget_files+0x294/0x400 [ 1963.184300][T12257] ? __fget_light+0xea/0x280 [ 1963.188917][T12257] __sys_sendmsg+0xe5/0x1b0 [ 1963.193420][T12257] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1963.198459][T12257] ? syscall_enter_from_user_mode+0x20/0x290 [ 1963.204441][T12257] ? lockdep_hardirqs_on+0x53/0x100 [ 1963.209641][T12257] do_syscall_64+0x2d/0x70 [ 1963.214060][T12257] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1963.219951][T12257] RIP: 0033:0x45d5b9 [ 1963.223845][T12257] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1963.243444][T12257] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.251858][T12257] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1963.259826][T12257] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1963.267886][T12257] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1963.275862][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1963.283836][T12257] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:09 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @broadcast=[0x0], @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0xc, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, [0x0, 0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "6be8"}, {0x8, 0x88c0}}}}}}}, 0x0) 15:05:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c00000000500002004c000200480001000900010067616374000000001c00028018000200000000000000000000000020"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 15:05:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10) 15:05:09 executing program 2: syz_init_net_socket$llc(0xffffffff00000009, 0x0, 0x0) 15:05:09 executing program 4: syz_emit_ethernet(0x76, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00010b", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @private0, [@hopopts={0x0, 0x0, [], [@pad1, @padn]}]}}}}}}}, 0x0) 15:05:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xe00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1964.213781][T12284] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1964.249372][T12284] CPU: 0 PID: 12284 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 15:05:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) [ 1964.258077][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.268158][T12284] Call Trace: [ 1964.271476][T12284] dump_stack+0x198/0x1fd [ 1964.275825][T12284] sysfs_warn_dup.cold+0x1c/0x2d [ 1964.280774][T12284] sysfs_do_create_link_sd+0x11e/0x140 [ 1964.286247][T12284] sysfs_create_link+0x5f/0xc0 [ 1964.291017][T12284] device_add+0x6ff/0x1c40 [ 1964.295442][T12284] ? devlink_add_symlinks+0x450/0x450 [ 1964.300827][T12284] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1964.306823][T12284] wiphy_register+0x1d66/0x2850 [ 1964.311698][T12284] ? wiphy_unregister+0xc10/0xc10 [ 1964.316751][T12284] ? generic_xdp_install+0x700/0x700 [ 1964.322054][T12284] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1964.328141][T12284] ieee80211_register_hw+0x22c9/0x39a0 [ 1964.333622][T12284] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1964.338999][T12284] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1964.344905][T12284] ? lock_downgrade+0x830/0x830 [ 1964.349766][T12284] ? lock_is_held_type+0xbb/0xf0 [ 1964.354713][T12284] ? memset+0x20/0x40 [ 1964.358710][T12284] ? __hrtimer_init+0x12c/0x260 [ 1964.363578][T12284] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1964.369326][T12284] ? hwsim_virtio_rx_work+0x350/0x350 [ 1964.374709][T12284] ? memcpy+0x39/0x60 [ 1964.378708][T12284] hwsim_new_radio_nl+0x93e/0xf8c [ 1964.383754][T12284] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1964.389668][T12284] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1964.396605][T12284] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1964.403462][T12284] genl_rcv_msg+0x61d/0x980 [ 1964.407981][T12284] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1964.414933][T12284] ? lock_release+0x8f0/0x8f0 [ 1964.419610][T12284] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1964.424992][T12284] netlink_rcv_skb+0x15a/0x430 [ 1964.429759][T12284] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1964.436716][T12284] ? netlink_ack+0xa10/0xa10 [ 1964.441330][T12284] genl_rcv+0x24/0x40 [ 1964.445318][T12284] netlink_unicast+0x533/0x7d0 [ 1964.450094][T12284] ? netlink_attachskb+0x810/0x810 [ 1964.455220][T12284] ? __phys_addr_symbol+0x2c/0x70 [ 1964.460246][T12284] ? __check_object_size+0x171/0x3e4 [ 1964.465542][T12284] netlink_sendmsg+0x856/0xd90 [ 1964.470320][T12284] ? netlink_unicast+0x7d0/0x7d0 [ 1964.475272][T12284] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1964.480564][T12284] ? netlink_unicast+0x7d0/0x7d0 [ 1964.485506][T12284] sock_sendmsg+0xcf/0x120 [ 1964.489924][T12284] ____sys_sendmsg+0x6e8/0x810 [ 1964.494690][T12284] ? kernel_sendmsg+0x50/0x50 [ 1964.499359][T12284] ? do_recvmmsg+0x6d0/0x6d0 [ 1964.503959][T12284] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1964.509942][T12284] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1964.515912][T12284] ? __lock_acquire+0xb5e/0x5570 [ 1964.520845][T12284] ___sys_sendmsg+0xf3/0x170 [ 1964.525435][T12284] ? sendmsg_copy_msghdr+0x160/0x160 [ 1964.530728][T12284] ? __fget_files+0x272/0x400 [ 1964.535505][T12284] ? lock_downgrade+0x830/0x830 [ 1964.540359][T12284] ? find_held_lock+0x2d/0x110 [ 1964.545124][T12284] ? __fget_files+0x294/0x400 [ 1964.549791][T12284] ? __fget_light+0xea/0x280 [ 1964.554375][T12284] __sys_sendmsg+0xe5/0x1b0 [ 1964.558885][T12284] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1964.563910][T12284] ? syscall_enter_from_user_mode+0x20/0x290 [ 1964.569882][T12284] ? lockdep_hardirqs_on+0x53/0x100 [ 1964.575073][T12284] do_syscall_64+0x2d/0x70 [ 1964.579485][T12284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1964.585374][T12284] RIP: 0033:0x45d5b9 [ 1964.589272][T12284] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:05:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x0, 0x0, 0xd0e0000, 0x108, 0x100, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1=0xe0000c00, @multicast1, 0x0, 0x0, 'veth0_to_team\x00', 'gretap0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@helper={{0x44, 'helper\x00'}, {0x0, 'syz0\x00'}}, @common=@addrtype={{0x2c, 'addrtype\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xfffd}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c8) 15:05:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000003700)=0x18) 15:05:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "9534a00de8df3c48d9bbce33a906690e1076f7848561d07b91747b6fb5aae655", "403da5240880fc8ea8a96de57a37268b07fd6fddea8d6b39e636fe0feb14b673"}}}]}, 0x268}}, 0x0) [ 1964.608878][T12284] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1964.617286][T12284] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1964.625266][T12284] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1964.633283][T12284] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1964.641255][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1964.649287][T12284] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1964.700726][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xf00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1964.757159][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1964.790991][T12295] bond0: (slave bond0): Error: Device is in use and cannot be enslaved 15:05:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x727, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendfile(r2, r1, 0x0, 0x10000c000) [ 1964.814269][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f0000000880)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@dontfrag={{0x10}}, @tclass={{0x10}}], 0x20}}], 0x1, 0x0) [ 1964.893478][T12313] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1964.931311][T12313] CPU: 0 PID: 12313 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1964.940007][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.950063][T12313] Call Trace: [ 1964.953366][T12313] dump_stack+0x198/0x1fd [ 1964.957713][T12313] sysfs_warn_dup.cold+0x1c/0x2d [ 1964.962664][T12313] sysfs_do_create_link_sd+0x11e/0x140 [ 1964.968133][T12313] sysfs_create_link+0x5f/0xc0 [ 1964.972908][T12313] device_add+0x6ff/0x1c40 [ 1964.977337][T12313] ? devlink_add_symlinks+0x450/0x450 [ 1964.982722][T12313] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1964.988718][T12313] wiphy_register+0x1d66/0x2850 [ 1964.993590][T12313] ? wiphy_unregister+0xc10/0xc10 [ 1964.998630][T12313] ? generic_xdp_install+0x700/0x700 [ 1965.003931][T12313] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1965.010006][T12313] ieee80211_register_hw+0x22c9/0x39a0 [ 1965.015489][T12313] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1965.020864][T12313] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1965.026767][T12313] ? lock_downgrade+0x830/0x830 [ 1965.031637][T12313] ? lock_is_held_type+0xbb/0xf0 [ 1965.036582][T12313] ? memset+0x20/0x40 [ 1965.040572][T12313] ? __hrtimer_init+0x12c/0x260 [ 1965.045435][T12313] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1965.051187][T12313] ? hwsim_virtio_rx_work+0x350/0x350 [ 1965.056568][T12313] ? memcpy+0x39/0x60 [ 1965.060565][T12313] hwsim_new_radio_nl+0x93e/0xf8c [ 1965.065601][T12313] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1965.071539][T12313] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1965.078477][T12313] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1965.085333][T12313] genl_rcv_msg+0x61d/0x980 [ 1965.089851][T12313] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1965.096806][T12313] ? lock_release+0x8f0/0x8f0 [ 1965.101480][T12313] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1965.106778][T12313] netlink_rcv_skb+0x15a/0x430 [ 1965.111552][T12313] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1965.118497][T12313] ? netlink_ack+0xa10/0xa10 [ 1965.123104][T12313] genl_rcv+0x24/0x40 [ 1965.127092][T12313] netlink_unicast+0x533/0x7d0 [ 1965.131875][T12313] ? netlink_attachskb+0x810/0x810 [ 1965.136996][T12313] ? __phys_addr_symbol+0x2c/0x70 15:05:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080000000d0001006d61746368616c6c00000000500002004c000200480001000900010067616374000000001c00028018000200000000000000000000000020"], 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 15:05:10 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x0, 0x148, 0x90, 0x148, 0x160, 0x240, 0x240, 0x160, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'geneve0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'ipvlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0xaa, 0x98}, {0x28}}}}, 0x267) [ 1965.142022][T12313] ? __check_object_size+0x171/0x3e4 [ 1965.147316][T12313] netlink_sendmsg+0x856/0xd90 [ 1965.152098][T12313] ? netlink_unicast+0x7d0/0x7d0 [ 1965.157049][T12313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1965.162340][T12313] ? netlink_unicast+0x7d0/0x7d0 [ 1965.167275][T12313] sock_sendmsg+0xcf/0x120 [ 1965.171695][T12313] ____sys_sendmsg+0x6e8/0x810 [ 1965.176468][T12313] ? kernel_sendmsg+0x50/0x50 [ 1965.181180][T12313] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.185783][T12313] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1965.191773][T12313] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1965.197755][T12313] ? __lock_acquire+0xb5e/0x5570 [ 1965.202703][T12313] ___sys_sendmsg+0xf3/0x170 [ 1965.207301][T12313] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.212592][T12313] ? __fget_files+0x272/0x400 [ 1965.217277][T12313] ? lock_downgrade+0x830/0x830 [ 1965.222127][T12313] ? find_held_lock+0x2d/0x110 [ 1965.226911][T12313] ? __fget_files+0x294/0x400 [ 1965.231603][T12313] ? __fget_light+0xea/0x280 [ 1965.236208][T12313] __sys_sendmsg+0xe5/0x1b0 [ 1965.240715][T12313] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1965.245762][T12313] ? syscall_enter_from_user_mode+0x20/0x290 [ 1965.251746][T12313] ? lockdep_hardirqs_on+0x53/0x100 [ 1965.256950][T12313] do_syscall_64+0x2d/0x70 [ 1965.261372][T12313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1965.267272][T12313] RIP: 0033:0x45d5b9 [ 1965.271260][T12313] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:05:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect(r0, &(0x7f0000000140)=@generic={0x0, "0aac3780e80306026f0f72953bd55097c98633a67eba5bfe0fe905dc54d7a8952cd73c363b90aaf3d36fd153833013c8a6b3943b14e98506b1090e82258a73ef23b3939a5280c1bdab5a62b0c03b8cc03e6e0075100cadc4a114c3826a31abf8f952f25e0e0cac57a8498ce302229d1ca082b713cbc0e128ab405f4a0564"}, 0x80) 15:05:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) [ 1965.290862][T12313] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1965.299275][T12313] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1965.307249][T12313] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1965.315280][T12313] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1965.323254][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1965.331226][T12313] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1965.354451][ T29] audit: type=1804 audit(1599663911.010:670): pid=12326 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir309119324/syzkaller.6fOdSR/2506/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 15:05:11 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:05:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x3}}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x6c}}, 0x0) 15:05:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c000000150081ae08060c0f006b7f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf242ab0f8381ad6e74703c48f939a5a7378bc7a581eb886a5e54e8ff51700", 0x4c}], 0x1}, 0x0) 15:05:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1100}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1965.655239][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000002400697c980900000000000000002000", @ANYRES32=r1, @ANYBLOB="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"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 1965.740993][T12337] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1965.782188][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:11 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="eb5f09dd62c0ce90855ecff064655537474022566a29a930e31a4ce54f1eddee2020290844766e207309b850f4635f4cc698b247486ebb31a52ee8162375737fcf859f7ac42f", 0x46}, {&(0x7f0000001980)="059b1984927c7207c4a879d632f0b3fb5bf733708d6a324896fc54d2eecd6945bad61f7f5c2fe895553f12ecce762a066f21f2b96e8109724a347ae290b287cf8dba786c31f562058f44ba795e71c16f27f161", 0x53}], 0x2}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 1965.831137][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1965.856328][T12363] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1965.895465][T12363] CPU: 0 PID: 12363 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1965.904165][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.914229][T12363] Call Trace: [ 1965.917534][T12363] dump_stack+0x198/0x1fd [ 1965.921877][T12363] sysfs_warn_dup.cold+0x1c/0x2d [ 1965.926823][T12363] sysfs_do_create_link_sd+0x11e/0x140 [ 1965.932295][T12363] sysfs_create_link+0x5f/0xc0 [ 1965.937068][T12363] device_add+0x6ff/0x1c40 [ 1965.941498][T12363] ? devlink_add_symlinks+0x450/0x450 [ 1965.946881][T12363] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1965.952873][T12363] wiphy_register+0x1d66/0x2850 [ 1965.957748][T12363] ? wiphy_unregister+0xc10/0xc10 [ 1965.962784][T12363] ? generic_xdp_install+0x700/0x700 [ 1965.968081][T12363] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1965.974164][T12363] ieee80211_register_hw+0x22c9/0x39a0 [ 1965.979655][T12363] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1965.985029][T12363] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1965.990934][T12363] ? lock_downgrade+0x830/0x830 [ 1965.995788][T12363] ? lock_is_held_type+0xbb/0xf0 [ 1966.000733][T12363] ? memset+0x20/0x40 [ 1966.004732][T12363] ? __hrtimer_init+0x12c/0x260 [ 1966.009596][T12363] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1966.015341][T12363] ? hwsim_virtio_rx_work+0x350/0x350 [ 1966.020725][T12363] ? memcpy+0x39/0x60 [ 1966.024720][T12363] hwsim_new_radio_nl+0x93e/0xf8c [ 1966.029754][T12363] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1966.035663][T12363] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1966.042606][T12363] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1966.049461][T12363] genl_rcv_msg+0x61d/0x980 [ 1966.053981][T12363] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1966.060933][T12363] ? lock_release+0x8f0/0x8f0 [ 1966.065612][T12363] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1966.070910][T12363] netlink_rcv_skb+0x15a/0x430 [ 1966.075679][T12363] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1966.082619][T12363] ? netlink_ack+0xa10/0xa10 [ 1966.087230][T12363] genl_rcv+0x24/0x40 [ 1966.091216][T12363] netlink_unicast+0x533/0x7d0 [ 1966.095993][T12363] ? netlink_attachskb+0x810/0x810 [ 1966.101108][T12363] ? __phys_addr_symbol+0x2c/0x70 [ 1966.106135][T12363] ? __check_object_size+0x171/0x3e4 [ 1966.111432][T12363] netlink_sendmsg+0x856/0xd90 [ 1966.116340][T12363] ? netlink_unicast+0x7d0/0x7d0 [ 1966.121319][T12363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1966.126615][T12363] ? netlink_unicast+0x7d0/0x7d0 [ 1966.131556][T12363] sock_sendmsg+0xcf/0x120 [ 1966.135978][T12363] ____sys_sendmsg+0x6e8/0x810 [ 1966.140752][T12363] ? kernel_sendmsg+0x50/0x50 [ 1966.145430][T12363] ? do_recvmmsg+0x6d0/0x6d0 [ 1966.150032][T12363] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1966.156022][T12363] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1966.161999][T12363] ? __lock_acquire+0xb5e/0x5570 [ 1966.166941][T12363] ___sys_sendmsg+0xf3/0x170 [ 1966.171537][T12363] ? sendmsg_copy_msghdr+0x160/0x160 [ 1966.176831][T12363] ? __fget_files+0x272/0x400 [ 1966.181517][T12363] ? lock_downgrade+0x830/0x830 [ 1966.186370][T12363] ? find_held_lock+0x2d/0x110 [ 1966.191161][T12363] ? __fget_files+0x294/0x400 [ 1966.195850][T12363] ? __fget_light+0xea/0x280 [ 1966.196806][ T29] audit: type=1804 audit(1599663911.850:671): pid=12328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir309119324/syzkaller.6fOdSR/2506/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 [ 1966.200441][T12363] __sys_sendmsg+0xe5/0x1b0 [ 1966.229393][T12363] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1966.234438][T12363] ? syscall_enter_from_user_mode+0x20/0x290 [ 1966.240422][T12363] ? lockdep_hardirqs_on+0x53/0x100 [ 1966.245630][T12363] do_syscall_64+0x2d/0x70 [ 1966.250060][T12363] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1966.255955][T12363] RIP: 0033:0x45d5b9 [ 1966.259484][ T29] audit: type=1804 audit(1599663911.890:672): pid=12374 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir309119324/syzkaller.6fOdSR/2506/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 [ 1966.259850][T12363] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1966.304504][T12363] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1966.312918][T12363] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1966.320893][T12363] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1966.328867][T12363] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1966.336835][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:12 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)) 15:05:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x88, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 15:05:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 15:05:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 1966.344803][T12363] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:05:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b6ea65038e7e889a90fa4043e5d19275525a4d923c35fd778d04ccd738545eb2192da8f7dcfa0a247bbcf99ba5636e27a4a4b8a3c04e3a9b2edc6a6d98a82a5d94d88ae229151bcf67e73fd916006bbab4467e32942a67518b73211db10f2e0df4ed6b49fc2ee20c921005f6b00a4db8a6fe7fed010b95bf784fdff92fcdf50e7c826197cabb770c5c69f006fc2d0200132a3959459ace17117b7d21a0cd0ff870a4af90b049512bac3c7b4b217d9ddf00"/191, @ANYRES16], 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10012, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000015, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 15:05:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000200)=@framed={{0x2b, 0x8}, [@call={0x85, 0x0, 0x3b00}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:05:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@mcast1, 0x0, 0x1}, 0x20) [ 1966.636605][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:05:12 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="6e9c390194f5d97a615b1e8cefa44af02fee96f6ee1969a268cf491e01ac2d3bc5b81f0314756d73e2a5df40fca3d18fc26d27794b4956f0b88211c5ed6f64c5d15fb0761f2067ffd67769af4d4de512a36580ffe11e23034212bb"], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf6, 0x0, &(0x7f0000000080)) [ 1966.774866][T12365] veth1_vlan: Caught tx_queue_len zero misconfig [ 1966.782675][T12365] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1200}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1966.821870][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1966.917578][T12365] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1966.948917][T12416] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1967.001027][T12416] CPU: 1 PID: 12416 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1967.010768][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.020823][T12416] Call Trace: [ 1967.024123][T12416] dump_stack+0x198/0x1fd [ 1967.028472][T12416] sysfs_warn_dup.cold+0x1c/0x2d [ 1967.033428][T12416] sysfs_do_create_link_sd+0x11e/0x140 [ 1967.038897][T12416] sysfs_create_link+0x5f/0xc0 [ 1967.043668][T12416] device_add+0x6ff/0x1c40 [ 1967.048095][T12416] ? devlink_add_symlinks+0x450/0x450 [ 1967.053509][T12416] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1967.059504][T12416] wiphy_register+0x1d66/0x2850 [ 1967.064373][T12416] ? wiphy_unregister+0xc10/0xc10 [ 1967.069405][T12416] ? generic_xdp_install+0x700/0x700 [ 1967.074701][T12416] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1967.080777][T12416] ieee80211_register_hw+0x22c9/0x39a0 [ 1967.086258][T12416] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1967.091649][T12416] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1967.097555][T12416] ? lock_downgrade+0x830/0x830 [ 1967.102408][T12416] ? lock_is_held_type+0xbb/0xf0 [ 1967.107352][T12416] ? memset+0x20/0x40 [ 1967.111339][T12416] ? __hrtimer_init+0x12c/0x260 [ 1967.116336][T12416] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1967.122080][T12416] ? hwsim_virtio_rx_work+0x350/0x350 [ 1967.127466][T12416] ? memcpy+0x39/0x60 [ 1967.131461][T12416] hwsim_new_radio_nl+0x93e/0xf8c [ 1967.136507][T12416] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1967.142417][T12416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1967.149357][T12416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1967.156487][T12416] genl_rcv_msg+0x61d/0x980 [ 1967.161098][T12416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1967.168049][T12416] ? lock_release+0x8f0/0x8f0 [ 1967.172728][T12416] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1967.178021][T12416] netlink_rcv_skb+0x15a/0x430 [ 1967.182789][T12416] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1967.189741][T12416] ? netlink_ack+0xa10/0xa10 [ 1967.194355][T12416] genl_rcv+0x24/0x40 [ 1967.198343][T12416] netlink_unicast+0x533/0x7d0 [ 1967.203120][T12416] ? netlink_attachskb+0x810/0x810 [ 1967.208236][T12416] ? __phys_addr_symbol+0x2c/0x70 [ 1967.213260][T12416] ? __check_object_size+0x171/0x3e4 [ 1967.218553][T12416] netlink_sendmsg+0x856/0xd90 [ 1967.223326][T12416] ? netlink_unicast+0x7d0/0x7d0 [ 1967.228272][T12416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1967.233558][T12416] ? netlink_unicast+0x7d0/0x7d0 [ 1967.238588][T12416] sock_sendmsg+0xcf/0x120 [ 1967.243011][T12416] ____sys_sendmsg+0x6e8/0x810 [ 1967.247786][T12416] ? kernel_sendmsg+0x50/0x50 [ 1967.252470][T12416] ? do_recvmmsg+0x6d0/0x6d0 [ 1967.257072][T12416] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1967.263063][T12416] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1967.269045][T12416] ? __lock_acquire+0xb5e/0x5570 [ 1967.273994][T12416] ___sys_sendmsg+0xf3/0x170 [ 1967.278594][T12416] ? sendmsg_copy_msghdr+0x160/0x160 [ 1967.283891][T12416] ? __fget_files+0x272/0x400 [ 1967.288580][T12416] ? lock_downgrade+0x830/0x830 [ 1967.293432][T12416] ? find_held_lock+0x2d/0x110 [ 1967.298219][T12416] ? __fget_files+0x294/0x400 [ 1967.302907][T12416] ? __fget_light+0xea/0x280 [ 1967.307510][T12416] __sys_sendmsg+0xe5/0x1b0 [ 1967.312019][T12416] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1967.317108][T12416] ? syscall_enter_from_user_mode+0x20/0x290 [ 1967.323093][T12416] ? lockdep_hardirqs_on+0x53/0x100 [ 1967.328298][T12416] do_syscall_64+0x2d/0x70 [ 1967.332725][T12416] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1967.338615][T12416] RIP: 0033:0x45d5b9 [ 1967.342511][T12416] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1967.362113][T12416] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1967.370526][T12416] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1967.378500][T12416] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1967.386476][T12416] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1967.394450][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:13 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="6e9c390194f5d97a615b1e8cefa44af02fee96f6ee1969a268cf491e01ac2d3bc5b81f0314756d73e2a5df40fca3d18fc26d27794b4956f0b88211c5ed6f64c5d15fb0761f2067ffd67769af4d4de512a36580ffe11e23034212bb"], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf6, 0x0, &(0x7f0000000080)) 15:05:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@authinfo={0x10}, @init={0x14}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4}, @authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, [], 0x0}}, @prinfo={0x14}], 0xac}, 0x0) 15:05:13 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="130000004200fd03eff904f8ffff7c79dfffff023600002e0ff6f1e10d6c330eee3955459c5b0d2a7abd1f6e5a6fbc70d37fd62c98e84cace92b6723b7ea7e7adb4f1d1acf8df5d4fe951df285e73fd69ff3f0e4442f4c7d315e9500611396d30d5efa55876e606580169df1c64d96ea2a51267ee43851921a03f139f9ca3540002261cdc1b4df7be4ff11ae9602dd15c9ef653604058800a9915aca260c4c3b18f0200e7b877207304b9fcb6d6cd5c770edc7ff4af90fab521faaecad32901e8dfd2086416d69318f31e85ba69b463d58a29beff03229916bb4babef5fe1d"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 15:05:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@rr={0x7, 0x3}]}}}}}) 15:05:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110730000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 1967.402420][T12416] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:13 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5452, &(0x7f0000000000)) 15:05:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x70, 0x2, 0x6, 0x401, 0xb4060000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) 15:05:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x0, 0x6c00000000000000}}, 0x14}}, 0x0) 15:05:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x0}}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000440)='[', 0x20000041}], 0x1}}], 0x2, 0x4000040) 15:05:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x3c}}, 0x0) 15:05:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1300}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1, 0x1, 0x201, 0x300, 0x0, {}, [@CTA_LABELS_MASK={0x4, 0x19}]}, 0x18}}, 0x0) 15:05:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 15:05:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}, 0x0) [ 1967.811830][T12459] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:05:13 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:05:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040), 0x4) [ 1967.891588][T12459] CPU: 0 PID: 12459 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1967.900296][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.910349][T12459] Call Trace: [ 1967.913652][T12459] dump_stack+0x198/0x1fd [ 1967.918004][T12459] sysfs_warn_dup.cold+0x1c/0x2d [ 1967.922953][T12459] sysfs_do_create_link_sd+0x11e/0x140 [ 1967.928429][T12459] sysfs_create_link+0x5f/0xc0 [ 1967.933204][T12459] device_add+0x6ff/0x1c40 [ 1967.937631][T12459] ? devlink_add_symlinks+0x450/0x450 [ 1967.943012][T12459] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1967.949011][T12459] wiphy_register+0x1d66/0x2850 [ 1967.953882][T12459] ? wiphy_unregister+0xc10/0xc10 [ 1967.958913][T12459] ? generic_xdp_install+0x700/0x700 [ 1967.964213][T12459] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1967.970289][T12459] ieee80211_register_hw+0x22c9/0x39a0 [ 1967.975772][T12459] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1967.981149][T12459] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1967.987056][T12459] ? lock_downgrade+0x830/0x830 [ 1967.991915][T12459] ? lock_is_held_type+0xbb/0xf0 [ 1967.996860][T12459] ? memset+0x20/0x40 [ 1968.000852][T12459] ? __hrtimer_init+0x12c/0x260 [ 1968.005714][T12459] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1968.011459][T12459] ? hwsim_virtio_rx_work+0x350/0x350 [ 1968.016843][T12459] ? memcpy+0x39/0x60 [ 1968.020833][T12459] hwsim_new_radio_nl+0x93e/0xf8c [ 1968.025869][T12459] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1968.031781][T12459] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 15:05:13 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) recvmmsg(r0, &(0x7f0000003300), 0x300, 0x2122, 0x0) 15:05:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e0000001d00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a00020003000f0000000f00060005000600", 0x2e}], 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 1968.038718][T12459] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1968.045573][T12459] genl_rcv_msg+0x61d/0x980 [ 1968.050089][T12459] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1968.057039][T12459] ? lock_release+0x8f0/0x8f0 [ 1968.061806][T12459] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1968.067106][T12459] netlink_rcv_skb+0x15a/0x430 [ 1968.071878][T12459] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1968.078822][T12459] ? netlink_ack+0xa10/0xa10 [ 1968.083435][T12459] genl_rcv+0x24/0x40 [ 1968.087425][T12459] netlink_unicast+0x533/0x7d0 15:05:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x3, "b7"}, @mss={0x5, 0x4}, @fastopen={0x22, 0x8, "2c3265ff010e"}, @mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x0, @private, 0x0, "a26c273fe1f355"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x6, "985f1dc2"}, @window={0x3, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) [ 1968.092201][T12459] ? netlink_attachskb+0x810/0x810 [ 1968.097318][T12459] ? __phys_addr_symbol+0x2c/0x70 [ 1968.102350][T12459] ? __check_object_size+0x171/0x3e4 [ 1968.107653][T12459] netlink_sendmsg+0x856/0xd90 [ 1968.112432][T12459] ? netlink_unicast+0x7d0/0x7d0 [ 1968.117383][T12459] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1968.122673][T12459] ? netlink_unicast+0x7d0/0x7d0 [ 1968.127616][T12459] sock_sendmsg+0xcf/0x120 [ 1968.132037][T12459] ____sys_sendmsg+0x6e8/0x810 [ 1968.136809][T12459] ? kernel_sendmsg+0x50/0x50 [ 1968.141492][T12459] ? do_recvmmsg+0x6d0/0x6d0 [ 1968.146108][T12459] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1968.152107][T12459] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1968.158089][T12459] ? __lock_acquire+0xb5e/0x5570 [ 1968.163041][T12459] ___sys_sendmsg+0xf3/0x170 [ 1968.167638][T12459] ? sendmsg_copy_msghdr+0x160/0x160 [ 1968.172931][T12459] ? __fget_files+0x272/0x400 [ 1968.177617][T12459] ? lock_downgrade+0x830/0x830 [ 1968.182470][T12459] ? find_held_lock+0x2d/0x110 [ 1968.187254][T12459] ? __fget_files+0x294/0x400 [ 1968.191949][T12459] ? __fget_light+0xea/0x280 [ 1968.196553][T12459] __sys_sendmsg+0xe5/0x1b0 [ 1968.201060][T12459] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1968.206103][T12459] ? syscall_enter_from_user_mode+0x20/0x290 [ 1968.212087][T12459] ? lockdep_hardirqs_on+0x53/0x100 [ 1968.217294][T12459] do_syscall_64+0x2d/0x70 [ 1968.221717][T12459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1968.227607][T12459] RIP: 0033:0x45d5b9 [ 1968.231501][T12459] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1968.251103][T12459] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1968.259517][T12459] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1968.267493][T12459] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1968.275466][T12459] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1968.283440][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15:05:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x68}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1968.291416][T12459] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x400, 0x8}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) [ 1968.787127][T12481] bridge: RTM_DELNEIGH with unconfigured vlan 6 on bridge0 [ 1968.805564][T12480] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:05:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1400}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x75}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x40, 0x6}}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x75}}, 0x0) 15:05:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 15:05:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x34}, 0x20) [ 1968.845883][T12480] CPU: 1 PID: 12480 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 [ 1968.854581][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.864635][T12480] Call Trace: [ 1968.867936][T12480] dump_stack+0x198/0x1fd [ 1968.872283][T12480] sysfs_warn_dup.cold+0x1c/0x2d [ 1968.877232][T12480] sysfs_do_create_link_sd+0x11e/0x140 [ 1968.882702][T12480] sysfs_create_link+0x5f/0xc0 [ 1968.887477][T12480] device_add+0x6ff/0x1c40 [ 1968.891903][T12480] ? devlink_add_symlinks+0x450/0x450 [ 1968.897280][T12480] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1968.903273][T12480] wiphy_register+0x1d66/0x2850 [ 1968.908149][T12480] ? wiphy_unregister+0xc10/0xc10 [ 1968.913181][T12480] ? generic_xdp_install+0x700/0x700 [ 1968.918478][T12480] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1968.924548][T12480] ieee80211_register_hw+0x22c9/0x39a0 [ 1968.930045][T12480] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1968.935415][T12480] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1968.941315][T12480] ? lock_downgrade+0x830/0x830 [ 1968.946175][T12480] ? lock_is_held_type+0xbb/0xf0 [ 1968.951106][T12480] ? memset+0x20/0x40 [ 1968.955099][T12480] ? __hrtimer_init+0x12c/0x260 [ 1968.959940][T12480] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1968.965649][T12480] ? hwsim_virtio_rx_work+0x350/0x350 [ 1968.970999][T12480] ? memcpy+0x39/0x60 [ 1968.974964][T12480] hwsim_new_radio_nl+0x93e/0xf8c [ 1968.979968][T12480] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1968.985846][T12480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1968.992754][T12480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1968.999593][T12480] genl_rcv_msg+0x61d/0x980 [ 1969.004081][T12480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1969.011082][T12480] ? lock_release+0x8f0/0x8f0 [ 1969.015750][T12480] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1969.021041][T12480] netlink_rcv_skb+0x15a/0x430 [ 1969.025803][T12480] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1969.032720][T12480] ? netlink_ack+0xa10/0xa10 [ 1969.037296][T12480] genl_rcv+0x24/0x40 [ 1969.041266][T12480] netlink_unicast+0x533/0x7d0 [ 1969.046028][T12480] ? netlink_attachskb+0x810/0x810 [ 1969.051128][T12480] ? __phys_addr_symbol+0x2c/0x70 [ 1969.056143][T12480] ? __check_object_size+0x171/0x3e4 [ 1969.061429][T12480] netlink_sendmsg+0x856/0xd90 [ 1969.066187][T12480] ? netlink_unicast+0x7d0/0x7d0 [ 1969.071109][T12480] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1969.076397][T12480] ? netlink_unicast+0x7d0/0x7d0 [ 1969.081344][T12480] sock_sendmsg+0xcf/0x120 [ 1969.085772][T12480] ____sys_sendmsg+0x6e8/0x810 [ 1969.090544][T12480] ? kernel_sendmsg+0x50/0x50 [ 1969.095273][T12480] ? do_recvmmsg+0x6d0/0x6d0 [ 1969.099849][T12480] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1969.105824][T12480] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1969.111795][T12480] ? __lock_acquire+0xb5e/0x5570 [ 1969.116775][T12480] ___sys_sendmsg+0xf3/0x170 [ 1969.121394][T12480] ? sendmsg_copy_msghdr+0x160/0x160 [ 1969.126675][T12480] ? __fget_files+0x272/0x400 [ 1969.131340][T12480] ? lock_downgrade+0x830/0x830 [ 1969.136187][T12480] ? find_held_lock+0x2d/0x110 [ 1969.140943][T12480] ? __fget_files+0x294/0x400 [ 1969.145606][T12480] ? __fget_light+0xea/0x280 [ 1969.150201][T12480] __sys_sendmsg+0xe5/0x1b0 [ 1969.154708][T12480] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1969.159756][T12480] ? syscall_enter_from_user_mode+0x20/0x290 [ 1969.165730][T12480] ? lockdep_hardirqs_on+0x53/0x100 [ 1969.170914][T12480] do_syscall_64+0x2d/0x70 [ 1969.175315][T12480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1969.181193][T12480] RIP: 0033:0x45d5b9 [ 1969.185093][T12480] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1969.204697][T12480] RSP: 002b:00007f0bda598c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1969.213110][T12480] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1969.221085][T12480] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1969.229060][T12480] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1969.237031][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1969.245002][T12480] R13: 00007ffc8c05376f R14: 00007f0bda5999c0 R15: 000000000118cf4c 15:05:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r1, 0x735, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 15:05:14 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x20) 15:05:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x800, 0x2, 0x0, 0x0, 0x8000, 0xfffc}, 0x20) 15:05:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000540)=0x401, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x16c) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x19) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000540)=0x2, 0x4) [ 1969.525693][T12502] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1969.558089][T12502] CPU: 0 PID: 12502 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1969.566789][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.576844][T12502] Call Trace: [ 1969.580146][T12502] dump_stack+0x198/0x1fd [ 1969.584492][T12502] sysfs_warn_dup.cold+0x1c/0x2d [ 1969.589441][T12502] sysfs_do_create_link_sd+0x11e/0x140 [ 1969.594910][T12502] sysfs_create_link+0x5f/0xc0 [ 1969.599684][T12502] device_add+0x6ff/0x1c40 [ 1969.604114][T12502] ? devlink_add_symlinks+0x450/0x450 [ 1969.609497][T12502] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1969.615493][T12502] wiphy_register+0x1d66/0x2850 [ 1969.620370][T12502] ? wiphy_unregister+0xc10/0xc10 [ 1969.625403][T12502] ? generic_xdp_install+0x700/0x700 [ 1969.630732][T12502] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1969.636810][T12502] ieee80211_register_hw+0x22c9/0x39a0 [ 1969.642297][T12502] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1969.647673][T12502] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1969.653578][T12502] ? lock_downgrade+0x830/0x830 [ 1969.658437][T12502] ? lock_is_held_type+0xbb/0xf0 [ 1969.663382][T12502] ? memset+0x20/0x40 [ 1969.667377][T12502] ? __hrtimer_init+0x12c/0x260 [ 1969.672239][T12502] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1969.677985][T12502] ? hwsim_virtio_rx_work+0x350/0x350 [ 1969.683364][T12502] ? memcpy+0x39/0x60 [ 1969.687361][T12502] hwsim_new_radio_nl+0x93e/0xf8c [ 1969.692401][T12502] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1969.698313][T12502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1969.705250][T12502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1969.712103][T12502] genl_rcv_msg+0x61d/0x980 [ 1969.716645][T12502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1969.723598][T12502] ? lock_release+0x8f0/0x8f0 [ 1969.728278][T12502] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1969.733575][T12502] netlink_rcv_skb+0x15a/0x430 [ 1969.738351][T12502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1969.745307][T12502] ? netlink_ack+0xa10/0xa10 [ 1969.749917][T12502] genl_rcv+0x24/0x40 [ 1969.753909][T12502] netlink_unicast+0x533/0x7d0 [ 1969.758683][T12502] ? netlink_attachskb+0x810/0x810 [ 1969.763802][T12502] ? __phys_addr_symbol+0x2c/0x70 [ 1969.768828][T12502] ? __check_object_size+0x171/0x3e4 [ 1969.774124][T12502] netlink_sendmsg+0x856/0xd90 [ 1969.778903][T12502] ? netlink_unicast+0x7d0/0x7d0 [ 1969.783852][T12502] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1969.789141][T12502] ? netlink_unicast+0x7d0/0x7d0 [ 1969.794082][T12502] sock_sendmsg+0xcf/0x120 [ 1969.798524][T12502] ____sys_sendmsg+0x6e8/0x810 [ 1969.803293][T12502] ? kernel_sendmsg+0x50/0x50 [ 1969.807975][T12502] ? do_recvmmsg+0x6d0/0x6d0 [ 1969.812578][T12502] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1969.818566][T12502] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1969.824549][T12502] ? __lock_acquire+0xb5e/0x5570 [ 1969.829493][T12502] ___sys_sendmsg+0xf3/0x170 [ 1969.834092][T12502] ? sendmsg_copy_msghdr+0x160/0x160 [ 1969.839387][T12502] ? __fget_files+0x272/0x400 [ 1969.844072][T12502] ? lock_downgrade+0x830/0x830 [ 1969.849012][T12502] ? find_held_lock+0x2d/0x110 [ 1969.853798][T12502] ? __fget_files+0x294/0x400 [ 1969.858485][T12502] ? __fget_light+0xea/0x280 [ 1969.863119][T12502] __sys_sendmsg+0xe5/0x1b0 [ 1969.867627][T12502] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1969.872672][T12502] ? syscall_enter_from_user_mode+0x20/0x290 [ 1969.878656][T12502] ? lockdep_hardirqs_on+0x53/0x100 [ 1969.883858][T12502] do_syscall_64+0x2d/0x70 [ 1969.888282][T12502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1969.894172][T12502] RIP: 0033:0x45d5b9 [ 1969.898071][T12502] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1969.917673][T12502] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6335, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 15:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x68}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1969.926086][T12502] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1969.934059][T12502] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1969.942032][T12502] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1969.950011][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1969.957983][T12502] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:15 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r0, &(0x7f000000db40)=[{{&(0x7f0000000040)=@ethernet={0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000001480)=[{0x10, 0x29, 0x4, "7f"}], 0x10}}], 0x1, 0x0) 15:05:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb), &(0x7f00000002c0)=0xc) [ 1970.228436][T12538] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1970.253547][T12538] CPU: 0 PID: 12538 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 [ 1970.262242][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.272297][T12538] Call Trace: [ 1970.275592][T12538] dump_stack+0x198/0x1fd [ 1970.279940][T12538] sysfs_warn_dup.cold+0x1c/0x2d [ 1970.284891][T12538] sysfs_do_create_link_sd+0x11e/0x140 [ 1970.290362][T12538] sysfs_create_link+0x5f/0xc0 [ 1970.295139][T12538] device_add+0x6ff/0x1c40 [ 1970.299574][T12538] ? devlink_add_symlinks+0x450/0x450 [ 1970.304958][T12538] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1970.310951][T12538] wiphy_register+0x1d66/0x2850 [ 1970.315825][T12538] ? wiphy_unregister+0xc10/0xc10 [ 1970.320854][T12538] ? generic_xdp_install+0x700/0x700 [ 1970.326157][T12538] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1970.332242][T12538] ieee80211_register_hw+0x22c9/0x39a0 [ 1970.337726][T12538] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1970.343105][T12538] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1970.349013][T12538] ? lock_downgrade+0x830/0x830 [ 1970.353873][T12538] ? lock_is_held_type+0xbb/0xf0 [ 1970.358825][T12538] ? memset+0x20/0x40 [ 1970.362816][T12538] ? __hrtimer_init+0x12c/0x260 [ 1970.367681][T12538] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1970.373423][T12538] ? hwsim_virtio_rx_work+0x350/0x350 [ 1970.378808][T12538] ? memcpy+0x39/0x60 [ 1970.382802][T12538] hwsim_new_radio_nl+0x93e/0xf8c [ 1970.387836][T12538] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1970.393745][T12538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1970.400684][T12538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1970.407540][T12538] genl_rcv_msg+0x61d/0x980 [ 1970.412146][T12538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1970.419099][T12538] ? lock_release+0x8f0/0x8f0 [ 1970.423779][T12538] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1970.429076][T12538] netlink_rcv_skb+0x15a/0x430 [ 1970.433848][T12538] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1970.440789][T12538] ? netlink_ack+0xa10/0xa10 [ 1970.445402][T12538] genl_rcv+0x24/0x40 [ 1970.449389][T12538] netlink_unicast+0x533/0x7d0 [ 1970.454164][T12538] ? netlink_attachskb+0x810/0x810 [ 1970.459284][T12538] ? __phys_addr_symbol+0x2c/0x70 [ 1970.464312][T12538] ? __check_object_size+0x171/0x3e4 [ 1970.469608][T12538] netlink_sendmsg+0x856/0xd90 [ 1970.474385][T12538] ? netlink_unicast+0x7d0/0x7d0 [ 1970.479340][T12538] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1970.484635][T12538] ? netlink_unicast+0x7d0/0x7d0 [ 1970.489575][T12538] sock_sendmsg+0xcf/0x120 [ 1970.493996][T12538] ____sys_sendmsg+0x6e8/0x810 [ 1970.498769][T12538] ? kernel_sendmsg+0x50/0x50 [ 1970.503446][T12538] ? do_recvmmsg+0x6d0/0x6d0 [ 1970.508045][T12538] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1970.514035][T12538] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1970.520017][T12538] ? __lock_acquire+0xb5e/0x5570 [ 1970.524961][T12538] ___sys_sendmsg+0xf3/0x170 15:05:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1500}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:16 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) listen(r0, 0x0) listen(r0, 0x0) 15:05:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x4}]}, 0x28}}, 0x0) 15:05:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) [ 1970.529558][T12538] ? sendmsg_copy_msghdr+0x160/0x160 [ 1970.534850][T12538] ? __fget_files+0x272/0x400 [ 1970.539539][T12538] ? lock_downgrade+0x830/0x830 [ 1970.544399][T12538] ? find_held_lock+0x2d/0x110 [ 1970.549184][T12538] ? __fget_files+0x294/0x400 [ 1970.553881][T12538] ? __fget_light+0xea/0x280 [ 1970.558486][T12538] __sys_sendmsg+0xe5/0x1b0 [ 1970.562995][T12538] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1970.568040][T12538] ? syscall_enter_from_user_mode+0x20/0x290 [ 1970.574023][T12538] ? lockdep_hardirqs_on+0x53/0x100 [ 1970.579233][T12538] do_syscall_64+0x2d/0x70 [ 1970.583657][T12538] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1970.589549][T12538] RIP: 0033:0x45d5b9 [ 1970.593445][T12538] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1970.613049][T12538] RSP: 002b:00007f0bda598c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1970.621459][T12538] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1970.629432][T12538] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1970.637404][T12538] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1970.645376][T12538] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1970.653346][T12538] R13: 00007ffc8c05376f R14: 00007f0bda5999c0 R15: 000000000118cf4c [ 1970.737729][T12557] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1970.746204][T12559] netem: change failed [ 1970.768275][T12558] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1970.811193][T12558] CPU: 1 PID: 12558 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1970.819892][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.829945][T12558] Call Trace: [ 1970.833267][T12558] dump_stack+0x198/0x1fd [ 1970.837615][T12558] sysfs_warn_dup.cold+0x1c/0x2d [ 1970.842565][T12558] sysfs_do_create_link_sd+0x11e/0x140 [ 1970.848037][T12558] sysfs_create_link+0x5f/0xc0 [ 1970.852810][T12558] device_add+0x6ff/0x1c40 [ 1970.857237][T12558] ? devlink_add_symlinks+0x450/0x450 [ 1970.862620][T12558] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1970.868612][T12558] wiphy_register+0x1d66/0x2850 [ 1970.873486][T12558] ? wiphy_unregister+0xc10/0xc10 [ 1970.878518][T12558] ? generic_xdp_install+0x700/0x700 [ 1970.883817][T12558] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1970.889893][T12558] ieee80211_register_hw+0x22c9/0x39a0 [ 1970.895372][T12558] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1970.900746][T12558] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1970.906650][T12558] ? lock_downgrade+0x830/0x830 [ 1970.911508][T12558] ? lock_is_held_type+0xbb/0xf0 [ 1970.916452][T12558] ? memset+0x20/0x40 [ 1970.920438][T12558] ? __hrtimer_init+0x12c/0x260 [ 1970.925295][T12558] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1970.931041][T12558] ? hwsim_virtio_rx_work+0x350/0x350 [ 1970.936420][T12558] ? memcpy+0x39/0x60 [ 1970.940413][T12558] hwsim_new_radio_nl+0x93e/0xf8c [ 1970.945450][T12558] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1970.951361][T12558] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1970.958301][T12558] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1970.965157][T12558] genl_rcv_msg+0x61d/0x980 [ 1970.969681][T12558] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1970.976638][T12558] ? lock_release+0x8f0/0x8f0 [ 1970.981316][T12558] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1970.986612][T12558] netlink_rcv_skb+0x15a/0x430 [ 1970.991382][T12558] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1970.998323][T12558] ? netlink_ack+0xa10/0xa10 [ 1971.002936][T12558] genl_rcv+0x24/0x40 [ 1971.006925][T12558] netlink_unicast+0x533/0x7d0 [ 1971.011706][T12558] ? netlink_attachskb+0x810/0x810 [ 1971.016826][T12558] ? __phys_addr_symbol+0x2c/0x70 [ 1971.021855][T12558] ? __check_object_size+0x171/0x3e4 [ 1971.027149][T12558] netlink_sendmsg+0x856/0xd90 [ 1971.031926][T12558] ? netlink_unicast+0x7d0/0x7d0 [ 1971.036882][T12558] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1971.042176][T12558] ? netlink_unicast+0x7d0/0x7d0 [ 1971.047119][T12558] sock_sendmsg+0xcf/0x120 [ 1971.051541][T12558] ____sys_sendmsg+0x6e8/0x810 [ 1971.056310][T12558] ? kernel_sendmsg+0x50/0x50 [ 1971.060992][T12558] ? do_recvmmsg+0x6d0/0x6d0 [ 1971.065592][T12558] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1971.071580][T12558] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1971.077561][T12558] ? __lock_acquire+0xb5e/0x5570 [ 1971.082507][T12558] ___sys_sendmsg+0xf3/0x170 [ 1971.087095][T12558] ? sendmsg_copy_msghdr+0x160/0x160 [ 1971.092357][T12558] ? __fget_files+0x272/0x400 [ 1971.097013][T12558] ? lock_downgrade+0x830/0x830 [ 1971.101848][T12558] ? find_held_lock+0x2d/0x110 [ 1971.106616][T12558] ? __fget_files+0x294/0x400 [ 1971.111362][T12558] ? __fget_light+0xea/0x280 [ 1971.115946][T12558] __sys_sendmsg+0xe5/0x1b0 [ 1971.120442][T12558] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1971.125455][T12558] ? syscall_enter_from_user_mode+0x20/0x290 [ 1971.131421][T12558] ? lockdep_hardirqs_on+0x53/0x100 [ 1971.136613][T12558] do_syscall_64+0x2d/0x70 [ 1971.141041][T12558] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1971.146911][T12558] RIP: 0033:0x45d5b9 [ 1971.150800][T12558] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1971.170383][T12558] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.178771][T12558] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1971.186732][T12558] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1971.194681][T12558] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1971.202630][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:05:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240), 0xc) 15:05:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x40, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x40}}, 0x0) 15:05:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140), 0x4000000000003b9, 0x0, 0x0) [ 1971.210576][T12558] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1971.256195][T12563] netem: change failed 15:05:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1600}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:17 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="03f892109e83", @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, "605308005792e164"}}}}}, 0x0) 15:05:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400, 0x102}, 0x40) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d00)="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", 0x12f}], 0x1}}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r0}, 0x38) 15:05:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f0000000180)={@rand_addr=' \x01\x00', @private1, @private0}) 15:05:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x42, 0x0, "b2d7e7cfc15c88be0cd8bb37e74caede7c50e66dd0e1233bdeba5ca38bb6ee3a97b9269f3a86424194fcd920d706321c58162b43104e27e79e83ad8787f292c060bb949b0387662c4a52bd12fd7c7582"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x0, 0xd, 0x0, "dc3db706ce9681ca39a01c83efc2c3f09e2fba58a2c7f788a40610961dbc0c9a5f5783461dda7a8c89dde3e068c9272f44842959e6873556d24113f78672a6b58b41e49036a2bc30847b9d84cdffe996"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x0, 0x0, "b2d7e7cfc15c88be0cd8bb37e74caede7c50e66dd0e1233bdeba5ca38bb6ee3a97b9269f3a86424194fcd920d706321c58162b43104e27e79e83ad8787f292c060bb949b0387662c4a52bd12fd7c7582"}, 0xd8) 15:05:17 executing program 1: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x83}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1971.493056][T12587] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1971.524377][T12587] CPU: 1 PID: 12587 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1971.533090][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.543145][T12587] Call Trace: [ 1971.546447][T12587] dump_stack+0x198/0x1fd [ 1971.550792][T12587] sysfs_warn_dup.cold+0x1c/0x2d [ 1971.555737][T12587] sysfs_do_create_link_sd+0x11e/0x140 [ 1971.561237][T12587] sysfs_create_link+0x5f/0xc0 [ 1971.566011][T12587] device_add+0x6ff/0x1c40 [ 1971.570439][T12587] ? devlink_add_symlinks+0x450/0x450 [ 1971.575822][T12587] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1971.581814][T12587] wiphy_register+0x1d66/0x2850 [ 1971.586691][T12587] ? wiphy_unregister+0xc10/0xc10 [ 1971.591730][T12587] ? generic_xdp_install+0x700/0x700 [ 1971.597038][T12587] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1971.603126][T12587] ieee80211_register_hw+0x22c9/0x39a0 [ 1971.608608][T12587] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1971.613989][T12587] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1971.619895][T12587] ? lock_downgrade+0x830/0x830 [ 1971.624749][T12587] ? lock_is_held_type+0xbb/0xf0 [ 1971.629696][T12587] ? memset+0x20/0x40 [ 1971.633685][T12587] ? __hrtimer_init+0x12c/0x260 [ 1971.638549][T12587] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1971.644303][T12587] ? hwsim_virtio_rx_work+0x350/0x350 [ 1971.649683][T12587] ? memcpy+0x39/0x60 [ 1971.653678][T12587] hwsim_new_radio_nl+0x93e/0xf8c [ 1971.658718][T12587] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1971.664631][T12587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1971.671570][T12587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1971.678428][T12587] genl_rcv_msg+0x61d/0x980 [ 1971.682947][T12587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1971.689902][T12587] ? lock_release+0x8f0/0x8f0 [ 1971.694584][T12587] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1971.699894][T12587] netlink_rcv_skb+0x15a/0x430 [ 1971.704666][T12587] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1971.711609][T12587] ? netlink_ack+0xa10/0xa10 [ 1971.716219][T12587] genl_rcv+0x24/0x40 [ 1971.720206][T12587] netlink_unicast+0x533/0x7d0 [ 1971.724994][T12587] ? netlink_attachskb+0x810/0x810 [ 1971.730112][T12587] ? __phys_addr_symbol+0x2c/0x70 [ 1971.735140][T12587] ? __check_object_size+0x171/0x3e4 [ 1971.740705][T12587] netlink_sendmsg+0x856/0xd90 [ 1971.745483][T12587] ? netlink_unicast+0x7d0/0x7d0 [ 1971.750441][T12587] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1971.755731][T12587] ? netlink_unicast+0x7d0/0x7d0 [ 1971.760673][T12587] sock_sendmsg+0xcf/0x120 [ 1971.765103][T12587] ____sys_sendmsg+0x6e8/0x810 [ 1971.769874][T12587] ? kernel_sendmsg+0x50/0x50 [ 1971.774555][T12587] ? do_recvmmsg+0x6d0/0x6d0 [ 1971.779156][T12587] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1971.785145][T12587] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1971.791143][T12587] ? __lock_acquire+0xb5e/0x5570 [ 1971.796134][T12587] ___sys_sendmsg+0xf3/0x170 [ 1971.800731][T12587] ? sendmsg_copy_msghdr+0x160/0x160 [ 1971.806021][T12587] ? __fget_files+0x272/0x400 [ 1971.810706][T12587] ? lock_downgrade+0x830/0x830 [ 1971.815555][T12587] ? find_held_lock+0x2d/0x110 [ 1971.820339][T12587] ? __fget_files+0x294/0x400 [ 1971.825031][T12587] ? __fget_light+0xea/0x280 [ 1971.829639][T12587] __sys_sendmsg+0xe5/0x1b0 [ 1971.834146][T12587] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1971.839193][T12587] ? syscall_enter_from_user_mode+0x20/0x290 [ 1971.845181][T12587] ? lockdep_hardirqs_on+0x53/0x100 [ 1971.850390][T12587] do_syscall_64+0x2d/0x70 [ 1971.854815][T12587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1971.860710][T12587] RIP: 0033:0x45d5b9 [ 1971.864609][T12587] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1971.884217][T12587] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:17 executing program 1: r0 = socket(0xa, 0x802, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000d803000000000000e0000000ec010000f8020000f8020000f81b00000400000000000000ac1e0001ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800006e6576706369300000000000000000006970365f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc00e00000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000ec01060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da557dc11df26fd40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc000c01000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa0000000000000000000000000000ac14140002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc000c01000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc00e00000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000080000000000000fe"], 0x424) 15:05:17 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x57, 0x0, 0x1, 0x0, @rand_addr, @loopback}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 15:05:17 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) [ 1971.892728][T12587] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1971.900704][T12587] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1971.908677][T12587] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1971.916652][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1971.924623][T12587] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1700}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:17 executing program 1: syz_emit_ethernet(0x42e, &(0x7f0000000900)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x3f8, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10]}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a75ce540cd4f791153d58100000000000000000000000000ffffaa0568f00b1c71a8242358244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac11084db8f736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 15:05:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4860332", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7a, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90) 15:05:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x923, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 15:05:17 executing program 2: syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "77c464", 0x18, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts={0x0, 0x2, [], [@ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0]}, @enc_lim, @generic={0x0, 0x2, "3719"}]}]}}}}}, 0x0) 15:05:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x2c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x60}}, 0x0) 15:05:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a1d0200000000000000000200fffe0900010073797a30000000001c000480080002400000000008000140000000000800024040ff94a60900030073797a32000000002c000000000a03000000000000000000050000000c00044000000000000000020900010073797a300000000014000000020a3b6000000000000000000000000014000000110001"], 0xd0}}, 0x0) 15:05:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1800}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 15:05:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x31f, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x117}]}, 0x1c}}, 0x0) 15:05:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x0, 0x0, 0x3ad}, 0x9c) 15:05:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000080)=@ethtool_regs}) [ 1972.506901][T12646] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1972.540320][T12646] CPU: 1 PID: 12646 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1972.549106][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.559163][T12646] Call Trace: [ 1972.562466][T12646] dump_stack+0x198/0x1fd [ 1972.566811][T12646] sysfs_warn_dup.cold+0x1c/0x2d [ 1972.571767][T12646] sysfs_do_create_link_sd+0x11e/0x140 [ 1972.577238][T12646] sysfs_create_link+0x5f/0xc0 [ 1972.582017][T12646] device_add+0x6ff/0x1c40 [ 1972.586446][T12646] ? devlink_add_symlinks+0x450/0x450 [ 1972.591831][T12646] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1972.597826][T12646] wiphy_register+0x1d66/0x2850 [ 1972.602699][T12646] ? wiphy_unregister+0xc10/0xc10 [ 1972.607731][T12646] ? generic_xdp_install+0x700/0x700 [ 1972.613039][T12646] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1972.619120][T12646] ieee80211_register_hw+0x22c9/0x39a0 [ 1972.624605][T12646] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1972.629983][T12646] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1972.635889][T12646] ? lock_downgrade+0x830/0x830 [ 1972.640746][T12646] ? lock_is_held_type+0xbb/0xf0 [ 1972.645689][T12646] ? memset+0x20/0x40 [ 1972.649686][T12646] ? __hrtimer_init+0x12c/0x260 [ 1972.654547][T12646] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1972.660293][T12646] ? hwsim_virtio_rx_work+0x350/0x350 [ 1972.665679][T12646] ? memcpy+0x39/0x60 [ 1972.669674][T12646] hwsim_new_radio_nl+0x93e/0xf8c [ 1972.674708][T12646] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1972.680707][T12646] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1972.687653][T12646] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1972.694510][T12646] genl_rcv_msg+0x61d/0x980 [ 1972.699032][T12646] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1972.705983][T12646] ? lock_release+0x8f0/0x8f0 [ 1972.710667][T12646] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1972.715980][T12646] netlink_rcv_skb+0x15a/0x430 [ 1972.720753][T12646] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1972.727692][T12646] ? netlink_ack+0xa10/0xa10 [ 1972.732304][T12646] genl_rcv+0x24/0x40 [ 1972.736298][T12646] netlink_unicast+0x533/0x7d0 [ 1972.741077][T12646] ? netlink_attachskb+0x810/0x810 [ 1972.746231][T12646] ? __phys_addr_symbol+0x2c/0x70 [ 1972.751267][T12646] ? __check_object_size+0x171/0x3e4 [ 1972.756562][T12646] netlink_sendmsg+0x856/0xd90 [ 1972.761339][T12646] ? netlink_unicast+0x7d0/0x7d0 [ 1972.766290][T12646] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1972.771580][T12646] ? netlink_unicast+0x7d0/0x7d0 [ 1972.776531][T12646] sock_sendmsg+0xcf/0x120 [ 1972.780954][T12646] ____sys_sendmsg+0x6e8/0x810 [ 1972.785728][T12646] ? kernel_sendmsg+0x50/0x50 [ 1972.790404][T12646] ? do_recvmmsg+0x6d0/0x6d0 [ 1972.795006][T12646] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1972.800993][T12646] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1972.806978][T12646] ? __lock_acquire+0xb5e/0x5570 [ 1972.811926][T12646] ___sys_sendmsg+0xf3/0x170 [ 1972.816525][T12646] ? sendmsg_copy_msghdr+0x160/0x160 [ 1972.821818][T12646] ? __fget_files+0x272/0x400 [ 1972.826542][T12646] ? lock_downgrade+0x830/0x830 [ 1972.831400][T12646] ? find_held_lock+0x2d/0x110 [ 1972.836186][T12646] ? __fget_files+0x294/0x400 [ 1972.840881][T12646] ? __fget_light+0xea/0x280 [ 1972.845485][T12646] __sys_sendmsg+0xe5/0x1b0 [ 1972.849999][T12646] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1972.855047][T12646] ? syscall_enter_from_user_mode+0x20/0x290 [ 1972.861036][T12646] ? lockdep_hardirqs_on+0x53/0x100 [ 1972.866245][T12646] do_syscall_64+0x2d/0x70 [ 1972.870669][T12646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1972.876561][T12646] RIP: 0033:0x45d5b9 [ 1972.880494][T12646] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1972.900097][T12646] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.908509][T12646] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1972.916486][T12646] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1972.924462][T12646] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1972.932460][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1972.940436][T12646] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1973.024676][T12649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000080)=@ethtool_regs}) [ 1973.078735][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0xa0}}, 0x0) 15:05:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xfffffffd}]}, 0x3c}}, 0x0) 15:05:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1900}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x0, 0x0, 0x3ad}, 0x9c) 15:05:18 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 15:05:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r0, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x5, 0x5, @private}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x44}}, 0x0) 15:05:19 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000001600)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="ec", 0x5aa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003080)="b0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000900)='=', 0x1}], 0x300}}], 0x5, 0x400d005) 15:05:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000010000300000058000100100001007564703afe3b4383874d9cbe81ec52b602051d51826d5bde192e9bd7960d7348"], 0x3c7}}, 0x0) [ 1973.330676][T12690] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1973.390746][T12690] CPU: 0 PID: 12690 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1973.399446][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.409503][T12690] Call Trace: [ 1973.412805][T12690] dump_stack+0x198/0x1fd [ 1973.417148][T12690] sysfs_warn_dup.cold+0x1c/0x2d [ 1973.422100][T12690] sysfs_do_create_link_sd+0x11e/0x140 [ 1973.427567][T12690] sysfs_create_link+0x5f/0xc0 [ 1973.432339][T12690] device_add+0x6ff/0x1c40 [ 1973.436768][T12690] ? devlink_add_symlinks+0x450/0x450 [ 1973.442150][T12690] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1973.448143][T12690] wiphy_register+0x1d66/0x2850 [ 1973.453021][T12690] ? wiphy_unregister+0xc10/0xc10 [ 1973.458056][T12690] ? generic_xdp_install+0x700/0x700 [ 1973.463361][T12690] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1973.469439][T12690] ieee80211_register_hw+0x22c9/0x39a0 [ 1973.474918][T12690] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1973.480290][T12690] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1973.486193][T12690] ? lock_downgrade+0x830/0x830 [ 1973.491046][T12690] ? lock_is_held_type+0xbb/0xf0 [ 1973.496011][T12690] ? memset+0x20/0x40 [ 1973.500011][T12690] ? __hrtimer_init+0x12c/0x260 [ 1973.504871][T12690] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1973.510615][T12690] ? hwsim_virtio_rx_work+0x350/0x350 [ 1973.516011][T12690] ? memcpy+0x39/0x60 [ 1973.520009][T12690] hwsim_new_radio_nl+0x93e/0xf8c [ 1973.525044][T12690] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1973.530955][T12690] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1973.537897][T12690] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1973.544756][T12690] genl_rcv_msg+0x61d/0x980 [ 1973.549314][T12690] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1973.556261][T12690] ? lock_release+0x8f0/0x8f0 [ 1973.560939][T12690] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1973.566241][T12690] netlink_rcv_skb+0x15a/0x430 [ 1973.571028][T12690] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1973.577974][T12690] ? netlink_ack+0xa10/0xa10 [ 1973.582584][T12690] genl_rcv+0x24/0x40 [ 1973.586573][T12690] netlink_unicast+0x533/0x7d0 [ 1973.591349][T12690] ? netlink_attachskb+0x810/0x810 [ 1973.596466][T12690] ? __phys_addr_symbol+0x2c/0x70 [ 1973.601497][T12690] ? __check_object_size+0x171/0x3e4 [ 1973.606795][T12690] netlink_sendmsg+0x856/0xd90 [ 1973.611570][T12690] ? netlink_unicast+0x7d0/0x7d0 [ 1973.616521][T12690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1973.621811][T12690] ? netlink_unicast+0x7d0/0x7d0 [ 1973.626755][T12690] sock_sendmsg+0xcf/0x120 [ 1973.631178][T12690] ____sys_sendmsg+0x6e8/0x810 [ 1973.635949][T12690] ? kernel_sendmsg+0x50/0x50 [ 1973.640633][T12690] ? do_recvmmsg+0x6d0/0x6d0 [ 1973.645234][T12690] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1973.651224][T12690] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1973.657207][T12690] ? __lock_acquire+0xb5e/0x5570 [ 1973.662159][T12690] ___sys_sendmsg+0xf3/0x170 [ 1973.666753][T12690] ? sendmsg_copy_msghdr+0x160/0x160 [ 1973.672043][T12690] ? __fget_files+0x272/0x400 [ 1973.676728][T12690] ? lock_downgrade+0x830/0x830 [ 1973.681585][T12690] ? find_held_lock+0x2d/0x110 [ 1973.686367][T12690] ? __fget_files+0x294/0x400 [ 1973.691059][T12690] ? __fget_light+0xea/0x280 [ 1973.695664][T12690] __sys_sendmsg+0xe5/0x1b0 [ 1973.700177][T12690] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1973.705229][T12690] ? syscall_enter_from_user_mode+0x20/0x290 [ 1973.711211][T12690] ? lockdep_hardirqs_on+0x53/0x100 [ 1973.716415][T12690] do_syscall_64+0x2d/0x70 [ 1973.720841][T12690] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1973.726743][T12690] RIP: 0033:0x45d5b9 15:05:19 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x0, 0x3}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) [ 1973.730644][T12690] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1973.750247][T12690] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.758661][T12690] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1973.766630][T12690] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1973.774601][T12690] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1973.782574][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x400002, {0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @in6=@mcast1, @in=@loopback}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}]}, 0x90}}, 0x24000000) [ 1973.790546][T12690] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x56, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 15:05:19 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ff8)={&(0x7f0000000ff8)={[0x42]}, 0x8}) 15:05:19 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x101}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}}, 0x0) 15:05:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}}, 0x0) 15:05:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1974.033539][T12710] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1974.053546][T12710] tipc: Enabling of bearer rejected, illegal name [ 1974.088168][T12721] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 15:05:19 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e9, 0x0) 15:05:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 15:05:19 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xfffffffffffffd22, {0xa, 0x0, 0x0, @private2}}, 0x24) 15:05:19 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100), 0x8) [ 1974.205198][T12730] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1974.271800][T12730] CPU: 0 PID: 12730 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1974.280503][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.290559][T12730] Call Trace: [ 1974.293861][T12730] dump_stack+0x198/0x1fd [ 1974.298208][T12730] sysfs_warn_dup.cold+0x1c/0x2d [ 1974.303160][T12730] sysfs_do_create_link_sd+0x11e/0x140 [ 1974.308629][T12730] sysfs_create_link+0x5f/0xc0 [ 1974.313511][T12730] device_add+0x6ff/0x1c40 15:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x39, 0x0, 0x0, 0x0, "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", 0x0, "9605002bd1a2cda2b3d6d03e09cbcb3f1f000eca"}}, @CGW_MOD_SET={0x15, 0x4, {{}, 0x1}}]}, 0x14c}}, 0x0) [ 1974.317938][T12730] ? devlink_add_symlinks+0x450/0x450 [ 1974.323322][T12730] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1974.329321][T12730] wiphy_register+0x1d66/0x2850 [ 1974.334186][T12730] ? wiphy_unregister+0xc10/0xc10 [ 1974.339219][T12730] ? generic_xdp_install+0x700/0x700 [ 1974.344519][T12730] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1974.350595][T12730] ieee80211_register_hw+0x22c9/0x39a0 [ 1974.356077][T12730] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1974.361463][T12730] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1974.367372][T12730] ? lock_downgrade+0x830/0x830 [ 1974.372231][T12730] ? lock_is_held_type+0xbb/0xf0 [ 1974.377175][T12730] ? memset+0x20/0x40 [ 1974.381167][T12730] ? __hrtimer_init+0x12c/0x260 [ 1974.386134][T12730] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1974.391885][T12730] ? hwsim_virtio_rx_work+0x350/0x350 [ 1974.397272][T12730] ? memcpy+0x39/0x60 [ 1974.401265][T12730] hwsim_new_radio_nl+0x93e/0xf8c [ 1974.406301][T12730] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1974.412222][T12730] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1974.419162][T12730] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1974.426019][T12730] genl_rcv_msg+0x61d/0x980 [ 1974.430535][T12730] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1974.437492][T12730] ? lock_release+0x8f0/0x8f0 [ 1974.442171][T12730] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1974.447471][T12730] netlink_rcv_skb+0x15a/0x430 [ 1974.452249][T12730] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1974.459202][T12730] ? netlink_ack+0xa10/0xa10 [ 1974.463811][T12730] genl_rcv+0x24/0x40 [ 1974.467798][T12730] netlink_unicast+0x533/0x7d0 [ 1974.472577][T12730] ? netlink_attachskb+0x810/0x810 [ 1974.477695][T12730] ? __phys_addr_symbol+0x2c/0x70 [ 1974.482725][T12730] ? __check_object_size+0x171/0x3e4 [ 1974.488022][T12730] netlink_sendmsg+0x856/0xd90 [ 1974.492802][T12730] ? netlink_unicast+0x7d0/0x7d0 [ 1974.497753][T12730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1974.503050][T12730] ? netlink_unicast+0x7d0/0x7d0 [ 1974.507992][T12730] sock_sendmsg+0xcf/0x120 [ 1974.512415][T12730] ____sys_sendmsg+0x6e8/0x810 [ 1974.517193][T12730] ? kernel_sendmsg+0x50/0x50 [ 1974.521871][T12730] ? do_recvmmsg+0x6d0/0x6d0 [ 1974.526479][T12730] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1974.532472][T12730] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1974.538459][T12730] ? __lock_acquire+0xb5e/0x5570 [ 1974.543407][T12730] ___sys_sendmsg+0xf3/0x170 [ 1974.548006][T12730] ? sendmsg_copy_msghdr+0x160/0x160 [ 1974.553298][T12730] ? __fget_files+0x272/0x400 [ 1974.557985][T12730] ? lock_downgrade+0x830/0x830 [ 1974.562837][T12730] ? find_held_lock+0x2d/0x110 [ 1974.567623][T12730] ? __fget_files+0x294/0x400 [ 1974.572316][T12730] ? __fget_light+0xea/0x280 [ 1974.576918][T12730] __sys_sendmsg+0xe5/0x1b0 [ 1974.581430][T12730] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1974.586479][T12730] ? syscall_enter_from_user_mode+0x20/0x290 [ 1974.592467][T12730] ? lockdep_hardirqs_on+0x53/0x100 [ 1974.597673][T12730] do_syscall_64+0x2d/0x70 [ 1974.602099][T12730] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1974.607990][T12730] RIP: 0033:0x45d5b9 [ 1974.611887][T12730] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1974.631490][T12730] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1974.639901][T12730] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1974.647965][T12730] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1974.655936][T12730] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1974.663939][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1974.671908][T12730] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:05:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3ac, 0x1c0, 0xe0, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00'}}, {{@uncond, 0xbc, 0xe0, 0x0, {0x7600}}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c0}}, {{@arp={@multicast1, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00', 'tunl0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="0000001b0f00", @mac, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{[], 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) 15:05:20 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="9cabbf0400cbb140419b80008100501d8906", 0x12}, {&(0x7f00000003c0)="1c64529b0e3f5350ffc9b7c738cbb3ef3cefbd18fb2cb3dd7e215158ddc3d1a4e881df5e1ff2", 0x26}], 0x2}, 0x0) 15:05:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1) 15:05:20 executing program 4: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100), 0x10, 0x0}, 0x0) 15:05:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x800, 0x9}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 15:05:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2300}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:20 executing program 2: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 15:05:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x2c}}, 0x0) 15:05:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="ba", 0x1}], 0x1, &(0x7f0000000000)=[@init={0x14}, @init={0x14, 0x84, 0x0, {0x0, 0x0, 0xde86, 0x8001}}], 0x28}, 0x8040) 15:05:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000040)) 15:05:20 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 15:05:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffe, 0xb}}}}]}, 0x40}}, 0x0) [ 1975.184670][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1975.238808][T12777] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1975.270024][T12777] CPU: 1 PID: 12777 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1975.278722][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.288781][T12777] Call Trace: [ 1975.292082][T12777] dump_stack+0x198/0x1fd [ 1975.296513][T12777] sysfs_warn_dup.cold+0x1c/0x2d [ 1975.301463][T12777] sysfs_do_create_link_sd+0x11e/0x140 [ 1975.306940][T12777] sysfs_create_link+0x5f/0xc0 [ 1975.311711][T12777] device_add+0x6ff/0x1c40 [ 1975.316138][T12777] ? devlink_add_symlinks+0x450/0x450 [ 1975.321513][T12777] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1975.327508][T12777] wiphy_register+0x1d66/0x2850 [ 1975.332379][T12777] ? wiphy_unregister+0xc10/0xc10 15:05:20 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000706ed640000e2a6ed9f00bdda4da2260c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0xc7fde, 0x0) [ 1975.337422][T12777] ? generic_xdp_install+0x700/0x700 [ 1975.342724][T12777] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1975.348801][T12777] ieee80211_register_hw+0x22c9/0x39a0 [ 1975.354281][T12777] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1975.359646][T12777] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1975.365522][T12777] ? lock_downgrade+0x830/0x830 [ 1975.370353][T12777] ? lock_is_held_type+0xbb/0xf0 [ 1975.375288][T12777] ? memset+0x20/0x40 [ 1975.379279][T12777] ? __hrtimer_init+0x12c/0x260 [ 1975.384136][T12777] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1975.389880][T12777] ? hwsim_virtio_rx_work+0x350/0x350 [ 1975.395275][T12777] ? memcpy+0x39/0x60 [ 1975.399269][T12777] hwsim_new_radio_nl+0x93e/0xf8c [ 1975.404410][T12777] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1975.410331][T12777] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1975.417266][T12777] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1975.424124][T12777] genl_rcv_msg+0x61d/0x980 [ 1975.428645][T12777] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1975.435598][T12777] ? lock_release+0x8f0/0x8f0 [ 1975.440275][T12777] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1975.445572][T12777] netlink_rcv_skb+0x15a/0x430 [ 1975.450340][T12777] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1975.457279][T12777] ? netlink_ack+0xa10/0xa10 [ 1975.461897][T12777] genl_rcv+0x24/0x40 [ 1975.465887][T12777] netlink_unicast+0x533/0x7d0 [ 1975.470670][T12777] ? netlink_attachskb+0x810/0x810 [ 1975.475802][T12777] ? __phys_addr_symbol+0x2c/0x70 [ 1975.480841][T12777] ? __check_object_size+0x171/0x3e4 [ 1975.486139][T12777] netlink_sendmsg+0x856/0xd90 [ 1975.490920][T12777] ? netlink_unicast+0x7d0/0x7d0 [ 1975.495868][T12777] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1975.501166][T12777] ? netlink_unicast+0x7d0/0x7d0 [ 1975.506107][T12777] sock_sendmsg+0xcf/0x120 [ 1975.510528][T12777] ____sys_sendmsg+0x6e8/0x810 [ 1975.515298][T12777] ? kernel_sendmsg+0x50/0x50 [ 1975.519973][T12777] ? do_recvmmsg+0x6d0/0x6d0 [ 1975.524571][T12777] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1975.530560][T12777] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1975.536551][T12777] ? __lock_acquire+0xb5e/0x5570 [ 1975.541500][T12777] ___sys_sendmsg+0xf3/0x170 [ 1975.546093][T12777] ? sendmsg_copy_msghdr+0x160/0x160 [ 1975.551384][T12777] ? __fget_files+0x272/0x400 [ 1975.556071][T12777] ? lock_downgrade+0x830/0x830 [ 1975.560926][T12777] ? find_held_lock+0x2d/0x110 [ 1975.565714][T12777] ? __fget_files+0x294/0x400 [ 1975.570409][T12777] ? __fget_light+0xea/0x280 [ 1975.575017][T12777] __sys_sendmsg+0xe5/0x1b0 [ 1975.579524][T12777] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1975.584568][T12777] ? syscall_enter_from_user_mode+0x20/0x290 [ 1975.590551][T12777] ? lockdep_hardirqs_on+0x53/0x100 [ 1975.595770][T12777] do_syscall_64+0x2d/0x70 [ 1975.600202][T12777] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1975.606103][T12777] RIP: 0033:0x45d5b9 [ 1975.610001][T12777] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1975.629601][T12777] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x48) 15:05:21 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x6) connect(r0, &(0x7f0000000000)=@rc={0x1f, @any=[0x1d], 0x1}, 0x80) shutdown(r0, 0x1) 15:05:21 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$netrom_NETROM_N2(r0, 0x6b, 0x2, 0x0, 0x4) [ 1975.638016][T12777] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1975.645990][T12777] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1975.653963][T12777] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1975.661936][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1975.669914][T12777] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1975.717498][T12788] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1975.744433][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:21 executing program 1: socket$inet6(0xa, 0x80003, 0x800000000000006) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d797f0000017daf4204a00b32eadc2828407f000001e3d8960f65b27ee8125f42260500000015739d53d5"]}, 0x48}}, 0x0) [ 1975.766148][T12788] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1975.893621][T12784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2400}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x118, 0x118, 0x0, 0x118, 0x118, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'bond_slave_0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffd}}}}, 0x280) 15:05:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x400, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x400, 0x2}, 0x20) 15:05:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x403, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) 15:05:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffe, 0xb}}}}]}, 0x40}}, 0x0) 15:05:21 executing program 3: r0 = socket$kcm(0xa, 0x400000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000000), 0x1e8) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)="89", 0x1}], 0x1}, 0x40) [ 1976.153754][T12821] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1976.178063][T12821] CPU: 0 PID: 12821 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1976.186759][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.196814][T12821] Call Trace: [ 1976.200115][T12821] dump_stack+0x198/0x1fd [ 1976.204465][T12821] sysfs_warn_dup.cold+0x1c/0x2d [ 1976.209416][T12821] sysfs_do_create_link_sd+0x11e/0x140 [ 1976.214889][T12821] sysfs_create_link+0x5f/0xc0 [ 1976.219665][T12821] device_add+0x6ff/0x1c40 [ 1976.224095][T12821] ? devlink_add_symlinks+0x450/0x450 [ 1976.229479][T12821] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1976.235475][T12821] wiphy_register+0x1d66/0x2850 [ 1976.240347][T12821] ? wiphy_unregister+0xc10/0xc10 [ 1976.245376][T12821] ? generic_xdp_install+0x700/0x700 15:05:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x3c}}, 0x0) [ 1976.250675][T12821] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1976.256856][T12821] ieee80211_register_hw+0x22c9/0x39a0 [ 1976.262340][T12821] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1976.267715][T12821] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1976.273620][T12821] ? lock_downgrade+0x830/0x830 [ 1976.278473][T12821] ? lock_is_held_type+0xbb/0xf0 [ 1976.283418][T12821] ? memset+0x20/0x40 [ 1976.287512][T12821] ? __hrtimer_init+0x12c/0x260 [ 1976.292376][T12821] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1976.298127][T12821] ? hwsim_virtio_rx_work+0x350/0x350 [ 1976.303511][T12821] ? memcpy+0x39/0x60 [ 1976.307503][T12821] hwsim_new_radio_nl+0x93e/0xf8c [ 1976.312538][T12821] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1976.318537][T12821] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1976.325476][T12821] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1976.332333][T12821] genl_rcv_msg+0x61d/0x980 [ 1976.336850][T12821] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1976.343799][T12821] ? lock_release+0x8f0/0x8f0 [ 1976.348476][T12821] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1976.353776][T12821] netlink_rcv_skb+0x15a/0x430 [ 1976.358549][T12821] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1976.365490][T12821] ? netlink_ack+0xa10/0xa10 [ 1976.370104][T12821] genl_rcv+0x24/0x40 [ 1976.374088][T12821] netlink_unicast+0x533/0x7d0 [ 1976.378863][T12821] ? netlink_attachskb+0x810/0x810 [ 1976.383982][T12821] ? __phys_addr_symbol+0x2c/0x70 [ 1976.389010][T12821] ? __check_object_size+0x171/0x3e4 [ 1976.394422][T12821] netlink_sendmsg+0x856/0xd90 [ 1976.399205][T12821] ? netlink_unicast+0x7d0/0x7d0 [ 1976.404162][T12821] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1976.409451][T12821] ? netlink_unicast+0x7d0/0x7d0 [ 1976.414394][T12821] sock_sendmsg+0xcf/0x120 [ 1976.418826][T12821] ____sys_sendmsg+0x6e8/0x810 [ 1976.423599][T12821] ? kernel_sendmsg+0x50/0x50 [ 1976.428276][T12821] ? do_recvmmsg+0x6d0/0x6d0 [ 1976.432875][T12821] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1976.438869][T12821] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1976.444853][T12821] ? __lock_acquire+0xb5e/0x5570 [ 1976.449800][T12821] ___sys_sendmsg+0xf3/0x170 [ 1976.454397][T12821] ? sendmsg_copy_msghdr+0x160/0x160 [ 1976.459692][T12821] ? __fget_files+0x272/0x400 [ 1976.464377][T12821] ? lock_downgrade+0x830/0x830 [ 1976.469233][T12821] ? find_held_lock+0x2d/0x110 [ 1976.474020][T12821] ? __fget_files+0x294/0x400 [ 1976.478713][T12821] ? __fget_light+0xea/0x280 [ 1976.483319][T12821] __sys_sendmsg+0xe5/0x1b0 [ 1976.487839][T12821] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1976.492881][T12821] ? syscall_enter_from_user_mode+0x20/0x290 [ 1976.498865][T12821] ? lockdep_hardirqs_on+0x53/0x100 [ 1976.504069][T12821] do_syscall_64+0x2d/0x70 [ 1976.508492][T12821] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1976.514393][T12821] RIP: 0033:0x45d5b9 [ 1976.518292][T12821] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1976.537895][T12821] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.546310][T12821] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:05:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x6}]}}]}, 0x3c}}, 0x0) 15:05:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:05:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x0, @local}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private1}], 0x1c) [ 1976.554276][T12821] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1976.562246][T12821] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1976.570221][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1976.578196][T12821] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}}, 0x0) [ 1976.696580][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2500}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:05:22 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 15:05:22 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/91, 0x5b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b51000014", 0x5, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15:05:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x305}, 0x14}}, 0x0) [ 1976.940309][T12859] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1976.963177][T12859] CPU: 0 PID: 12859 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1976.971866][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.981907][T12859] Call Trace: [ 1976.985197][T12859] dump_stack+0x198/0x1fd [ 1976.989519][T12859] sysfs_warn_dup.cold+0x1c/0x2d [ 1976.994464][T12859] sysfs_do_create_link_sd+0x11e/0x140 [ 1976.999911][T12859] sysfs_create_link+0x5f/0xc0 [ 1977.004667][T12859] device_add+0x6ff/0x1c40 [ 1977.009085][T12859] ? devlink_add_symlinks+0x450/0x450 [ 1977.014445][T12859] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1977.020415][T12859] wiphy_register+0x1d66/0x2850 [ 1977.025259][T12859] ? wiphy_unregister+0xc10/0xc10 [ 1977.030267][T12859] ? generic_xdp_install+0x700/0x700 [ 1977.035540][T12859] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1977.041594][T12859] ieee80211_register_hw+0x22c9/0x39a0 [ 1977.047049][T12859] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1977.052400][T12859] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1977.058280][T12859] ? lock_downgrade+0x830/0x830 [ 1977.063116][T12859] ? lock_is_held_type+0xbb/0xf0 [ 1977.068035][T12859] ? memset+0x20/0x40 [ 1977.071999][T12859] ? __hrtimer_init+0x12c/0x260 [ 1977.076836][T12859] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1977.082562][T12859] ? hwsim_virtio_rx_work+0x350/0x350 [ 1977.087921][T12859] ? memcpy+0x39/0x60 [ 1977.091889][T12859] hwsim_new_radio_nl+0x93e/0xf8c [ 1977.096908][T12859] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1977.102791][T12859] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1977.109881][T12859] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1977.116729][T12859] genl_rcv_msg+0x61d/0x980 [ 1977.121226][T12859] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1977.128162][T12859] ? lock_release+0x8f0/0x8f0 [ 1977.132826][T12859] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1977.138106][T12859] netlink_rcv_skb+0x15a/0x430 [ 1977.142855][T12859] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1977.149777][T12859] ? netlink_ack+0xa10/0xa10 [ 1977.154363][T12859] genl_rcv+0x24/0x40 [ 1977.158329][T12859] netlink_unicast+0x533/0x7d0 [ 1977.163096][T12859] ? netlink_attachskb+0x810/0x810 [ 1977.168193][T12859] ? __phys_addr_symbol+0x2c/0x70 [ 1977.173201][T12859] ? __check_object_size+0x171/0x3e4 [ 1977.178475][T12859] netlink_sendmsg+0x856/0xd90 [ 1977.183229][T12859] ? netlink_unicast+0x7d0/0x7d0 [ 1977.188156][T12859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1977.193426][T12859] ? netlink_unicast+0x7d0/0x7d0 [ 1977.198345][T12859] sock_sendmsg+0xcf/0x120 [ 1977.202744][T12859] ____sys_sendmsg+0x6e8/0x810 [ 1977.207509][T12859] ? kernel_sendmsg+0x50/0x50 [ 1977.212171][T12859] ? do_recvmmsg+0x6d0/0x6d0 [ 1977.216757][T12859] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1977.222732][T12859] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1977.228696][T12859] ? __lock_acquire+0xb5e/0x5570 [ 1977.233627][T12859] ___sys_sendmsg+0xf3/0x170 [ 1977.238205][T12859] ? sendmsg_copy_msghdr+0x160/0x160 [ 1977.243471][T12859] ? __fget_files+0x272/0x400 [ 1977.248134][T12859] ? lock_downgrade+0x830/0x830 [ 1977.252966][T12859] ? find_held_lock+0x2d/0x110 [ 1977.257734][T12859] ? __fget_files+0x294/0x400 [ 1977.262399][T12859] ? __fget_light+0xea/0x280 [ 1977.266995][T12859] __sys_sendmsg+0xe5/0x1b0 [ 1977.271480][T12859] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1977.276498][T12859] ? syscall_enter_from_user_mode+0x20/0x290 [ 1977.282459][T12859] ? lockdep_hardirqs_on+0x53/0x100 [ 1977.287666][T12859] do_syscall_64+0x2d/0x70 [ 1977.292071][T12859] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1977.297964][T12859] RIP: 0033:0x45d5b9 [ 1977.301848][T12859] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.321437][T12859] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1977.329830][T12859] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:05:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="5500000018007f7d00fe01b2a4a280930a", 0x11}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1977.337786][T12859] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1977.345739][T12859] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1977.353702][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1977.361654][T12859] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2, &(0x7f0000000040), 0x20a154f6) 15:05:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1}}], 0x1, 0x40012163, 0x0) 15:05:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 15:05:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x18, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x8) 15:05:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2c, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 15:05:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000280)={@val, @void, @eth={@random="2dd367da2956", @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x2c, 0x0, @local, @mcast2}}}}}, 0x3a) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 15:05:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2600}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1977.859471][ T4324] Bluetooth: hci4: command 0x0405 tx timeout 15:05:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 15:05:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 15:05:23 executing program 1: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x16}, 0x10) 15:05:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000061108e0000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15:05:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x8923, &(0x7f0000000080)) 15:05:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x3, &(0x7f0000000000)={0x5}, 0xc) 15:05:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xc1702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@multicast, @multicast, @void, {@mpls_mc={0x6558, {[], @ipv6=@dccp_packet={0x0, 0x6, "8bad75", 0x10, 0x21, 0x0, @ipv4={[], [], @broadcast}, @loopback, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "2d9b74", 0x0, "4cfc0c"}}}}}}}}}, 0x4a) [ 1978.732298][T12898] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1978.751406][T12898] CPU: 1 PID: 12898 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1978.760097][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.770152][T12898] Call Trace: [ 1978.773454][T12898] dump_stack+0x198/0x1fd [ 1978.777799][T12898] sysfs_warn_dup.cold+0x1c/0x2d [ 1978.782746][T12898] sysfs_do_create_link_sd+0x11e/0x140 [ 1978.788213][T12898] sysfs_create_link+0x5f/0xc0 [ 1978.792992][T12898] device_add+0x6ff/0x1c40 [ 1978.797424][T12898] ? devlink_add_symlinks+0x450/0x450 [ 1978.802807][T12898] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1978.808800][T12898] wiphy_register+0x1d66/0x2850 [ 1978.813672][T12898] ? wiphy_unregister+0xc10/0xc10 [ 1978.818705][T12898] ? generic_xdp_install+0x700/0x700 [ 1978.824011][T12898] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1978.830090][T12898] ieee80211_register_hw+0x22c9/0x39a0 [ 1978.835570][T12898] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1978.840942][T12898] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1978.846847][T12898] ? lock_downgrade+0x830/0x830 [ 1978.851705][T12898] ? lock_is_held_type+0xbb/0xf0 [ 1978.856648][T12898] ? memset+0x20/0x40 [ 1978.860637][T12898] ? __hrtimer_init+0x12c/0x260 [ 1978.865498][T12898] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1978.871242][T12898] ? hwsim_virtio_rx_work+0x350/0x350 [ 1978.876629][T12898] ? memcpy+0x39/0x60 [ 1978.880621][T12898] hwsim_new_radio_nl+0x93e/0xf8c [ 1978.885656][T12898] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1978.891569][T12898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1978.898509][T12898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1978.905365][T12898] genl_rcv_msg+0x61d/0x980 [ 1978.909881][T12898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1978.916837][T12898] ? lock_release+0x8f0/0x8f0 [ 1978.921516][T12898] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1978.926816][T12898] netlink_rcv_skb+0x15a/0x430 [ 1978.931598][T12898] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1978.938543][T12898] ? netlink_ack+0xa10/0xa10 [ 1978.943154][T12898] genl_rcv+0x24/0x40 [ 1978.947143][T12898] netlink_unicast+0x533/0x7d0 [ 1978.951916][T12898] ? netlink_attachskb+0x810/0x810 [ 1978.957032][T12898] ? __phys_addr_symbol+0x2c/0x70 [ 1978.962056][T12898] ? __check_object_size+0x171/0x3e4 [ 1978.967350][T12898] netlink_sendmsg+0x856/0xd90 [ 1978.972126][T12898] ? netlink_unicast+0x7d0/0x7d0 [ 1978.977075][T12898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1978.982367][T12898] ? netlink_unicast+0x7d0/0x7d0 [ 1978.987307][T12898] sock_sendmsg+0xcf/0x120 [ 1978.991735][T12898] ____sys_sendmsg+0x6e8/0x810 [ 1978.996507][T12898] ? kernel_sendmsg+0x50/0x50 [ 1979.001182][T12898] ? do_recvmmsg+0x6d0/0x6d0 [ 1979.005790][T12898] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1979.011777][T12898] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1979.017758][T12898] ? __lock_acquire+0xb5e/0x5570 [ 1979.022701][T12898] ___sys_sendmsg+0xf3/0x170 [ 1979.027299][T12898] ? sendmsg_copy_msghdr+0x160/0x160 [ 1979.032589][T12898] ? __fget_files+0x272/0x400 [ 1979.037279][T12898] ? lock_downgrade+0x830/0x830 [ 1979.042139][T12898] ? find_held_lock+0x2d/0x110 [ 1979.046923][T12898] ? __fget_files+0x294/0x400 [ 1979.051614][T12898] ? __fget_light+0xea/0x280 [ 1979.056217][T12898] __sys_sendmsg+0xe5/0x1b0 [ 1979.060728][T12898] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1979.065778][T12898] ? syscall_enter_from_user_mode+0x20/0x290 [ 1979.071765][T12898] ? lockdep_hardirqs_on+0x53/0x100 [ 1979.076972][T12898] do_syscall_64+0x2d/0x70 [ 1979.081397][T12898] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1979.087296][T12898] RIP: 0033:0x45d5b9 [ 1979.091194][T12898] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1979.110797][T12898] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1979.119337][T12898] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1979.127309][T12898] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1979.135284][T12898] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1979.143260][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1979.151327][T12898] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r3, 0xf, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 15:05:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "0000000001cb7daf01"}, 0xd) 15:05:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2700}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:25 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000005d40), &(0x7f0000005d80)=0x4) 15:05:25 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, &(0x7f0000000900)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}, @mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x1ff}, 0x0, 0x0}}], 0xb0}, 0x0) 15:05:25 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "d5d68f", 0x0, "b4ed19"}}}}}}, 0x0) [ 1980.019789][T12966] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1980.040900][T12966] CPU: 0 PID: 12966 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1980.049901][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.059958][T12966] Call Trace: [ 1980.063260][T12966] dump_stack+0x198/0x1fd [ 1980.067615][T12966] sysfs_warn_dup.cold+0x1c/0x2d [ 1980.072562][T12966] sysfs_do_create_link_sd+0x11e/0x140 [ 1980.078038][T12966] sysfs_create_link+0x5f/0xc0 [ 1980.082815][T12966] device_add+0x6ff/0x1c40 [ 1980.087249][T12966] ? devlink_add_symlinks+0x450/0x450 [ 1980.092630][T12966] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1980.098626][T12966] wiphy_register+0x1d66/0x2850 [ 1980.103499][T12966] ? wiphy_unregister+0xc10/0xc10 [ 1980.108534][T12966] ? generic_xdp_install+0x700/0x700 [ 1980.113838][T12966] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1980.119915][T12966] ieee80211_register_hw+0x22c9/0x39a0 [ 1980.125408][T12966] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1980.130793][T12966] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1980.136697][T12966] ? lock_downgrade+0x830/0x830 [ 1980.141556][T12966] ? lock_is_held_type+0xbb/0xf0 [ 1980.146504][T12966] ? memset+0x20/0x40 [ 1980.150494][T12966] ? __hrtimer_init+0x12c/0x260 [ 1980.155377][T12966] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1980.161299][T12966] ? hwsim_virtio_rx_work+0x350/0x350 [ 1980.166683][T12966] ? memcpy+0x39/0x60 [ 1980.170674][T12966] hwsim_new_radio_nl+0x93e/0xf8c [ 1980.175706][T12966] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1980.181618][T12966] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1980.188556][T12966] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1980.195421][T12966] genl_rcv_msg+0x61d/0x980 [ 1980.199938][T12966] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1980.206890][T12966] ? lock_release+0x8f0/0x8f0 [ 1980.211568][T12966] ? netdev_core_pick_tx+0x2e0/0x2e0 15:05:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), 0x4) [ 1980.216865][T12966] netlink_rcv_skb+0x15a/0x430 [ 1980.221640][T12966] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1980.228581][T12966] ? netlink_ack+0xa10/0xa10 [ 1980.233197][T12966] genl_rcv+0x24/0x40 [ 1980.237186][T12966] netlink_unicast+0x533/0x7d0 [ 1980.241966][T12966] ? netlink_attachskb+0x810/0x810 [ 1980.247079][T12966] ? __phys_addr_symbol+0x2c/0x70 [ 1980.252115][T12966] ? __check_object_size+0x171/0x3e4 [ 1980.257407][T12966] netlink_sendmsg+0x856/0xd90 [ 1980.262184][T12966] ? netlink_unicast+0x7d0/0x7d0 [ 1980.267134][T12966] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1980.272433][T12966] ? netlink_unicast+0x7d0/0x7d0 [ 1980.277387][T12966] sock_sendmsg+0xcf/0x120 [ 1980.281812][T12966] ____sys_sendmsg+0x6e8/0x810 [ 1980.286585][T12966] ? kernel_sendmsg+0x50/0x50 [ 1980.291266][T12966] ? do_recvmmsg+0x6d0/0x6d0 [ 1980.295870][T12966] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1980.301861][T12966] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1980.307842][T12966] ? __lock_acquire+0xb5e/0x5570 [ 1980.312802][T12966] ___sys_sendmsg+0xf3/0x170 [ 1980.317412][T12966] ? sendmsg_copy_msghdr+0x160/0x160 [ 1980.322706][T12966] ? __fget_files+0x272/0x400 [ 1980.327399][T12966] ? lock_downgrade+0x830/0x830 [ 1980.332253][T12966] ? find_held_lock+0x2d/0x110 [ 1980.337050][T12966] ? __fget_files+0x294/0x400 [ 1980.341750][T12966] ? __fget_light+0xea/0x280 [ 1980.346358][T12966] __sys_sendmsg+0xe5/0x1b0 [ 1980.350873][T12966] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1980.355923][T12966] ? syscall_enter_from_user_mode+0x20/0x290 [ 1980.361908][T12966] ? lockdep_hardirqs_on+0x53/0x100 [ 1980.367115][T12966] do_syscall_64+0x2d/0x70 [ 1980.371553][T12966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1980.377444][T12966] RIP: 0033:0x45d5b9 [ 1980.381340][T12966] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1980.400988][T12966] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1980.409420][T12966] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:05:26 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 15:05:26 executing program 5: pselect6(0xfc6c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0, 0x0) [ 1980.417394][T12966] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1980.425369][T12966] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1980.433341][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1980.441313][T12966] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) 15:05:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x0, 0x17c, 0x17c, 0x0, 0x5, 0x244, 0x260, 0x260, 0x244, 0x260, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_virt_wifi\x00', 'veth1_vlan\x00'}, 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@mcast2, @mcast2, [], [], 'ip6tnl0\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xc3}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) 15:05:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 15:05:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}}, 0x0) 15:05:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2800}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000240)={@private, @broadcast}, 0x3) 15:05:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r1, 0x105, 0x0, 0x0, {0xa}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0) 15:05:26 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001500)="e1b023c21959ab1ba3cbe9cd17eadd14833ae32526d1ad2e3a922135cafa4e435c017ac331af3e613b3f5d3efbccb018c7010d8379a2084d6c4368890829a860782e3c68240479d5244541b48e4928dcef63a92824456314ba92efb1924809167f17291f3a056b4c428e5f449fd95961e65a0323d5607b1d9c17986505a2ebbc78e484b54000789ec6b90c1a18e45de2bf20baba1f1aa2ecd5261523b07414f75da3566d246eda5ac8b09e15b6462229a15d9130f07bc823105e81b02483e9003b2a2ab1f7607662fcaeb30a", 0xcc}, {&(0x7f0000001a00)="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", 0x71d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000019c0)="9c", 0x1}], 0x1}}], 0x2, 0x4c095) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x100) [ 1980.892281][T12998] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1980.925053][T12998] CPU: 0 PID: 12998 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1980.933761][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.943926][T12998] Call Trace: [ 1980.947233][T12998] dump_stack+0x198/0x1fd [ 1980.951639][T12998] sysfs_warn_dup.cold+0x1c/0x2d [ 1980.956589][T12998] sysfs_do_create_link_sd+0x11e/0x140 [ 1980.962056][T12998] sysfs_create_link+0x5f/0xc0 [ 1980.966835][T12998] device_add+0x6ff/0x1c40 [ 1980.971263][T12998] ? devlink_add_symlinks+0x450/0x450 [ 1980.976650][T12998] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1980.982654][T12998] wiphy_register+0x1d66/0x2850 [ 1980.987544][T12998] ? wiphy_unregister+0xc10/0xc10 [ 1980.992578][T12998] ? generic_xdp_install+0x700/0x700 [ 1980.997918][T12998] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1981.004082][T12998] ieee80211_register_hw+0x22c9/0x39a0 [ 1981.009564][T12998] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1981.014945][T12998] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1981.020851][T12998] ? lock_downgrade+0x830/0x830 [ 1981.025710][T12998] ? lock_is_held_type+0xbb/0xf0 [ 1981.030654][T12998] ? memset+0x20/0x40 [ 1981.034646][T12998] ? __hrtimer_init+0x12c/0x260 [ 1981.039509][T12998] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1981.045259][T12998] ? hwsim_virtio_rx_work+0x350/0x350 [ 1981.050685][T12998] ? memcpy+0x39/0x60 [ 1981.054768][T12998] hwsim_new_radio_nl+0x93e/0xf8c [ 1981.059814][T12998] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1981.065725][T12998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1981.072664][T12998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1981.079529][T12998] genl_rcv_msg+0x61d/0x980 [ 1981.084046][T12998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1981.091005][T12998] ? lock_release+0x8f0/0x8f0 [ 1981.095688][T12998] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1981.100993][T12998] netlink_rcv_skb+0x15a/0x430 [ 1981.105771][T12998] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1981.112715][T12998] ? netlink_ack+0xa10/0xa10 [ 1981.117346][T12998] genl_rcv+0x24/0x40 [ 1981.121334][T12998] netlink_unicast+0x533/0x7d0 [ 1981.126115][T12998] ? netlink_attachskb+0x810/0x810 [ 1981.131236][T12998] ? __phys_addr_symbol+0x2c/0x70 [ 1981.136288][T12998] ? __check_object_size+0x171/0x3e4 [ 1981.141669][T12998] netlink_sendmsg+0x856/0xd90 [ 1981.146446][T12998] ? netlink_unicast+0x7d0/0x7d0 [ 1981.151402][T12998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1981.156696][T12998] ? netlink_unicast+0x7d0/0x7d0 [ 1981.161634][T12998] sock_sendmsg+0xcf/0x120 [ 1981.166057][T12998] ____sys_sendmsg+0x6e8/0x810 [ 1981.170829][T12998] ? kernel_sendmsg+0x50/0x50 [ 1981.175507][T12998] ? do_recvmmsg+0x6d0/0x6d0 [ 1981.180107][T12998] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1981.186097][T12998] ? lockdep_hardirqs_on_prepare+0x530/0x530 15:05:26 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000200)=0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) [ 1981.192080][T12998] ? __lock_acquire+0xb5e/0x5570 [ 1981.197026][T12998] ___sys_sendmsg+0xf3/0x170 [ 1981.201624][T12998] ? sendmsg_copy_msghdr+0x160/0x160 [ 1981.206919][T12998] ? __fget_files+0x272/0x400 [ 1981.211605][T12998] ? lock_downgrade+0x830/0x830 [ 1981.216460][T12998] ? find_held_lock+0x2d/0x110 [ 1981.221252][T12998] ? __fget_files+0x294/0x400 [ 1981.225947][T12998] ? __fget_light+0xea/0x280 [ 1981.230552][T12998] __sys_sendmsg+0xe5/0x1b0 [ 1981.235072][T12998] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1981.240565][T12998] ? syscall_enter_from_user_mode+0x20/0x290 [ 1981.246549][T12998] ? lockdep_hardirqs_on+0x53/0x100 [ 1981.251757][T12998] do_syscall_64+0x2d/0x70 [ 1981.256248][T12998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1981.262141][T12998] RIP: 0033:0x45d5b9 [ 1981.266087][T12998] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.285719][T12998] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.294150][T12998] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1981.302123][T12998] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1981.310109][T12998] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1981.318083][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1981.326059][T12998] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind(r1, &(0x7f00000001c0)=@l2={0xa, 0x0, @none}, 0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) [ 1981.386338][T12999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 15:05:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x11}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x185, 0x10, 0x0}, 0x3f) [ 1981.449263][T13023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 15:05:27 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)="d800000018008109e00a80ecdb4cb9140a440aef0b007c02e87c55a1bc0005008eb3d81fc77948f30500150007008178a800050040003cc00200001203ac040012d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 15:05:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000100005070000000000000000f0ff0000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c000200080003", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x38}]}}}]}, 0x38}}, 0x0) 15:05:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2900}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x6c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, [@TCA_BPF_ACT={0x34}]}}, @TCA_RATE={0x6}]}, 0x6c}}, 0x0) 15:05:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000040)=0x4) [ 1981.621534][T13034] IPv6: Can't replace route, no match found [ 1981.644493][T13033] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1981.698302][T13033] CPU: 1 PID: 13033 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1981.706998][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.717035][T13033] Call Trace: [ 1981.720315][T13033] dump_stack+0x198/0x1fd [ 1981.724632][T13033] sysfs_warn_dup.cold+0x1c/0x2d [ 1981.729561][T13033] sysfs_do_create_link_sd+0x11e/0x140 [ 1981.735008][T13033] sysfs_create_link+0x5f/0xc0 [ 1981.739758][T13033] device_add+0x6ff/0x1c40 [ 1981.744161][T13033] ? devlink_add_symlinks+0x450/0x450 [ 1981.749517][T13033] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1981.755486][T13033] wiphy_register+0x1d66/0x2850 [ 1981.760334][T13033] ? wiphy_unregister+0xc10/0xc10 [ 1981.765342][T13033] ? generic_xdp_install+0x700/0x700 [ 1981.770615][T13033] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1981.776665][T13033] ieee80211_register_hw+0x22c9/0x39a0 [ 1981.782120][T13033] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1981.787472][T13033] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1981.793348][T13033] ? lock_downgrade+0x830/0x830 [ 1981.798184][T13033] ? lock_is_held_type+0xbb/0xf0 [ 1981.803105][T13033] ? memset+0x20/0x40 [ 1981.807071][T13033] ? __hrtimer_init+0x12c/0x260 [ 1981.811905][T13033] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1981.817620][T13033] ? hwsim_virtio_rx_work+0x350/0x350 [ 1981.822980][T13033] ? memcpy+0x39/0x60 [ 1981.826946][T13033] hwsim_new_radio_nl+0x93e/0xf8c [ 1981.831956][T13033] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1981.837841][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1981.844752][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1981.851583][T13033] genl_rcv_msg+0x61d/0x980 [ 1981.856076][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1981.863002][T13033] ? lock_release+0x8f0/0x8f0 [ 1981.867659][T13033] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1981.872949][T13033] netlink_rcv_skb+0x15a/0x430 [ 1981.877698][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1981.884614][T13033] ? netlink_ack+0xa10/0xa10 [ 1981.889197][T13033] genl_rcv+0x24/0x40 [ 1981.893170][T13033] netlink_unicast+0x533/0x7d0 [ 1981.897920][T13033] ? netlink_attachskb+0x810/0x810 [ 1981.903016][T13033] ? __phys_addr_symbol+0x2c/0x70 [ 1981.908023][T13033] ? __check_object_size+0x171/0x3e4 [ 1981.913297][T13033] netlink_sendmsg+0x856/0xd90 [ 1981.918050][T13033] ? netlink_unicast+0x7d0/0x7d0 [ 1981.922977][T13033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1981.928245][T13033] ? netlink_unicast+0x7d0/0x7d0 [ 1981.933163][T13033] sock_sendmsg+0xcf/0x120 [ 1981.937563][T13033] ____sys_sendmsg+0x6e8/0x810 [ 1981.942314][T13033] ? kernel_sendmsg+0x50/0x50 [ 1981.946971][T13033] ? do_recvmmsg+0x6d0/0x6d0 [ 1981.951545][T13033] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1981.957509][T13033] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1981.963467][T13033] ? __lock_acquire+0xb5e/0x5570 [ 1981.968388][T13033] ___sys_sendmsg+0xf3/0x170 [ 1981.972959][T13033] ? sendmsg_copy_msghdr+0x160/0x160 [ 1981.978228][T13033] ? __fget_files+0x272/0x400 [ 1981.982897][T13033] ? lock_downgrade+0x830/0x830 [ 1981.987739][T13033] ? find_held_lock+0x2d/0x110 [ 1981.992497][T13033] ? __fget_files+0x294/0x400 [ 1981.997510][T13033] ? __fget_light+0xea/0x280 [ 1982.002086][T13033] __sys_sendmsg+0xe5/0x1b0 [ 1982.006574][T13033] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1982.011771][T13033] ? syscall_enter_from_user_mode+0x20/0x290 [ 1982.017734][T13033] ? lockdep_hardirqs_on+0x53/0x100 [ 1982.022914][T13033] do_syscall_64+0x2d/0x70 [ 1982.027315][T13033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1982.033187][T13033] RIP: 0033:0x45d5b9 [ 1982.037066][T13033] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.056669][T13033] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1982.065061][T13033] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1982.073010][T13033] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1982.080961][T13033] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1982.088912][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:27 executing program 5: syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "000000010865390401040502000009c56a3000", "938494eb3018ad591b661fa808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a73b8268129e5fa4316a5d8c69"}}}}}}}, 0x0) [ 1982.096864][T13033] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:27 executing program 3: syz_emit_ethernet(0x42e, &(0x7f0000000600)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f2f2f1", 0x3f8, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x0, 0xb, "a78c000004ff000053d5dea6b259fe8000000000000023493b87aa0568f00b0d71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba6feed320516e05a45c70daf0622c51c7a93e357f7671975afc9c545c59d6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8551f1f8f4723b8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 15:05:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 15:05:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)="2f0000001c000507000000000d2300000200041f01000000fc0003c9130001", 0x1f}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffde4) 15:05:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x81}]}}}]}, 0x3c}}, 0x0) [ 1982.291103][T13049] IPv6: addrconf: prefix option has invalid lifetime [ 1982.323847][T13049] IPv6: addrconf: prefix option has invalid lifetime 15:05:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070700eebfde00000001000b0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 15:05:28 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) [ 1982.397549][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1982.445105][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1982.470260][T13033] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' 15:05:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 1982.492967][T13033] CPU: 1 PID: 13033 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1982.501656][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.511710][T13033] Call Trace: [ 1982.515013][T13033] dump_stack+0x198/0x1fd [ 1982.519365][T13033] sysfs_warn_dup.cold+0x1c/0x2d [ 1982.524325][T13033] sysfs_do_create_link_sd+0x11e/0x140 [ 1982.529795][T13033] sysfs_create_link+0x5f/0xc0 [ 1982.534571][T13033] device_add+0x6ff/0x1c40 [ 1982.538999][T13033] ? devlink_add_symlinks+0x450/0x450 [ 1982.544382][T13033] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1982.550461][T13033] wiphy_register+0x1d66/0x2850 [ 1982.555337][T13033] ? wiphy_unregister+0xc10/0xc10 [ 1982.560374][T13033] ? generic_xdp_install+0x700/0x700 [ 1982.565677][T13033] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1982.571756][T13033] ieee80211_register_hw+0x22c9/0x39a0 [ 1982.577239][T13033] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1982.582614][T13033] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1982.588518][T13033] ? lock_downgrade+0x830/0x830 [ 1982.593373][T13033] ? lock_is_held_type+0xbb/0xf0 [ 1982.598327][T13033] ? memset+0x20/0x40 [ 1982.602352][T13033] ? __hrtimer_init+0x12c/0x260 [ 1982.607216][T13033] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1982.612960][T13033] ? hwsim_virtio_rx_work+0x350/0x350 [ 1982.618350][T13033] ? memcpy+0x39/0x60 [ 1982.622352][T13033] hwsim_new_radio_nl+0x93e/0xf8c [ 1982.627388][T13033] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1982.633303][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1982.640247][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1982.647103][T13033] genl_rcv_msg+0x61d/0x980 [ 1982.651622][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1982.659879][T13033] ? lock_release+0x8f0/0x8f0 [ 1982.664560][T13033] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1982.669858][T13033] netlink_rcv_skb+0x15a/0x430 [ 1982.674630][T13033] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1982.681574][T13033] ? netlink_ack+0xa10/0xa10 [ 1982.686185][T13033] genl_rcv+0x24/0x40 [ 1982.690175][T13033] netlink_unicast+0x533/0x7d0 [ 1982.694948][T13033] ? netlink_attachskb+0x810/0x810 [ 1982.700071][T13033] ? __phys_addr_symbol+0x2c/0x70 [ 1982.705100][T13033] ? __check_object_size+0x171/0x3e4 [ 1982.710396][T13033] netlink_sendmsg+0x856/0xd90 [ 1982.715186][T13033] ? netlink_unicast+0x7d0/0x7d0 [ 1982.720136][T13033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1982.725424][T13033] ? netlink_unicast+0x7d0/0x7d0 [ 1982.730370][T13033] sock_sendmsg+0xcf/0x120 [ 1982.734794][T13033] ____sys_sendmsg+0x6e8/0x810 [ 1982.739562][T13033] ? kernel_sendmsg+0x50/0x50 [ 1982.744237][T13033] ? do_recvmmsg+0x6d0/0x6d0 [ 1982.748840][T13033] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1982.754825][T13033] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1982.760806][T13033] ? __lock_acquire+0xb5e/0x5570 [ 1982.765755][T13033] ___sys_sendmsg+0xf3/0x170 [ 1982.770350][T13033] ? sendmsg_copy_msghdr+0x160/0x160 [ 1982.775641][T13033] ? __fget_files+0x272/0x400 [ 1982.780328][T13033] ? lock_downgrade+0x830/0x830 [ 1982.785185][T13033] ? find_held_lock+0x2d/0x110 [ 1982.789972][T13033] ? __fget_files+0x294/0x400 [ 1982.794661][T13033] ? __fget_light+0xea/0x280 [ 1982.799263][T13033] __sys_sendmsg+0xe5/0x1b0 [ 1982.803772][T13033] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1982.808815][T13033] ? syscall_enter_from_user_mode+0x20/0x290 [ 1982.814797][T13033] ? lockdep_hardirqs_on+0x53/0x100 [ 1982.820006][T13033] do_syscall_64+0x2d/0x70 [ 1982.824431][T13033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1982.830326][T13033] RIP: 0033:0x45d5b9 [ 1982.834225][T13033] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.853826][T13033] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1982.862237][T13033] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1982.870210][T13033] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1982.878185][T13033] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1982.886156][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 1982.894128][T13033] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1982.995643][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1983.019673][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x290d}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006a000321"], 0x1}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 15:05:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) [ 1983.075809][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1983.097947][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x1ff}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="b8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1983.143398][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) [ 1983.192463][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1983.252569][T13103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3f4, 0x218, 0x218, 0x314, 0x314, 0x314, 0x314, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'macvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@local, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @dev, @loopback}}}, {{@arp={@remote, @rand_addr, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'ip6gre0\x00'}, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x440) [ 1983.349995][T13109] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1983.394977][T13109] CPU: 0 PID: 13109 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1983.403705][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.413768][T13109] Call Trace: [ 1983.417077][T13109] dump_stack+0x198/0x1fd [ 1983.421425][T13109] sysfs_warn_dup.cold+0x1c/0x2d [ 1983.426374][T13109] sysfs_do_create_link_sd+0x11e/0x140 [ 1983.431846][T13109] sysfs_create_link+0x5f/0xc0 [ 1983.436621][T13109] device_add+0x6ff/0x1c40 [ 1983.441058][T13109] ? devlink_add_symlinks+0x450/0x450 [ 1983.446439][T13109] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1983.452429][T13109] wiphy_register+0x1d66/0x2850 [ 1983.457385][T13109] ? wiphy_unregister+0xc10/0xc10 [ 1983.462415][T13109] ? generic_xdp_install+0x700/0x700 [ 1983.467714][T13109] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1983.473794][T13109] ieee80211_register_hw+0x22c9/0x39a0 [ 1983.479277][T13109] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1983.484654][T13109] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1983.490544][T13109] ? lock_downgrade+0x830/0x830 [ 1983.495406][T13109] ? lock_is_held_type+0xbb/0xf0 [ 1983.500350][T13109] ? memset+0x20/0x40 [ 1983.504428][T13109] ? __hrtimer_init+0x12c/0x260 [ 1983.509288][T13109] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1983.515120][T13109] ? hwsim_virtio_rx_work+0x350/0x350 [ 1983.520504][T13109] ? memcpy+0x39/0x60 [ 1983.524501][T13109] hwsim_new_radio_nl+0x93e/0xf8c [ 1983.529538][T13109] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1983.535451][T13109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1983.542391][T13109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1983.549251][T13109] genl_rcv_msg+0x61d/0x980 [ 1983.553769][T13109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1983.560718][T13109] ? lock_release+0x8f0/0x8f0 [ 1983.565397][T13109] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1983.570694][T13109] netlink_rcv_skb+0x15a/0x430 [ 1983.575464][T13109] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1983.582412][T13109] ? netlink_ack+0xa10/0xa10 [ 1983.587026][T13109] genl_rcv+0x24/0x40 [ 1983.591102][T13109] netlink_unicast+0x533/0x7d0 [ 1983.595881][T13109] ? netlink_attachskb+0x810/0x810 [ 1983.601001][T13109] ? __phys_addr_symbol+0x2c/0x70 [ 1983.606040][T13109] ? __check_object_size+0x171/0x3e4 [ 1983.611334][T13109] netlink_sendmsg+0x856/0xd90 [ 1983.616110][T13109] ? netlink_unicast+0x7d0/0x7d0 [ 1983.621066][T13109] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1983.626356][T13109] ? netlink_unicast+0x7d0/0x7d0 [ 1983.631297][T13109] sock_sendmsg+0xcf/0x120 [ 1983.635722][T13109] ____sys_sendmsg+0x6e8/0x810 [ 1983.640494][T13109] ? kernel_sendmsg+0x50/0x50 [ 1983.645177][T13109] ? do_recvmmsg+0x6d0/0x6d0 [ 1983.649775][T13109] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1983.655762][T13109] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1983.661743][T13109] ? __lock_acquire+0xb5e/0x5570 [ 1983.666692][T13109] ___sys_sendmsg+0xf3/0x170 [ 1983.671285][T13109] ? sendmsg_copy_msghdr+0x160/0x160 [ 1983.676578][T13109] ? __fget_files+0x272/0x400 [ 1983.681262][T13109] ? lock_downgrade+0x830/0x830 [ 1983.686115][T13109] ? find_held_lock+0x2d/0x110 [ 1983.690897][T13109] ? __fget_files+0x294/0x400 15:05:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 15:05:29 executing program 4: r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, 0x0, &(0x7f000033bffc)) 15:05:29 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000280)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba00000001264b3836005404b0e0301a4ce875f2e3ff5f163ee340b76712600edb00000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0077e900010000000049740000000000000006ad8e5ecc326d3a09ffc2c254"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 1983.695596][T13109] ? __fget_light+0xea/0x280 [ 1983.700202][T13109] __sys_sendmsg+0xe5/0x1b0 [ 1983.704711][T13109] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1983.709756][T13109] ? syscall_enter_from_user_mode+0x20/0x290 [ 1983.715741][T13109] ? lockdep_hardirqs_on+0x53/0x100 [ 1983.720949][T13109] do_syscall_64+0x2d/0x70 [ 1983.725370][T13109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1983.731260][T13109] RIP: 0033:0x45d5b9 [ 1983.735162][T13109] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.754767][T13109] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.763181][T13109] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1983.771155][T13109] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1983.779131][T13109] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1983.787120][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1983.795098][T13109] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:29 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c}}, @TCA_RATE={0x6, 0x5, {0x56}}]}, 0x54}}, 0x0) 15:05:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) [ 1983.902298][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2a00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:29 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) 15:05:29 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000040020000a801000000000000000000000000fffc00000000a8010000a8010000a8010000a8010000a8010000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000007000b800000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000ff7f03000000080000007070747000000000000000000000000000000000008000100000000000040000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000200000073797a3000000000000000000000000000000000000000000000000045f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004fefdffff"], 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=ANY=[], 0x1) 15:05:29 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}], 0x1, 0x0) 15:05:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 15:05:29 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) 15:05:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$tipc(r2, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 15:05:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x62, 0x10, 0xa4}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) [ 1984.141840][T13148] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1984.215936][T13148] CPU: 1 PID: 13148 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1984.224633][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.234695][T13148] Call Trace: [ 1984.238001][T13148] dump_stack+0x198/0x1fd [ 1984.242351][T13148] sysfs_warn_dup.cold+0x1c/0x2d [ 1984.247300][T13148] sysfs_do_create_link_sd+0x11e/0x140 [ 1984.252770][T13148] sysfs_create_link+0x5f/0xc0 [ 1984.257549][T13148] device_add+0x6ff/0x1c40 [ 1984.261985][T13148] ? devlink_add_symlinks+0x450/0x450 [ 1984.267378][T13148] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1984.273380][T13148] wiphy_register+0x1d66/0x2850 [ 1984.278254][T13148] ? wiphy_unregister+0xc10/0xc10 [ 1984.283287][T13148] ? generic_xdp_install+0x700/0x700 [ 1984.288592][T13148] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1984.294673][T13148] ieee80211_register_hw+0x22c9/0x39a0 [ 1984.300156][T13148] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1984.305532][T13148] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1984.311438][T13148] ? lock_downgrade+0x830/0x830 [ 1984.316297][T13148] ? lock_is_held_type+0xbb/0xf0 [ 1984.321242][T13148] ? memset+0x20/0x40 [ 1984.325235][T13148] ? __hrtimer_init+0x12c/0x260 [ 1984.330100][T13148] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1984.335852][T13148] ? hwsim_virtio_rx_work+0x350/0x350 [ 1984.341233][T13148] ? memcpy+0x39/0x60 [ 1984.345243][T13148] hwsim_new_radio_nl+0x93e/0xf8c [ 1984.350282][T13148] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1984.356201][T13148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1984.363146][T13148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1984.370005][T13148] genl_rcv_msg+0x61d/0x980 [ 1984.374525][T13148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1984.381479][T13148] ? lock_release+0x8f0/0x8f0 [ 1984.386159][T13148] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1984.391456][T13148] netlink_rcv_skb+0x15a/0x430 [ 1984.396230][T13148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1984.403175][T13148] ? netlink_ack+0xa10/0xa10 [ 1984.407791][T13148] genl_rcv+0x24/0x40 [ 1984.411784][T13148] netlink_unicast+0x533/0x7d0 [ 1984.416563][T13148] ? netlink_attachskb+0x810/0x810 [ 1984.421686][T13148] ? __phys_addr_symbol+0x2c/0x70 [ 1984.426717][T13148] ? __check_object_size+0x171/0x3e4 [ 1984.432018][T13148] netlink_sendmsg+0x856/0xd90 [ 1984.436797][T13148] ? netlink_unicast+0x7d0/0x7d0 [ 1984.441750][T13148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1984.447046][T13148] ? netlink_unicast+0x7d0/0x7d0 [ 1984.451989][T13148] sock_sendmsg+0xcf/0x120 [ 1984.456409][T13148] ____sys_sendmsg+0x6e8/0x810 [ 1984.461179][T13148] ? kernel_sendmsg+0x50/0x50 [ 1984.465857][T13148] ? do_recvmmsg+0x6d0/0x6d0 [ 1984.470457][T13148] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1984.476451][T13148] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1984.482436][T13148] ? __lock_acquire+0xb5e/0x5570 [ 1984.487388][T13148] ___sys_sendmsg+0xf3/0x170 [ 1984.491986][T13148] ? sendmsg_copy_msghdr+0x160/0x160 [ 1984.497282][T13148] ? __fget_files+0x272/0x400 [ 1984.501968][T13148] ? lock_downgrade+0x830/0x830 [ 1984.506847][T13148] ? find_held_lock+0x2d/0x110 [ 1984.511631][T13148] ? __fget_files+0x294/0x400 [ 1984.516321][T13148] ? __fget_light+0xea/0x280 [ 1984.521061][T13148] __sys_sendmsg+0xe5/0x1b0 [ 1984.525665][T13148] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1984.530711][T13148] ? syscall_enter_from_user_mode+0x20/0x290 [ 1984.536716][T13148] ? lockdep_hardirqs_on+0x53/0x100 [ 1984.541925][T13148] do_syscall_64+0x2d/0x70 [ 1984.546350][T13148] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1984.552246][T13148] RIP: 0033:0x45d5b9 15:05:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r1, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x8f}}]}, 0x54}}, 0x0) [ 1984.556144][T13148] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.575747][T13148] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1984.584165][T13148] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1984.592140][T13148] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1984.600113][T13148] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1984.608088][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1984.616066][T13148] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x2b00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1984.804788][T13171] tipc: Enabling of bearer rejected, failed to enable media 15:05:30 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:05:30 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$phonet(0x23, 0x2, 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1984.853998][T13179] tipc: Enabling of bearer rejected, failed to enable media 15:05:30 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000000000000000000000007b000000000037ee67a1e3d726cee70ccd869df6ed04275e5452ec1e5377d8e8d9f65dfd48b5abbe38c6c1f8c95889b80ef90398a3318b", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a000500040000000000000008000a00", @ANYRES32=r0, @ANYBLOB], 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x80, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xa4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x7}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x80}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x64}}, 0x0) 15:05:30 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15:05:30 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) unshare(0x600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r1, 0x4, 0x0) [ 1985.339244][T13183] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1985.366006][T13183] CPU: 1 PID: 13183 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1985.374744][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.384801][T13183] Call Trace: [ 1985.388106][T13183] dump_stack+0x198/0x1fd [ 1985.392455][T13183] sysfs_warn_dup.cold+0x1c/0x2d [ 1985.397411][T13183] sysfs_do_create_link_sd+0x11e/0x140 [ 1985.402881][T13183] sysfs_create_link+0x5f/0xc0 [ 1985.407655][T13183] device_add+0x6ff/0x1c40 [ 1985.412089][T13183] ? devlink_add_symlinks+0x450/0x450 [ 1985.417473][T13183] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1985.423469][T13183] wiphy_register+0x1d66/0x2850 [ 1985.428341][T13183] ? wiphy_unregister+0xc10/0xc10 [ 1985.433508][T13183] ? generic_xdp_install+0x700/0x700 [ 1985.438814][T13183] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1985.444893][T13183] ieee80211_register_hw+0x22c9/0x39a0 [ 1985.450375][T13183] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1985.455754][T13183] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1985.461662][T13183] ? lock_downgrade+0x830/0x830 [ 1985.466522][T13183] ? lock_is_held_type+0xbb/0xf0 [ 1985.471467][T13183] ? memset+0x20/0x40 [ 1985.475461][T13183] ? __hrtimer_init+0x12c/0x260 [ 1985.480325][T13183] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1985.486074][T13183] ? hwsim_virtio_rx_work+0x350/0x350 [ 1985.491458][T13183] ? memcpy+0x39/0x60 [ 1985.495454][T13183] hwsim_new_radio_nl+0x93e/0xf8c [ 1985.500492][T13183] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1985.506407][T13183] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1985.513353][T13183] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1985.520311][T13183] genl_rcv_msg+0x61d/0x980 [ 1985.524830][T13183] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1985.531784][T13183] ? lock_release+0x8f0/0x8f0 [ 1985.536462][T13183] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1985.541869][T13183] netlink_rcv_skb+0x15a/0x430 [ 1985.546641][T13183] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1985.553590][T13183] ? netlink_ack+0xa10/0xa10 [ 1985.558203][T13183] genl_rcv+0x24/0x40 [ 1985.562195][T13183] netlink_unicast+0x533/0x7d0 [ 1985.566971][T13183] ? netlink_attachskb+0x810/0x810 [ 1985.572088][T13183] ? __phys_addr_symbol+0x2c/0x70 [ 1985.577117][T13183] ? __check_object_size+0x171/0x3e4 [ 1985.582415][T13183] netlink_sendmsg+0x856/0xd90 [ 1985.587196][T13183] ? netlink_unicast+0x7d0/0x7d0 [ 1985.592148][T13183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1985.597441][T13183] ? netlink_unicast+0x7d0/0x7d0 [ 1985.602386][T13183] sock_sendmsg+0xcf/0x120 [ 1985.606811][T13183] ____sys_sendmsg+0x6e8/0x810 [ 1985.611587][T13183] ? kernel_sendmsg+0x50/0x50 [ 1985.616270][T13183] ? do_recvmmsg+0x6d0/0x6d0 [ 1985.620875][T13183] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1985.626869][T13183] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1985.632852][T13183] ? __lock_acquire+0xb5e/0x5570 [ 1985.637802][T13183] ___sys_sendmsg+0xf3/0x170 [ 1985.642402][T13183] ? sendmsg_copy_msghdr+0x160/0x160 [ 1985.647697][T13183] ? __fget_files+0x272/0x400 [ 1985.652384][T13183] ? lock_downgrade+0x830/0x830 [ 1985.657243][T13183] ? find_held_lock+0x2d/0x110 [ 1985.662033][T13183] ? __fget_files+0x294/0x400 [ 1985.666733][T13183] ? __fget_light+0xea/0x280 [ 1985.671340][T13183] __sys_sendmsg+0xe5/0x1b0 [ 1985.675850][T13183] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1985.680901][T13183] ? syscall_enter_from_user_mode+0x20/0x290 [ 1985.686887][T13183] ? lockdep_hardirqs_on+0x53/0x100 [ 1985.692098][T13183] do_syscall_64+0x2d/0x70 [ 1985.696524][T13183] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1985.702419][T13183] RIP: 0033:0x45d5b9 [ 1985.706313][T13183] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.725899][T13183] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1985.734470][T13183] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1985.742425][T13183] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1985.750385][T13183] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1985.758340][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1985.766295][T13183] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1985.891515][T13193] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1985.902880][T13197] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:05:32 executing program 4: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x3f00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}) 15:05:32 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:32 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) [ 1986.324310][T13222] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1986.334708][T13224] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:05:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x3000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vcan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "730e42"}}) 15:05:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, 'veth1_vlan\x00'}, 0x18) 15:05:32 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) [ 1986.537185][T13259] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1986.564813][T13259] CPU: 0 PID: 13259 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1986.573512][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.583569][T13259] Call Trace: [ 1986.586875][T13259] dump_stack+0x198/0x1fd [ 1986.591226][T13259] sysfs_warn_dup.cold+0x1c/0x2d [ 1986.596177][T13259] sysfs_do_create_link_sd+0x11e/0x140 [ 1986.601654][T13259] sysfs_create_link+0x5f/0xc0 [ 1986.606431][T13259] device_add+0x6ff/0x1c40 [ 1986.610877][T13259] ? devlink_add_symlinks+0x450/0x450 [ 1986.616261][T13259] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1986.622344][T13259] wiphy_register+0x1d66/0x2850 [ 1986.627218][T13259] ? wiphy_unregister+0xc10/0xc10 [ 1986.632254][T13259] ? generic_xdp_install+0x700/0x700 [ 1986.637558][T13259] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1986.643638][T13259] ieee80211_register_hw+0x22c9/0x39a0 [ 1986.649119][T13259] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1986.654505][T13259] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1986.660410][T13259] ? lock_downgrade+0x830/0x830 [ 1986.665275][T13259] ? lock_is_held_type+0xbb/0xf0 [ 1986.670222][T13259] ? memset+0x20/0x40 [ 1986.674224][T13259] ? __hrtimer_init+0x12c/0x260 [ 1986.679089][T13259] mac80211_hwsim_new_radio+0x2353/0x4540 15:05:32 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:32 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400e3ff0f000000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e"], 0x3}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002e0007031dfffd946fa201000100000000000000000000e50c1be3a2f7fffe7e280000005e00", 0x2a}], 0x1}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 1986.684835][T13259] ? hwsim_virtio_rx_work+0x350/0x350 [ 1986.690218][T13259] ? memcpy+0x39/0x60 [ 1986.694211][T13259] hwsim_new_radio_nl+0x93e/0xf8c [ 1986.699249][T13259] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1986.705170][T13259] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1986.712111][T13259] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1986.719010][T13259] genl_rcv_msg+0x61d/0x980 [ 1986.723533][T13259] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1986.730490][T13259] ? lock_release+0x8f0/0x8f0 [ 1986.735176][T13259] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1986.740475][T13259] netlink_rcv_skb+0x15a/0x430 [ 1986.745249][T13259] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1986.752192][T13259] ? netlink_ack+0xa10/0xa10 [ 1986.756808][T13259] genl_rcv+0x24/0x40 [ 1986.760799][T13259] netlink_unicast+0x533/0x7d0 [ 1986.765580][T13259] ? netlink_attachskb+0x810/0x810 [ 1986.770807][T13259] ? __phys_addr_symbol+0x2c/0x70 [ 1986.775836][T13259] ? __check_object_size+0x171/0x3e4 [ 1986.781133][T13259] netlink_sendmsg+0x856/0xd90 15:05:32 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) [ 1986.785915][T13259] ? netlink_unicast+0x7d0/0x7d0 [ 1986.790870][T13259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1986.796163][T13259] ? netlink_unicast+0x7d0/0x7d0 [ 1986.801107][T13259] sock_sendmsg+0xcf/0x120 [ 1986.805531][T13259] ____sys_sendmsg+0x6e8/0x810 [ 1986.810308][T13259] ? kernel_sendmsg+0x50/0x50 [ 1986.814987][T13259] ? do_recvmmsg+0x6d0/0x6d0 [ 1986.819588][T13259] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1986.825578][T13259] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1986.831560][T13259] ? __lock_acquire+0xb5e/0x5570 [ 1986.836509][T13259] ___sys_sendmsg+0xf3/0x170 [ 1986.841109][T13259] ? sendmsg_copy_msghdr+0x160/0x160 [ 1986.846403][T13259] ? __fget_files+0x272/0x400 [ 1986.851091][T13259] ? lock_downgrade+0x830/0x830 [ 1986.855950][T13259] ? find_held_lock+0x2d/0x110 [ 1986.860737][T13259] ? __fget_files+0x294/0x400 [ 1986.865430][T13259] ? __fget_light+0xea/0x280 [ 1986.870037][T13259] __sys_sendmsg+0xe5/0x1b0 [ 1986.874550][T13259] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1986.879599][T13259] ? syscall_enter_from_user_mode+0x20/0x290 15:05:32 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) [ 1986.885588][T13259] ? lockdep_hardirqs_on+0x53/0x100 [ 1986.890796][T13259] do_syscall_64+0x2d/0x70 [ 1986.895219][T13259] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1986.901110][T13259] RIP: 0033:0x45d5b9 [ 1986.905011][T13259] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1986.924612][T13259] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:32 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d0000100000002f3144e800000008030006000718000002004000e0481e01000000f5000000000800120001000100000000000000000030006c000203009f7eae02000000adb202fcffffffffffffff00000000000001020014bb000023000000002300000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 15:05:32 executing program 3: setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x80000000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 15:05:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x38}, [@pci={{0xc, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x30}, 0x1, 0x60}, 0x0) [ 1986.933025][T13259] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1986.940997][T13259] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1986.948971][T13259] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1986.956951][T13259] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1986.964924][T13259] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:32 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x3f00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002440)=@newlinkprop={0x20, 0x6c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 15:05:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:05:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x118, 0x3e020000, 0x0, 0x118, 0x14c, 0x1d0, 0x1d0, 0x14c, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) 15:05:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x8}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x40}}, 0x0) 15:05:32 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:33 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) [ 1987.343137][T13303] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1987.394058][T13303] CPU: 0 PID: 13303 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1987.402763][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.412832][T13303] Call Trace: [ 1987.416139][T13303] dump_stack+0x198/0x1fd [ 1987.420489][T13303] sysfs_warn_dup.cold+0x1c/0x2d [ 1987.425438][T13303] sysfs_do_create_link_sd+0x11e/0x140 [ 1987.430908][T13303] sysfs_create_link+0x5f/0xc0 [ 1987.435686][T13303] device_add+0x6ff/0x1c40 [ 1987.440117][T13303] ? devlink_add_symlinks+0x450/0x450 [ 1987.445504][T13303] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1987.451500][T13303] wiphy_register+0x1d66/0x2850 [ 1987.456375][T13303] ? wiphy_unregister+0xc10/0xc10 [ 1987.461411][T13303] ? generic_xdp_install+0x700/0x700 [ 1987.466716][T13303] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1987.472797][T13303] ieee80211_register_hw+0x22c9/0x39a0 [ 1987.478298][T13303] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1987.483676][T13303] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1987.489585][T13303] ? lock_downgrade+0x830/0x830 [ 1987.494448][T13303] ? lock_is_held_type+0xbb/0xf0 [ 1987.499400][T13303] ? memset+0x20/0x40 [ 1987.503393][T13303] ? __hrtimer_init+0x12c/0x260 [ 1987.508259][T13303] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1987.514014][T13303] ? hwsim_virtio_rx_work+0x350/0x350 [ 1987.519400][T13303] ? memcpy+0x39/0x60 [ 1987.523395][T13303] hwsim_new_radio_nl+0x93e/0xf8c [ 1987.528438][T13303] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1987.534354][T13303] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1987.541298][T13303] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1987.548157][T13303] genl_rcv_msg+0x61d/0x980 [ 1987.552672][T13303] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1987.559630][T13303] ? lock_release+0x8f0/0x8f0 [ 1987.564311][T13303] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1987.569614][T13303] netlink_rcv_skb+0x15a/0x430 [ 1987.574393][T13303] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1987.581343][T13303] ? netlink_ack+0xa10/0xa10 [ 1987.585963][T13303] genl_rcv+0x24/0x40 [ 1987.589955][T13303] netlink_unicast+0x533/0x7d0 15:05:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) 15:05:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) [ 1987.594736][T13303] ? netlink_attachskb+0x810/0x810 [ 1987.599859][T13303] ? __phys_addr_symbol+0x2c/0x70 [ 1987.604893][T13303] ? __check_object_size+0x171/0x3e4 [ 1987.610191][T13303] netlink_sendmsg+0x856/0xd90 [ 1987.614974][T13303] ? netlink_unicast+0x7d0/0x7d0 [ 1987.619928][T13303] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1987.625224][T13303] ? netlink_unicast+0x7d0/0x7d0 [ 1987.630174][T13303] sock_sendmsg+0xcf/0x120 [ 1987.634597][T13303] ____sys_sendmsg+0x6e8/0x810 [ 1987.639371][T13303] ? kernel_sendmsg+0x50/0x50 [ 1987.644051][T13303] ? do_recvmmsg+0x6d0/0x6d0 [ 1987.648755][T13303] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1987.654748][T13303] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1987.660741][T13303] ___sys_sendmsg+0xf3/0x170 [ 1987.665340][T13303] ? sendmsg_copy_msghdr+0x160/0x160 [ 1987.670632][T13303] ? __fget_files+0x272/0x400 [ 1987.675316][T13303] ? lock_downgrade+0x830/0x830 [ 1987.680169][T13303] ? find_held_lock+0x2d/0x110 [ 1987.684956][T13303] ? __fget_files+0x294/0x400 [ 1987.689649][T13303] ? __fget_light+0xea/0x280 [ 1987.694260][T13303] __sys_sendmsg+0xe5/0x1b0 [ 1987.698771][T13303] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1987.703825][T13303] ? syscall_enter_from_user_mode+0x20/0x290 [ 1987.709814][T13303] ? lockdep_hardirqs_on+0x53/0x100 [ 1987.715026][T13303] do_syscall_64+0x2d/0x70 [ 1987.719450][T13303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1987.725340][T13303] RIP: 0033:0x45d5b9 15:05:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) [ 1987.729240][T13303] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1987.748844][T13303] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1987.757258][T13303] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1987.765230][T13303] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1987.773203][T13303] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1987.781175][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1987.789156][T13303] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000400ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 15:05:33 executing program 4: socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5}, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={r0, r1+60000000}, 0x0) [ 1987.921396][T13307] __nla_validate_parse: 4 callbacks suppressed [ 1987.921407][T13307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1987.953619][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x4000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:33 executing program 3: r0 = socket(0x2, 0x3, 0x1) bind$phonet(r0, &(0x7f0000000040)={0xa}, 0x61) 15:05:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:05:33 executing program 1: syz_emit_ethernet(0x146, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'J\x00$', 0x110, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}}, 0x0) [ 1988.030256][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, r0, 0xdc337f3bc5b8fbc7, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x10}]}, 0x1c}}, 0x0) 15:05:33 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 15:05:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5a}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 15:05:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x100}]}}]}, 0x38}}, 0x0) [ 1988.202830][T13356] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1988.236050][T13356] CPU: 0 PID: 13356 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1988.244869][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.254929][T13356] Call Trace: [ 1988.258241][T13356] dump_stack+0x198/0x1fd [ 1988.262679][T13356] sysfs_warn_dup.cold+0x1c/0x2d [ 1988.267631][T13356] sysfs_do_create_link_sd+0x11e/0x140 [ 1988.273146][T13356] sysfs_create_link+0x5f/0xc0 [ 1988.278040][T13356] device_add+0x6ff/0x1c40 [ 1988.282476][T13356] ? devlink_add_symlinks+0x450/0x450 [ 1988.287863][T13356] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1988.293860][T13356] wiphy_register+0x1d66/0x2850 [ 1988.298736][T13356] ? wiphy_unregister+0xc10/0xc10 [ 1988.303769][T13356] ? generic_xdp_install+0x700/0x700 [ 1988.309073][T13356] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1988.315164][T13356] ieee80211_register_hw+0x22c9/0x39a0 [ 1988.320648][T13356] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1988.326029][T13356] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1988.331940][T13356] ? lock_downgrade+0x830/0x830 [ 1988.336802][T13356] ? lock_is_held_type+0xbb/0xf0 [ 1988.341862][T13356] ? memset+0x20/0x40 [ 1988.345857][T13356] ? __hrtimer_init+0x12c/0x260 [ 1988.350716][T13356] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1988.356462][T13356] ? hwsim_virtio_rx_work+0x350/0x350 [ 1988.361849][T13356] ? memcpy+0x39/0x60 [ 1988.365988][T13356] hwsim_new_radio_nl+0x93e/0xf8c [ 1988.371034][T13356] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1988.376952][T13356] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1988.384004][T13356] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1988.390866][T13356] genl_rcv_msg+0x61d/0x980 [ 1988.395386][T13356] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1988.402342][T13356] ? lock_release+0x8f0/0x8f0 [ 1988.407022][T13356] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1988.412321][T13356] netlink_rcv_skb+0x15a/0x430 [ 1988.417092][T13356] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1988.424039][T13356] ? netlink_ack+0xa10/0xa10 [ 1988.428778][T13356] genl_rcv+0x24/0x40 [ 1988.432770][T13356] netlink_unicast+0x533/0x7d0 [ 1988.437552][T13356] ? netlink_attachskb+0x810/0x810 [ 1988.442673][T13356] ? __phys_addr_symbol+0x2c/0x70 [ 1988.447704][T13356] ? __check_object_size+0x171/0x3e4 [ 1988.453006][T13356] netlink_sendmsg+0x856/0xd90 [ 1988.457789][T13356] ? netlink_unicast+0x7d0/0x7d0 [ 1988.462766][T13356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1988.468147][T13356] ? netlink_unicast+0x7d0/0x7d0 [ 1988.473100][T13356] sock_sendmsg+0xcf/0x120 [ 1988.477525][T13356] ____sys_sendmsg+0x6e8/0x810 [ 1988.482304][T13356] ? kernel_sendmsg+0x50/0x50 [ 1988.486984][T13356] ? do_recvmmsg+0x6d0/0x6d0 [ 1988.491587][T13356] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1988.497582][T13356] ? lockdep_hardirqs_on_prepare+0x530/0x530 15:05:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'xfrm0\x00', @ifru_names='team0\x00'}) 15:05:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x7}}) [ 1988.503567][T13356] ? __lock_acquire+0xb5e/0x5570 [ 1988.508515][T13356] ___sys_sendmsg+0xf3/0x170 [ 1988.513122][T13356] ? sendmsg_copy_msghdr+0x160/0x160 [ 1988.518412][T13356] ? __fget_files+0x272/0x400 [ 1988.523107][T13356] ? lock_downgrade+0x830/0x830 [ 1988.527963][T13356] ? find_held_lock+0x2d/0x110 [ 1988.532752][T13356] ? __fget_files+0x294/0x400 [ 1988.537448][T13356] ? __fget_light+0xea/0x280 [ 1988.542053][T13356] __sys_sendmsg+0xe5/0x1b0 [ 1988.546565][T13356] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1988.551614][T13356] ? syscall_enter_from_user_mode+0x20/0x290 [ 1988.557690][T13356] ? lockdep_hardirqs_on+0x53/0x100 [ 1988.562900][T13356] do_syscall_64+0x2d/0x70 [ 1988.567325][T13356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1988.573218][T13356] RIP: 0033:0x45d5b9 [ 1988.577117][T13356] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:05:34 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1988.596726][T13356] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1988.605140][T13356] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1988.613118][T13356] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1988.621231][T13356] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1988.630081][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1988.638056][T13356] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:34 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 1988.833788][T13374] batadv_slave_1: Caught tx_queue_len zero misconfig 15:05:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x4800}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:34 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a00fb056c464200a9002600000000005551f2ca080005003e3368d2558dc6724de52b212b47dce9d2c12f9ba003f5491fc24b11d2afffe2ca0a31f1a19083efb61a0950aa2ef9b22367f666ab7cc71358b1ced47cc0593613661c710303268e2414a36bb62ca469b4763992fbff6201eb8fe538c84f214a04c3dd72459bb6ffd60406a493ec5255f4a6349bf6bbe78386b3d64a2848361807055ceb4fc52ef3cbc2af0577d15bb6af2587fbb744ef5b1fc40efa9c290bc0f0b8aee448549f977116d49efa6929a38ecc92f9cfa64a57281eeac91a16d7a7fbd1491f63d737f462ce59c76303186dc87918a776c6ebadd6f558f415f35a1a6a026bbea109a2cd40230a9e7603c2d0ab44db4d832397efad090f50ce6e4bfed1e97e5c5a6266472c78bb21ee1b60ce38c74535627c9a93da10d8851d2cf4404ab34c55a913bbda75b0a70732f7beb69d03b16fed1e4a99bbb1e042151ea2c4c1c60357cbff00"/367, @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:05:34 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 15:05:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_mtu(r0, 0x0, 0x17, 0x0, &(0x7f0000000040)) 15:05:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed0a8064d20010003d000080", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000035480)={0x0, 0x0, 0x0}, 0x0) 15:05:34 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 15:05:34 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040)=0x80000001, 0x4) 15:05:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110840000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15:05:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="dcc8027880c498c15edf856bcc45954b153bfc2fe6ee4e51c6f6169c20", 0x1d}, {&(0x7f0000000500)="e4", 0x1}, {&(0x7f0000000040)='Q', 0x1}, {&(0x7f0000000740)="a2", 0x1}], 0x4}}], 0x1, 0x400c090) recvmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 15:05:34 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="d00800002400fffff7009e000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000400ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000c8954b8db160fea10000000300000000000000060000008f5e0040010000000002000006000000010100000200000007000000000000e0318900000104000000efff000600000004000000080000000400000002000000c00000000810000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000000ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000006000000ffee00000001000000000000000010f7006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff030000070000000180000009000000020000000000000004000000e37fffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff00000010006a1f31001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000600000024709a02ff7f000010000500010000000000000007000000100003001f000300070000000101000018000100e701040009000000040000000104000000000000f2275eef7138e6d8404ee35c1c03d0a7e3015b89e6e440ebafa27d5b8188804cd5beea2fda73c030f26439c9e4f2e27a824bfb4415f2af99b482560d1a447df28d8d838ad1a39caf40dc96c5f134529d47c0604f66f8714f8ee51165c4b029a7dc7e2f90de64a234d9098b06231c71bc79c43de912eb17614cf75d8c49152a801ac9a1326f0e334e0534faa8d8704d03c25495230a2ed4feb5298d99c124310dd8d4054c8be6bdb8bcede3d1552b08c169755c508c65ff8e1c50711a38d9a451eb650df96535fcc7669eb1f0f7fc5135a05b389610d33df49e9d1d3808c8fa0524b1caa582c913fedb22de15fbc7e7890faa48e6205a74bf817d48ea3dc9cddb6acc14b94522ccce95a27379b1ced543ad45de5016647e86154fd92670b9fc95ff90ea60fcf349981185b11322c4a48276eea082e4be45b9125653ba5f8ad8500d0d768b2de6b9e198568ecd526a1ba44c9280104fa91e55e31181b4acad815ef766bc8604c30c715da309a185645439aaabb542625905dc77193d45cde1978dc9c67cea6b01d2d4a28b13fc1e71d1f2a38537c44b629790b1305371c9e705771da5555c743b5b4adea2b95aa708f41e7a713277f5422f2bb669861730554e266f4ae61e0377f517b23ae4821e04e500cf998be043bab81fa38368a555f4a381eab2a692e06a4ca80bcb7570518078eb76bd313b23d0708cd26017f5a64a703da88679bbb758ac9b2b3ad70bbd679e7e24852925d96c941ac4cce3c9863a529c9f3f024c93fbd7e61e29fcbd6368d915afa0e54e02c6053d74bf16ea95c4991301931fab343f6b1f0a05b36c4e1f3c641ee59974a7a62ee758910e3d921e57fbf83956425c47c8fce2ec15a4ecf7056ce162ebc522a9ea9ed602ade0fc99fc845af597b29ba601b5157a455a8202b4ecb00de37ecd7f48d5dcaf978ee212aa7bcf0d47658ed8c0aefb8c02c274f3f9fac00cb3af538b4fec00000000000000000000000000000000884ae76bd9ea9122450fc46f83580afffe6f01e56eab22ca01ae73a58a953b6c21b4312e70608487b3ac10666cbcc127d6ef404364abc347680b2c7d61af0936147beea940160948979727537dfe5119d3a6bd1ce3d59f"], 0x8d0}}, 0x0) r2 = socket(0x1000000010, 0x2, 0x0) sendmmsg$alg(r2, &(0x7f0000000100), 0x492492492492711, 0x0) [ 1989.115531][T13395] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1989.168938][T13395] CPU: 0 PID: 13395 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1989.177653][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.187716][T13395] Call Trace: [ 1989.191025][T13395] dump_stack+0x198/0x1fd [ 1989.195382][T13395] sysfs_warn_dup.cold+0x1c/0x2d [ 1989.200338][T13395] sysfs_do_create_link_sd+0x11e/0x140 [ 1989.205809][T13395] sysfs_create_link+0x5f/0xc0 [ 1989.210585][T13395] device_add+0x6ff/0x1c40 [ 1989.215019][T13395] ? devlink_add_symlinks+0x450/0x450 [ 1989.220404][T13395] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1989.226403][T13395] wiphy_register+0x1d66/0x2850 [ 1989.231280][T13395] ? wiphy_unregister+0xc10/0xc10 [ 1989.236318][T13395] ? generic_xdp_install+0x700/0x700 [ 1989.241629][T13395] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1989.247712][T13395] ieee80211_register_hw+0x22c9/0x39a0 [ 1989.253307][T13395] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1989.258686][T13395] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1989.264593][T13395] ? lock_downgrade+0x830/0x830 [ 1989.269451][T13395] ? lock_is_held_type+0xbb/0xf0 [ 1989.274401][T13395] ? memset+0x20/0x40 [ 1989.278399][T13395] ? __hrtimer_init+0x12c/0x260 [ 1989.283286][T13395] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1989.289040][T13395] ? hwsim_virtio_rx_work+0x350/0x350 [ 1989.294511][T13395] ? memcpy+0x39/0x60 [ 1989.298524][T13395] hwsim_new_radio_nl+0x93e/0xf8c [ 1989.303737][T13395] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1989.309653][T13395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1989.316593][T13395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1989.323453][T13395] genl_rcv_msg+0x61d/0x980 [ 1989.327973][T13395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1989.334930][T13395] ? lock_release+0x8f0/0x8f0 [ 1989.339613][T13395] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1989.344921][T13395] netlink_rcv_skb+0x15a/0x430 [ 1989.349694][T13395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1989.356639][T13395] ? netlink_ack+0xa10/0xa10 [ 1989.361254][T13395] genl_rcv+0x24/0x40 [ 1989.365247][T13395] netlink_unicast+0x533/0x7d0 [ 1989.370038][T13395] ? netlink_attachskb+0x810/0x810 [ 1989.375162][T13395] ? __phys_addr_symbol+0x2c/0x70 [ 1989.380192][T13395] ? __check_object_size+0x171/0x3e4 [ 1989.385493][T13395] netlink_sendmsg+0x856/0xd90 [ 1989.390281][T13395] ? netlink_unicast+0x7d0/0x7d0 [ 1989.395234][T13395] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1989.400530][T13395] ? netlink_unicast+0x7d0/0x7d0 [ 1989.405487][T13395] sock_sendmsg+0xcf/0x120 [ 1989.409916][T13395] ____sys_sendmsg+0x6e8/0x810 [ 1989.414693][T13395] ? kernel_sendmsg+0x50/0x50 15:05:34 executing program 4: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2, 0x0]}]}}}}}}, 0x0) 15:05:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'ah\x00', 0x7}, &(0x7f00000002c0)=0x1e) [ 1989.419373][T13395] ? do_recvmmsg+0x6d0/0x6d0 [ 1989.423982][T13395] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1989.429981][T13395] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1989.435972][T13395] ? __lock_acquire+0xb5e/0x5570 [ 1989.441007][T13395] ___sys_sendmsg+0xf3/0x170 [ 1989.445614][T13395] ? sendmsg_copy_msghdr+0x160/0x160 [ 1989.450909][T13395] ? __fget_files+0x272/0x400 [ 1989.455600][T13395] ? lock_downgrade+0x830/0x830 [ 1989.460461][T13395] ? find_held_lock+0x2d/0x110 [ 1989.465248][T13395] ? __fget_files+0x294/0x400 [ 1989.469938][T13395] ? __fget_light+0xea/0x280 [ 1989.474569][T13395] __sys_sendmsg+0xe5/0x1b0 [ 1989.479080][T13395] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1989.484131][T13395] ? syscall_enter_from_user_mode+0x20/0x290 [ 1989.490115][T13395] ? lockdep_hardirqs_on+0x53/0x100 [ 1989.495323][T13395] do_syscall_64+0x2d/0x70 [ 1989.499782][T13395] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1989.505673][T13395] RIP: 0033:0x45d5b9 [ 1989.509571][T13395] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1989.529201][T13395] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1989.537615][T13395] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1989.545590][T13395] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1989.553564][T13395] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1989.561542][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1989.569512][T13395] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x4c00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:35 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x17, 0x0, &(0x7f00000000c0)) 15:05:35 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 15:05:35 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00'}, &(0x7f00000000c0)=0x24) 15:05:35 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x78}, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "4acdbf0522fd6a5d805f1e4b834dfb00ea002857819706542175027b75617fc5", "3da9874f30c6f9e582c60e20a3d14f7d", {"a59ddfa0f017f669df95d97b19269e08", "479073564b7cd535802e40187fe308c3"}}}}}}}, 0x0) 15:05:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}}, 0x0) 15:05:35 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000063c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x63ee8762c75d8929, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 15:05:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) [ 1989.862613][T13430] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1989.892213][T13430] CPU: 1 PID: 13430 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1989.900914][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.910972][T13430] Call Trace: [ 1989.914274][T13430] dump_stack+0x198/0x1fd [ 1989.918623][T13430] sysfs_warn_dup.cold+0x1c/0x2d [ 1989.923572][T13430] sysfs_do_create_link_sd+0x11e/0x140 [ 1989.929045][T13430] sysfs_create_link+0x5f/0xc0 [ 1989.933820][T13430] device_add+0x6ff/0x1c40 [ 1989.938256][T13430] ? devlink_add_symlinks+0x450/0x450 [ 1989.943643][T13430] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1989.949637][T13430] wiphy_register+0x1d66/0x2850 [ 1989.954525][T13430] ? wiphy_unregister+0xc10/0xc10 [ 1989.959562][T13430] ? generic_xdp_install+0x700/0x700 [ 1989.964870][T13430] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1989.970952][T13430] ieee80211_register_hw+0x22c9/0x39a0 [ 1989.976432][T13430] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1989.981809][T13430] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1989.987718][T13430] ? lock_downgrade+0x830/0x830 [ 1989.992578][T13430] ? lock_is_held_type+0xbb/0xf0 [ 1989.997530][T13430] ? memset+0x20/0x40 [ 1990.001523][T13430] ? __hrtimer_init+0x12c/0x260 [ 1990.006385][T13430] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1990.012133][T13430] ? hwsim_virtio_rx_work+0x350/0x350 [ 1990.017520][T13430] ? memcpy+0x39/0x60 [ 1990.021516][T13430] hwsim_new_radio_nl+0x93e/0xf8c [ 1990.026553][T13430] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1990.032472][T13430] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1990.039416][T13430] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1990.046275][T13430] genl_rcv_msg+0x61d/0x980 [ 1990.050795][T13430] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1990.057754][T13430] ? lock_release+0x8f0/0x8f0 [ 1990.062437][T13430] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1990.067736][T13430] netlink_rcv_skb+0x15a/0x430 [ 1990.072511][T13430] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1990.079455][T13430] ? netlink_ack+0xa10/0xa10 [ 1990.084073][T13430] genl_rcv+0x24/0x40 [ 1990.088059][T13430] netlink_unicast+0x533/0x7d0 [ 1990.092946][T13430] ? netlink_attachskb+0x810/0x810 [ 1990.098069][T13430] ? __phys_addr_symbol+0x2c/0x70 [ 1990.103097][T13430] ? __check_object_size+0x171/0x3e4 [ 1990.108395][T13430] netlink_sendmsg+0x856/0xd90 [ 1990.113287][T13430] ? netlink_unicast+0x7d0/0x7d0 [ 1990.118351][T13430] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1990.123646][T13430] ? netlink_unicast+0x7d0/0x7d0 [ 1990.128592][T13430] sock_sendmsg+0xcf/0x120 [ 1990.133016][T13430] ____sys_sendmsg+0x6e8/0x810 [ 1990.137792][T13430] ? kernel_sendmsg+0x50/0x50 [ 1990.142474][T13430] ? do_recvmmsg+0x6d0/0x6d0 [ 1990.147080][T13430] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1990.153085][T13430] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1990.159078][T13430] ? __lock_acquire+0xb5e/0x5570 [ 1990.164031][T13430] ___sys_sendmsg+0xf3/0x170 [ 1990.168635][T13430] ? sendmsg_copy_msghdr+0x160/0x160 [ 1990.173931][T13430] ? __fget_files+0x272/0x400 [ 1990.178623][T13430] ? lock_downgrade+0x830/0x830 [ 1990.183486][T13430] ? find_held_lock+0x2d/0x110 [ 1990.188274][T13430] ? __fget_files+0x294/0x400 [ 1990.192972][T13430] ? __fget_light+0xea/0x280 [ 1990.197585][T13430] __sys_sendmsg+0xe5/0x1b0 [ 1990.202097][T13430] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1990.207144][T13430] ? syscall_enter_from_user_mode+0x20/0x290 [ 1990.213130][T13430] ? lockdep_hardirqs_on+0x53/0x100 [ 1990.218336][T13430] do_syscall_64+0x2d/0x70 [ 1990.222761][T13430] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1990.228656][T13430] RIP: 0033:0x45d5b9 [ 1990.232556][T13430] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1990.252165][T13430] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x28, r1, 0xc8ef0a4335e6829f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 15:05:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) [ 1990.260580][T13430] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1990.268558][T13430] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1990.276535][T13430] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1990.284516][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1990.292496][T13430] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) [ 1990.487012][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="c9596d6d", 0x4}, {&(0x7f0000000180)="8b2627302a25ba54005360717dbd075c593980959c0d1884359dc03c29e4ac45dc68a3d9a592fd513cc4e544bda696775baecf96476cff6b064821a134ef07d33890bea10edbcc75195b602249a285c381ff52b8a1b3c61d9fa03b21", 0xfee4}, {&(0x7f0000000300)="89", 0x1}], 0x3, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 15:05:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {0xb}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0x2d, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 15:05:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x6000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1990.548494][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010100}}}, 0x90) 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x0) 15:05:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r1, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private}]}, 0x2c}}, 0x0) [ 1990.718851][T13476] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1990.746453][T13476] CPU: 1 PID: 13476 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1990.755162][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.765222][T13476] Call Trace: 15:05:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0814fffffffffffff80700000003000000000000000800020003000000", 0x24) 15:05:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x6, 0x0, @local, 0x9}, 0x20) getpeername$l2tp6(r0, 0x0, 0x0) [ 1990.768524][T13476] dump_stack+0x198/0x1fd [ 1990.772871][T13476] sysfs_warn_dup.cold+0x1c/0x2d [ 1990.777819][T13476] sysfs_do_create_link_sd+0x11e/0x140 [ 1990.783294][T13476] sysfs_create_link+0x5f/0xc0 [ 1990.788082][T13476] device_add+0x6ff/0x1c40 [ 1990.792516][T13476] ? devlink_add_symlinks+0x450/0x450 [ 1990.797900][T13476] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1990.803899][T13476] wiphy_register+0x1d66/0x2850 [ 1990.808772][T13476] ? wiphy_unregister+0xc10/0xc10 [ 1990.813805][T13476] ? generic_xdp_install+0x700/0x700 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x0) [ 1990.819106][T13476] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1990.825194][T13476] ieee80211_register_hw+0x22c9/0x39a0 [ 1990.830680][T13476] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1990.836060][T13476] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1990.841965][T13476] ? lock_downgrade+0x830/0x830 [ 1990.846831][T13476] ? lock_is_held_type+0xbb/0xf0 [ 1990.851778][T13476] ? memset+0x20/0x40 [ 1990.855770][T13476] ? __hrtimer_init+0x12c/0x260 [ 1990.860633][T13476] mac80211_hwsim_new_radio+0x2353/0x4540 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x0) [ 1990.866380][T13476] ? hwsim_virtio_rx_work+0x350/0x350 [ 1990.871764][T13476] ? memcpy+0x39/0x60 [ 1990.875762][T13476] hwsim_new_radio_nl+0x93e/0xf8c [ 1990.880799][T13476] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1990.886838][T13476] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1990.893782][T13476] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1990.900640][T13476] genl_rcv_msg+0x61d/0x980 [ 1990.905164][T13476] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1990.912122][T13476] ? lock_release+0x8f0/0x8f0 [ 1990.916802][T13476] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1990.922103][T13476] netlink_rcv_skb+0x15a/0x430 [ 1990.926879][T13476] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1990.933827][T13476] ? netlink_ack+0xa10/0xa10 [ 1990.938448][T13476] genl_rcv+0x24/0x40 [ 1990.942439][T13476] netlink_unicast+0x533/0x7d0 [ 1990.947219][T13476] ? netlink_attachskb+0x810/0x810 [ 1990.952342][T13476] ? __phys_addr_symbol+0x2c/0x70 [ 1990.957373][T13476] ? __check_object_size+0x171/0x3e4 [ 1990.962673][T13476] netlink_sendmsg+0x856/0xd90 [ 1990.967468][T13476] ? netlink_unicast+0x7d0/0x7d0 [ 1990.972421][T13476] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1990.977714][T13476] ? netlink_unicast+0x7d0/0x7d0 [ 1990.982656][T13476] sock_sendmsg+0xcf/0x120 [ 1990.987084][T13476] ____sys_sendmsg+0x6e8/0x810 [ 1990.991859][T13476] ? kernel_sendmsg+0x50/0x50 [ 1990.996540][T13476] ? do_recvmmsg+0x6d0/0x6d0 [ 1991.001144][T13476] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1991.007134][T13476] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1991.013115][T13476] ? __lock_acquire+0xb5e/0x5570 [ 1991.018065][T13476] ___sys_sendmsg+0xf3/0x170 [ 1991.022663][T13476] ? sendmsg_copy_msghdr+0x160/0x160 [ 1991.027953][T13476] ? __fget_files+0x272/0x400 [ 1991.032645][T13476] ? lock_downgrade+0x830/0x830 [ 1991.037500][T13476] ? find_held_lock+0x2d/0x110 [ 1991.042286][T13476] ? __fget_files+0x294/0x400 [ 1991.046988][T13476] ? __fget_light+0xea/0x280 [ 1991.051682][T13476] __sys_sendmsg+0xe5/0x1b0 [ 1991.056195][T13476] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1991.061246][T13476] ? syscall_enter_from_user_mode+0x20/0x290 [ 1991.067236][T13476] ? lockdep_hardirqs_on+0x53/0x100 [ 1991.072446][T13476] do_syscall_64+0x2d/0x70 [ 1991.076873][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1991.082768][T13476] RIP: 0033:0x45d5b9 [ 1991.086804][T13476] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1991.106413][T13476] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1991.114832][T13476] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1991.122811][T13476] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1991.130789][T13476] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1991.138767][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1991.146747][T13476] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_LINKMODE={0x5}]}, 0x30}}, 0x0) 15:05:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}}, 0x0) 15:05:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}}, 0x0) [ 1991.425020][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1991.461970][T13502] infiniband syz0: set active 15:05:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x6800}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}}, 0x0) 15:05:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @local}}) 15:05:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000), 0x3c) [ 1991.529596][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1991.593219][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1991.637717][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:05:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) 15:05:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x44}]}]}, 0x58}}, 0x0) 15:05:37 executing program 4: r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001600)='ns/pid_for_children\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}}, 0x0) [ 1991.788816][T13519] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1991.827132][T13519] CPU: 1 PID: 13519 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 15:05:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x5, 0x0, 0x0, 0x9, 0xce6}}}]}, 0x78}}, 0x0) [ 1991.835838][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.845890][T13519] Call Trace: [ 1991.849191][T13519] dump_stack+0x198/0x1fd [ 1991.853541][T13519] sysfs_warn_dup.cold+0x1c/0x2d [ 1991.858494][T13519] sysfs_do_create_link_sd+0x11e/0x140 [ 1991.863971][T13519] sysfs_create_link+0x5f/0xc0 [ 1991.868745][T13519] device_add+0x6ff/0x1c40 [ 1991.873178][T13519] ? devlink_add_symlinks+0x450/0x450 [ 1991.878564][T13519] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1991.884563][T13519] wiphy_register+0x1d66/0x2850 [ 1991.889435][T13519] ? wiphy_unregister+0xc10/0xc10 [ 1991.894470][T13519] ? generic_xdp_install+0x700/0x700 [ 1991.899777][T13519] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1991.905858][T13519] ieee80211_register_hw+0x22c9/0x39a0 [ 1991.911347][T13519] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1991.916818][T13519] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1991.922713][T13519] ? lock_downgrade+0x830/0x830 [ 1991.927562][T13519] ? lock_is_held_type+0xbb/0xf0 [ 1991.932484][T13519] ? memset+0x20/0x40 15:05:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 1991.936590][T13519] ? __hrtimer_init+0x12c/0x260 [ 1991.941462][T13519] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1991.947206][T13519] ? hwsim_virtio_rx_work+0x350/0x350 [ 1991.952593][T13519] ? memcpy+0x39/0x60 [ 1991.956591][T13519] hwsim_new_radio_nl+0x93e/0xf8c [ 1991.961630][T13519] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1991.967555][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1991.974496][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1991.981357][T13519] genl_rcv_msg+0x61d/0x980 15:05:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000320003050000000000000000000000000400dbd60c0002"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1991.985884][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1991.992842][T13519] ? lock_release+0x8f0/0x8f0 [ 1991.997522][T13519] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1992.002827][T13519] netlink_rcv_skb+0x15a/0x430 [ 1992.007599][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1992.014546][T13519] ? netlink_ack+0xa10/0xa10 [ 1992.019168][T13519] genl_rcv+0x24/0x40 [ 1992.023159][T13519] netlink_unicast+0x533/0x7d0 [ 1992.027940][T13519] ? netlink_attachskb+0x810/0x810 [ 1992.033061][T13519] ? __phys_addr_symbol+0x2c/0x70 [ 1992.038092][T13519] ? __check_object_size+0x171/0x3e4 [ 1992.043390][T13519] netlink_sendmsg+0x856/0xd90 [ 1992.048169][T13519] ? netlink_unicast+0x7d0/0x7d0 [ 1992.053121][T13519] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1992.058414][T13519] ? netlink_unicast+0x7d0/0x7d0 [ 1992.063358][T13519] sock_sendmsg+0xcf/0x120 [ 1992.067785][T13519] ____sys_sendmsg+0x6e8/0x810 [ 1992.072564][T13519] ? kernel_sendmsg+0x50/0x50 [ 1992.077244][T13519] ? do_recvmmsg+0x6d0/0x6d0 [ 1992.081886][T13519] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1992.087882][T13519] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1992.093864][T13519] ? __lock_acquire+0xb5e/0x5570 [ 1992.098821][T13519] ___sys_sendmsg+0xf3/0x170 [ 1992.103422][T13519] ? sendmsg_copy_msghdr+0x160/0x160 [ 1992.108722][T13519] ? __fget_files+0x272/0x400 [ 1992.113411][T13519] ? lock_downgrade+0x830/0x830 [ 1992.118269][T13519] ? find_held_lock+0x2d/0x110 [ 1992.123060][T13519] ? __fget_files+0x294/0x400 [ 1992.127750][T13519] ? __fget_light+0xea/0x280 [ 1992.132356][T13519] __sys_sendmsg+0xe5/0x1b0 [ 1992.136868][T13519] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1992.141916][T13519] ? syscall_enter_from_user_mode+0x20/0x290 [ 1992.147901][T13519] ? lockdep_hardirqs_on+0x53/0x100 [ 1992.153109][T13519] do_syscall_64+0x2d/0x70 [ 1992.157535][T13519] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1992.163430][T13519] RIP: 0033:0x45d5b9 [ 1992.167334][T13519] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:05:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1992.186943][T13519] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1992.195362][T13519] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1992.203340][T13519] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1992.211315][T13519] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1992.219295][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1992.227268][T13519] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:38 executing program 1: r0 = socket(0x2, 0x803, 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, @in={0x2, 0x4e21, @loopback}, @can, @isdn={0x22, 0x7f, 0xe1, 0x1, 0xf7}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth1\x00', 0x1, 0x30227348, 0xfffd}) [ 1992.404605][T13539] tc_dump_action: action bad kind [ 1992.431751][ T9296] lo speed is unknown, defaulting to 1000 [ 1992.439731][T13519] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1992.478943][T13519] CPU: 1 PID: 13519 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1992.487639][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.497699][T13519] Call Trace: [ 1992.501006][T13519] dump_stack+0x198/0x1fd [ 1992.505351][T13519] sysfs_warn_dup.cold+0x1c/0x2d [ 1992.510302][T13519] sysfs_do_create_link_sd+0x11e/0x140 [ 1992.515774][T13519] sysfs_create_link+0x5f/0xc0 [ 1992.520551][T13519] device_add+0x6ff/0x1c40 [ 1992.524983][T13519] ? devlink_add_symlinks+0x450/0x450 [ 1992.530368][T13519] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1992.536364][T13519] wiphy_register+0x1d66/0x2850 [ 1992.541244][T13519] ? wiphy_unregister+0xc10/0xc10 [ 1992.546282][T13519] ? generic_xdp_install+0x700/0x700 [ 1992.551587][T13519] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1992.557666][T13519] ieee80211_register_hw+0x22c9/0x39a0 [ 1992.563146][T13519] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1992.568520][T13519] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1992.574452][T13519] ? lock_downgrade+0x830/0x830 [ 1992.579313][T13519] ? lock_is_held_type+0xbb/0xf0 [ 1992.584260][T13519] ? memset+0x20/0x40 [ 1992.588260][T13519] ? __hrtimer_init+0x12c/0x260 [ 1992.593122][T13519] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1992.598864][T13519] ? hwsim_virtio_rx_work+0x350/0x350 [ 1992.604245][T13519] ? memcpy+0x39/0x60 [ 1992.608240][T13519] hwsim_new_radio_nl+0x93e/0xf8c [ 1992.613278][T13519] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1992.619193][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1992.626130][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1992.632990][T13519] genl_rcv_msg+0x61d/0x980 [ 1992.637510][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1992.644469][T13519] ? lock_release+0x8f0/0x8f0 [ 1992.649152][T13519] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1992.654455][T13519] netlink_rcv_skb+0x15a/0x430 [ 1992.659224][T13519] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1992.666176][T13519] ? netlink_ack+0xa10/0xa10 [ 1992.670786][T13519] genl_rcv+0x24/0x40 [ 1992.674775][T13519] netlink_unicast+0x533/0x7d0 [ 1992.679553][T13519] ? netlink_attachskb+0x810/0x810 [ 1992.684675][T13519] ? __phys_addr_symbol+0x2c/0x70 [ 1992.689706][T13519] ? __check_object_size+0x171/0x3e4 [ 1992.695005][T13519] netlink_sendmsg+0x856/0xd90 [ 1992.699782][T13519] ? netlink_unicast+0x7d0/0x7d0 [ 1992.704733][T13519] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1992.710033][T13519] ? netlink_unicast+0x7d0/0x7d0 [ 1992.714978][T13519] sock_sendmsg+0xcf/0x120 [ 1992.719424][T13519] ____sys_sendmsg+0x6e8/0x810 [ 1992.724200][T13519] ? kernel_sendmsg+0x50/0x50 [ 1992.728879][T13519] ? do_recvmmsg+0x6d0/0x6d0 [ 1992.733483][T13519] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1992.739474][T13519] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1992.745456][T13519] ? __lock_acquire+0xb5e/0x5570 [ 1992.750415][T13519] ___sys_sendmsg+0xf3/0x170 [ 1992.755016][T13519] ? sendmsg_copy_msghdr+0x160/0x160 [ 1992.760311][T13519] ? __fget_files+0x272/0x400 [ 1992.764997][T13519] ? lock_downgrade+0x830/0x830 [ 1992.769848][T13519] ? find_held_lock+0x2d/0x110 [ 1992.774634][T13519] ? __fget_files+0x294/0x400 [ 1992.779328][T13519] ? __fget_light+0xea/0x280 [ 1992.783938][T13519] __sys_sendmsg+0xe5/0x1b0 [ 1992.788449][T13519] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1992.793496][T13519] ? syscall_enter_from_user_mode+0x20/0x290 [ 1992.799487][T13519] ? lockdep_hardirqs_on+0x53/0x100 [ 1992.804696][T13519] do_syscall_64+0x2d/0x70 [ 1992.809120][T13519] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1992.815017][T13519] RIP: 0033:0x45d5b9 [ 1992.818918][T13519] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.838527][T13519] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1992.846944][T13519] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1992.855046][T13519] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1992.863019][T13519] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1992.870994][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1992.878969][T13519] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1992.961455][T13547] tc_dump_action: action bad kind 15:05:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x6c00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffee0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x98}}, 0x0) 15:05:38 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) 15:05:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0) 15:05:38 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800b595000006000000f60000000000", @ANYRES32=0x0, @ANYBLOB="140002003c15d05843c8"], 0x3}}, 0x0) close(r2) socket$inet(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) 15:05:38 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x5, 0xff04) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:05:38 executing program 5: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="1700000055000d0000000000fc18b11b07040400010000", 0x17) [ 1993.213652][T13570] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1993.290143][T13570] CPU: 1 PID: 13570 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1993.298849][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.308909][T13570] Call Trace: [ 1993.312219][T13570] dump_stack+0x198/0x1fd [ 1993.316577][T13570] sysfs_warn_dup.cold+0x1c/0x2d [ 1993.321528][T13570] sysfs_do_create_link_sd+0x11e/0x140 [ 1993.327000][T13570] sysfs_create_link+0x5f/0xc0 [ 1993.331776][T13570] device_add+0x6ff/0x1c40 [ 1993.336208][T13570] ? devlink_add_symlinks+0x450/0x450 [ 1993.341591][T13570] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1993.347590][T13570] wiphy_register+0x1d66/0x2850 [ 1993.352467][T13570] ? wiphy_unregister+0xc10/0xc10 [ 1993.357501][T13570] ? generic_xdp_install+0x700/0x700 [ 1993.362803][T13570] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1993.368884][T13570] ieee80211_register_hw+0x22c9/0x39a0 [ 1993.374371][T13570] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1993.379747][T13570] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1993.385653][T13570] ? lock_downgrade+0x830/0x830 [ 1993.390512][T13570] ? lock_is_held_type+0xbb/0xf0 [ 1993.395457][T13570] ? memset+0x20/0x40 [ 1993.399448][T13570] ? __hrtimer_init+0x12c/0x260 [ 1993.404334][T13570] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1993.410081][T13570] ? hwsim_virtio_rx_work+0x350/0x350 [ 1993.415464][T13570] ? memcpy+0x39/0x60 [ 1993.419461][T13570] hwsim_new_radio_nl+0x93e/0xf8c [ 1993.424494][T13570] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1993.430411][T13570] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1993.437354][T13570] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1993.444213][T13570] genl_rcv_msg+0x61d/0x980 [ 1993.448734][T13570] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1993.455689][T13570] ? lock_release+0x8f0/0x8f0 [ 1993.460365][T13570] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1993.465659][T13570] netlink_rcv_skb+0x15a/0x430 [ 1993.470430][T13570] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1993.477373][T13570] ? netlink_ack+0xa10/0xa10 [ 1993.481985][T13570] genl_rcv+0x24/0x40 [ 1993.485975][T13570] netlink_unicast+0x533/0x7d0 [ 1993.490754][T13570] ? netlink_attachskb+0x810/0x810 [ 1993.495871][T13570] ? __phys_addr_symbol+0x2c/0x70 [ 1993.500903][T13570] ? __check_object_size+0x171/0x3e4 [ 1993.506202][T13570] netlink_sendmsg+0x856/0xd90 [ 1993.510981][T13570] ? netlink_unicast+0x7d0/0x7d0 [ 1993.515935][T13570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1993.521228][T13570] ? netlink_unicast+0x7d0/0x7d0 [ 1993.526171][T13570] sock_sendmsg+0xcf/0x120 [ 1993.530593][T13570] ____sys_sendmsg+0x6e8/0x810 [ 1993.535453][T13570] ? kernel_sendmsg+0x50/0x50 [ 1993.540135][T13570] ? do_recvmmsg+0x6d0/0x6d0 [ 1993.544738][T13570] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1993.550730][T13570] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1993.556717][T13570] ? __lock_acquire+0xb5e/0x5570 [ 1993.561666][T13570] ___sys_sendmsg+0xf3/0x170 [ 1993.566264][T13570] ? sendmsg_copy_msghdr+0x160/0x160 [ 1993.571563][T13570] ? __fget_files+0x272/0x400 [ 1993.576250][T13570] ? lock_downgrade+0x830/0x830 [ 1993.581104][T13570] ? find_held_lock+0x2d/0x110 [ 1993.585893][T13570] ? __fget_files+0x294/0x400 [ 1993.590583][T13570] ? __fget_light+0xea/0x280 [ 1993.595196][T13570] __sys_sendmsg+0xe5/0x1b0 [ 1993.599709][T13570] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1993.604758][T13570] ? syscall_enter_from_user_mode+0x20/0x290 [ 1993.610743][T13570] ? lockdep_hardirqs_on+0x53/0x100 [ 1993.615969][T13570] do_syscall_64+0x2d/0x70 [ 1993.620400][T13570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1993.626301][T13570] RIP: 0033:0x45d5b9 15:05:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 1993.630202][T13570] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1993.649895][T13570] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1993.658314][T13570] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1993.666325][T13570] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1993.674307][T13570] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1993.682287][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:05:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) 15:05:39 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) [ 1993.690262][T13570] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:39 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x6c}}, 0x0) 15:05:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x7400}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) 15:05:39 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 15:05:39 executing program 1: unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 15:05:39 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:05:40 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1994.328909][T13604] IPVS: ftp: loaded support on port[0] = 21 [ 1994.330976][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2000301e}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:05:40 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="cc", 0x1}, {&(0x7f0000000300)=';', 0x1}, {&(0x7f0000000380)='1', 0x1}, {&(0x7f0000000440)="ed", 0x1}, {&(0x7f0000000080)="9fd2", 0x2}, {&(0x7f0000000100)=';', 0x1}, {&(0x7f0000000140)="f0", 0x1}], 0x7, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 15:05:40 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1994.504371][T13610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1994.563050][T13611] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1994.582110][T13611] CPU: 1 PID: 13611 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1994.590801][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.600856][T13611] Call Trace: [ 1994.604157][T13611] dump_stack+0x198/0x1fd [ 1994.608510][T13611] sysfs_warn_dup.cold+0x1c/0x2d 15:05:40 executing program 3: unshare(0x2a040600) r0 = socket$alg(0x26, 0x5, 0x0) getsockname(r0, 0x0, 0x0) [ 1994.613461][T13611] sysfs_do_create_link_sd+0x11e/0x140 [ 1994.618962][T13611] sysfs_create_link+0x5f/0xc0 [ 1994.623747][T13611] device_add+0x6ff/0x1c40 [ 1994.628180][T13611] ? devlink_add_symlinks+0x450/0x450 [ 1994.633564][T13611] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1994.639566][T13611] wiphy_register+0x1d66/0x2850 [ 1994.644439][T13611] ? wiphy_unregister+0xc10/0xc10 [ 1994.649474][T13611] ? generic_xdp_install+0x700/0x700 [ 1994.654779][T13611] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1994.660861][T13611] ieee80211_register_hw+0x22c9/0x39a0 [ 1994.666345][T13611] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1994.671810][T13611] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1994.677716][T13611] ? lock_downgrade+0x830/0x830 [ 1994.682577][T13611] ? lock_is_held_type+0xbb/0xf0 [ 1994.687528][T13611] ? memset+0x20/0x40 [ 1994.691522][T13611] ? __hrtimer_init+0x12c/0x260 [ 1994.696385][T13611] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1994.702132][T13611] ? hwsim_virtio_rx_work+0x350/0x350 [ 1994.707517][T13611] ? memcpy+0x39/0x60 [ 1994.711512][T13611] hwsim_new_radio_nl+0x93e/0xf8c [ 1994.716548][T13611] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1994.722464][T13611] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1994.729407][T13611] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1994.736269][T13611] genl_rcv_msg+0x61d/0x980 [ 1994.740790][T13611] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1994.747745][T13611] ? lock_release+0x8f0/0x8f0 [ 1994.752428][T13611] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1994.757727][T13611] netlink_rcv_skb+0x15a/0x430 [ 1994.762502][T13611] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1994.769448][T13611] ? netlink_ack+0xa10/0xa10 [ 1994.774077][T13611] genl_rcv+0x24/0x40 [ 1994.778069][T13611] netlink_unicast+0x533/0x7d0 [ 1994.782851][T13611] ? netlink_attachskb+0x810/0x810 [ 1994.788015][T13611] ? __phys_addr_symbol+0x2c/0x70 [ 1994.793047][T13611] ? __check_object_size+0x171/0x3e4 [ 1994.798349][T13611] netlink_sendmsg+0x856/0xd90 [ 1994.803129][T13611] ? netlink_unicast+0x7d0/0x7d0 [ 1994.808087][T13611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1994.813380][T13611] ? netlink_unicast+0x7d0/0x7d0 [ 1994.818322][T13611] sock_sendmsg+0xcf/0x120 [ 1994.822748][T13611] ____sys_sendmsg+0x6e8/0x810 [ 1994.827522][T13611] ? kernel_sendmsg+0x50/0x50 [ 1994.832205][T13611] ? do_recvmmsg+0x6d0/0x6d0 [ 1994.836811][T13611] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1994.842802][T13611] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1994.848787][T13611] ? __lock_acquire+0xb5e/0x5570 [ 1994.854082][T13611] ___sys_sendmsg+0xf3/0x170 [ 1994.858682][T13611] ? sendmsg_copy_msghdr+0x160/0x160 15:05:40 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}]}}]}, 0x8c}}, 0x0) [ 1994.863979][T13611] ? __fget_files+0x272/0x400 [ 1994.868668][T13611] ? lock_downgrade+0x830/0x830 [ 1994.874058][T13611] ? find_held_lock+0x2d/0x110 [ 1994.878849][T13611] ? __fget_files+0x294/0x400 [ 1994.883545][T13611] ? __fget_light+0xea/0x280 [ 1994.888148][T13611] __sys_sendmsg+0xe5/0x1b0 [ 1994.892656][T13611] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1994.897704][T13611] ? syscall_enter_from_user_mode+0x20/0x290 [ 1994.903691][T13611] ? lockdep_hardirqs_on+0x53/0x100 [ 1994.908902][T13611] do_syscall_64+0x2d/0x70 [ 1994.913327][T13611] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1994.919223][T13611] RIP: 0033:0x45d5b9 [ 1994.923125][T13611] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1994.942733][T13611] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.951151][T13611] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1994.959128][T13611] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1994.967103][T13611] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1994.975078][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1994.983058][T13611] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1995.148299][T13610] IPVS: ftp: loaded support on port[0] = 21 [ 1995.479319][T13604] lo speed is unknown, defaulting to 1000 [ 1995.485587][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1995.511305][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x7a00}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:41 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffe01}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@tclass={{0x10}}, @dontfrag={{0x10, 0x29, 0x3e, 0xcfd0}}], 0x20}}], 0x1, 0x0) 15:05:41 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1995.703805][T13670] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1995.754297][T13670] CPU: 1 PID: 13670 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1995.763000][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.773053][T13670] Call Trace: [ 1995.776354][T13670] dump_stack+0x198/0x1fd [ 1995.780701][T13670] sysfs_warn_dup.cold+0x1c/0x2d [ 1995.785648][T13670] sysfs_do_create_link_sd+0x11e/0x140 [ 1995.791131][T13670] sysfs_create_link+0x5f/0xc0 [ 1995.795909][T13670] device_add+0x6ff/0x1c40 [ 1995.800340][T13670] ? devlink_add_symlinks+0x450/0x450 [ 1995.805725][T13670] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1995.811725][T13670] wiphy_register+0x1d66/0x2850 [ 1995.816599][T13670] ? wiphy_unregister+0xc10/0xc10 [ 1995.821638][T13670] ? generic_xdp_install+0x700/0x700 [ 1995.826952][T13670] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1995.833030][T13670] ieee80211_register_hw+0x22c9/0x39a0 [ 1995.838525][T13670] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1995.843903][T13670] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1995.849811][T13670] ? lock_downgrade+0x830/0x830 [ 1995.854675][T13670] ? lock_is_held_type+0xbb/0xf0 [ 1995.859623][T13670] ? memset+0x20/0x40 [ 1995.863613][T13670] ? __hrtimer_init+0x12c/0x260 [ 1995.868481][T13670] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1995.874235][T13670] ? hwsim_virtio_rx_work+0x350/0x350 [ 1995.879620][T13670] ? memcpy+0x39/0x60 [ 1995.883617][T13670] hwsim_new_radio_nl+0x93e/0xf8c [ 1995.888653][T13670] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1995.894569][T13670] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1995.901508][T13670] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1995.908367][T13670] genl_rcv_msg+0x61d/0x980 [ 1995.912885][T13670] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1995.919841][T13670] ? lock_release+0x8f0/0x8f0 [ 1995.924520][T13670] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1995.929820][T13670] netlink_rcv_skb+0x15a/0x430 [ 1995.934702][T13670] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1995.941645][T13670] ? netlink_ack+0xa10/0xa10 [ 1995.946260][T13670] genl_rcv+0x24/0x40 [ 1995.950249][T13670] netlink_unicast+0x533/0x7d0 [ 1995.955031][T13670] ? netlink_attachskb+0x810/0x810 [ 1995.960162][T13670] ? __phys_addr_symbol+0x2c/0x70 [ 1995.965226][T13670] ? __check_object_size+0x171/0x3e4 [ 1995.970522][T13670] netlink_sendmsg+0x856/0xd90 [ 1995.975302][T13670] ? netlink_unicast+0x7d0/0x7d0 [ 1995.980257][T13670] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1995.985549][T13670] ? netlink_unicast+0x7d0/0x7d0 [ 1995.990501][T13670] sock_sendmsg+0xcf/0x120 [ 1995.994924][T13670] ____sys_sendmsg+0x6e8/0x810 [ 1995.999698][T13670] ? kernel_sendmsg+0x50/0x50 [ 1996.004378][T13670] ? do_recvmmsg+0x6d0/0x6d0 [ 1996.008982][T13670] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1996.014972][T13670] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1996.020993][T13670] ? __lock_acquire+0xb5e/0x5570 [ 1996.025943][T13670] ___sys_sendmsg+0xf3/0x170 [ 1996.030652][T13670] ? sendmsg_copy_msghdr+0x160/0x160 [ 1996.035946][T13670] ? __fget_files+0x272/0x400 [ 1996.040636][T13670] ? lock_downgrade+0x830/0x830 [ 1996.045492][T13670] ? find_held_lock+0x2d/0x110 [ 1996.050284][T13670] ? __fget_files+0x294/0x400 [ 1996.054982][T13670] ? __fget_light+0xea/0x280 [ 1996.059605][T13670] __sys_sendmsg+0xe5/0x1b0 [ 1996.064116][T13670] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1996.069167][T13670] ? syscall_enter_from_user_mode+0x20/0x290 [ 1996.075256][T13670] ? lockdep_hardirqs_on+0x53/0x100 [ 1996.080472][T13670] do_syscall_64+0x2d/0x70 [ 1996.084898][T13670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1996.090791][T13670] RIP: 0033:0x45d5b9 [ 1996.094691][T13670] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.114297][T13670] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1996.122712][T13670] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1996.130690][T13670] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1996.138666][T13670] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1996.146642][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1996.154615][T13670] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1996.270384][T13604] lo speed is unknown, defaulting to 1000 [ 1996.286635][T13604] virt_wifi0 speed is unknown, defaulting to 1000 [ 1996.727653][ T288] tipc: TX() has been purged, node left! 15:05:43 executing program 1: unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101008000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 15:05:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hopopts={{0xdc, 0x29, 0x36, {0x0, 0x81, [], [@generic={0x0, 0xa2, "ac6fd11b1a7cf120495b5585cd31f9ad00c437855a96fdfba5f93ab518847a2a667d863a0c4fa59d9884406167255378fc5a95d8d2362ddb260ccba3a37c569310ed824115cf8f58b183ab15a596f2c8b5e50cb9cbd99ff16374b8043b6a3ee29bb74c6b08ad5a070e3e27161da70b8b92cc4b72316e1d4dfbc3464a47a418a9a830f82fab3c66334a3bcc24751ac4030f66d2034ef69aded202a86d34db535069b2"}, @ra, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}}}], 0xdc}}], 0x2, 0x0) 15:05:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 15:05:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) 15:05:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000001c0)=0x8, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 15:05:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xe703}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1997.686395][T13707] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1997.742575][T13707] CPU: 0 PID: 13707 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1997.751286][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.761346][T13707] Call Trace: [ 1997.764653][T13707] dump_stack+0x198/0x1fd [ 1997.768999][T13707] sysfs_warn_dup.cold+0x1c/0x2d [ 1997.774037][T13707] sysfs_do_create_link_sd+0x11e/0x140 [ 1997.779507][T13707] sysfs_create_link+0x5f/0xc0 [ 1997.784284][T13707] device_add+0x6ff/0x1c40 [ 1997.788721][T13707] ? devlink_add_symlinks+0x450/0x450 [ 1997.794109][T13707] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1997.800198][T13707] wiphy_register+0x1d66/0x2850 [ 1997.805073][T13707] ? wiphy_unregister+0xc10/0xc10 [ 1997.810110][T13707] ? generic_xdp_install+0x700/0x700 [ 1997.814325][T13718] IPVS: ftp: loaded support on port[0] = 21 [ 1997.815413][T13707] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1997.815438][T13707] ieee80211_register_hw+0x22c9/0x39a0 [ 1997.815473][T13707] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1997.815490][T13707] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1997.815513][T13707] ? lock_downgrade+0x830/0x830 [ 1997.815530][T13707] ? lock_is_held_type+0xbb/0xf0 [ 1997.815549][T13707] ? memset+0x20/0x40 [ 1997.815570][T13707] ? __hrtimer_init+0x12c/0x260 [ 1997.815591][T13707] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1997.815626][T13707] ? hwsim_virtio_rx_work+0x350/0x350 [ 1997.874832][T13707] ? memcpy+0x39/0x60 [ 1997.878832][T13707] hwsim_new_radio_nl+0x93e/0xf8c [ 1997.883875][T13707] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1997.889794][T13707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1997.896733][T13707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1997.903677][T13707] genl_rcv_msg+0x61d/0x980 [ 1997.908195][T13707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1997.915154][T13707] ? lock_release+0x8f0/0x8f0 [ 1997.919833][T13707] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1997.925169][T13707] netlink_rcv_skb+0x15a/0x430 [ 1997.929941][T13707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1997.936893][T13707] ? netlink_ack+0xa10/0xa10 [ 1997.941508][T13707] genl_rcv+0x24/0x40 [ 1997.945500][T13707] netlink_unicast+0x533/0x7d0 [ 1997.950286][T13707] ? netlink_attachskb+0x810/0x810 [ 1997.955411][T13707] ? __phys_addr_symbol+0x2c/0x70 [ 1997.960442][T13707] ? __check_object_size+0x171/0x3e4 [ 1997.965829][T13707] netlink_sendmsg+0x856/0xd90 [ 1997.970608][T13707] ? netlink_unicast+0x7d0/0x7d0 [ 1997.975572][T13707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1997.980869][T13707] ? netlink_unicast+0x7d0/0x7d0 [ 1997.985813][T13707] sock_sendmsg+0xcf/0x120 [ 1997.990240][T13707] ____sys_sendmsg+0x6e8/0x810 [ 1997.995015][T13707] ? kernel_sendmsg+0x50/0x50 [ 1997.999697][T13707] ? do_recvmmsg+0x6d0/0x6d0 [ 1998.004301][T13707] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1998.010298][T13707] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1998.016283][T13707] ? __lock_acquire+0xb5e/0x5570 [ 1998.021230][T13707] ___sys_sendmsg+0xf3/0x170 [ 1998.025827][T13707] ? sendmsg_copy_msghdr+0x160/0x160 [ 1998.031118][T13707] ? __fget_files+0x272/0x400 [ 1998.035806][T13707] ? lock_downgrade+0x830/0x830 [ 1998.040662][T13707] ? find_held_lock+0x2d/0x110 [ 1998.045448][T13707] ? __fget_files+0x294/0x400 [ 1998.050260][T13707] ? __fget_light+0xea/0x280 [ 1998.054862][T13707] __sys_sendmsg+0xe5/0x1b0 [ 1998.059372][T13707] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1998.064421][T13707] ? syscall_enter_from_user_mode+0x20/0x290 [ 1998.070407][T13707] ? lockdep_hardirqs_on+0x53/0x100 [ 1998.075723][T13707] do_syscall_64+0x2d/0x70 [ 1998.080153][T13707] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1998.086048][T13707] RIP: 0033:0x45d5b9 [ 1998.090054][T13707] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1998.109663][T13707] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1998.118195][T13707] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1998.126173][T13707] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1998.134150][T13707] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 15:05:43 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1998.142124][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1998.150098][T13707] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1998.168722][T13720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xf000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xb4, 0x0, 0xb4, 0x0, 0xb4, 0x18c, 0x18c, 0x18c, 0x18c, 0x18c, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'team_slave_0\x00', 'xfrm0\x00', {}, {}, 0x6, 0x0, 0x44}, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}, {0x10}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'xfrm0\x00', 'caif0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x27c) 15:05:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@can_newroute={0x13, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "ffe6655ed214476d"}}}]}, 0x2c}}, 0x0) 15:05:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$HCIINQUIRY(r0, 0x400448e6, 0x0) 15:05:44 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 1998.970788][T13718] lo speed is unknown, defaulting to 1000 [ 1998.983000][T13739] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 1999.004557][T13739] CPU: 0 PID: 13739 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1999.013244][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.023300][T13739] Call Trace: [ 1999.026600][T13739] dump_stack+0x198/0x1fd [ 1999.030938][T13739] sysfs_warn_dup.cold+0x1c/0x2d [ 1999.035884][T13739] sysfs_do_create_link_sd+0x11e/0x140 [ 1999.041354][T13739] sysfs_create_link+0x5f/0xc0 [ 1999.046128][T13739] device_add+0x6ff/0x1c40 [ 1999.050582][T13739] ? devlink_add_symlinks+0x450/0x450 [ 1999.055967][T13739] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 1999.061959][T13739] wiphy_register+0x1d66/0x2850 [ 1999.066830][T13739] ? wiphy_unregister+0xc10/0xc10 [ 1999.071946][T13739] ? generic_xdp_install+0x700/0x700 [ 1999.077253][T13739] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1999.083327][T13739] ieee80211_register_hw+0x22c9/0x39a0 [ 1999.088810][T13739] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 1999.094186][T13739] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 1999.100091][T13739] ? lock_downgrade+0x830/0x830 [ 1999.104946][T13739] ? lock_is_held_type+0xbb/0xf0 [ 1999.109895][T13739] ? memset+0x20/0x40 [ 1999.113883][T13739] ? __hrtimer_init+0x12c/0x260 [ 1999.118745][T13739] mac80211_hwsim_new_radio+0x2353/0x4540 [ 1999.124525][T13739] ? hwsim_virtio_rx_work+0x350/0x350 [ 1999.129991][T13739] ? memcpy+0x39/0x60 [ 1999.133990][T13739] hwsim_new_radio_nl+0x93e/0xf8c [ 1999.139022][T13739] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 1999.144949][T13739] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 1999.151890][T13739] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 1999.158752][T13739] genl_rcv_msg+0x61d/0x980 [ 1999.163270][T13739] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1999.170223][T13739] ? lock_release+0x8f0/0x8f0 [ 1999.174905][T13739] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1999.180210][T13739] netlink_rcv_skb+0x15a/0x430 [ 1999.184988][T13739] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 1999.191931][T13739] ? netlink_ack+0xa10/0xa10 [ 1999.196544][T13739] genl_rcv+0x24/0x40 [ 1999.200546][T13739] netlink_unicast+0x533/0x7d0 [ 1999.205325][T13739] ? netlink_attachskb+0x810/0x810 [ 1999.210442][T13739] ? __phys_addr_symbol+0x2c/0x70 [ 1999.215469][T13739] ? __check_object_size+0x171/0x3e4 [ 1999.221205][T13739] netlink_sendmsg+0x856/0xd90 [ 1999.225987][T13739] ? netlink_unicast+0x7d0/0x7d0 [ 1999.230933][T13739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1999.236224][T13739] ? netlink_unicast+0x7d0/0x7d0 [ 1999.241169][T13739] sock_sendmsg+0xcf/0x120 [ 1999.245588][T13739] ____sys_sendmsg+0x6e8/0x810 [ 1999.250355][T13739] ? kernel_sendmsg+0x50/0x50 [ 1999.255032][T13739] ? do_recvmmsg+0x6d0/0x6d0 [ 1999.259638][T13739] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1999.265636][T13739] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1999.271611][T13739] ? __lock_acquire+0xb5e/0x5570 [ 1999.276558][T13739] ___sys_sendmsg+0xf3/0x170 [ 1999.281164][T13739] ? sendmsg_copy_msghdr+0x160/0x160 [ 1999.286566][T13739] ? __fget_files+0x272/0x400 [ 1999.291254][T13739] ? lock_downgrade+0x830/0x830 [ 1999.296110][T13739] ? find_held_lock+0x2d/0x110 [ 1999.300897][T13739] ? __fget_files+0x294/0x400 [ 1999.305592][T13739] ? __fget_light+0xea/0x280 [ 1999.312285][T13739] __sys_sendmsg+0xe5/0x1b0 [ 1999.317059][T13739] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1999.322103][T13739] ? syscall_enter_from_user_mode+0x20/0x290 [ 1999.328087][T13739] ? lockdep_hardirqs_on+0x53/0x100 [ 1999.333286][T13739] do_syscall_64+0x2d/0x70 [ 1999.337711][T13739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1999.343602][T13739] RIP: 0033:0x45d5b9 [ 1999.347501][T13739] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1999.367204][T13739] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1999.375619][T13739] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 1999.383589][T13739] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1999.391561][T13739] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1999.399527][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1999.407500][T13739] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c [ 1999.564587][T13718] lo speed is unknown, defaulting to 1000 [ 1999.571316][T13718] virt_wifi0 speed is unknown, defaulting to 1000 15:05:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x3, 0x0, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000140)=""/159, 0x2b, 0x9f, 0x1}, 0x20) 15:05:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000080000000000000000f469bb85000000300000009500000400000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x4f, &(0x7f0000000100)="7f3d5e7a9e3efa339e3c7b7f07d2", 0x0, 0x740, 0x0, 0x0, 0x5c}, 0x28) 15:05:45 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) 15:05:45 executing program 3: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c400000004060172438037637cb5d126720013000500010006"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) splice(r0, 0x0, r2, 0x0, 0x4000000000010016, 0x0) 15:05:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002e80), 0x8) 15:05:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0xffff}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2000.140330][T13791] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2000.160246][T13793] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2000.213793][T13793] CPU: 0 PID: 13793 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2000.222495][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.232536][T13793] Call Trace: [ 2000.235818][T13793] dump_stack+0x198/0x1fd [ 2000.240143][T13793] sysfs_warn_dup.cold+0x1c/0x2d [ 2000.245072][T13793] sysfs_do_create_link_sd+0x11e/0x140 [ 2000.250517][T13793] sysfs_create_link+0x5f/0xc0 [ 2000.255307][T13793] device_add+0x6ff/0x1c40 [ 2000.259924][T13793] ? devlink_add_symlinks+0x450/0x450 [ 2000.265299][T13793] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2000.271272][T13793] wiphy_register+0x1d66/0x2850 [ 2000.276124][T13793] ? wiphy_unregister+0xc10/0xc10 [ 2000.281141][T13793] ? generic_xdp_install+0x700/0x700 [ 2000.286432][T13793] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2000.292490][T13793] ieee80211_register_hw+0x22c9/0x39a0 [ 2000.297948][T13793] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2000.303306][T13793] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2000.309192][T13793] ? lock_downgrade+0x830/0x830 [ 2000.314036][T13793] ? lock_is_held_type+0xbb/0xf0 [ 2000.318970][T13793] ? memset+0x20/0x40 [ 2000.322942][T13793] ? __hrtimer_init+0x12c/0x260 [ 2000.327783][T13793] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2000.333503][T13793] ? hwsim_virtio_rx_work+0x350/0x350 [ 2000.338864][T13793] ? memcpy+0x39/0x60 [ 2000.342833][T13793] hwsim_new_radio_nl+0x93e/0xf8c [ 2000.348018][T13793] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2000.353906][T13793] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2000.360822][T13793] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2000.367659][T13793] genl_rcv_msg+0x61d/0x980 [ 2000.372153][T13793] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2000.379081][T13793] ? lock_release+0x8f0/0x8f0 [ 2000.383765][T13793] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2000.389060][T13793] netlink_rcv_skb+0x15a/0x430 [ 2000.393810][T13793] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2000.400762][T13793] ? netlink_ack+0xa10/0xa10 [ 2000.405350][T13793] genl_rcv+0x24/0x40 [ 2000.409315][T13793] netlink_unicast+0x533/0x7d0 [ 2000.414069][T13793] ? netlink_attachskb+0x810/0x810 [ 2000.419168][T13793] ? __phys_addr_symbol+0x2c/0x70 [ 2000.424177][T13793] ? __check_object_size+0x171/0x3e4 [ 2000.429457][T13793] netlink_sendmsg+0x856/0xd90 [ 2000.434220][T13793] ? netlink_unicast+0x7d0/0x7d0 [ 2000.439157][T13793] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2000.444426][T13793] ? netlink_unicast+0x7d0/0x7d0 [ 2000.449357][T13793] sock_sendmsg+0xcf/0x120 [ 2000.453758][T13793] ____sys_sendmsg+0x6e8/0x810 [ 2000.458526][T13793] ? kernel_sendmsg+0x50/0x50 [ 2000.463184][T13793] ? do_recvmmsg+0x6d0/0x6d0 [ 2000.467759][T13793] ? _raw_spin_unlock_irq+0x1f/0x80 [ 2000.473725][T13793] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2000.479775][T13793] ? lockdep_hardirqs_on+0x53/0x100 [ 2000.484957][T13793] ? _raw_spin_unlock_irq+0x55/0x80 [ 2000.490141][T13793] ? finish_task_switch+0x147/0x750 [ 2000.495326][T13793] ___sys_sendmsg+0xf3/0x170 [ 2000.499903][T13793] ? sendmsg_copy_msghdr+0x160/0x160 [ 2000.505190][T13793] ? __fget_files+0x272/0x400 [ 2000.509852][T13793] ? lock_downgrade+0x830/0x830 [ 2000.514802][T13793] ? preempt_schedule_irq+0x14d/0x1b0 [ 2000.520186][T13793] ? __fget_files+0x294/0x400 [ 2000.524852][T13793] ? __fget_light+0xea/0x280 [ 2000.529430][T13793] __sys_sendmsg+0xe5/0x1b0 [ 2000.533915][T13793] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2000.538936][T13793] ? syscall_enter_from_user_mode+0x20/0x290 [ 2000.544919][T13793] ? lockdep_hardirqs_on+0x53/0x100 [ 2000.550103][T13793] do_syscall_64+0x2d/0x70 [ 2000.554504][T13793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2000.560378][T13793] RIP: 0033:0x45d5b9 [ 2000.564257][T13793] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2000.583927][T13793] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2000.592320][T13793] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2000.600274][T13793] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 15:05:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) [ 2000.608228][T13793] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2000.616182][T13793] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2000.624135][T13793] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r1}, {0x8}}}}}]}, 0x40}}, 0x0) 15:05:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x2, 0x9}, 0x20) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 15:05:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x30}}, 0x0) 15:05:46 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 15:05:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x400443c8, 0x0) 15:05:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x3, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:46 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 15:05:46 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x30, 0x0, 0x0) 15:05:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)={0x34, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0x20, 0x0, 0x0, 0x0, @binary="2d8ea66c75917a6b3b456e89638deab8445756bd9b3b86ee3f54928f"}]}]}, 0x34}], 0x1}, 0x0) [ 2001.071860][T13821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:05:46 executing program 4: unshare(0x4000400) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 15:05:46 executing program 1: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000001400)={0x12, 0x1, &(0x7f00000000c0)=@raw=[@exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x3, 0x0}, 0x78) 15:05:46 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:46 executing program 3: syz_emit_ethernet(0x9a, &(0x7f0000000840)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '_\x00', 0x64, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "7bee099510afcdcdcfa787ad260e519e08f24185d83655ba483f4b68dfc27cfe", "d98dadd9f2d0f0c3f5e0261320708a29", {"f3a01186b425120c328d87b3f95a4fc5", "27931d84d5208436369ecc396c126114"}}}}}}}}, 0x0) 15:05:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@can_delroute={0x40, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "9e956fa9de7cf6d7"}, 0x6}}, @CGW_FILTER={0xc}]}, 0x40}}, 0x0) 15:05:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:47 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x22, &(0x7f0000000000)={{0x0, @remote, 0x0, 0x0, 'dh\x00'}, {@local}}, 0x44) 15:05:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10) sendmmsg$alg(r0, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="eaa137f97d6008e33ae4d2043e0125354f8723196317f44560e58e4c488253f7be8f782914cda7482b7d69d202d8f5cb3a94e83ba4b4f8528e98018b13ca5c71420954c2a0cd538a9ea8b88b3f4f89c9bb30e0707f486967c93f883144bdad6d191cb603cdb7df3668cfa400553f24f2e9348ed964643cc33c808ac75ce6518bb8d6f68612b5f454a8b500e04fa40be83f517425b15e07c9edc15acc1466e52403b780b71c85fb", 0xa7}, {&(0x7f0000000280)="69634fa51c0f16c3411df119ca04253c1a316ac8efc5280de916d3a727f234910f752a85f6c39329ea932d13275e42e135882e9915fc76d4f61f74fedf1e0179f166dc38e7326861075a45ea9eb1e470e095b973b9526bcac907613cb8eb36c983c30cedfa50", 0x66}, {&(0x7f0000000300)="ce32e818104c178651564e777141fd61deca7d01a35f07cf9eae514e3de4774f7a23e9064e87c48dba272cfe331fb353f7a43378a174ba09b1e9b453a9089e365b2a5c2e48834bab0b2746951e4fa63cce504f70e861309c98061eb8e2077b407a3cc85b4171173a4aea29c5f6f53cd2d31c1e14c90b7bfa5d20edc41f97c84293d42b585bac7307", 0x88}, {&(0x7f00000003c0)="8f3bdf9f38959690f1e02f68c075e864084a3c2a684f6be8349c1a0ccffa973bb324b8e1911f7a6fed4f86ea8d3a5ce64e6fa668b48fd5d004e943b01185cd83b870d1ecddd042f519cd43d7f35e7c31676f6bbf960b590240516615237cfcfa01f3c0f21d4597cfbaac194178f65b0565145439c0f517b4afda1962f11ded092f18874c02af8ae07a4df832fad61bfcadeae1a9aa201f2c3fc96f6ce35a3ffd869add4f7c042a8da034a8862b9b38fcf75d221f09264df0b3bc978dfb833c", 0xbf}, {&(0x7f0000000480)="4a4097b3bc3240682d564fe90c4c7ce5a673bfa0e54595d1cdf07de51a5916767280a45447e31086bedae93c23e0f4008bde7777871570a3620d070d277d", 0x3e}, {&(0x7f0000000780)="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", 0xb9a}, {&(0x7f0000001780)="88", 0x1}], 0x7}], 0x1, 0x0) 15:05:47 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x3}]}, 0x38}}, 0x0) 15:05:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{}], "13aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "25f8"}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x5f]}}, &(0x7f00000001c0)=""/178, 0x47, 0xb2, 0x1}, 0x20) 15:05:47 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 2001.553016][T13854] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2001.623791][T13854] CPU: 0 PID: 13854 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2001.632501][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.642561][T13854] Call Trace: [ 2001.645864][T13854] dump_stack+0x198/0x1fd [ 2001.650211][T13854] sysfs_warn_dup.cold+0x1c/0x2d [ 2001.655173][T13854] sysfs_do_create_link_sd+0x11e/0x140 [ 2001.660648][T13854] sysfs_create_link+0x5f/0xc0 [ 2001.665426][T13854] device_add+0x6ff/0x1c40 [ 2001.669859][T13854] ? devlink_add_symlinks+0x450/0x450 [ 2001.675252][T13854] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2001.681251][T13854] wiphy_register+0x1d66/0x2850 [ 2001.686129][T13854] ? wiphy_unregister+0xc10/0xc10 [ 2001.691166][T13854] ? generic_xdp_install+0x700/0x700 [ 2001.696470][T13854] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2001.702548][T13854] ieee80211_register_hw+0x22c9/0x39a0 [ 2001.708031][T13854] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2001.713408][T13854] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2001.719336][T13854] ? lock_downgrade+0x830/0x830 [ 2001.724195][T13854] ? lock_is_held_type+0xbb/0xf0 [ 2001.729142][T13854] ? memset+0x20/0x40 [ 2001.733135][T13854] ? __hrtimer_init+0x12c/0x260 [ 2001.737999][T13854] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2001.743750][T13854] ? hwsim_virtio_rx_work+0x350/0x350 [ 2001.749138][T13854] ? memcpy+0x39/0x60 [ 2001.753133][T13854] hwsim_new_radio_nl+0x93e/0xf8c [ 2001.758171][T13854] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2001.764083][T13854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2001.771030][T13854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2001.777891][T13854] genl_rcv_msg+0x61d/0x980 [ 2001.782412][T13854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2001.789369][T13854] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 2001.795182][T13854] ? lock_release+0x8f0/0x8f0 [ 2001.799868][T13854] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 2001.805687][T13854] netlink_rcv_skb+0x15a/0x430 [ 2001.810462][T13854] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2001.817405][T13854] ? netlink_ack+0xa10/0xa10 [ 2001.822020][T13854] genl_rcv+0x24/0x40 [ 2001.826013][T13854] netlink_unicast+0x533/0x7d0 [ 2001.830804][T13854] ? netlink_attachskb+0x810/0x810 [ 2001.835923][T13854] ? __phys_addr_symbol+0x2c/0x70 [ 2001.840949][T13854] ? __check_object_size+0x171/0x3e4 [ 2001.846246][T13854] netlink_sendmsg+0x856/0xd90 [ 2001.851026][T13854] ? netlink_unicast+0x7d0/0x7d0 [ 2001.855980][T13854] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2001.861273][T13854] ? netlink_unicast+0x7d0/0x7d0 [ 2001.866217][T13854] sock_sendmsg+0xcf/0x120 15:05:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f0000000500)={0x2, 0x0, @private}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="addf", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 15:05:47 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x5411, &(0x7f0000000080)) 15:05:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 15:05:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 15:05:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) [ 2001.870643][T13854] ____sys_sendmsg+0x6e8/0x810 [ 2001.875416][T13854] ? kernel_sendmsg+0x50/0x50 [ 2001.880106][T13854] ? do_recvmmsg+0x6d0/0x6d0 [ 2001.884723][T13854] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2001.890708][T13854] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2001.896693][T13854] ? __lock_acquire+0xb5e/0x5570 [ 2001.901642][T13854] ___sys_sendmsg+0xf3/0x170 [ 2001.906243][T13854] ? sendmsg_copy_msghdr+0x160/0x160 [ 2001.911533][T13854] ? __fget_files+0x272/0x400 [ 2001.916219][T13854] ? lock_downgrade+0x830/0x830 15:05:47 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x97) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001900)="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", 0xfe32}], 0x1}, 0x0) [ 2001.921079][T13854] ? find_held_lock+0x2d/0x110 [ 2001.925865][T13854] ? __fget_files+0x294/0x400 [ 2001.930557][T13854] ? __fget_light+0xea/0x280 [ 2001.935166][T13854] __sys_sendmsg+0xe5/0x1b0 [ 2001.939677][T13854] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2001.944727][T13854] ? syscall_enter_from_user_mode+0x20/0x290 [ 2001.950713][T13854] ? lockdep_hardirqs_on+0x53/0x100 [ 2001.955920][T13854] do_syscall_64+0x2d/0x70 [ 2001.960347][T13854] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2001.966240][T13854] RIP: 0033:0x45d5b9 [ 2001.970137][T13854] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2001.989742][T13854] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.998159][T13854] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2002.006221][T13854] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2002.014292][T13854] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2002.022284][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2002.030259][T13854] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x18, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x409}, 0x40) 15:05:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 15:05:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000200000000000000", 0x58}], 0x1) 15:05:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001000)) 15:05:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={[], [], @empty}}, 0x1c) 15:05:48 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x106, 0x1, 0x0, 0x0) 15:05:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fffff0000550214f9f407", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:05:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x118, 0x3e020000, 0x0, 0x188, 0x184, 0x1d0, 0x1d0, 0x184, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @local, 0x0, 0xffffffff, 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0xa}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) 15:05:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x1, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 2002.353574][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:05:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000040)={r0, 0x28}, 0x10) 15:05:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006a00013ab9413da3e1552a00c0080000", @ANYRES32, @ANYBLOB="04000880"], 0x1c}], 0x1}, 0x0) 15:05:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x28, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000300)) 15:05:48 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty=[0x0, 0x0, 0x14, 0x0, 0x60, 0x3], @val={@void}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x7, 0x1c, 0x16, 0x3, 0x0, [{@dev}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 15:05:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x13, 0xffffffef}]}, 0x28}}, 0x0) 15:05:48 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockname$inet(r0, 0x0, &(0x7f0000000040)) [ 2002.736941][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:05:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x7c}}, 0x0) 15:05:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000001340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001240)={r1, 0x0, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) 15:05:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @fwd={0x0, 0x0, 0x0, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{}, {0x10}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) [ 2002.883503][T13932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x3, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 15:05:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104c00000000001e050000000000009500000000000000d33c53eebc03cdca776c9e8aa225b715f53220382d4272ce823408d595fb231521602b3c5febed4903c2a3093d8930869e8c82d597b5b9b0a6ca9632ba04000000000000046489fc8dba375a41256ad293e0d8f624b2129e49b4c206147324a3ab997dcfa09f4c233d63e78017942842b8edefd193aeb4a1926468a2e6c67e5aa7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:05:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) 15:05:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x7c}}, 0x0) 15:05:48 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x29, 0x6, 0x0, 0x0) [ 2003.173513][T13971] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 2003.207443][ T288] tipc: TX() has been purged, node left! 15:05:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:05:48 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010900000f00000000000a000000fe000000000000001400050000000000000000000000000000000001"], 0x30}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:05:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x3}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}]}, 0x2c}}, 0x0) 15:05:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x14, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:49 executing program 3: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0}, 0x20) 15:05:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev}}, 0x1c) 15:05:49 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @loopback={0x2, 0x2}, @loopback}}}}}}, 0x0) 15:05:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 15:05:49 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000018000109000000000000fa000a0000000000210000000000140005000000000000000000000000000000000108000400", @ANYRES32], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:05:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x18, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x3c}}, 0x0) 15:05:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1}, 0x8) [ 2003.759793][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:49 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000013000)) [ 2003.859266][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x4) 15:05:49 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e097df75fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0xd01, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x786}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:05:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x28, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09070000000009000000010000000800030047dd"], 0x1c}}, 0x0) 15:05:49 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a2000000000000000000000140001"], 0x30}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 2004.101053][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2004.126794][T14033] sctp: [Deprecated]: syz-executor.1 (pid 14033) Use of int in maxseg socket option. [ 2004.126794][T14033] Use struct sctp_assoc_value instead 15:05:49 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d0000000000000000020000000000fd0404000000080005"], 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) [ 2004.231988][T14034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) 15:05:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:50 executing program 2: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='F'], 0x4}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 15:05:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x0) [ 2004.395549][T14052] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2004.417707][T14052] CPU: 1 PID: 14052 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2004.426409][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.436466][T14052] Call Trace: [ 2004.439877][T14052] dump_stack+0x198/0x1fd [ 2004.444230][T14052] sysfs_warn_dup.cold+0x1c/0x2d [ 2004.449179][T14052] sysfs_do_create_link_sd+0x11e/0x140 [ 2004.454658][T14052] sysfs_create_link+0x5f/0xc0 [ 2004.459432][T14052] device_add+0x6ff/0x1c40 [ 2004.463867][T14052] ? devlink_add_symlinks+0x450/0x450 [ 2004.469256][T14052] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2004.475262][T14052] wiphy_register+0x1d66/0x2850 [ 2004.480138][T14052] ? wiphy_unregister+0xc10/0xc10 [ 2004.485192][T14052] ? generic_xdp_install+0x700/0x700 [ 2004.490503][T14052] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2004.496584][T14052] ieee80211_register_hw+0x22c9/0x39a0 [ 2004.502197][T14052] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2004.507722][T14052] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2004.513640][T14052] ? lock_downgrade+0x830/0x830 [ 2004.518499][T14052] ? lock_is_held_type+0xbb/0xf0 [ 2004.523446][T14052] ? memset+0x20/0x40 [ 2004.527440][T14052] ? __hrtimer_init+0x12c/0x260 [ 2004.532303][T14052] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2004.538057][T14052] ? hwsim_virtio_rx_work+0x350/0x350 [ 2004.543447][T14052] ? memcpy+0x39/0x60 [ 2004.547447][T14052] hwsim_new_radio_nl+0x93e/0xf8c [ 2004.552488][T14052] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2004.558404][T14052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2004.565346][T14052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2004.572212][T14052] genl_rcv_msg+0x61d/0x980 [ 2004.576735][T14052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2004.583689][T14052] ? lock_release+0x8f0/0x8f0 [ 2004.588370][T14052] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2004.593669][T14052] netlink_rcv_skb+0x15a/0x430 [ 2004.598440][T14052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2004.605384][T14052] ? netlink_ack+0xa10/0xa10 [ 2004.609996][T14052] genl_rcv+0x24/0x40 [ 2004.613988][T14052] netlink_unicast+0x533/0x7d0 [ 2004.618768][T14052] ? netlink_attachskb+0x810/0x810 [ 2004.623890][T14052] ? __phys_addr_symbol+0x2c/0x70 [ 2004.628925][T14052] ? __check_object_size+0x171/0x3e4 [ 2004.634228][T14052] netlink_sendmsg+0x856/0xd90 [ 2004.639009][T14052] ? netlink_unicast+0x7d0/0x7d0 [ 2004.643959][T14052] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2004.649255][T14052] ? netlink_unicast+0x7d0/0x7d0 [ 2004.654202][T14052] sock_sendmsg+0xcf/0x120 [ 2004.658625][T14052] ____sys_sendmsg+0x6e8/0x810 [ 2004.663398][T14052] ? kernel_sendmsg+0x50/0x50 [ 2004.668082][T14052] ? do_recvmmsg+0x6d0/0x6d0 [ 2004.672686][T14052] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2004.678703][T14052] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2004.684686][T14052] ? __lock_acquire+0xb5e/0x5570 [ 2004.689637][T14052] ___sys_sendmsg+0xf3/0x170 [ 2004.694238][T14052] ? sendmsg_copy_msghdr+0x160/0x160 [ 2004.699532][T14052] ? __fget_files+0x272/0x400 [ 2004.704225][T14052] ? lock_downgrade+0x830/0x830 [ 2004.709083][T14052] ? find_held_lock+0x2d/0x110 [ 2004.713871][T14052] ? __fget_files+0x294/0x400 [ 2004.718568][T14052] ? __fget_light+0xea/0x280 [ 2004.723188][T14052] __sys_sendmsg+0xe5/0x1b0 [ 2004.727726][T14052] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2004.732776][T14052] ? syscall_enter_from_user_mode+0x20/0x290 [ 2004.738766][T14052] ? lockdep_hardirqs_on+0x53/0x100 [ 2004.743970][T14052] do_syscall_64+0x2d/0x70 [ 2004.748395][T14052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2004.754756][T14052] RIP: 0033:0x45d5b9 [ 2004.758681][T14052] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2004.778283][T14052] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2004.786697][T14052] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2004.794673][T14052] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2004.802764][T14052] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2004.810737][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2004.818713][T14052] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40) r1 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xf6, &(0x7f0000000340)=""/246, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 15:05:50 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008180)=[{{&(0x7f0000002300)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000003540), 0x0, &(0x7f0000002380)=[{0x98, 0xff, 0xd, "fab0749003dd9e6a219142b381d1d059dca04c856f0ee9a451f5e986afe0bc167c6beb9e15857f141663cbe1207e538a632caee8ab8409a4b790a0a817beaad8d4d9f0d7495bcfd786be78093237709f6bd415a7ed166c93e9e21444ac4ce2844f679e478e6895915a36fa0e403b27bcb3c1bb20d109d401b4f3e84ec8bfcd3645a01e6df8c05e71a3c6"}], 0x98}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000003700)="e2b62c0fdfbdad695c1dd6fff4ba7fed5521ba5aa805e9ac46a5615d45503c0d8405f3d3413b8a27e0242c63f3e203b9d88340674875b2a98c6d80c9e3c28c01bba142f59e0555409203fe32daf50a81110ee8dfc1d7046a7866ae657e04cf087846f7360645e8f3566d7ff8639bec902961903c672c356f7f6c5859d0c7b2418e9daef7b040d751cdd4d384dfbe1f65ff703a4d6cde3850d0befa93530f214542cdab38cda88615357b2be90be9fa9e8e02db931fb101400b25646821d8ac42062ee035ddaa57e1503bc26bc041fa0b", 0xd0}, {&(0x7f0000003800)="8bbb4770c12e420e494506b55dfe7552b3d9420c64db68d2b17501f954fc17b92bc07dac88700dfb218760faeb998a3d300a55a7cde15a82caaf57cb7cbbcd38f8af1bac8cf6f38a9cb1b381ca855b6879d0deb14304606e3940f5717307c28429801f2c268df4730b21d8285616bfffe2091c8a3da43ce111cdc061f7234de3f57670d5af1c334f83a1e9dfafd306f86f8ea1931ae6e3514d7a0484e41edb12d85785997356821c68a4e8a49148ba01395326d60e43585c2fa22b978ac84d15b729e8b076bda1ea7b71f62ab24fe1847ef9b8c0bc9f375d4121bca5b39f78c7b97809cf43c9f7374cbb15befc5282eb295cde7f3785ab43d161e1361ee6cc2d6c955c583a5736151a639140a9a7b8f2c644b8132ef9e171a708a739e0841b68ce73ecd5ac197dd13acbe3595385750da55f4dbc82924ddee4ea9321e7195d95c940f6b737b58b071f9bf8a9cf7aaf765f5ffad516ac0dbee52b09789a99d4782de654b64b7eb6d6df81e944d054fe03e68883925e5b41d58245eb0022af359968081d2e795191ca13bb909143ae4f5dc3b323d931ccf232433e20d735d08d60a074784dd9c04840979db61208e912af5313e1ac799883e60f4ba7a27d1589224aae06cf627bc32240f22f2d532b0b42b3bc7f284379bbd3c4707c773bc137c14655fe2239234e9ddc46f1c41df997afceff61fd26b149ef9be7a7a6e85ee2bf5355924efea4de0513991323c5bb94c4dead6cae250e2bbaf5d882f64019e2055ea47c08e4ecf375c5b729ec7bad30533577f9010a284467dc24c581e85660082d57608dc8a7f7b600bd96d62815f992727497d7077377f7c7619504a711843a32a6d0bc0459bb5604ebe067760fec875270f3b992b350684be17b3e41e80d29c363350b026c56625ce240d799aced65a4beafea10d4d35c796a860d4d11e7470ddf5fb0cf25578fe4f7bfea5c903907317f26bb523a2e81818c0e2a19cb6e3c2f734008396d0b8f07e873feb83d146c2b673943739f5dd4ef00542650a10f01b923912f4476c93f75ae502b4b42b9a74fe7e919091d749b18e0cbd5e3f90c6f065398d453a9cdb194838c39efa25f1c13792ca09157010da83f319dec13d04ceec65de36bc7f8a62ceb023546229e61ff176539a71b493597815cdd8cf475e9cc3f463dcb025f9023f1e3c2d36a428a650bd6981374ebc917e2f4b4bcf4436627cfccd12e3e89925a59a23fab60034b7feabafeb5e6ca625fab24c0ec9277bbfb3e459fd20f858b332e3bcfc4b7f6b2891020b79e504a3b4cf00428f0f641b6a59a75e79f9bdbf3f872145587fc8846a707b5755ddde33cbaed6f5984310967ed8535713909100e036bd1df7f18ce54c5b3059f647a438dd4f3e896adedd67d744895b29505697090809297d49ffed2b4ddfcc3fb37a90d7d968585fcd9a35a1bc835c2da515d0c39cff3d4bff6a86083e800126cd78fddfc3b25094e78c4aacb19488f1c557a4100d86c84c9f75684096defa15d279bbd17a8633ef77de3e4b7fe3a9f5cf6b8267c88467ad723a344e92d3c6cee14f1fa78cb97cb20b62995dff75ad53df179ff632a05b97051b82113947ef2e059f87f6add50e2598e6561f0fcf29eeba85b8f1a89989f6e1ce5ad32f44050c8177761aff9b0232625c02309ea9de85f96064bf8e3c72c3de989b42a3d717d5b1793a3548d76bc670c37baed78c3b9cf1833e7279a54e66970b95bd7e03fc7258a715bf07fa913c88c4191b8fabf080bbbdda07015ca81429a527b3b2433a6866862e2db178ddfa9bce70bb1148ecce852c78d043c81e11635e0d4d9428488fc08d3df9848f90c9f2e32d7d3c4f13980786697c57039de4663e4ef11045cbc2e79296a4254febc26d8f910a79b9d33182666106b67d4ae80b12533cca01743bcd192d106475e2973e393a99781029015bcc5867d0404876d80d23c0e0c97eb2d3eff223e94c8f2cd409ea7e87177e9b9d900246a6c139605f8ef657856359aba35def31176662593e306b2ed78320b5227a89a5392bc848e68af252fe082b15c4b5f1e2dec9884218150b184f70fa0bbe5a9eefcf6cd221c6a57b7a4a877799f997b92934c5b4078e12cb49a1d8011d7aa15a58a2b4f6ecabf3fcaa2d8b25d5956f62a90753dbb788451f815b10cd342625c5a55ef6d14dc31028f13678aebaacc8f817a74950613209dce590fb3bd910d17d74a6a2878246d83f88bd86355b4c3063b8bae06e7cb1de05937a7b7f1c297eabaebd4ecd35c24abadeda45e986bc133e3a7f0ecd187230b41fb0263f1951adecba0fa1c1e201b43179298936f68a599c2c1a30e53ff322b9d55579bb340a880fffaaa1891ea24c4a715d712d510549717cdceab0b14e9dca663b2f59290735b5b7c57f03d483727efdf29e5201f44212065eb5edc3ab7fe8f1c89b6bfa3d64ac34833a608d6daa3634502e9f0fab36414cc4cd926b082cb47b396466322fb29951c2cebc95d5e8e5ea9da6d48294f0bc59f3a4f75948ae348b440c012f45fa1ee0d58a27ba501397b36872f68ead505b0e8cbacd42014ecf008d7205904ddb4b61ccf5afe77cc7c75af99d7d84803680757f47ef00566ff3bf24ae16e1091637751562f49811e981c7e6b4e3e5a247ac5d278b4958f44305dc17c7147eb324e382028d2030768f7e5837f8a60fa69f977139907bb4c53f316db83d114e7ce3c5f32fb8155b6e3223ca2b214ca2d6a13c254f9673e6ae3346c42b20b2afb7765027ea17c2cbc391da9467af6b164224462a3da816320dce1bf71e1b9fbdce5ca9f256972cc5d0df40d9bb375e3fea2f888571025734974818cd4bdeca2c9fad8cf81dfe3de1e9fe7449de930019800ee3a0c82517fad63107cd7dbe5bf70d1e95e585bbfddde44af122937f11d5d547dcfdba6dcc3fcf5b2be734528eb4d94c302a7b5edc83e78cb90988050c0f3807047027710d3dfa380169230aaae825ea9f333a66248b04430a114a5a83ac506bcf4ec8e11a8cdd216aecd8b3e91a1b67ecfb53f8d90c792d443c44c671b137ab4c9acb52fe623a43651f4363d1b6d114143e13c122b28cf4b7eef3fd985d7ed0ac80e38e24d73963d5ae45aa3d6621725fe9740cdc46316912211a14a77eb2f5a0cf36b72044fc87a19aba96c8ccc42eee45cbff8a17f64f37357055021a176a78b4234bd71fe88ab4a643767b68c7ea2f33370a20f980e1c9663e792fdf76012a59d2cebf7c8fb454af6937cc175f45c6a92fcbf9ab7d552f0a5bdfb050491f24f49b637f995dcd3cc9cdff794f3a817c60281afb39da058f8c05c35229eb2a9904f80db9e4b0abf7e26dfe372bc1c158c74ee416d316e0129f0ff79d4fd8e23482e821bf7d3938de5e1d4b79c9a67f5ca4c8e09b6a9074e4d36fdf32867a667669b6213aea5b382dc1be5a56cf9c731d09906b4a6b29f19e6eacc0f861fd61998375f2c1892280b3dc8d0aee9173a645b1e3d81636b0cb3bbc53298fefbdcddf7764bd65c099373539e82e836aa3a687a35c66e7a6c47adfe99350966f5c5b9027e637a45f4727acff7291938f0ded6d987c489735520c44dfc790194219f40f6ec9baf0df3cc7a5f486f128d745c6390471a58a731e5a48bc5ed44e0e4b956ff451360e0779894c3d15fb8d8eace3017b9bc82950789e96f8012c3f536ec316ed728f5f8271e2c2db5acffff1d77812a6f325ff93d324e5d6857e07c73aa57210fc66eefd042ead804d6bfe9a5e7ed7ba3ed5ffa3b83a6b61cd2f215f01836d070295206ab5cc5c1925fe841bd2ba80e1b892a522670431a5d6ca698ec6a0f3348a9da944933b6ab16957a91e4c8c94c3f9aa8dd5cc3c91fe3700b73f0d42f51ea2fe54f3682bb804603c439b479ac933604dc9defddd7389f069efcb05e03143064ac921ea399a234d751767837099b3e918fa31440f06a0ed0aff026fba6e4126911fd0a927aa9a8a04f63ac479dd737b960122384ee8c0093e6febdcf6956fcba1ea870acfe503531791123d29eb2be3eb5e0446b0cecc822815a4f915a734b762d811db2d34ea7e7c94f74d9df64df7a388d0644b4901547a9f65f2f1c1f565b2a27f4837c45f0e4185570d015ea1ecf6025c42332909500dbc37a97363732dbe7f4d60e4f42961467e6be08de39511fdcefa60454861ec88287f366bbf78ef727765ce6ef6af940df62b502f684228a170b034a5ca6ab906a78200710f7cf5b917c70eaa8aaf49b0ca5dae59e7ce0f3e68f5785cff17e3a2c2be01ce048f54ab2815171baf31d447298c3e22e9c1be50a5e313789846e435d714c92cf40fb6ba921cb1f7db93bbcb9c72b8b57c42293cd7d09bd4e40db419e4a40893e13230d1669a696d78c0fe9c9903825499e1d6b348aef1daa98853e986fd6ddd41d163983aa52bf3a0315e15b7238256be137d5e983a2e200d0c7a87cebeeb4cfcc008e872b5981a3fdff27d51e52c2c06339af035b0d990e413335c5fc0fc6cf5afe7eb0d8be59e604ef4ed8c692abafeff3b570ee7ec07ecf55590a9dd2ef76b6624718040ed33209331dc79ffe75902b2aeef165a8ab4458c2dabc520d0d23064a9179e74eee23617d6a790f5f0d83b4e42e55ccff16a1c57de6b0fdbe11b50fa532fa92eb1c466250667be956892afcd1209dd8f2958c185fc3dd5f02d3167746f5795491e7e3a01ae9d5413916de0fdba44806e4953e6129462fa99b5adc41f408e304ffc43e95439f7b53c4ed1d7517ffaa06477ecf7692ade57aef3c3a7a03c9fd522e89c0de6fd7b510a6e07913aea5dd97ea432948d3c4d2816dde097d4b49d2f4151c8ba870170c29328b8c068660a1aaaf480da490e62593edbb19bd1d575773070ce94473ac46e8cfae798e98b35ff443ca45af2771a82757ec1efb6520368da1520f25b71fa97e77b25456309ad41e49c3634850dd1327cf1a94e7865415e6e825f1343cdb302c2322f741d5abb73d0b807eb961592ef4a79644b68fcc232cdb4f5937dae4cc6e059d4b072f8221a19740a3652ad2ed6f501180b9f4f996fabee2ff86583e269261f85738015d017c9fee8e8f308462f6494a0ead6a6c20b9f18d4033fc36ec0a8f39d6bc35da973a89cfb6bccf6fcb5b6fa53512c0ca80fb770271edbb0545a95c1ed9555f0e282f8ab70d2e22cc4802a27620747f58c7a9b768fd64058d8bfd0cc5a32c1119c6dcb1645d66ea0f624cb3719fb0149dca484187d51c8e5a775eb9375a362852e24790b1a46f820b1b1dc6a4cb8fc81c5db1b47dcd5b9182e3e04dc3ce56d04fa4d86fa122d6ce340a9733467f54e4b7c62ea0edc0637026fb66e98f7ece9789af237ff766246a01d740f2f27df5c085837597f2846e073a1fc09f5785376b00baa1ec591faf91e4829f5e7c53ae4e47873074c94ad682f272ebe5e13daaa7e55e3ea5023ac260159133a085ffa2ca7b454f6ac24f0cf9aa94c203cdfef3dcbf3820cf9253bd19ad34aa1c45487cef2f6c8357d03107224b5921e49aa207325da27290041ad0b19865477d72951f4bd962ba166e582718f80e82188185fc18c75fab3ef6c927ab35372758e9069734f51dc6a1f0f9a00665632739d0e6b7afbea311c610fd67ca73d4669af3b15e0025a410d051901446381bc2fd3fb77a34a5b347f5ddc6a120630451bf5741199fa343baf5fa4a93eeda5d3c23c04d05b485627676ad91514996b9e822034c9c25eefcb72f693bdad0b1eaa7ee6c8116a91f7ac640dda1abdfb06277acbe52eb58a18e5bf4fb7ed6", 0x1000}, {&(0x7f0000004800)="f952b2d284492366d0f3d7129bb3951941067ac9c3ffbdcb47639737769d9041b45697c7d44d81b950cfe97bb165289e3c5848848ebfffeb146f29ca2da2e61b3a48684c78ff10d003c3fb355cda10baaa3365539600c8576154908a730fd72bc640", 0x62}, {&(0x7f0000004880)="7c4c5501a8a5fd89ac7aee58cc262f50397f29c55d9740c6602fa63c72cb30a79557acc910d1c0d2cc6fe2a7812fba1a1437feb86d0f1d30847349116c28552fc8de80b2e18f3abe38cb2eac611117628352326680f41e526134a3502610adc37061a27fcda3fd4bca1fabc0f4721f7c3a74ee08368d68d4d8bee5eccfb14bbafb493206d12e440d3800"/151, 0x97}], 0x4}}], 0x2, 0x4004010) 15:05:50 executing program 5: socket$inet(0xa, 0x2cc, 0x0) 15:05:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000280)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}}, 0x30) 15:05:50 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x2, 0x311, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 15:05:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 15:05:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x12, &(0x7f000055bfe4), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x12, &(0x7f000055bfe4), 0x4) [ 2005.328332][T14091] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2005.360823][T14091] CPU: 0 PID: 14091 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 15:05:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 2005.369531][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.379589][T14091] Call Trace: [ 2005.382889][T14091] dump_stack+0x198/0x1fd [ 2005.387237][T14091] sysfs_warn_dup.cold+0x1c/0x2d [ 2005.392186][T14091] sysfs_do_create_link_sd+0x11e/0x140 [ 2005.397686][T14091] sysfs_create_link+0x5f/0xc0 [ 2005.402464][T14091] device_add+0x6ff/0x1c40 [ 2005.406897][T14091] ? devlink_add_symlinks+0x450/0x450 [ 2005.412279][T14091] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2005.418281][T14091] wiphy_register+0x1d66/0x2850 [ 2005.423161][T14091] ? wiphy_unregister+0xc10/0xc10 [ 2005.428196][T14091] ? generic_xdp_install+0x700/0x700 [ 2005.433500][T14091] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2005.439579][T14091] ieee80211_register_hw+0x22c9/0x39a0 [ 2005.445063][T14091] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2005.450437][T14091] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2005.456349][T14091] ? lock_downgrade+0x830/0x830 [ 2005.461207][T14091] ? lock_is_held_type+0xbb/0xf0 [ 2005.466158][T14091] ? memset+0x20/0x40 [ 2005.470153][T14091] ? __hrtimer_init+0x12c/0x260 [ 2005.475024][T14091] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2005.480773][T14091] ? hwsim_virtio_rx_work+0x350/0x350 [ 2005.486159][T14091] ? memcpy+0x39/0x60 [ 2005.490154][T14091] hwsim_new_radio_nl+0x93e/0xf8c [ 2005.495193][T14091] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2005.501106][T14091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2005.508043][T14091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2005.514903][T14091] genl_rcv_msg+0x61d/0x980 [ 2005.519425][T14091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2005.526383][T14091] ? lock_release+0x8f0/0x8f0 [ 2005.531062][T14091] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2005.536449][T14091] netlink_rcv_skb+0x15a/0x430 [ 2005.541221][T14091] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2005.548166][T14091] ? netlink_ack+0xa10/0xa10 [ 2005.552778][T14091] genl_rcv+0x24/0x40 [ 2005.556766][T14091] netlink_unicast+0x533/0x7d0 [ 2005.561544][T14091] ? netlink_attachskb+0x810/0x810 [ 2005.566664][T14091] ? __phys_addr_symbol+0x2c/0x70 [ 2005.571693][T14091] ? __check_object_size+0x171/0x3e4 [ 2005.576989][T14091] netlink_sendmsg+0x856/0xd90 [ 2005.581767][T14091] ? netlink_unicast+0x7d0/0x7d0 [ 2005.586718][T14091] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2005.592097][T14091] ? netlink_unicast+0x7d0/0x7d0 [ 2005.597039][T14091] sock_sendmsg+0xcf/0x120 [ 2005.601465][T14091] ____sys_sendmsg+0x6e8/0x810 [ 2005.606236][T14091] ? kernel_sendmsg+0x50/0x50 [ 2005.610914][T14091] ? do_recvmmsg+0x6d0/0x6d0 [ 2005.615517][T14091] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2005.621506][T14091] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2005.627516][T14091] ? __lock_acquire+0xb5e/0x5570 [ 2005.632464][T14091] ___sys_sendmsg+0xf3/0x170 [ 2005.637063][T14091] ? sendmsg_copy_msghdr+0x160/0x160 [ 2005.642355][T14091] ? __fget_files+0x272/0x400 [ 2005.647046][T14091] ? lock_downgrade+0x830/0x830 [ 2005.651900][T14091] ? find_held_lock+0x2d/0x110 [ 2005.656686][T14091] ? __fget_files+0x294/0x400 [ 2005.661379][T14091] ? __fget_light+0xea/0x280 [ 2005.665978][T14091] __sys_sendmsg+0xe5/0x1b0 [ 2005.670487][T14091] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2005.675537][T14091] ? syscall_enter_from_user_mode+0x20/0x290 [ 2005.681525][T14091] ? lockdep_hardirqs_on+0x53/0x100 [ 2005.686731][T14091] do_syscall_64+0x2d/0x70 [ 2005.691154][T14091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2005.697050][T14091] RIP: 0033:0x45d5b9 [ 2005.700950][T14091] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2005.720554][T14091] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:05:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) [ 2005.728971][T14091] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2005.736948][T14091] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2005.744921][T14091] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2005.752899][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2005.760874][T14091] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:05:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 15:05:51 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0200"}}}}}}}, 0x0) 15:05:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='%)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073013a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 15:05:51 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x5}, {}]}]}}, &(0x7f0000000300)=""/234, 0x3e, 0xea, 0x8}, 0x20) 15:05:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-x86\x00'}, 0x76) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b5", 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xb81) 15:05:51 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000000)=0x78) [ 2006.245304][T14143] BPF:[1] FUNC_PROTO (anon) 15:05:51 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x3) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "be17f554c5938d99", "3514e062e8d1cd88c3353d4e11a69f22", "ae86e2a7", "256c576b731ee8c9"}, 0x28) [ 2006.270510][T14143] BPF:return=0 args=( 15:05:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x83, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x14) 15:05:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='p)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2006.299245][T14143] BPF:0 (anon) [ 2006.315352][T14143] BPF:, 0 (invalid-name-offset) [ 2006.339336][T14143] BPF:, vararg [ 2006.353530][T14143] BPF:) [ 2006.367339][T14143] BPF: [ 2006.381538][T14143] BPF:Invalid arg#1 15:05:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x4, 0x19}]}, 0x18}}, 0x0) [ 2006.408750][T14143] BPF: [ 2006.408750][T14143] 15:05:52 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) [ 2006.447600][T14143] BPF:[1] FUNC_PROTO (anon) [ 2006.472495][T14143] BPF:return=0 args=( [ 2006.502142][T14143] BPF:0 (anon) [ 2006.532087][T14143] BPF:, 0 (invalid-name-offset) 15:05:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, 0x0, &(0x7f0000000180)) [ 2006.566581][T14143] BPF:, vararg 15:05:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000061107b0000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 2006.590964][T14143] BPF:) [ 2006.608687][T14143] BPF: [ 2006.622713][T14143] BPF:Invalid arg#1 15:05:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000000)) [ 2006.640832][T14143] BPF: [ 2006.640832][T14143] 15:05:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)\x02\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xc) 15:05:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 15:05:52 executing program 3: unshare(0x20000600) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000740)) 15:05:52 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c06dc040500000280a7b6072e63e286a5cefe24876ece", 0x5ac) 15:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) 15:05:52 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) 15:05:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)\t\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x25}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:05:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:05:53 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 15:05:53 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)%\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:53 executing program 3: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0100", 0x30, 0x67, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, [0x0, 0x0, 0x58], [@generic={0x0, 0x17, "f4bb5e380e958851f004d2012296280fcde8a12f0262c5"}]}, @srh]}}}}}, 0x0) 15:05:53 executing program 2: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6}}, 0x0) 15:05:53 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[], 0x408}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x400fc, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:05:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, @IFLA_MTU={0x8, 0x4, 0x7fff}]}, 0x44}}, 0x0) 15:05:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000)=0x80000000, 0x4) 15:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95\xc0*\x9e{+$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc000000360019010000000000000000010000000400ff"], 0xcc}}, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:05:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001010000000000000002000100f8beffff0000000200010000030005000000000002"], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000400)=ANY=[], 0x60}}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 15:05:53 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xa) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc}}}}]}, 0x58}}, 0x0) 15:05:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc000000360019010000000000000000010000000400ff"], 0xcc}}, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 15:05:53 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)="035109e0bc5857a514dbdec386dd", 0xe}], 0x1}}], 0x1, 0x0) 15:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{\t$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:53 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001100000000010000000000000800040003000000", 0x24) 15:05:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 15:05:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000180)) 15:05:54 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x44}}, 0x0) 15:05:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{\n$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:54 executing program 5: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) [ 2008.695851][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1318}}], 0x2, 0x0) 15:05:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 15:05:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000904fcff", 0x58}], 0x1) 15:05:54 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0267a2d3812ffb292c52e698b4f314a150ff737c", "3f2fe735b088093315b4754ef79e1fe0b2e2d63a"}) 15:05:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{%$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:54 executing program 5: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:54 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x2, 0x0, 0x0, 0xfffe, 0x6}, 0x20) 15:05:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x917}]}}}]}, 0x40}}, 0x0) 15:05:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080011400000000068010980080001400000000004000280540002"], 0x1d4}}, 0x0) 15:05:54 executing program 5: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:05:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{c$&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:55 executing program 2: unshare(0x20000400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bind(r0, 0x0, 0x0) [ 2009.333378][T14366] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2009.372750][T14369] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.3'. 15:05:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401}, 0x14}}, 0x0) 15:05:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x917}]}}}]}, 0x40}}, 0x0) 15:05:55 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+(&[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:55 executing program 2: socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x0) write$binfmt_script(r0, 0x0, 0x0) close(r0) 15:05:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x5, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) [ 2009.729540][T14423] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on 15:05:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xb, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x55}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 15:05:55 executing program 3: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3}, 0x8) 15:05:55 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:55 executing program 2: socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x0) write$binfmt_script(r0, 0x0, 0x0) close(r0) 15:05:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x4}]}]}]}}]}, 0x44}}, 0x0) 15:05:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20020045, 0x0, 0x0) 15:05:55 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) [ 2010.133977][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$\x0f[\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2010.220725][T14488] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2010.245818][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:56 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0xe00}}, 0x2e) [ 2010.299302][T14496] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 15:05:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:05:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x38, r1, 0x11, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}]}, 0x38}}, 0x0) 15:05:56 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:56 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind(r0, &(0x7f0000000100)=@can, 0x80) 15:05:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 15:05:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$([\x16'}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:56 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:05:56 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:56 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x8d, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x1b43d2c4) 15:05:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x0, 0x1, "a5"}, 0x9) 15:05:56 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:56 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x5, 0x0, 0x0, 0x8}}, 0x26) 15:05:56 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:05:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PBURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x95e}}]}}]}, 0x68}}, 0x0) [ 2010.998290][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:05:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[('}]}, 0x28}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2011.076341][T14540] infiniband syz0: set active 15:05:56 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) [ 2011.134663][T14540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2011.232858][T14553] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 2011.274604][T14558] sch_tbf: burst 1 is lower than device lo mtu (65550) ! 15:05:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 15:05:57 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000040)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 15:05:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:05:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) 15:05:57 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:57 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x8}, 0x0) 15:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x2}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2011.497458][T14575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:05:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r'], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x7, 0x0, 0x3, r4}}, 0x20}}, 0x0) [ 2011.594743][T14575] infiniband syz0: set active 15:05:57 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) [ 2011.630818][T14575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 15:05:57 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x8081, 0x0, 0x0) [ 2011.715444][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x3}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 2011.817661][ T8733] lo speed is unknown, defaulting to 1000 [ 2011.824038][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:57 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_STRSET_HEADER={0x5, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x0) [ 2011.921428][T14593] bridge0: port 1(veth67) entered blocking state [ 2011.933172][T14593] bridge0: port 1(veth67) entered disabled state 15:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x4}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2011.970859][T14593] device veth67 entered promiscuous mode [ 2011.997646][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2012.023935][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:57 executing program 2: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r0, &(0x7f0000000480)="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", 0x11d, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "011d00", "000f00000000008000000000100200", '\x00', "00f45000000b00"}, 0x28) 15:05:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 15:05:57 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0xd}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000080)=ANY=[@ANYRES32]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0xfffffde9, &(0x7f0000000040)}, 0xc6) 15:05:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b4, 0x3e8, 0x3e8, 0x260, 0xb8, 0x260, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x4c4, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@ip={@dev, @empty, 0x0, 0x0, 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@ip={@private, @local, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @inet=@TOS={0x24, 'TOS\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) 15:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x5}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:58 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x20000000005, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="d4", 0x1}], 0x2}}], 0x2, 0x0) [ 2012.308043][T21170] lo speed is unknown, defaulting to 1000 15:05:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x4, 0xfee4) 15:05:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x1b, 0x25d, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x80, r0}, 0x38) socket$inet_sctp(0x2, 0x0, 0x84) 15:05:58 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:58 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "11c62311ce6ce4c0a3acb561470c15d198dd472fd3f77c062934392b6b5c5acdc90bc523fd613aa4e74933043fae8c4ccd486dadc51ae5284bd2c63a874394"}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000180)="92bb62e20e980a1a5583c61a28", 0xe}, {0x0, 0x1100}, {&(0x7f0000000400)='v', 0x1}], 0x3}, 0x0) 15:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x6}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x254) 15:05:58 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:58 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002"], 0x18) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @remote}, 0xc) 15:05:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x300}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x7}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:58 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9e, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 15:05:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x25, 0x825, 0x0, 0x0, {0xa}}, 0x20}}, 0x0) 15:05:58 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:58 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000002060102f0000000000000000d000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060013081c0007800600044000000000060005"], 0x1}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x11}}, 0x1c}}, 0x0) 15:05:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x3, 0xd3a}]}, 0x44}}, 0x0) 15:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x8}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0x1, '!'}, &(0x7f0000000000)=0x3e2) 15:05:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x5, 0x6, 0x9, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) [ 2013.052636][T14673] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 15:05:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9004}, 0x4) sendto$l2tp(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) [ 2013.106149][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:58 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x9}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 15:05:58 executing program 2: unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x3f00}, 0x10) 15:05:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401, 0x81000000}, {}, {0x6}]}, 0x10) 15:05:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xa}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:59 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:59 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:05:59 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xa0000004}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 15:05:59 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) listen(r0, 0x0) pipe(0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_misc(r0, 0x0, 0x0) 15:05:59 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00p\x00E7\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0c00018008000180"], 0x24}}, 0x0) 15:05:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xb}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:59 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1000001}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 15:05:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x10, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 2014.112724][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 15:05:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xc}, 0x1, 0xffffff7f0e000000}, 0x0) 15:05:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x5, 0x1fda}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000180)=""/131, 0x34, 0x83, 0x1}, 0x20) 15:05:59 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) 15:05:59 executing program 2: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 15:05:59 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="9c88a80000000000000000000806", 0xe}], 0x1}, 0x0) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xd}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030023000505d25a80648c69940d0224fc6012000a400a000048051282c16c153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 15:06:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7b, 0x0, &(0x7f0000000040)) 15:06:00 executing program 4: syz_emit_ethernet(0x9e, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a81802"}, {0x0, 0x14, "000000000000020000000000"}]}}}}}}, 0x0) 15:06:00 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9f}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xe}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 15:06:00 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xa0000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 15:06:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x0) 15:06:00 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000200)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ' \x00@', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @mcast1, @loopback}}}}}}}, 0x0) 15:06:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x15}]}}]}, 0x8c}}, 0x0) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xf}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) 15:06:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x10}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="240000001a005f0214f9f4070009040081", 0x11) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x8}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x7ffffffe, 0x0) 15:06:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}, 0x154}}, 0x0) 15:06:00 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 15:06:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)="9f0b18ceb3333890343ff3f245a4fe1ee1ae74f22eb7b99cee8bf865077a1a463769799bc304e93515a15ba38563f42eec436b", 0x33}, {&(0x7f00000002c0)="7948dc2816d57d20cc44815a074130c3ef4671db2d147130fc533e96808ea76ed270dc48ded2338df6a74a6df9b93f695a229502ee56c2d610d340ca59a86f4b43bf37647f7a83fe1b8f51a15a043f352d0e008d119514119ef0256eef49c8caa2e00c7cd5925f7746bbecc77ed0d9db16c975026902180173dacd98e0e953471026ca164884d4b43dcb36e00fa4f0abe6b4759ea3", 0x95}, {&(0x7f0000000380)="172b04cb68aa5799253ce5173dc64867b3e673fe9053bef2799a8e5d1a8172ea9405746a87f3b3d0814b6af22157cfe65ea987afed7d5b97d0ec216392f7667abb17ae247ee0374dc5d94479940225ae57f6a143a50449644db394edfe221e3991a8168aa5929edec467eaa65e8d8260aff9f09f79b283a4350daa7209984120258e5c8f268b837d2093eb8fbbe853c550918585bd861b6e41", 0x99}, {&(0x7f0000000440)="e54502e6a5a4", 0x6}, {&(0x7f0000000480)="12a6d06218775a84c3358e296262c0cfc49b1b0174bd22f516935a8bf45df20e653d909826f2f43b9573df8fbb44aa2ff5dde0efeaea792df7dc528241ba94b5e0d88a453afb662d1e05a2742685a3849754e31b61eae65938ea0baee13e6ec9760a3213da7b", 0x66}, {&(0x7f0000000680)="79dc5adcd0754f51755ece310e02ea17559526849552ce67e2a7b0e4488575e5fec2508a89a01c5c168b2650c54467b3e67a19dcf6f01e1860806ad623adb41f803eda8f210e50a66d38935ceefb9c74f0b7bc4ac1c299bd095b721601b953104b5446a5824cd1170f4e472a77d30d26c6f4c6ab4a2435c1adf27e1d78d775c0a3e70ee50c6175bb80f538c2faf8f392ffb199435e3307a22227670164277a5513150044567199c852ccc1c086e48f7719089913acb78929477ba1a22a277764599098369c41ff6b7c60733e1ba495e00d23777f710ab232744f9887030fe563644939bdcfe12acef6cec0ea43030543f8d636e850102e337f03a2c0e53306bb7c8b99ebb019591f13c3b332b8b555027b29b677fe41342994a914c0717fd82728e0b60e", 0x124}], 0x6}}], 0x1, 0x0) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x11}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) 15:06:00 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x3, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) 15:06:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000022c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d8, 0x32c, 0x17c, 0x17c, 0x32c, 0x5, 0x410, 0x260, 0x260, 0x410, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x30c, 0x32c, 0x52020000, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x534) 15:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x12}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:00 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 15:06:01 executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000890) 15:06:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x7}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000080)=@assoc_value={r2}, 0x8) 15:06:01 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xa, 0x0, 0x80) 15:06:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000001800190f07003fffffffda060200000000e80001dd000c040d000c00ea1101fe0005000000", 0x29}], 0x1) 15:06:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x13}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="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", 0x6aa}], 0x1) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x900}) 15:06:01 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) 15:06:01 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x20000144, 0x0, 0x0) 15:06:01 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r1}, 0x40) 15:06:01 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:06:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:01 executing program 1: socket$inet6(0xa, 0x3, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bd416e", 0x8, 0x3c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 15:06:01 executing program 4: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0xd41}, {&(0x7f0000000840)='\x00', 0xff5e}], 0x8, 0x0, 0x0, 0x1a0}, 0x0) 15:06:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) [ 2015.784797][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x76}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 15:06:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x15}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2015.864610][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0xffd7) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, "b7"}, @mss={0x2, 0x2}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x8, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) 15:06:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000480)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}]}]}]}, 0x5c}}, 0x0) 15:06:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x74) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2}, &(0x7f0000000200)=0x14) 15:06:01 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005100)="5500000018007f5f14fe01b25aa290930206040000001301020b04123900090035000c0201000000190012400a001101020022dc1338d54400fc6df9570901d1f31af1d7df0d3b4f8fd9ceb5a700f3469bab5e1241", 0x55}], 0x1}, 0x0) 15:06:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x16}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:01 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x10}}], 0x2, 0x0) 15:06:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x27) 15:06:01 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89e7, 0x0) 15:06:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x74) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2}, &(0x7f0000000200)=0x14) 15:06:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8, 0x1d}]}, 0x24}}, 0x0) 15:06:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x69, 0x11, 0x70}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:06:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 15:06:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x17}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40087446, &(0x7f0000000100)=0xfdfdffff) [ 2016.398020][T14914] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 2016.436334][T14920] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 15:06:02 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000009c0)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 15:06:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="510005000000", 0x6) 15:06:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x11, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0x14) 15:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:06:02 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0xbb00, 0x0, 0x0) 15:06:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x19}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x56, 0x3c}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:06:02 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x14, r0, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}}, 0x0) 15:06:02 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) 15:06:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 15:06:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000140600000fff07003506090002000000160600000ee50000bf250000000000001f650000000000006507000002000000070700004c0901000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c454779ffdefa2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6fd1f1fe2d8a29641392ca40fe39a2626ec73341cbc905d172b9878d095d288463498a3e1abc93d65d26d30a28b38e368314ecda0a56e2bce4bf8bc9512a5cc1329fbfcc1fc52eafd97e9cd1d7f7e46ab69bf55d83873f590a0c0b55eabb983cfda0dcea122d847"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 15:06:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x1a}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) 15:06:02 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xa0002012}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x47) 15:06:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x44}}, 0x0) 15:06:02 executing program 3: unshare(0x2a000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 15:06:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x1b}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) 15:06:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2cc, 0x13c, 0x1d, 0x0, 0x13c, 0x0, 0x204, 0x1fc, 0x1fc, 0x204, 0x1fc, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x118, 0x13c, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x41) 15:06:02 executing program 1: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xe5, &(0x7f0000000080)=""/229, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:06:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:06:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x7fff, @fixed, 0x0, 0x2}, 0xe) 15:06:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x1c}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:03 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES16], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 15:06:03 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {}]}, 0x108) 15:06:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000fd100008800c00078008000940fe000000090002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000000c7fe1, 0x0) 15:06:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x5f, 0x0) shutdown(r0, 0x0) 15:06:03 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001180)=0x50) 15:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x1d}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x1}]}, 0x24}}, 0x0) 15:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x1e}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2017.686710][T15017] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @local}, r2}, 0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 15:06:03 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x7, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x78) 15:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x21}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:04 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES16], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 15:06:04 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@tclass={{0x10}}], 0x10}, 0x0) 15:06:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', @ifru_data=&(0x7f0000000000)="08000000ec22cce45b3868da58f8f98690a8560a71f328b2b67451532747bb86"}) 15:06:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x22}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) 15:06:04 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x23}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) 15:06:04 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0xff}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7d, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x14) 15:06:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) 15:06:04 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:04 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x2, "e9ed3e4e10b192fbc8648fe8fe4a3657"}, 0x80, 0x0}, 0x0) 15:06:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x24}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000013000)) 15:06:04 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 15:06:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5}, 0x14}}, 0x0) 15:06:05 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 15:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x25}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x200008c1, 0x0, 0x0) 15:06:05 executing program 1: r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 15:06:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x480, 0x21c, 0x0, 0x21c, 0x21c, 0x308, 0x454, 0x454, 0x454, 0x454, 0x454, 0x4, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xa4, 0x1cc, 0x1000000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'vlan1\x00'}}}, {{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4dc) 15:06:05 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x4) 15:06:05 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 15:06:05 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x107}, 0x40) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x26}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:05 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) vmsplice(r0, 0x0, 0x0, 0x14) 15:06:05 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 15:06:05 executing program 1: syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @random="311dd5965231", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x89ffffff}}}}}}, 0x0) 15:06:05 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xf90, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) 15:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x27}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000045c000001400040073797a6b616c6c6572300000000000000a000100aaaaaaaaaabb0000280012800900010076657468"], 0x68}}, 0x0) 15:06:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100), 0x8) 15:06:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f00000001c0)='T', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0xff7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x0, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 15:06:05 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 2019.931708][T15126] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2019.962012][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:06:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x80) 15:06:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x2f}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x4c}}, 0x0) [ 2020.134041][T15140] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2020.157100][T15140] CPU: 0 PID: 15140 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2020.165905][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2020.176049][T15140] Call Trace: [ 2020.179353][T15140] dump_stack+0x198/0x1fd 15:06:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}}, 0x0) [ 2020.183701][T15140] sysfs_warn_dup.cold+0x1c/0x2d [ 2020.188653][T15140] sysfs_do_create_link_sd+0x11e/0x140 [ 2020.194125][T15140] sysfs_create_link+0x5f/0xc0 [ 2020.198935][T15140] device_add+0x6ff/0x1c40 [ 2020.203503][T15140] ? devlink_add_symlinks+0x450/0x450 [ 2020.208895][T15140] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2020.214891][T15140] wiphy_register+0x1d66/0x2850 [ 2020.219764][T15140] ? wiphy_unregister+0xc10/0xc10 [ 2020.224802][T15140] ? generic_xdp_install+0x700/0x700 [ 2020.230230][T15140] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2020.236308][T15140] ieee80211_register_hw+0x22c9/0x39a0 [ 2020.241802][T15140] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2020.247186][T15140] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2020.253092][T15140] ? lock_downgrade+0x830/0x830 [ 2020.257951][T15140] ? lock_is_held_type+0xbb/0xf0 [ 2020.262899][T15140] ? memset+0x20/0x40 [ 2020.266888][T15140] ? __hrtimer_init+0x12c/0x260 [ 2020.271750][T15140] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2020.277497][T15140] ? hwsim_virtio_rx_work+0x350/0x350 [ 2020.282881][T15140] ? memcpy+0x39/0x60 [ 2020.286876][T15140] hwsim_new_radio_nl+0x93e/0xf8c [ 2020.291917][T15140] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2020.297870][T15140] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2020.304809][T15140] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2020.311673][T15140] genl_rcv_msg+0x61d/0x980 [ 2020.316196][T15140] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2020.323161][T15140] ? lock_release+0x8f0/0x8f0 [ 2020.327851][T15140] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2020.333151][T15140] netlink_rcv_skb+0x15a/0x430 [ 2020.337923][T15140] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2020.344872][T15140] ? netlink_ack+0xa10/0xa10 [ 2020.349484][T15140] genl_rcv+0x24/0x40 [ 2020.353476][T15140] netlink_unicast+0x533/0x7d0 [ 2020.358256][T15140] ? netlink_attachskb+0x810/0x810 [ 2020.363377][T15140] ? __phys_addr_symbol+0x2c/0x70 [ 2020.368405][T15140] ? __check_object_size+0x171/0x3e4 [ 2020.373701][T15140] netlink_sendmsg+0x856/0xd90 [ 2020.378480][T15140] ? netlink_unicast+0x7d0/0x7d0 [ 2020.383432][T15140] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2020.388733][T15140] ? netlink_unicast+0x7d0/0x7d0 [ 2020.393676][T15140] sock_sendmsg+0xcf/0x120 [ 2020.398098][T15140] ____sys_sendmsg+0x6e8/0x810 [ 2020.402869][T15140] ? kernel_sendmsg+0x50/0x50 [ 2020.407546][T15140] ? do_recvmmsg+0x6d0/0x6d0 [ 2020.412151][T15140] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2020.418136][T15140] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2020.424123][T15140] ? __lock_acquire+0xb5e/0x5570 [ 2020.429070][T15140] ___sys_sendmsg+0xf3/0x170 [ 2020.433670][T15140] ? sendmsg_copy_msghdr+0x160/0x160 [ 2020.438962][T15140] ? __fget_files+0x272/0x400 [ 2020.443648][T15140] ? lock_downgrade+0x830/0x830 [ 2020.448502][T15140] ? find_held_lock+0x2d/0x110 [ 2020.453291][T15140] ? __fget_files+0x294/0x400 [ 2020.457992][T15140] ? __fget_light+0xea/0x280 [ 2020.462601][T15140] __sys_sendmsg+0xe5/0x1b0 [ 2020.467124][T15140] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2020.472167][T15140] ? syscall_enter_from_user_mode+0x20/0x290 [ 2020.478152][T15140] ? lockdep_hardirqs_on+0x53/0x100 [ 2020.483361][T15140] do_syscall_64+0x2d/0x70 [ 2020.487786][T15140] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2020.493681][T15140] RIP: 0033:0x45d5b9 [ 2020.497579][T15140] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2020.517181][T15140] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2020.525595][T15140] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:06:06 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001700", 0x14, 0x2c, 0x0, @loopback, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:06:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x14a, 0x4008050, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfeb6, 0x91, 0x0, 0x27) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x0) [ 2020.533566][T15140] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2020.541538][T15140] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2020.549510][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2020.557486][T15140] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x1523, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00}}, 0x1c}}, 0x0) 15:06:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x1007e, 0x4) 15:06:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}}, 0x0) 15:06:06 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x100000, 0x0, 0x0, 0x0) 15:06:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFCONF(r0, 0x400443c9, 0x0) 15:06:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), 0x8) 15:06:06 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {}, 0x2}}, 0x2e) 15:06:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xc0}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:06 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000fff2abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128008000100687372"], 0x54}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 15:06:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="d4", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0), 0x14) [ 2020.991339][T15180] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 15:06:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000001c0)) [ 2021.047894][T15182] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2021.074070][T15182] CPU: 1 PID: 15182 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2021.082767][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.092910][T15182] Call Trace: [ 2021.096211][T15182] dump_stack+0x198/0x1fd [ 2021.100559][T15182] sysfs_warn_dup.cold+0x1c/0x2d [ 2021.105512][T15182] sysfs_do_create_link_sd+0x11e/0x140 [ 2021.110986][T15182] sysfs_create_link+0x5f/0xc0 [ 2021.115777][T15182] device_add+0x6ff/0x1c40 [ 2021.120267][T15182] ? devlink_add_symlinks+0x450/0x450 [ 2021.125740][T15182] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2021.131750][T15182] wiphy_register+0x1d66/0x2850 [ 2021.136621][T15182] ? wiphy_unregister+0xc10/0xc10 [ 2021.141652][T15182] ? generic_xdp_install+0x700/0x700 [ 2021.146958][T15182] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2021.153038][T15182] ieee80211_register_hw+0x22c9/0x39a0 [ 2021.158521][T15182] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2021.163912][T15182] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2021.170811][T15182] ? lock_downgrade+0x830/0x830 [ 2021.175680][T15182] ? lock_is_held_type+0xbb/0xf0 [ 2021.180627][T15182] ? memset+0x20/0x40 [ 2021.184741][T15182] ? __hrtimer_init+0x12c/0x260 [ 2021.189606][T15182] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2021.195354][T15182] ? hwsim_virtio_rx_work+0x350/0x350 [ 2021.200742][T15182] ? memcpy+0x39/0x60 [ 2021.204738][T15182] hwsim_new_radio_nl+0x93e/0xf8c [ 2021.209788][T15182] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2021.215702][T15182] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2021.222638][T15182] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2021.229495][T15182] genl_rcv_msg+0x61d/0x980 [ 2021.234010][T15182] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2021.240967][T15182] ? lock_release+0x8f0/0x8f0 [ 2021.245649][T15182] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2021.250958][T15182] netlink_rcv_skb+0x15a/0x430 [ 2021.259284][T15182] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2021.266228][T15182] ? netlink_ack+0xa10/0xa10 [ 2021.270843][T15182] genl_rcv+0x24/0x40 [ 2021.274836][T15182] netlink_unicast+0x533/0x7d0 [ 2021.279614][T15182] ? netlink_attachskb+0x810/0x810 [ 2021.284735][T15182] ? __phys_addr_symbol+0x2c/0x70 [ 2021.289776][T15182] ? __check_object_size+0x171/0x3e4 [ 2021.295073][T15182] netlink_sendmsg+0x856/0xd90 [ 2021.299858][T15182] ? netlink_unicast+0x7d0/0x7d0 [ 2021.304811][T15182] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2021.310104][T15182] ? netlink_unicast+0x7d0/0x7d0 [ 2021.315051][T15182] sock_sendmsg+0xcf/0x120 [ 2021.319480][T15182] ____sys_sendmsg+0x6e8/0x810 [ 2021.324257][T15182] ? kernel_sendmsg+0x50/0x50 [ 2021.328936][T15182] ? do_recvmmsg+0x6d0/0x6d0 [ 2021.333539][T15182] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2021.339531][T15182] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2021.345516][T15182] ? __lock_acquire+0xb5e/0x5570 [ 2021.350468][T15182] ___sys_sendmsg+0xf3/0x170 [ 2021.355179][T15182] ? sendmsg_copy_msghdr+0x160/0x160 [ 2021.360472][T15182] ? __fget_files+0x272/0x400 [ 2021.365331][T15182] ? lock_downgrade+0x830/0x830 [ 2021.370187][T15182] ? find_held_lock+0x2d/0x110 [ 2021.374974][T15182] ? __fget_files+0x294/0x400 [ 2021.379666][T15182] ? __fget_light+0xea/0x280 [ 2021.384271][T15182] __sys_sendmsg+0xe5/0x1b0 [ 2021.388787][T15182] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2021.393833][T15182] ? syscall_enter_from_user_mode+0x20/0x290 [ 2021.399821][T15182] ? lockdep_hardirqs_on+0x53/0x100 [ 2021.405031][T15182] do_syscall_64+0x2d/0x70 [ 2021.409461][T15182] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2021.415358][T15182] RIP: 0033:0x45d5b9 [ 2021.419258][T15182] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2021.438865][T15182] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:06:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f40700090400020220a001000000000000000800020000000000", 0x24) 15:06:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xb, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0) [ 2021.447280][T15182] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2021.455260][T15182] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2021.463246][T15182] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2021.471218][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2021.479192][T15182] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000140)=0x8) 15:06:07 executing program 2: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@remote, @local}, 0x8) [ 2021.656494][T15188] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 15:06:07 executing program 1: r0 = socket(0x15, 0x80005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 15:06:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x3f10, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0), 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40012062, 0x0, 0x0) 15:06:07 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3f4, 0x0, 0x10c, 0x218, 0x314, 0x314, 0x314, 0x4, 0x0, {[{{@arp={@loopback, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'vlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @dev, @dev}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "211f69878e5a8c0101000000000000fcc2f990d7142c50240018c86912a8"}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x440) 15:06:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0xec0}, 0x1, 0xffffff7f0e000000}, 0x0) [ 2021.849043][T15223] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2021.862662][T15223] CPU: 1 PID: 15223 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2021.871351][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2021.881407][T15223] Call Trace: [ 2021.884783][T15223] dump_stack+0x198/0x1fd [ 2021.889135][T15223] sysfs_warn_dup.cold+0x1c/0x2d [ 2021.894095][T15223] sysfs_do_create_link_sd+0x11e/0x140 [ 2021.899572][T15223] sysfs_create_link+0x5f/0xc0 [ 2021.904360][T15223] device_add+0x6ff/0x1c40 [ 2021.908792][T15223] ? devlink_add_symlinks+0x450/0x450 [ 2021.914180][T15223] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2021.920178][T15223] wiphy_register+0x1d66/0x2850 [ 2021.925053][T15223] ? wiphy_unregister+0xc10/0xc10 [ 2021.930085][T15223] ? generic_xdp_install+0x700/0x700 [ 2021.935390][T15223] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2021.941470][T15223] ieee80211_register_hw+0x22c9/0x39a0 [ 2021.946957][T15223] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2021.952334][T15223] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2021.958241][T15223] ? lock_downgrade+0x830/0x830 [ 2021.963107][T15223] ? lock_is_held_type+0xbb/0xf0 [ 2021.968059][T15223] ? memset+0x20/0x40 [ 2021.972050][T15223] ? __hrtimer_init+0x12c/0x260 [ 2021.976913][T15223] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2021.982659][T15223] ? hwsim_virtio_rx_work+0x350/0x350 [ 2021.988048][T15223] ? memcpy+0x39/0x60 [ 2021.992040][T15223] hwsim_new_radio_nl+0x93e/0xf8c [ 2021.997076][T15223] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2022.002990][T15223] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2022.009933][T15223] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2022.016794][T15223] genl_rcv_msg+0x61d/0x980 [ 2022.021514][T15223] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2022.028470][T15223] ? lock_release+0x8f0/0x8f0 [ 2022.033148][T15223] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2022.038447][T15223] netlink_rcv_skb+0x15a/0x430 [ 2022.043226][T15223] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2022.050175][T15223] ? netlink_ack+0xa10/0xa10 [ 2022.054788][T15223] genl_rcv+0x24/0x40 [ 2022.058776][T15223] netlink_unicast+0x533/0x7d0 [ 2022.063568][T15223] ? netlink_attachskb+0x810/0x810 [ 2022.068690][T15223] ? __phys_addr_symbol+0x2c/0x70 [ 2022.073722][T15223] ? __check_object_size+0x171/0x3e4 [ 2022.079021][T15223] netlink_sendmsg+0x856/0xd90 [ 2022.083802][T15223] ? netlink_unicast+0x7d0/0x7d0 [ 2022.088754][T15223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2022.094051][T15223] ? netlink_unicast+0x7d0/0x7d0 [ 2022.098996][T15223] sock_sendmsg+0xcf/0x120 [ 2022.103424][T15223] ____sys_sendmsg+0x6e8/0x810 [ 2022.108198][T15223] ? kernel_sendmsg+0x50/0x50 [ 2022.112968][T15223] ? do_recvmmsg+0x6d0/0x6d0 [ 2022.117576][T15223] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2022.123572][T15223] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2022.129555][T15223] ? __lock_acquire+0xb5e/0x5570 [ 2022.134502][T15223] ___sys_sendmsg+0xf3/0x170 [ 2022.139103][T15223] ? sendmsg_copy_msghdr+0x160/0x160 [ 2022.144399][T15223] ? __fget_files+0x272/0x400 [ 2022.149117][T15223] ? lock_downgrade+0x830/0x830 [ 2022.153971][T15223] ? find_held_lock+0x2d/0x110 [ 2022.158760][T15223] ? __fget_files+0x294/0x400 [ 2022.163454][T15223] ? __fget_light+0xea/0x280 [ 2022.168058][T15223] __sys_sendmsg+0xe5/0x1b0 [ 2022.172567][T15223] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2022.177613][T15223] ? syscall_enter_from_user_mode+0x20/0x290 [ 2022.183597][T15223] ? lockdep_hardirqs_on+0x53/0x100 [ 2022.188807][T15223] do_syscall_64+0x2d/0x70 [ 2022.193235][T15223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2022.199134][T15223] RIP: 0033:0x45d5b9 [ 2022.203034][T15223] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2022.222643][T15223] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2022.231150][T15223] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2022.239130][T15223] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 15:06:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)={0x11c, 0x9, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x1a, 0x1a, 'em1nodevtrusted*proc@\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x13, 0x1a, '%(\xa7\xeb]&\xb8^+*$,)-\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x11c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={0x0, 0x24c}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 15:06:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307d029a00d0000002f003efb0a0002000000000000000f00050005000600", 0x2e}], 0x1}, 0x0) 15:06:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) [ 2022.247106][T15223] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2022.255229][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2022.263206][T15223] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:08 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) 15:06:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3, 0x68}, 0x8) 15:06:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x800000000002, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0)=0x1, 0x4) 15:06:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0xa4}]}, 0x24}}, 0x0) 15:06:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001900010000000000000000001c140000fe000001000000000a0001"], 0xb0}}, 0x0) [ 2022.606892][T15254] sctp: [Deprecated]: syz-executor.4 (pid 15254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2022.606892][T15254] Use struct sctp_sack_info instead 15:06:08 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000", 0x19) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 15:06:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xa124f5cd85501d2}, 0x9c) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000480)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)='g', 0x1}], 0x1}, 0x0) 15:06:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 15:06:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x33fe0}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002d00)=@ethernet, 0x80, 0x0}}], 0x2, 0x0) [ 2022.836731][T15265] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2022.863595][T15265] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. 15:06:08 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000001400000a20000000000a01030000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a3000000000090003000805ffffef00000018010000080a05"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 2022.932369][T15271] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2022.951836][T15271] CPU: 0 PID: 15271 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2022.960536][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2022.970595][T15271] Call Trace: [ 2022.973901][T15271] dump_stack+0x198/0x1fd [ 2022.978249][T15271] sysfs_warn_dup.cold+0x1c/0x2d [ 2022.983203][T15271] sysfs_do_create_link_sd+0x11e/0x140 [ 2022.988675][T15271] sysfs_create_link+0x5f/0xc0 [ 2022.993458][T15271] device_add+0x6ff/0x1c40 [ 2022.997923][T15271] ? devlink_add_symlinks+0x450/0x450 [ 2023.003312][T15271] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2023.009309][T15271] wiphy_register+0x1d66/0x2850 [ 2023.014184][T15271] ? wiphy_unregister+0xc10/0xc10 [ 2023.019251][T15271] ? generic_xdp_install+0x700/0x700 [ 2023.024561][T15271] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2023.030644][T15271] ieee80211_register_hw+0x22c9/0x39a0 [ 2023.036133][T15271] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2023.041526][T15271] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2023.047432][T15271] ? lock_downgrade+0x830/0x830 [ 2023.052290][T15271] ? lock_is_held_type+0xbb/0xf0 [ 2023.057236][T15271] ? memset+0x20/0x40 [ 2023.061230][T15271] ? __hrtimer_init+0x12c/0x260 [ 2023.066099][T15271] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2023.071845][T15271] ? hwsim_virtio_rx_work+0x350/0x350 [ 2023.077229][T15271] ? memcpy+0x39/0x60 [ 2023.079799][T15280] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2023.081216][T15271] hwsim_new_radio_nl+0x93e/0xf8c [ 2023.081240][T15271] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2023.081273][T15271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2023.081288][T15271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2023.081308][T15271] genl_rcv_msg+0x61d/0x980 [ 2023.119806][T15271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2023.126762][T15271] ? __kmalloc_node_track_caller+0x38/0x60 [ 2023.132580][T15271] ? lock_release+0x8f0/0x8f0 [ 2023.137262][T15271] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2023.142555][T15271] ? rcu_read_lock_sched_held+0x20/0xb0 [ 2023.148113][T15271] netlink_rcv_skb+0x15a/0x430 [ 2023.152889][T15271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2023.159837][T15271] ? netlink_ack+0xa10/0xa10 [ 2023.164542][T15271] genl_rcv+0x24/0x40 [ 2023.168533][T15271] netlink_unicast+0x533/0x7d0 [ 2023.173315][T15271] ? netlink_attachskb+0x810/0x810 [ 2023.178434][T15271] ? __phys_addr_symbol+0x2c/0x70 [ 2023.183463][T15271] ? __check_object_size+0x171/0x3e4 [ 2023.188762][T15271] netlink_sendmsg+0x856/0xd90 [ 2023.193541][T15271] ? netlink_unicast+0x7d0/0x7d0 [ 2023.198494][T15271] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2023.203787][T15271] ? netlink_unicast+0x7d0/0x7d0 [ 2023.208737][T15271] sock_sendmsg+0xcf/0x120 [ 2023.213165][T15271] ____sys_sendmsg+0x6e8/0x810 [ 2023.217940][T15271] ? kernel_sendmsg+0x50/0x50 [ 2023.222624][T15271] ? do_recvmmsg+0x6d0/0x6d0 [ 2023.227226][T15271] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2023.233217][T15271] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2023.239200][T15271] ? __lock_acquire+0xb5e/0x5570 [ 2023.244148][T15271] ___sys_sendmsg+0xf3/0x170 [ 2023.248752][T15271] ? sendmsg_copy_msghdr+0x160/0x160 [ 2023.254049][T15271] ? __fget_files+0x272/0x400 [ 2023.258737][T15271] ? lock_downgrade+0x830/0x830 [ 2023.263607][T15271] ? find_held_lock+0x2d/0x110 [ 2023.268398][T15271] ? __fget_files+0x294/0x400 [ 2023.273094][T15271] ? __fget_light+0xea/0x280 [ 2023.277703][T15271] __sys_sendmsg+0xe5/0x1b0 [ 2023.282213][T15271] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2023.287263][T15271] ? syscall_enter_from_user_mode+0x20/0x290 [ 2023.293254][T15271] ? lockdep_hardirqs_on+0x53/0x100 [ 2023.298465][T15271] do_syscall_64+0x2d/0x70 [ 2023.302893][T15271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2023.308787][T15271] RIP: 0033:0x45d5b9 [ 2023.312689][T15271] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:06:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b98ddc3c61ccc99a30a7d3b4731ab23a2233cfd3f66ac163", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$qrtr(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="878cb668d997e8fd67f307a5456f390b2175c068ce1b2c49fd7e586a76d4d19fc544bae1134cd9fd833c255a3a86dc9c0f", 0x31}], 0x1}, 0x1c) [ 2023.332300][T15271] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2023.340719][T15271] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2023.348697][T15271] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2023.356680][T15271] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2023.364665][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2023.372641][T15271] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000080)="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", 0x104) 15:06:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x354, 0x1e0, 0x118, 0x3e020000, 0x0, 0x118, 0x2c0, 0x1d0, 0x1d0, 0x2c0, 0x1d0, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'veth1_to_bridge\x00', {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa7e9, 0x6, 0x0, 0x40}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b0) 15:06:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_NAT_SRC={0x14, 0x19, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x4, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x28}}, 0x0) 15:06:09 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x8e, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 15:06:09 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) [ 2023.640055][T15301] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 15:06:09 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f00000010c0)=""/4080, &(0x7f0000000040)=0xff0) 15:06:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000204000ffffffff", 0x58}], 0x1000000000000002) 15:06:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 15:06:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x200030e8}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:09 executing program 4: unshare(0x2a000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 15:06:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x3, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) 15:06:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 15:06:09 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000340)) 15:06:09 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x2}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x0, 0x2}, 0x10) 15:06:09 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) 15:06:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x7ffff000}, 0x1, 0xffffff7f0e000000}, 0x0) 15:06:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r1, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7, 0x0, &(0x7f0000000000)) 15:06:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11}}) 15:06:09 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:06:09 executing program 1: unshare(0x20000400) r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 15:06:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x2, 0xffffff7f0e000000}, 0x0) 15:06:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000080000000000c953", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5}]}}}]}, 0x48}}, 0x0) 15:06:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x3c}}, 0x0) 15:06:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x1c, 0x0, &(0x7f0000000000)) 15:06:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x220, 0x0, 0x294, 0x0, 0x294, 0x460, 0x378, 0x378, 0x460, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x9, 0x0, 0x6c], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'bond_slave_1\x00'}, 0x0, 0x1b8, 0x220, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth1_to_batadv\x00', {0xc, 0x1000, 0x7, 0x7ff, 0x8, 0x2, 0x880, 0x0, 0x80}, {0xffff}}}, @common=@unspec=@conntrack2={{0xbc, 'conntrack\x00'}, {{@ipv6=@empty, [], @ipv6=@local, [], @ipv6=@private2, [0x0, 0x0, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff], 0x3, 0x992, 0x73, 0x4e23, 0x4e20, 0x4e23, 0x4e21, 0x2, 0x140}, 0x100, 0x204}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x200, 0x240, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @private2, @dev, @private2, @mcast1, @private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}, @common=@ipv6header={{0x24, 'ipv6header\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "b261f4887a1470018c68e0e5774c4f21870399605576271b11b4f7146162"}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xfe1f) [ 2024.370837][T15354] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2024.420143][T15354] CPU: 1 PID: 15354 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2024.428853][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2024.438913][T15354] Call Trace: [ 2024.442219][T15354] dump_stack+0x198/0x1fd [ 2024.446567][T15354] sysfs_warn_dup.cold+0x1c/0x2d [ 2024.451529][T15354] sysfs_do_create_link_sd+0x11e/0x140 [ 2024.457002][T15354] sysfs_create_link+0x5f/0xc0 [ 2024.461777][T15354] device_add+0x6ff/0x1c40 [ 2024.466208][T15354] ? devlink_add_symlinks+0x450/0x450 [ 2024.471593][T15354] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2024.477592][T15354] wiphy_register+0x1d66/0x2850 [ 2024.482471][T15354] ? wiphy_unregister+0xc10/0xc10 [ 2024.487501][T15354] ? generic_xdp_install+0x700/0x700 [ 2024.492806][T15354] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2024.498887][T15354] ieee80211_register_hw+0x22c9/0x39a0 [ 2024.504373][T15354] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2024.509741][T15354] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2024.515637][T15354] ? lock_downgrade+0x830/0x830 [ 2024.520504][T15354] ? lock_is_held_type+0xbb/0xf0 [ 2024.525455][T15354] ? memset+0x20/0x40 [ 2024.529452][T15354] ? __hrtimer_init+0x12c/0x260 [ 2024.534319][T15354] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2024.540069][T15354] ? hwsim_virtio_rx_work+0x350/0x350 [ 2024.545451][T15354] ? memcpy+0x39/0x60 [ 2024.549496][T15354] hwsim_new_radio_nl+0x93e/0xf8c [ 2024.554533][T15354] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2024.560449][T15354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 15:06:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x34a}, 0x48) 15:06:10 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x79fdcea6) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f00000006c0)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 15:06:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e37, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0xc, 0x1, 0x24}], 0xc}}], 0x2, 0x0) [ 2024.567395][T15354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2024.574253][T15354] genl_rcv_msg+0x61d/0x980 [ 2024.578768][T15354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2024.585723][T15354] ? lock_release+0x8f0/0x8f0 [ 2024.590407][T15354] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2024.595708][T15354] netlink_rcv_skb+0x15a/0x430 [ 2024.600498][T15354] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2024.607459][T15354] ? netlink_ack+0xa10/0xa10 [ 2024.612072][T15354] genl_rcv+0x24/0x40 [ 2024.616059][T15354] netlink_unicast+0x533/0x7d0 [ 2024.620839][T15354] ? netlink_attachskb+0x810/0x810 [ 2024.625957][T15354] ? __phys_addr_symbol+0x2c/0x70 [ 2024.630987][T15354] ? __check_object_size+0x171/0x3e4 [ 2024.636288][T15354] netlink_sendmsg+0x856/0xd90 [ 2024.641068][T15354] ? netlink_unicast+0x7d0/0x7d0 [ 2024.646018][T15354] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2024.651308][T15354] ? netlink_unicast+0x7d0/0x7d0 [ 2024.656246][T15354] sock_sendmsg+0xcf/0x120 [ 2024.660666][T15354] ____sys_sendmsg+0x6e8/0x810 [ 2024.665438][T15354] ? kernel_sendmsg+0x50/0x50 [ 2024.670119][T15354] ? do_recvmmsg+0x6d0/0x6d0 [ 2024.674721][T15354] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2024.680713][T15354] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2024.686813][T15354] ? __lock_acquire+0xb5e/0x5570 [ 2024.691763][T15354] ___sys_sendmsg+0xf3/0x170 [ 2024.696363][T15354] ? sendmsg_copy_msghdr+0x160/0x160 [ 2024.701656][T15354] ? __fget_files+0x272/0x400 [ 2024.706447][T15354] ? lock_downgrade+0x830/0x830 [ 2024.711291][T15354] ? find_held_lock+0x2d/0x110 [ 2024.716114][T15354] ? __fget_files+0x294/0x400 [ 2024.720778][T15354] ? __fget_light+0xea/0x280 [ 2024.725374][T15354] __sys_sendmsg+0xe5/0x1b0 [ 2024.729886][T15354] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2024.734935][T15354] ? syscall_enter_from_user_mode+0x20/0x290 [ 2024.740922][T15354] ? lockdep_hardirqs_on+0x53/0x100 [ 2024.746130][T15354] do_syscall_64+0x2d/0x70 [ 2024.750557][T15354] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2024.756457][T15354] RIP: 0033:0x45d5b9 [ 2024.760356][T15354] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2024.779960][T15354] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.788374][T15354] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2024.796349][T15354] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2024.804324][T15354] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2024.812298][T15354] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2024.820275][T15354] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:10 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:06:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) [ 2024.879362][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x3, 0xffffff7f0e000000}, 0x0) 15:06:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x64}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) [ 2024.996325][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2025.042661][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2025.062819][T15401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2025.113320][T15402] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2025.121946][T15402] CPU: 0 PID: 15402 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2025.130617][T15402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.140675][T15402] Call Trace: [ 2025.143977][T15402] dump_stack+0x198/0x1fd [ 2025.148327][T15402] sysfs_warn_dup.cold+0x1c/0x2d [ 2025.153277][T15402] sysfs_do_create_link_sd+0x11e/0x140 [ 2025.158750][T15402] sysfs_create_link+0x5f/0xc0 [ 2025.163532][T15402] device_add+0x6ff/0x1c40 [ 2025.167987][T15402] ? devlink_add_symlinks+0x450/0x450 [ 2025.173374][T15402] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2025.179369][T15402] wiphy_register+0x1d66/0x2850 [ 2025.184246][T15402] ? wiphy_unregister+0xc10/0xc10 [ 2025.189277][T15402] ? generic_xdp_install+0x700/0x700 [ 2025.194583][T15402] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2025.200661][T15402] ieee80211_register_hw+0x22c9/0x39a0 [ 2025.206145][T15402] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2025.211529][T15402] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2025.217437][T15402] ? lock_downgrade+0x830/0x830 [ 2025.222299][T15402] ? lock_is_held_type+0xbb/0xf0 [ 2025.227244][T15402] ? memset+0x20/0x40 [ 2025.231241][T15402] ? __hrtimer_init+0x12c/0x260 [ 2025.236107][T15402] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2025.241883][T15402] ? hwsim_virtio_rx_work+0x350/0x350 [ 2025.247265][T15402] ? memcpy+0x39/0x60 [ 2025.251266][T15402] hwsim_new_radio_nl+0x93e/0xf8c [ 2025.256287][T15402] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2025.262203][T15402] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2025.269230][T15402] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2025.276091][T15402] genl_rcv_msg+0x61d/0x980 [ 2025.280602][T15402] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2025.287546][T15402] ? lock_release+0x8f0/0x8f0 [ 2025.292215][T15402] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2025.297499][T15402] netlink_rcv_skb+0x15a/0x430 [ 2025.302250][T15402] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2025.309175][T15402] ? netlink_ack+0xa10/0xa10 [ 2025.313766][T15402] genl_rcv+0x24/0x40 [ 2025.317735][T15402] netlink_unicast+0x533/0x7d0 [ 2025.322501][T15402] ? netlink_attachskb+0x810/0x810 [ 2025.327603][T15402] ? __phys_addr_symbol+0x2c/0x70 [ 2025.332632][T15402] ? __check_object_size+0x171/0x3e4 [ 2025.337908][T15402] netlink_sendmsg+0x856/0xd90 [ 2025.342663][T15402] ? netlink_unicast+0x7d0/0x7d0 [ 2025.347590][T15402] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2025.352860][T15402] ? netlink_unicast+0x7d0/0x7d0 [ 2025.357781][T15402] sock_sendmsg+0xcf/0x120 [ 2025.362182][T15402] ____sys_sendmsg+0x6e8/0x810 [ 2025.366933][T15402] ? kernel_sendmsg+0x50/0x50 [ 2025.371593][T15402] ? do_recvmmsg+0x6d0/0x6d0 [ 2025.376173][T15402] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2025.382138][T15402] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2025.388099][T15402] ? __lock_acquire+0xb5e/0x5570 [ 2025.393024][T15402] ___sys_sendmsg+0xf3/0x170 [ 2025.397597][T15402] ? sendmsg_copy_msghdr+0x160/0x160 [ 2025.402891][T15402] ? __fget_files+0x272/0x400 [ 2025.407556][T15402] ? find_held_lock+0x2d/0x110 [ 2025.412314][T15402] ? __fget_files+0x294/0x400 [ 2025.416981][T15402] ? __fget_light+0xea/0x280 [ 2025.421561][T15402] __sys_sendmsg+0xe5/0x1b0 [ 2025.426049][T15402] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2025.431068][T15402] ? syscall_enter_from_user_mode+0x20/0x290 [ 2025.437031][T15402] ? lockdep_hardirqs_on+0x53/0x100 [ 2025.442212][T15402] do_syscall_64+0x2d/0x70 [ 2025.446615][T15402] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2025.452496][T15402] RIP: 0033:0x45d5b9 [ 2025.456385][T15402] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2025.475993][T15402] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2025.484389][T15402] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2025.492342][T15402] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2025.500295][T15402] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2025.508249][T15402] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2025.516243][T15402] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1f}]}, 0x2c}}, 0x0) 15:06:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "941d430996e19dd6"}}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "d5ddf453318620ac"}, 0x975679f076a29b77}}]}, 0x44}}, 0x0) 15:06:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x4, 0xffffff7f0e000000}, 0x0) 15:06:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="98", 0x1, 0x0, 0x0, 0x0) 15:06:11 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}}}, 0x24}, 0x8}, 0x0) 15:06:11 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$rds(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) [ 2025.980852][T15431] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2026.009992][T15431] CPU: 1 PID: 15431 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2026.018691][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 15:06:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 2026.029095][T15431] Call Trace: [ 2026.032397][T15431] dump_stack+0x198/0x1fd [ 2026.036746][T15431] sysfs_warn_dup.cold+0x1c/0x2d [ 2026.041699][T15431] sysfs_do_create_link_sd+0x11e/0x140 [ 2026.047170][T15431] sysfs_create_link+0x5f/0xc0 [ 2026.051949][T15431] device_add+0x6ff/0x1c40 [ 2026.056382][T15431] ? devlink_add_symlinks+0x450/0x450 [ 2026.061769][T15431] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2026.067769][T15431] wiphy_register+0x1d66/0x2850 [ 2026.072644][T15431] ? wiphy_unregister+0xc10/0xc10 [ 2026.077678][T15431] ? generic_xdp_install+0x700/0x700 [ 2026.083863][T15431] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2026.089953][T15431] ieee80211_register_hw+0x22c9/0x39a0 [ 2026.095438][T15431] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2026.100813][T15431] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2026.106872][T15431] ? lock_downgrade+0x830/0x830 [ 2026.111745][T15431] ? lock_is_held_type+0xbb/0xf0 [ 2026.116698][T15431] ? memset+0x20/0x40 [ 2026.120691][T15431] ? __hrtimer_init+0x12c/0x260 [ 2026.125553][T15431] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2026.131324][T15431] ? hwsim_virtio_rx_work+0x350/0x350 [ 2026.136713][T15431] ? memcpy+0x39/0x60 [ 2026.140709][T15431] hwsim_new_radio_nl+0x93e/0xf8c [ 2026.145749][T15431] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2026.151672][T15431] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2026.158730][T15431] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2026.165603][T15431] genl_rcv_msg+0x61d/0x980 [ 2026.170125][T15431] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2026.177082][T15431] ? lock_release+0x8f0/0x8f0 [ 2026.181766][T15431] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2026.187065][T15431] netlink_rcv_skb+0x15a/0x430 [ 2026.191843][T15431] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2026.198788][T15431] ? netlink_ack+0xa10/0xa10 [ 2026.203420][T15431] genl_rcv+0x24/0x40 [ 2026.207418][T15431] netlink_unicast+0x533/0x7d0 [ 2026.212194][T15431] ? netlink_attachskb+0x810/0x810 [ 2026.217317][T15431] ? __phys_addr_symbol+0x2c/0x70 [ 2026.222349][T15431] ? __check_object_size+0x171/0x3e4 [ 2026.227649][T15431] netlink_sendmsg+0x856/0xd90 [ 2026.232433][T15431] ? netlink_unicast+0x7d0/0x7d0 [ 2026.237387][T15431] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2026.242688][T15431] ? netlink_unicast+0x7d0/0x7d0 [ 2026.247637][T15431] sock_sendmsg+0xcf/0x120 [ 2026.252062][T15431] ____sys_sendmsg+0x6e8/0x810 [ 2026.256835][T15431] ? kernel_sendmsg+0x50/0x50 [ 2026.261517][T15431] ? do_recvmmsg+0x6d0/0x6d0 [ 2026.266122][T15431] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2026.272114][T15431] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2026.278099][T15431] ? __lock_acquire+0xb5e/0x5570 [ 2026.283052][T15431] ___sys_sendmsg+0xf3/0x170 [ 2026.287656][T15431] ? sendmsg_copy_msghdr+0x160/0x160 [ 2026.292949][T15431] ? __fget_files+0x272/0x400 [ 2026.297654][T15431] ? __fget_files+0x294/0x400 [ 2026.302353][T15431] ? __fget_light+0xea/0x280 [ 2026.306961][T15431] __sys_sendmsg+0xe5/0x1b0 [ 2026.311481][T15431] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2026.316615][T15431] ? syscall_enter_from_user_mode+0x20/0x290 [ 2026.322599][T15431] ? lockdep_hardirqs_on+0x53/0x100 [ 2026.327807][T15431] do_syscall_64+0x2d/0x70 [ 2026.332231][T15431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2026.338123][T15431] RIP: 0033:0x45d5b9 [ 2026.342025][T15431] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2026.361656][T15431] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2026.370070][T15431] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 15:06:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 15:06:12 executing program 3: syz_emit_ethernet(0x72, &(0x7f00000007c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "7f112d", 0x0, 0x11, 0x0, @mcast1, @mcast2, [], "a1020b1e952ed23d43e9f100"}}}}}}}, 0x0) 15:06:12 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x3f00, 0x0, 0x0) [ 2026.378046][T15431] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2026.386021][T15431] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2026.393996][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2026.401971][T15431] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:12 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) [ 2026.499318][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x80}}, 0x0) 15:06:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x5, 0xffffff7f0e000000}, 0x0) 15:06:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r1, 0x703, 0x0, 0x0, {0x6}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 15:06:12 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000700)={@multicast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x0, 0x0, @loopback, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @private, @broadcast, {[@rr={0x7, 0x13, 0x0, [@multicast2, @empty, @multicast2, @local]}, @ssrr={0x89, 0x17, 0x0, [@local, @private, @local, @empty, @empty]}]}}}}}}}, 0x0) [ 2026.639911][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x5, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x55}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 15:06:12 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x2003, 0x0, 0x0) [ 2026.769176][T15471] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2026.807492][T15471] CPU: 1 PID: 15471 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2026.816195][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2026.826255][T15471] Call Trace: [ 2026.829559][T15471] dump_stack+0x198/0x1fd [ 2026.833911][T15471] sysfs_warn_dup.cold+0x1c/0x2d [ 2026.838861][T15471] sysfs_do_create_link_sd+0x11e/0x140 [ 2026.844339][T15471] sysfs_create_link+0x5f/0xc0 [ 2026.849117][T15471] device_add+0x6ff/0x1c40 [ 2026.853542][T15471] ? devlink_add_symlinks+0x450/0x450 [ 2026.858922][T15471] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2026.864921][T15471] wiphy_register+0x1d66/0x2850 [ 2026.869792][T15471] ? wiphy_unregister+0xc10/0xc10 [ 2026.874825][T15471] ? generic_xdp_install+0x700/0x700 [ 2026.880131][T15471] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2026.886211][T15471] ieee80211_register_hw+0x22c9/0x39a0 [ 2026.891696][T15471] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2026.897190][T15471] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2026.903095][T15471] ? lock_downgrade+0x830/0x830 [ 2026.907952][T15471] ? lock_is_held_type+0xbb/0xf0 [ 2026.912900][T15471] ? memset+0x20/0x40 [ 2026.916894][T15471] ? __hrtimer_init+0x12c/0x260 [ 2026.921756][T15471] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2026.927541][T15471] ? hwsim_virtio_rx_work+0x350/0x350 [ 2026.932922][T15471] ? memcpy+0x39/0x60 [ 2026.936914][T15471] hwsim_new_radio_nl+0x93e/0xf8c [ 2026.941949][T15471] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2026.947864][T15471] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2026.954802][T15471] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2026.961662][T15471] genl_rcv_msg+0x61d/0x980 [ 2026.966182][T15471] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2026.973135][T15471] ? lock_release+0x8f0/0x8f0 [ 2026.979810][T15471] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2026.985114][T15471] netlink_rcv_skb+0x15a/0x430 [ 2026.989890][T15471] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2026.996835][T15471] ? netlink_ack+0xa10/0xa10 [ 2027.001447][T15471] genl_rcv+0x24/0x40 [ 2027.005443][T15471] netlink_unicast+0x533/0x7d0 [ 2027.010221][T15471] ? netlink_attachskb+0x810/0x810 [ 2027.015485][T15471] ? __phys_addr_symbol+0x2c/0x70 [ 2027.020515][T15471] ? __check_object_size+0x171/0x3e4 [ 2027.025811][T15471] netlink_sendmsg+0x856/0xd90 [ 2027.030592][T15471] ? netlink_unicast+0x7d0/0x7d0 [ 2027.035541][T15471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2027.040836][T15471] ? netlink_unicast+0x7d0/0x7d0 [ 2027.045776][T15471] sock_sendmsg+0xcf/0x120 [ 2027.050198][T15471] ____sys_sendmsg+0x6e8/0x810 [ 2027.054972][T15471] ? kernel_sendmsg+0x50/0x50 [ 2027.059654][T15471] ? do_recvmmsg+0x6d0/0x6d0 [ 2027.064272][T15471] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2027.070269][T15471] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2027.076258][T15471] ? __lock_acquire+0xb5e/0x5570 [ 2027.081205][T15471] ___sys_sendmsg+0xf3/0x170 [ 2027.085815][T15471] ? sendmsg_copy_msghdr+0x160/0x160 [ 2027.091112][T15471] ? __fget_files+0x272/0x400 [ 2027.095819][T15471] ? __fget_files+0x294/0x400 [ 2027.100514][T15471] ? __fget_light+0xea/0x280 [ 2027.105127][T15471] __sys_sendmsg+0xe5/0x1b0 [ 2027.109638][T15471] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2027.114687][T15471] ? syscall_enter_from_user_mode+0x20/0x290 [ 2027.120676][T15471] ? lockdep_hardirqs_on+0x53/0x100 [ 2027.125885][T15471] do_syscall_64+0x2d/0x70 [ 2027.130313][T15471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2027.136208][T15471] RIP: 0033:0x45d5b9 [ 2027.140106][T15471] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2027.159973][T15471] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:06:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x3c1, 0x3, 0x1428, 0x0, 0x17c, 0x17c, 0x0, 0x5, 0x1360, 0x260, 0x260, 0x1360, 0x260, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0, [], [], 'wg0\x00', 'ip6gretap0\x00'}, 0x0, 0x120c, 0x1254, 0x52020000, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @rand_addr=' \x01\x00', @private0, @loopback, @dev, @loopback, @remote, @empty, @private0, @private1, @empty, @empty, @mcast1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@dev, @empty, [], [], 'ip6tnl0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1484) 15:06:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x3, 0x0, 0x201a7fa6, 0x5}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) 15:06:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x80, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x80}}, 0x0) [ 2027.168392][T15471] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2027.176366][T15471] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2027.184346][T15471] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2027.192325][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2027.200299][T15471] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0300fc60100202400c000200053582c137153e370900018004001d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4c}, 0x0) 15:06:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c1e000010000507000200000000000000000000cfedf0f47a678cf1cce861ab4571654096992f798c24dfc7b4396620aad6a1c2a2fee492ca8ed13b11787131b9a043a8d4efff834130bc53d02ec4d9e2a146121b86378a196bb17a3b0ecce892a5bba1708f3ba7abc46676a1fa185ab6ccde5b4d57efc98df5c17dc93de36d319d1aa86effc58d07d631c7211f100204ae631613b5c2d7686575c31eea303d37", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300f819e6c4b3e13a5de84c0c9ed521610e04e9f4efda8d12be352f3c6f7b15c54c1f99356b58d282e14586c937d7edfc5d7d0000548cfb23b11a0337bfbc498e98b94ebc02c0ef9fcce0c100e9b76eeec2dd9ba11f011eb444479497ce33f1b122f155992b21f5a01b40940850b4719934207f7eb94586b115340846fe15f76d6547a407096b18226411cd4f1a370ddb6c3a132f28", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@remote, 0x0, r5}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x31f, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x117}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb, 0x1, 'lowpan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x48}}, 0x0) 15:06:13 executing program 3: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:06:13 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x48805, 0x0, 0x0) 15:06:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x6, 0xffffff7f0e000000}, 0x0) 15:06:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) close(r0) 15:06:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @random="5134f102e965"}, {0xa, 0x4, @remote}, {0xa, 0x4, @dev={[], 0x20}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x80}}, 0x800) 15:06:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000880)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@tclass={{0x10, 0x29, 0x43, 0xfffffff8}}], 0x10}}], 0x2, 0x0) 15:06:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendmmsg$inet_sctp(r0, &(0x7f000000ae40)=[{&(0x7f0000003980)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003bc0)=[{&(0x7f00000039c0)="96", 0x34000}], 0x1}], 0x1, 0x0) 15:06:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x48) 15:06:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 2027.654255][T15518] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2027.674500][T15518] CPU: 0 PID: 15518 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2027.683203][T15518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2027.693262][T15518] Call Trace: [ 2027.696574][T15518] dump_stack+0x198/0x1fd 15:06:13 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800020002000000bcf307802ce67265cab172394797cf0e080006001000000008000600b30000000800060000000000080006000000000014000780080006000000000008400500000000000c0007800800050000000000540007800800050000000000080006000000000008000600000000000800060000000000080006000000000008000500000000f007000500000000000800050000000000080005000000000008000600002000000c00078008000500000000000c0007800800050000000000380008803400078008000500000000000800060000000000080005000000000008000600000000000800050000000000080005"], 0x110}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 2027.700923][T15518] sysfs_warn_dup.cold+0x1c/0x2d [ 2027.705872][T15518] sysfs_do_create_link_sd+0x11e/0x140 [ 2027.711347][T15518] sysfs_create_link+0x5f/0xc0 [ 2027.716132][T15518] device_add+0x6ff/0x1c40 [ 2027.720566][T15518] ? devlink_add_symlinks+0x450/0x450 [ 2027.725954][T15518] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2027.731958][T15518] wiphy_register+0x1d66/0x2850 [ 2027.736833][T15518] ? wiphy_unregister+0xc10/0xc10 [ 2027.741867][T15518] ? generic_xdp_install+0x700/0x700 [ 2027.747170][T15518] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2027.753252][T15518] ieee80211_register_hw+0x22c9/0x39a0 [ 2027.758742][T15518] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2027.764129][T15518] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2027.770052][T15518] ? lock_downgrade+0x830/0x830 [ 2027.774916][T15518] ? lock_is_held_type+0xbb/0xf0 [ 2027.779865][T15518] ? memset+0x20/0x40 [ 2027.783858][T15518] ? __hrtimer_init+0x12c/0x260 [ 2027.788727][T15518] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2027.794476][T15518] ? hwsim_virtio_rx_work+0x350/0x350 [ 2027.799860][T15518] ? memcpy+0x39/0x60 [ 2027.803857][T15518] hwsim_new_radio_nl+0x93e/0xf8c [ 2027.808896][T15518] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2027.814813][T15518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2027.821757][T15518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2027.828618][T15518] genl_rcv_msg+0x61d/0x980 [ 2027.833138][T15518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2027.840095][T15518] ? lock_release+0x8f0/0x8f0 [ 2027.844778][T15518] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2027.850085][T15518] netlink_rcv_skb+0x15a/0x430 [ 2027.854861][T15518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2027.861811][T15518] ? netlink_ack+0xa10/0xa10 [ 2027.866428][T15518] genl_rcv+0x24/0x40 [ 2027.870423][T15518] netlink_unicast+0x533/0x7d0 [ 2027.875204][T15518] ? netlink_attachskb+0x810/0x810 [ 2027.880331][T15518] ? __phys_addr_symbol+0x2c/0x70 [ 2027.885360][T15518] ? __check_object_size+0x171/0x3e4 [ 2027.890658][T15518] netlink_sendmsg+0x856/0xd90 [ 2027.895439][T15518] ? netlink_unicast+0x7d0/0x7d0 [ 2027.907600][T15518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2027.912901][T15518] ? netlink_unicast+0x7d0/0x7d0 [ 2027.917849][T15518] sock_sendmsg+0xcf/0x120 [ 2027.922276][T15518] ____sys_sendmsg+0x6e8/0x810 [ 2027.927051][T15518] ? kernel_sendmsg+0x50/0x50 [ 2027.931738][T15518] ? do_recvmmsg+0x6d0/0x6d0 [ 2027.936343][T15518] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2027.942332][T15518] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2027.948320][T15518] ? __lock_acquire+0xb5e/0x5570 [ 2027.953272][T15518] ___sys_sendmsg+0xf3/0x170 [ 2027.957870][T15518] ? sendmsg_copy_msghdr+0x160/0x160 [ 2027.963165][T15518] ? __fget_files+0x272/0x400 [ 2027.967870][T15518] ? __fget_files+0x294/0x400 [ 2027.972566][T15518] ? __fget_light+0xea/0x280 [ 2027.977178][T15518] __sys_sendmsg+0xe5/0x1b0 [ 2027.981698][T15518] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2027.986754][T15518] ? syscall_enter_from_user_mode+0x20/0x290 [ 2027.992750][T15518] ? lockdep_hardirqs_on+0x53/0x100 [ 2027.997959][T15518] do_syscall_64+0x2d/0x70 [ 2028.002388][T15518] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2028.008284][T15518] RIP: 0033:0x45d5b9 [ 2028.012186][T15518] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2028.031790][T15518] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2028.040206][T15518] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2028.048182][T15518] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2028.056160][T15518] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2028.064137][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2028.072116][T15518] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) 15:06:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0) 15:06:13 executing program 4: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) [ 2028.097493][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:06:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x7, 0xffffff7f0e000000}, 0x0) 15:06:13 executing program 2: r0 = socket(0x10, 0x803, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x3ed}}, 0x28}}, 0x0) [ 2028.295267][T15545] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2028.318531][T15545] CPU: 1 PID: 15545 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2028.327321][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2028.337381][T15545] Call Trace: [ 2028.340688][T15545] dump_stack+0x198/0x1fd [ 2028.345038][T15545] sysfs_warn_dup.cold+0x1c/0x2d [ 2028.349975][T15545] sysfs_do_create_link_sd+0x11e/0x140 [ 2028.355436][T15545] sysfs_create_link+0x5f/0xc0 [ 2028.360211][T15545] device_add+0x6ff/0x1c40 [ 2028.364646][T15545] ? devlink_add_symlinks+0x450/0x450 [ 2028.370031][T15545] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2028.376025][T15545] wiphy_register+0x1d66/0x2850 [ 2028.380930][T15545] ? wiphy_unregister+0xc10/0xc10 [ 2028.385964][T15545] ? generic_xdp_install+0x700/0x700 [ 2028.391271][T15545] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2028.397358][T15545] ieee80211_register_hw+0x22c9/0x39a0 [ 2028.402872][T15545] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2028.408249][T15545] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2028.414157][T15545] ? lock_downgrade+0x830/0x830 [ 2028.419018][T15545] ? lock_is_held_type+0xbb/0xf0 [ 2028.423964][T15545] ? memset+0x20/0x40 [ 2028.427957][T15545] ? __hrtimer_init+0x12c/0x260 [ 2028.432831][T15545] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2028.438581][T15545] ? hwsim_virtio_rx_work+0x350/0x350 [ 2028.443967][T15545] ? memcpy+0x39/0x60 [ 2028.447965][T15545] hwsim_new_radio_nl+0x93e/0xf8c [ 2028.453003][T15545] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2028.458916][T15545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2028.465854][T15545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2028.472719][T15545] genl_rcv_msg+0x61d/0x980 [ 2028.477240][T15545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2028.484198][T15545] ? lock_release+0x8f0/0x8f0 [ 2028.488880][T15545] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2028.494185][T15545] netlink_rcv_skb+0x15a/0x430 [ 2028.499303][T15545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2028.506251][T15545] ? netlink_ack+0xa10/0xa10 [ 2028.510866][T15545] genl_rcv+0x24/0x40 [ 2028.514860][T15545] netlink_unicast+0x533/0x7d0 [ 2028.519638][T15545] ? netlink_attachskb+0x810/0x810 [ 2028.524761][T15545] ? __phys_addr_symbol+0x2c/0x70 [ 2028.529788][T15545] ? __check_object_size+0x171/0x3e4 [ 2028.535090][T15545] netlink_sendmsg+0x856/0xd90 [ 2028.539875][T15545] ? netlink_unicast+0x7d0/0x7d0 [ 2028.544830][T15545] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2028.550123][T15545] ? netlink_unicast+0x7d0/0x7d0 [ 2028.555067][T15545] sock_sendmsg+0xcf/0x120 [ 2028.559498][T15545] ____sys_sendmsg+0x6e8/0x810 [ 2028.564274][T15545] ? kernel_sendmsg+0x50/0x50 [ 2028.568955][T15545] ? do_recvmmsg+0x6d0/0x6d0 [ 2028.573563][T15545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2028.579553][T15545] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2028.585710][T15545] ? __lock_acquire+0xb5e/0x5570 [ 2028.590660][T15545] ___sys_sendmsg+0xf3/0x170 [ 2028.595261][T15545] ? sendmsg_copy_msghdr+0x160/0x160 [ 2028.600554][T15545] ? __fget_files+0x272/0x400 [ 2028.605264][T15545] ? __fget_files+0x294/0x400 [ 2028.609963][T15545] ? __fget_light+0xea/0x280 [ 2028.614569][T15545] __sys_sendmsg+0xe5/0x1b0 [ 2028.619082][T15545] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2028.624131][T15545] ? syscall_enter_from_user_mode+0x20/0x290 [ 2028.630122][T15545] ? lockdep_hardirqs_on+0x53/0x100 [ 2028.635331][T15545] do_syscall_64+0x2d/0x70 [ 2028.639759][T15545] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2028.645659][T15545] RIP: 0033:0x45d5b9 [ 2028.649557][T15545] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2028.669164][T15545] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2028.677582][T15545] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2028.685558][T15545] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2028.693533][T15545] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2028.701613][T15545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2028.709592][T15545] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000340)='j', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000300)='\'', 0x33c00}], 0x300}}], 0x3, 0x0) 15:06:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="93", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)="9e", 0x1}], 0x1}}], 0x2, 0x4000040) 15:06:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x524, 0x244, 0x0, 0x294, 0x244, 0x294, 0x45c, 0x378, 0x378, 0x45c, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x21c, 0x244, 0x52020000, {}, [@common=@inet=@policy={{0x154, 'policy\x00'}, {[{@ipv4=@private, [], @ipv6=@empty}, {@ipv4=@loopback, [], @ipv6=@private0}, {@ipv6=@empty, [], @ipv4=@multicast2}, {@ipv4=@multicast1, [], @ipv4=@multicast2}]}}, @common=@hl={{0x24, 'hl\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ipv6={@empty, @remote, [], [], 'netdevsim0\x00', 'ipvlan1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {}, [@common=@inet=@policy={{0x154, 'policy\x00'}, {[{@ipv4=@local, [], @ipv6=@local}, {@ipv4=@private, [], @ipv6=@local}, {@ipv6=@private1, [], @ipv6=@dev}, {@ipv6=@mcast1, [], @ipv6=@mcast1}]}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x580) 15:06:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 15:06:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xdb) getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0) 15:06:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000340)='j', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000300)='\'', 0x33c00}], 0x300}}], 0x3, 0x0) 15:06:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1000000017010000020000000000000010000000170400000000000000fbffff0f0000001701000003000000010000"], 0x2f}, 0x0) 15:06:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000006100)={0x0, 0x0, &(0x7f00000060c0)={&(0x7f0000000180)={0x58, r1, 0x25a38ea97a7063f, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x2a, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 15:06:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x2b}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:06:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}], 0x1c) 15:06:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x8, 0xffffff7f0e000000}, 0x0) 15:06:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="1400000052001f0214f9f4070009040081000710", 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005071500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2029.110548][T15581] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x3e) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x38) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c06dc030400000280a7b6072e63e286a5cefe24876ece", 0x2) 15:06:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts={{0x14, 0x29, 0x3b}}, @rthdr={{0x14}}], 0x28}, 0x0) 15:06:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32=r2, @ANYBLOB="080002"], 0x20}}, 0x0) [ 2029.255203][T15588] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2029.272077][T15588] CPU: 1 PID: 15588 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2029.280906][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2029.290973][T15588] Call Trace: [ 2029.294277][T15588] dump_stack+0x198/0x1fd [ 2029.298625][T15588] sysfs_warn_dup.cold+0x1c/0x2d [ 2029.303585][T15588] sysfs_do_create_link_sd+0x11e/0x140 [ 2029.309058][T15588] sysfs_create_link+0x5f/0xc0 [ 2029.313834][T15588] device_add+0x6ff/0x1c40 [ 2029.318269][T15588] ? devlink_add_symlinks+0x450/0x450 [ 2029.323666][T15588] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2029.329670][T15588] wiphy_register+0x1d66/0x2850 [ 2029.334567][T15588] ? wiphy_unregister+0xc10/0xc10 [ 2029.339603][T15588] ? generic_xdp_install+0x700/0x700 [ 2029.344910][T15588] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2029.350992][T15588] ieee80211_register_hw+0x22c9/0x39a0 [ 2029.356496][T15588] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2029.361876][T15588] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2029.367786][T15588] ? lock_downgrade+0x830/0x830 [ 2029.372731][T15588] ? lock_is_held_type+0xbb/0xf0 [ 2029.377679][T15588] ? memset+0x20/0x40 [ 2029.381678][T15588] ? __hrtimer_init+0x12c/0x260 [ 2029.386539][T15588] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2029.392287][T15588] ? hwsim_virtio_rx_work+0x350/0x350 [ 2029.397676][T15588] ? memcpy+0x39/0x60 [ 2029.401674][T15588] hwsim_new_radio_nl+0x93e/0xf8c [ 2029.406711][T15588] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2029.412632][T15588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2029.419584][T15588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2029.426444][T15588] genl_rcv_msg+0x61d/0x980 [ 2029.430980][T15588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2029.437960][T15588] ? lock_release+0x8f0/0x8f0 [ 2029.442648][T15588] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2029.447946][T15588] netlink_rcv_skb+0x15a/0x430 [ 2029.452718][T15588] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2029.459668][T15588] ? netlink_ack+0xa10/0xa10 [ 2029.464292][T15588] genl_rcv+0x24/0x40 [ 2029.468282][T15588] netlink_unicast+0x533/0x7d0 [ 2029.473064][T15588] ? netlink_attachskb+0x810/0x810 [ 2029.478186][T15588] ? __phys_addr_symbol+0x2c/0x70 [ 2029.483216][T15588] ? __check_object_size+0x171/0x3e4 [ 2029.488515][T15588] netlink_sendmsg+0x856/0xd90 [ 2029.493298][T15588] ? netlink_unicast+0x7d0/0x7d0 [ 2029.498246][T15588] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2029.503540][T15588] ? netlink_unicast+0x7d0/0x7d0 [ 2029.508483][T15588] sock_sendmsg+0xcf/0x120 [ 2029.513168][T15588] ____sys_sendmsg+0x6e8/0x810 [ 2029.517944][T15588] ? kernel_sendmsg+0x50/0x50 [ 2029.522632][T15588] ? do_recvmmsg+0x6d0/0x6d0 [ 2029.527237][T15588] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2029.533226][T15588] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2029.539210][T15588] ? __lock_acquire+0xb5e/0x5570 [ 2029.544249][T15588] ___sys_sendmsg+0xf3/0x170 [ 2029.548852][T15588] ? sendmsg_copy_msghdr+0x160/0x160 [ 2029.554147][T15588] ? __fget_files+0x272/0x400 [ 2029.558854][T15588] ? __fget_files+0x294/0x400 [ 2029.563724][T15588] ? __fget_light+0xea/0x280 [ 2029.568334][T15588] __sys_sendmsg+0xe5/0x1b0 [ 2029.572846][T15588] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2029.577895][T15588] ? syscall_enter_from_user_mode+0x20/0x290 [ 2029.583881][T15588] ? lockdep_hardirqs_on+0x53/0x100 [ 2029.589090][T15588] do_syscall_64+0x2d/0x70 [ 2029.593515][T15588] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2029.599407][T15588] RIP: 0033:0x45d5b9 [ 2029.603308][T15588] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2029.622943][T15588] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2029.631362][T15588] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2029.639342][T15588] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2029.647318][T15588] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2029.655293][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2029.663271][T15588] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:15 executing program 5: socketpair$unix(0x1, 0x200400000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x924924924924c31, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 15:06:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x80}}, @TCA_RED_STAB={0x104, 0x2, "6520b8a75137d982358501b1ae72c6d35d23e440ef29df071d6e3fa3c65ce0e558f5d7a55046c50b4ba8f834f46c2d852363ce071b4d184cddd311e19b294da91603926beea1a1b57df03ac6c09025f35be4023f237a18787e4db896c15994b30333bee53c2b91713722fbe2aaa3203ed11d558c72cf282db599749a70a4bc6d04b9b8f7f7cab1314dcafa7f6fbb1f191c29414facb041432e05a4040a2b80bc99a43af7873936ad444075d0fa2453dbd7eb184dbe20020a44755c1879a57c885c151ddabb6dcd4cdfba119b187eed3c1a3324a0e38e6aeb50a830b1e7a58419362f88091292c077f3865f00a2a49a6ea8d96d9e2768b5c98f890bba2b3f2b60"}]}}]}, 0x148}}, 0x0) [ 2029.748035][T15596] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 2029.757970][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x466a, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xca}]}}}], 0x10}}], 0x2, 0x0) 15:06:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x84}}, 0x0) [ 2029.865844][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0xa, 0xffffff7f0e000000}, 0x0) 15:06:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 15:06:15 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xff, 0xc, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) 15:06:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x223}, 0x10}}, 0x0) [ 2030.061282][T15630] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2030.099807][T15630] CPU: 1 PID: 15630 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2030.108507][T15630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.118568][T15630] Call Trace: [ 2030.121874][T15630] dump_stack+0x198/0x1fd [ 2030.126222][T15630] sysfs_warn_dup.cold+0x1c/0x2d [ 2030.131183][T15630] sysfs_do_create_link_sd+0x11e/0x140 [ 2030.136657][T15630] sysfs_create_link+0x5f/0xc0 [ 2030.141438][T15630] device_add+0x6ff/0x1c40 [ 2030.145871][T15630] ? devlink_add_symlinks+0x450/0x450 [ 2030.151256][T15630] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2030.157258][T15630] wiphy_register+0x1d66/0x2850 [ 2030.162131][T15630] ? wiphy_unregister+0xc10/0xc10 [ 2030.167165][T15630] ? generic_xdp_install+0x700/0x700 [ 2030.172471][T15630] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2030.178548][T15630] ieee80211_register_hw+0x22c9/0x39a0 [ 2030.184033][T15630] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2030.189411][T15630] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2030.195318][T15630] ? lock_downgrade+0x830/0x830 [ 2030.200186][T15630] ? lock_is_held_type+0xbb/0xf0 [ 2030.205136][T15630] ? memset+0x20/0x40 [ 2030.209132][T15630] ? __hrtimer_init+0x12c/0x260 [ 2030.214000][T15630] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2030.219751][T15630] ? hwsim_virtio_rx_work+0x350/0x350 [ 2030.225142][T15630] ? memcpy+0x39/0x60 [ 2030.229139][T15630] hwsim_new_radio_nl+0x93e/0xf8c [ 2030.234180][T15630] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2030.240095][T15630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2030.247037][T15630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2030.253896][T15630] genl_rcv_msg+0x61d/0x980 [ 2030.258418][T15630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2030.265382][T15630] ? lock_release+0x8f0/0x8f0 [ 2030.270066][T15630] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2030.275366][T15630] netlink_rcv_skb+0x15a/0x430 [ 2030.280140][T15630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2030.287088][T15630] ? netlink_ack+0xa10/0xa10 [ 2030.291706][T15630] genl_rcv+0x24/0x40 [ 2030.295697][T15630] netlink_unicast+0x533/0x7d0 [ 2030.300478][T15630] ? netlink_attachskb+0x810/0x810 [ 2030.305599][T15630] ? __phys_addr_symbol+0x2c/0x70 [ 2030.310641][T15630] ? __check_object_size+0x171/0x3e4 [ 2030.315939][T15630] netlink_sendmsg+0x856/0xd90 [ 2030.320721][T15630] ? netlink_unicast+0x7d0/0x7d0 [ 2030.325673][T15630] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2030.330981][T15630] ? netlink_unicast+0x7d0/0x7d0 [ 2030.335954][T15630] sock_sendmsg+0xcf/0x120 [ 2030.340382][T15630] ____sys_sendmsg+0x6e8/0x810 [ 2030.345155][T15630] ? kernel_sendmsg+0x50/0x50 [ 2030.349838][T15630] ? do_recvmmsg+0x6d0/0x6d0 [ 2030.354443][T15630] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2030.360559][T15630] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2030.366724][T15630] ? check_preemption_disabled+0x50/0x130 [ 2030.372457][T15630] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2030.378629][T15630] ___sys_sendmsg+0xf3/0x170 [ 2030.383233][T15630] ? sendmsg_copy_msghdr+0x160/0x160 [ 2030.388528][T15630] ? __fget_files+0x272/0x400 [ 2030.393219][T15630] ? lock_downgrade+0x830/0x830 [ 2030.398074][T15630] ? find_held_lock+0x2d/0x110 [ 2030.402870][T15630] ? __fget_files+0x294/0x400 [ 2030.407562][T15630] ? __fget_light+0xea/0x280 [ 2030.412170][T15630] __sys_sendmsg+0xe5/0x1b0 [ 2030.416681][T15630] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2030.421730][T15630] ? syscall_enter_from_user_mode+0x20/0x290 [ 2030.427721][T15630] ? lockdep_hardirqs_on+0x53/0x100 [ 2030.432930][T15630] do_syscall_64+0x2d/0x70 [ 2030.437361][T15630] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2030.443260][T15630] RIP: 0033:0x45d5b9 [ 2030.447159][T15630] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2030.466764][T15630] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.475181][T15630] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2030.483157][T15630] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2030.491134][T15630] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2030.499108][T15630] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:06:16 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xfe9a) close(r1) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003440)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) 15:06:16 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x2}, 0x10) [ 2030.507085][T15630] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:16 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x664, 0x453, 0x0, 0x0, 0x0, "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"}, 0x664}}, 0x0) 15:06:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10000) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xfffffe53) 15:06:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 15:06:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x4ff60, 0x0) 15:06:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611000000000000073013c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 15:06:16 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000050000006d000000000000009500100000000000e7f4c35033553c27721a76d69305cf792d0d96f644cd077b1b75fb32ad66438b912f9eed0a5c0e86da0073a4754a6f032468a567a9271cf73406787fcfd48d3443c02468410be6389be19c15acc350c171680d734727d3150b5b9d30fef5ead8a29390c8ae9aaa63366fe2d87f6bf6e43dfcee710bf9659e66ed68c2"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:06:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0xc, 0xffffff7f0e000000}, 0x0) 15:06:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x52, 0x1, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 15:06:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x30007, 0x0) 15:06:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x40, 0x31, 0x1, 0x0, 0x0, {}, [{0x2c, 0x1, [@m_ife={0x28, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x15, 0x6, "24ea1f4dcd46f69c8172b089d149370dc4"}}}]}]}, 0x40}}, 0x0) 15:06:16 executing program 1: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000003c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 15:06:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10000) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xfffffe53) 15:06:17 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000102b00fe8000000000000000000000000000aafefc"], 0x0) r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'vlan0\x00', {}, 0x81}) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc046b33c494da5dd}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="08000038a03a5e82af7dfd010067be61c2000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x1d, 0x24, 0xf1d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002e5b57c4e06d2066076a8e891b5f6700", @ANYRES32=r6, @ANYBLOB="3d3d979f880d7cf1eb0b0000"], 0x24}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, r6}, 0xc) 15:06:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], [], @loopback}}]}, 0x30}}, 0x0) 15:06:17 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x682, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xa3e2}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 15:06:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000006d000507000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="0000020000200000140003006c6f000000000000000000000000000018"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) [ 2030.725441][ T29] audit: type=1107 audit(1599663976.394:673): pid=15652 uid=0 auid=0 ses=4 subj==unconfined msg='×ò÷±þ—Ë’Ç'ŸmGrw­N?½®°´QP /9<ÄuÀ~@vV@":`/妻çw?›ÝX¹ê‡h5s³îuNõŠ¿­&|T;ÌOI³¶P•×¸‹Å­r0â‚Ž…,1ÆhUçv_P¬ûgV§Tâ.…Ùp7oxgå×xÚˆ€‡,[¿”E×ýŽùö íÒéË@ß±ïدŸ*è…e0&Ô_ðYÛ_Ç_Uã·tnæÄi“å;¸27¡?2û×'dž¸{Æ#ZÜwÜGÇ>"–àYE>EºÑÿãÇÃî¨y/Ýn£_M,†Ep6ÖA?½•cÔ*ö«èÁ,þ„³Qv ußé¯î+.Ãâ]Ïén1«£ÊЪi¶ZÞA)øq£jë%g;3Ÿ[OªÆT!”ÐÿÛ •m¼­µ3…’ª EÈ=¡ùÀÚu¦‡!°%QHÁ¬;>¿uFƒÖ&,‚‡*x˜ú2Èòi)wPš©¸d¨ôc¶ú(PMÇUAU#‘§Ç 6m"3_Åðí.Á†v![åXØŒº7Ä4ð„|¡ÇMDâ±3¥í%ñ€ÓËÌ…´°U\Jû ‡èæEhîZIÖ·0±=Χwðý°Ê_déYU·“GÈ󯪽 '8}V,=Ô¬r?Aä¥]óy:ïsÕÒÖùÞ•Õï^EK#™2dwË¢Íi® üЊ›™þ» N¾I~þè:–±Ù6/,ÏÌÑw-îó\MY0-\çQÚyÆ)0ÂîX(÷ "ÍOMG~ya$´ÍäÏp`ƒ±ÙíK1%eé1–8Þ.ž8Ï]ÿø‡5TUòåàÏ 5ñZ %ý~é[—UO¯ÛèÍÞY§"?q‡Z ¨(J)uºøTÓwãÛ:æŠq7_Ö³k­z´ºö2àwÈíÊkŸÝ»"¿‹}‡‰fÁì g/ BÅN.£L½!õë Y+XZ÷aB‰|Òa™Ãæ×ק>²[Òs¡ >½¥ºØA½½qqz§0ow‚ÅØe`Oól!)Ñ *guEƒßpUq¢Ã]Ó¸º9zátÇÞ¨[^]&dñüSM^çI03ã¼Ø[$­D¨@O_, Q7ÿ7§÷MûË2ª•b‡ [ 2031.506530][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2031.527644][T15702] sctp: [Deprecated]: syz-executor.5 (pid 15702) Use of int in maxseg socket option. [ 2031.527644][T15702] Use struct sctp_assoc_value instead [ 2031.544003][T15688] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2031.571082][T15688] CPU: 1 PID: 15688 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2031.579778][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2031.589835][T15688] Call Trace: [ 2031.593141][T15688] dump_stack+0x198/0x1fd [ 2031.597494][T15688] sysfs_warn_dup.cold+0x1c/0x2d [ 2031.602444][T15688] sysfs_do_create_link_sd+0x11e/0x140 [ 2031.607916][T15688] sysfs_create_link+0x5f/0xc0 [ 2031.612778][T15688] device_add+0x6ff/0x1c40 [ 2031.617216][T15688] ? devlink_add_symlinks+0x450/0x450 [ 2031.622600][T15688] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2031.628597][T15688] wiphy_register+0x1d66/0x2850 [ 2031.633472][T15688] ? wiphy_unregister+0xc10/0xc10 [ 2031.638502][T15688] ? generic_xdp_install+0x700/0x700 [ 2031.644063][T15688] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2031.650150][T15688] ieee80211_register_hw+0x22c9/0x39a0 [ 2031.655630][T15688] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2031.661003][T15688] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2031.666907][T15688] ? lock_downgrade+0x830/0x830 [ 2031.671765][T15688] ? lock_is_held_type+0xbb/0xf0 [ 2031.676710][T15688] ? memset+0x20/0x40 [ 2031.680701][T15688] ? __hrtimer_init+0x12c/0x260 [ 2031.685562][T15688] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2031.691308][T15688] ? hwsim_virtio_rx_work+0x350/0x350 [ 2031.696694][T15688] ? memcpy+0x39/0x60 [ 2031.700685][T15688] hwsim_new_radio_nl+0x93e/0xf8c [ 2031.705721][T15688] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2031.711634][T15688] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2031.718571][T15688] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2031.725429][T15688] genl_rcv_msg+0x61d/0x980 [ 2031.729945][T15688] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2031.736908][T15688] ? lock_release+0x8f0/0x8f0 [ 2031.741588][T15688] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2031.746892][T15688] netlink_rcv_skb+0x15a/0x430 [ 2031.751670][T15688] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2031.758619][T15688] ? netlink_ack+0xa10/0xa10 [ 2031.763233][T15688] genl_rcv+0x24/0x40 [ 2031.767220][T15688] netlink_unicast+0x533/0x7d0 [ 2031.771999][T15688] ? netlink_attachskb+0x810/0x810 [ 2031.777118][T15688] ? __phys_addr_symbol+0x2c/0x70 [ 2031.782239][T15688] ? __check_object_size+0x171/0x3e4 [ 2031.787537][T15688] netlink_sendmsg+0x856/0xd90 [ 2031.792316][T15688] ? netlink_unicast+0x7d0/0x7d0 [ 2031.797270][T15688] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2031.802827][T15688] ? netlink_unicast+0x7d0/0x7d0 [ 2031.807776][T15688] sock_sendmsg+0xcf/0x120 [ 2031.812201][T15688] ____sys_sendmsg+0x6e8/0x810 [ 2031.816974][T15688] ? kernel_sendmsg+0x50/0x50 [ 2031.821653][T15688] ? do_recvmmsg+0x6d0/0x6d0 [ 2031.826255][T15688] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2031.832248][T15688] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2031.838234][T15688] ? __lock_acquire+0xb5e/0x5570 [ 2031.843184][T15688] ___sys_sendmsg+0xf3/0x170 [ 2031.847784][T15688] ? sendmsg_copy_msghdr+0x160/0x160 [ 2031.853078][T15688] ? __fget_files+0x272/0x400 [ 2031.857767][T15688] ? lock_downgrade+0x830/0x830 [ 2031.862622][T15688] ? find_held_lock+0x2d/0x110 [ 2031.867408][T15688] ? __fget_files+0x294/0x400 [ 2031.872108][T15688] ? __fget_light+0xea/0x280 [ 2031.876714][T15688] __sys_sendmsg+0xe5/0x1b0 [ 2031.881227][T15688] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2031.886275][T15688] ? syscall_enter_from_user_mode+0x20/0x290 [ 2031.892262][T15688] ? lockdep_hardirqs_on+0x53/0x100 [ 2031.897471][T15688] do_syscall_64+0x2d/0x70 [ 2031.901895][T15688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2031.907804][T15688] RIP: 0033:0x45d5b9 [ 2031.911708][T15688] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2031.931314][T15688] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2031.939769][T15688] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2031.947742][T15688] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2031.955738][T15688] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2031.963711][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 15:06:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0) [ 2031.971684][T15688] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:17 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x8) [ 2032.252632][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 15:06:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0xe, 0xffffff7f0e000000}, 0x0) 15:06:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2}, 0x40) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000007780)={&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x0) 15:06:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2032.348363][T15723] sctp: [Deprecated]: syz-executor.5 (pid 15723) Use of int in maxseg socket option. [ 2032.348363][T15723] Use struct sctp_assoc_value instead 15:06:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x114, 0x2f, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="36ae92cb42c60e433f0638ebe7a1e622008ace34733cbf17b2419a37d55d92001cb78e9e82bf9edd9b25945f636a6169b6f9551f9097fa74f5812d64d81d652c1b8b1f234f0affff10844eb1c988b25b1ffd29a6a16b227f92001a106cba49be84e11c96d68fdd51724e1118247b1a041273cef3a9aee94bda57f87f25a4d92125ac75eb89bcee379c5127f2ca5832f8afe8c327bfa7fde2721f857338168c68b2528f3a379c33e8d5cc9082bdab77a8cfcffb56c0d40810f69e00"/198, @generic="191cd49072ddeadaaca75e6cd603a798e840842ddd4766af90a31de3dc04d6", @typed={0x4}]}]}, 0x114}], 0x1}, 0x0) 15:06:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x2, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1}, 0x8) 15:06:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10000) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xfffffe53) [ 2032.558013][T15733] sysfs: cannot create duplicate filename '/class/ieee80211/!)@•-*ž{+$&[' [ 2032.582817][T15733] CPU: 0 PID: 15733 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 2032.592127][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2032.602187][T15733] Call Trace: [ 2032.605500][T15733] dump_stack+0x198/0x1fd [ 2032.609858][T15733] sysfs_warn_dup.cold+0x1c/0x2d [ 2032.614815][T15733] sysfs_do_create_link_sd+0x11e/0x140 [ 2032.620290][T15733] sysfs_create_link+0x5f/0xc0 [ 2032.625067][T15733] device_add+0x6ff/0x1c40 [ 2032.629506][T15733] ? devlink_add_symlinks+0x450/0x450 [ 2032.634896][T15733] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 2032.640897][T15733] wiphy_register+0x1d66/0x2850 [ 2032.645774][T15733] ? wiphy_unregister+0xc10/0xc10 [ 2032.650812][T15733] ? generic_xdp_install+0x700/0x700 [ 2032.656122][T15733] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2032.662202][T15733] ieee80211_register_hw+0x22c9/0x39a0 [ 2032.667698][T15733] ? ieee80211_restart_hw+0x2f0/0x2f0 [ 2032.673078][T15733] ? mac80211_hwsim_new_radio+0x1f34/0x4540 [ 2032.678986][T15733] ? lock_downgrade+0x830/0x830 [ 2032.683847][T15733] ? lock_is_held_type+0xbb/0xf0 [ 2032.688795][T15733] ? memset+0x20/0x40 [ 2032.692789][T15733] ? __hrtimer_init+0x12c/0x260 [ 2032.697654][T15733] mac80211_hwsim_new_radio+0x2353/0x4540 [ 2032.703407][T15733] ? hwsim_virtio_rx_work+0x350/0x350 15:06:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='$\x00\x00\x00Z', 0x5) close(r2) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:06:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x75, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f00000003c0)=0xb0) [ 2032.708793][T15733] ? memcpy+0x39/0x60 [ 2032.712790][T15733] hwsim_new_radio_nl+0x93e/0xf8c [ 2032.717833][T15733] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 2032.723750][T15733] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 2032.730690][T15733] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 2032.737569][T15733] genl_rcv_msg+0x61d/0x980 [ 2032.742101][T15733] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2032.749060][T15733] ? lock_release+0x8f0/0x8f0 [ 2032.753741][T15733] ? netdev_core_pick_tx+0x2e0/0x2e0 15:06:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x44}}, 0x0) [ 2032.759044][T15733] netlink_rcv_skb+0x15a/0x430 [ 2032.764182][T15733] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 2032.771248][T15733] ? netlink_ack+0xa10/0xa10 [ 2032.775889][T15733] genl_rcv+0x24/0x40 [ 2032.779883][T15733] netlink_unicast+0x533/0x7d0 [ 2032.784663][T15733] ? netlink_attachskb+0x810/0x810 [ 2032.789786][T15733] ? __phys_addr_symbol+0x2c/0x70 [ 2032.794820][T15733] ? __check_object_size+0x171/0x3e4 [ 2032.800121][T15733] netlink_sendmsg+0x856/0xd90 [ 2032.804902][T15733] ? netlink_unicast+0x7d0/0x7d0 [ 2032.809853][T15733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2032.815146][T15733] ? netlink_unicast+0x7d0/0x7d0 [ 2032.820092][T15733] sock_sendmsg+0xcf/0x120 [ 2032.824520][T15733] ____sys_sendmsg+0x6e8/0x810 [ 2032.829295][T15733] ? kernel_sendmsg+0x50/0x50 [ 2032.833979][T15733] ? do_recvmmsg+0x6d0/0x6d0 [ 2032.838586][T15733] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2032.844665][T15733] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2032.850651][T15733] ? __lock_acquire+0xb5e/0x5570 [ 2032.855602][T15733] ___sys_sendmsg+0xf3/0x170 [ 2032.860206][T15733] ? sendmsg_copy_msghdr+0x160/0x160 [ 2032.865501][T15733] ? __fget_files+0x272/0x400 [ 2032.870190][T15733] ? lock_downgrade+0x830/0x830 [ 2032.875046][T15733] ? find_held_lock+0x2d/0x110 [ 2032.879827][T15733] ? __fget_files+0x294/0x400 [ 2032.884518][T15733] ? __fget_light+0xea/0x280 [ 2032.889123][T15733] __sys_sendmsg+0xe5/0x1b0 [ 2032.893632][T15733] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2032.898679][T15733] ? syscall_enter_from_user_mode+0x20/0x290 [ 2032.904689][T15733] ? lockdep_hardirqs_on+0x53/0x100 [ 2032.909900][T15733] do_syscall_64+0x2d/0x70 [ 2032.914327][T15733] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2032.920222][T15733] RIP: 0033:0x45d5b9 [ 2032.924144][T15733] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2032.943759][T15733] RSP: 002b:00007f10f0eedc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2032.952179][T15733] RAX: ffffffffffffffda RBX: 000000000002ce00 RCX: 000000000045d5b9 [ 2032.960156][T15733] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2032.968135][T15733] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2032.976114][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2032.984092][T15733] R13: 00007ffdf08d4b4f R14: 00007f10f0eee9c0 R15: 000000000118cf4c 15:06:18 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaabfaaaaaaaa86dd601b11bb004d8880fe800001087a1d2f0000000000000600ff02000000000000000000000000000101004e20004d90"], 0x0) 15:06:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xb4, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000001c0)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb44938f03d603b27e44942ddcd3f11f086e6bf39ab074b690284b6d6aff6cc1e736b32f7d781c315bad312c6e8062089abe9838cd011d5227aa050589d2e5f34e10165336747bc2156f8e2570a4a76d4af1ef57edb31f57834ba2486c9f253a1737d59d15a11571414ec61c17dc20d9974e58cf2925c7c6e56216d4e35e39a9977e27e21450596008761c86e21", 0xc9}], 0x1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x150}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001600)=""/188, 0xbc}], 0x2}, 0x0) sendto$inet(r0, &(0x7f0000000100)='\f', 0x334, 0x0, 0x0, 0x0) 15:06:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x2}]}]}, 0x1c}}, 0x0) 15:06:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0xf, 0xffffff7f0e000000}, 0x0) 15:06:19 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 15:06:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0xf9, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={r0, 0x33, &(0x7f0000000040)}, 0x10) [ 2033.839997][T15767] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 15:06:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x19, r1}]}, 0x24}}, 0x0) [ 2033.923521][T15768] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 15:06:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}}, 0x24}}, 0x0) 15:06:19 executing program 2: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000064c0), 0x40000000000004b, 0x142, 0x0) 15:06:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x10, 0xffffff7f0e000000}, 0x0) 15:06:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0x0) [ 2034.159068][T15780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:06:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) [ 2034.275095][T15784] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2034.298446][T15780] qfq: no options [ 2034.313612][T15790] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 15:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x28, 0xffffff7f0e000000}, 0x0) 15:06:20 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @multicast, @val={@void}, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xa8}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "97832c", 0x0, "5b0af1"}}}}}}, 0x0) [ 2034.334521][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:06:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="b10b", 0x2}], 0x1}, 0xc000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2973ee555af99499e44ad420dbf65fd46fbc99a1274429e2d578375", 0x5e}], 0x1}, 0x0) 15:06:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@flowinfo={{0xd}}, @flowinfo={{0x10}}], 0x20}}], 0x1, 0x0) [ 2034.575956][T15806] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 2034.608504][T15806] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 15:06:20 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000140)={'vlan0\x00', 0x0}) 15:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x5b, 0xffffff7f0e000000}, 0x0) 15:06:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:06:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="03", @ANYRES32=0x0], &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x10) 15:06:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) recvmsg(r0, 0x0, 0x0) 15:06:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) 15:06:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x10) 15:06:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x300, 0xffffff7f0e000000}, 0x0) 15:06:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:06:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) 15:06:20 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x60}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:06:20 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @empty, @broadcast, @broadcast]}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 15:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x3c7, 0xffffff7f0e000000}, 0x0) 15:06:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 15:06:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 15:06:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 15:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f4f, 0xffffff7f0e000000}, 0x0) 15:06:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x1d4, 0xb0, 0x0, 0x0, 0xb0, 0x0, 0x168, 0x1a8, 0x1a8, 0x168, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b4272585404f97920335dabc5b3abeb5f79f5865c671cba15e125d11e4e"}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x230) 15:06:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}]}}}]}, 0x3c}}, 0x0) 15:06:21 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x98) 15:06:21 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x4000}}], 0x2c}, 0x0) 15:06:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3e6, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x318, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0xb}, 0x0) 15:06:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 15:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f50, 0xffffff7f0e000000}, 0x0) 15:06:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 15:06:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 15:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f51, 0xffffff7f0e000000}, 0x0) [ 2036.223186][T15877] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:06:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xa, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) 15:06:22 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c000729d50014750000000007070000", @ANYRES32=r1, @ANYBLOB="0a0f66000a000200aaaaaaaaaa0c"], 0x42e}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 2036.301034][T15877] device macvlan5 entered promiscuous mode 15:06:22 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe3, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 15:06:22 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)="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", 0x9c1}], 0x1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x1ea71, 0x0) recvfrom$netrom(r3, &(0x7f0000001640)=""/4096, 0x20002640, 0x0, 0x0, 0x0) [ 2036.397523][T15877] 8021q: adding VLAN 0 to HW filter on device macvlan5 15:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f52, 0xffffff7f0e000000}, 0x0) [ 2036.484975][T15877] team0: Port device macvlan5 added [ 2036.537012][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2036.608954][T15889] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:22 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 15:06:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x78, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}]}}}]}, 0x78}}, 0x0) 15:06:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x3}, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000040)=ANY=[]}) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30) 15:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f53, 0xffffff7f0e000000}, 0x0) 15:06:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, 0x0}, 0x81}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x8}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236, 0x1ba}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) [ 2036.918687][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="cc010000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1cc}}, 0x0) 15:06:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x40}}, 0x0) [ 2036.995064][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f54, 0xffffff7f0e000000}, 0x0) [ 2037.137770][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:06:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, 0x0}, 0x81}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x8}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236, 0x1ba}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 15:06:23 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast1}, 0x10) 15:06:23 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000080), 0xfe98) 15:06:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 15:06:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f55, 0xffffff7f0e000000}, 0x0) 15:06:23 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0x9}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xec, &(0x7f00000001c0)=""/236, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:06:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f56, 0xffffff7f0e000000}, 0x0) 15:06:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x1c, 0x69, 0x11, 0x0, 0x0, "", [@nested={0x9, 0x0, 0x0, 0x1, [@generic="0eefc7e073"]}]}, 0x1c}], 0x1}, 0x0) 15:06:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2000004, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 15:06:23 executing program 1: r0 = socket(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4000003, 0x90, [], 0x70, 0x0, 0x0}, &(0x7f00000001c0)=0x108) 15:06:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3b02) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 15:06:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0xf) 15:06:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f57, 0xffffff7f0e000000}, 0x0) [ 2037.801371][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 15:06:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 15:06:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) 15:06:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000010003b"], 0x54}}, 0x0) 15:06:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xa, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x66}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 2037.979576][T15965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2038.016104][T15965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 15:06:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f58, 0xffffff7f0e000000}, 0x0) 15:06:23 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000001e0007041dfffd946f610500070000001f00000000000400080005", 0x1f}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x572, 0x0) [ 2038.043197][T15965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:06:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x20, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) 15:06:23 executing program 4: r0 = socket(0x22, 0x802, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[], [], @broadcast}}}) 15:06:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f59, 0xffffff7f0e000000}, 0x0) [ 2038.277401][T15979] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 2038.579831][T15986] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 15:06:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x3, 0x4, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x5f, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 15:06:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null]}, 0x48) 15:06:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="c3"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffe0}}}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000100)}], 0x4924924924926e4, 0x0) 15:06:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 15:06:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5a, 0xffffff7f0e000000}, 0x0) 15:06:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5b, 0xffffff7f0e000000}, 0x0) 15:06:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) 15:06:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 15:06:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xfffffff7, 0x4) 15:06:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x17c, 0x17c, 0x17c, 0x5, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@uncond=[0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x114, 0x17c, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) 15:06:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000061107c0000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c850807decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a6088471a1bccb2c176750347b5805"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15:06:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5c, 0xffffff7f0e000000}, 0x0) 15:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 15:06:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:06:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5d, 0xffffff7f0e000000}, 0x0) 15:06:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 15:06:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200187ec, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100), 0x4) 15:06:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 15:06:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x238, 0x0, 0x294, 0x0, 0x294, 0x31c, 0x378, 0x378, 0x31c, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x0, 0x0, 0x9, 0x0, 0x6c], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xa4, 0x10c, 0x52020000}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) 15:06:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "00006558ae9b1c06"}}}}}, 0x0) 15:06:25 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) sendmsg$sock(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2404a850) 15:06:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5e, 0xffffff7f0e000000}, 0x0) 15:06:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483) 15:06:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffffc}]}}}]}, 0x48}}, 0x0) 15:06:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @private1}}}, 0x104) 15:06:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000280)=ANY=[], 0x0) 15:06:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f5f, 0xffffff7f0e000000}, 0x0) 15:06:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, &(0x7f0000000100)={r2}, 0x8) 15:06:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x107}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 15:06:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c562c067fbc45ff81054e220000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0xfed1}], 0x1) 15:06:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r2}, 0x8) 15:06:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f60, 0xffffff7f0e000000}, 0x0) [ 2039.896845][T16065] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 2039.908582][T16065] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2039.916990][T16065] CPU: 1 PID: 16065 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 2039.925656][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2039.935719][T16065] RIP: 0010:xsk_diag_dump+0xe27/0x15a0 [ 2039.941177][T16065] Code: 04 28 84 c0 74 08 3c 03 0f 8e bb 06 00 00 41 8b 44 24 10 89 84 24 fc 00 00 00 48 8b 44 24 40 48 8d 78 08 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 91 05 00 00 48 8b 44 24 40 48 8b 40 08 48 85 c0 [ 2039.960776][T16065] RSP: 0018:ffffc90001307320 EFLAGS: 00010202 [ 2039.966847][T16065] RAX: 0000000000000001 RBX: ffff888069ccc000 RCX: 0000000000000000 [ 2039.974816][T16065] RDX: 0000000000040000 RSI: ffffffff87f19912 RDI: 0000000000000008 [ 2039.982892][T16065] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffff888017d4a5ff [ 2039.990858][T16065] R10: 0000000000000000 R11: 00000000000e9798 R12: ffff8880a44b8b00 [ 2039.998823][T16065] R13: ffffc900054b9018 R14: ffff888017d4a000 R15: 0000000000000000 [ 2040.006791][T16065] FS: 00007fa46748b700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2040.015713][T16065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2040.022293][T16065] CR2: 0000001b2fe21000 CR3: 000000006460c000 CR4: 00000000001506e0 [ 2040.030262][T16065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2040.038230][T16065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2040.046192][T16065] Call Trace: [ 2040.049489][T16065] ? xsk_diag_handler_dump+0x240/0x240 [ 2040.054944][T16065] ? lock_is_held_type+0xbb/0xf0 [ 2040.059880][T16065] ? __kmalloc_node_track_caller+0x38/0x60 [ 2040.065689][T16065] ? kasan_unpoison_shadow+0x33/0x40 [ 2040.070971][T16065] ? __phys_addr+0x9a/0x110 [ 2040.075468][T16065] ? memset+0x20/0x40 [ 2040.079450][T16065] netlink_dump+0x4cd/0xf60 [ 2040.083953][T16065] ? netlink_insert+0x1670/0x1670 [ 2040.088969][T16065] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2040.094513][T16065] ? __rhashtable_lookup.constprop.0+0x5d0/0x5d0 [ 2040.100840][T16065] ? __mutex_lock+0x626/0x10e0 [ 2040.105611][T16065] __netlink_dump_start+0x643/0x900 [ 2040.110814][T16065] xsk_diag_handler_dump+0x1a3/0x240 [ 2040.116110][T16065] ? xp_put_pool+0x1e0/0x1e0 [ 2040.120709][T16065] ? __local_bh_enable_ip+0x10f/0x1f0 [ 2040.126081][T16065] ? xsk_diag_handler_dump+0x240/0x240 [ 2040.131547][T16065] sock_diag_rcv_msg+0x2fe/0x3e0 [ 2040.136482][T16065] netlink_rcv_skb+0x15a/0x430 [ 2040.141249][T16065] ? sock_diag_bind+0x80/0x80 [ 2040.145935][T16065] ? netlink_ack+0xa10/0xa10 [ 2040.150532][T16065] sock_diag_rcv+0x26/0x40 [ 2040.154950][T16065] netlink_unicast+0x533/0x7d0 [ 2040.159716][T16065] ? netlink_attachskb+0x810/0x810 [ 2040.164829][T16065] ? __phys_addr_symbol+0x2c/0x70 [ 2040.169846][T16065] ? __check_object_size+0x171/0x3e4 [ 2040.175130][T16065] netlink_sendmsg+0x856/0xd90 [ 2040.179894][T16065] ? netlink_unicast+0x7d0/0x7d0 [ 2040.184826][T16065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2040.190121][T16065] ? netlink_unicast+0x7d0/0x7d0 [ 2040.195054][T16065] sock_sendmsg+0xcf/0x120 [ 2040.199473][T16065] sock_write_iter+0x28c/0x3c0 [ 2040.204244][T16065] ? sock_sendmsg+0x120/0x120 [ 2040.208928][T16065] do_iter_readv_writev+0x532/0x7b0 [ 2040.214126][T16065] ? get_order+0x20/0x20 [ 2040.218386][T16065] ? apparmor_file_permission+0x26e/0x4e0 [ 2040.224111][T16065] do_iter_write+0x188/0x670 [ 2040.228705][T16065] vfs_writev+0x1aa/0x2e0 [ 2040.233034][T16065] ? vfs_iter_write+0xa0/0xa0 [ 2040.237714][T16065] ? lock_downgrade+0x830/0x830 [ 2040.242570][T16065] ? __fget_files+0x294/0x400 [ 2040.247254][T16065] ? __fget_light+0xea/0x280 [ 2040.251843][T16065] do_writev+0x27f/0x300 [ 2040.256091][T16065] ? vfs_writev+0x2e0/0x2e0 [ 2040.264324][T16065] ? check_preemption_disabled+0x50/0x130 [ 2040.270041][T16065] ? syscall_enter_from_user_mode+0x20/0x290 [ 2040.276041][T16065] ? lockdep_hardirqs_on+0x53/0x100 [ 2040.281234][T16065] do_syscall_64+0x2d/0x70 [ 2040.285655][T16065] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2040.291540][T16065] RIP: 0033:0x45d5b9 [ 2040.295433][T16065] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2040.315033][T16065] RSP: 002b:00007fa46748ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2040.323446][T16065] RAX: ffffffffffffffda RBX: 0000000000039bc0 RCX: 000000000045d5b9 [ 2040.331437][T16065] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2040.339406][T16065] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 15:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f61, 0xffffff7f0e000000}, 0x0) 15:06:26 executing program 4: socketpair(0x0, 0xc, 0x0, &(0x7f00000023c0)) [ 2040.347370][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2040.355345][T16065] R13: 00007ffe75e7014f R14: 00007fa46748b9c0 R15: 000000000118cf4c [ 2040.363313][T16065] Modules linked in: 15:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f62, 0xffffff7f0e000000}, 0x0) 15:06:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x107}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 15:06:26 executing program 4: socketpair(0x0, 0xc, 0x0, &(0x7f00000023c0)) 15:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f63, 0xffffff7f0e000000}, 0x0) [ 2040.529982][T16065] ---[ end trace fd860e9af940af22 ]--- [ 2040.535822][T16065] RIP: 0010:xsk_diag_dump+0xe27/0x15a0 [ 2040.541748][T16065] Code: 04 28 84 c0 74 08 3c 03 0f 8e bb 06 00 00 41 8b 44 24 10 89 84 24 fc 00 00 00 48 8b 44 24 40 48 8d 78 08 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 91 05 00 00 48 8b 44 24 40 48 8b 40 08 48 85 c0 15:06:26 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x16b) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) [ 2040.580035][T16065] RSP: 0018:ffffc90001307320 EFLAGS: 00010202 [ 2040.611026][T16065] RAX: 0000000000000001 RBX: ffff888069ccc000 RCX: 0000000000000000 [ 2040.656502][T16065] RDX: 0000000000040000 RSI: ffffffff87f19912 RDI: 0000000000000008 [ 2040.680645][T16065] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffff888017d4a5ff 15:06:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt(r0, 0x1, 0x20, &(0x7f0000000000)="b5ca76fb", 0x4) 15:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000030c0)={0x28, 0x26, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x11, 0x11, 0x0, 0x0, @str='/)@\x95-*\x9e{+$&[\x16'}]}, 0x28}, 0x79f64, 0xffffff7f0e000000}, 0x0) [ 2040.704635][T16065] R10: 0000000000000000 R11: 00000000000e9798 R12: ffff8880a44b8b00 [ 2040.728953][T16065] R13: ffffc900054b9018 R14: ffff888017d4a000 R15: 0000000000000000 [ 2040.755688][T16065] FS: 00007fa46748b700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2040.790263][T16065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2040.815927][T16065] CR2: 00000000016a8660 CR3: 000000006460c000 CR4: 00000000001506f0 [ 2040.832392][T16065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2040.846426][T16065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2040.855697][T16065] Kernel panic - not syncing: Fatal exception [ 2040.863044][T16065] Kernel Offset: disabled [ 2040.867357][T16065] Rebooting in 86400 seconds..