program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e03f030024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 758.358540][ T4238] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f401002024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:45 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x33fd, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0xfffffffd}) r2 = dup3(r0, r1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = io_uring_setup(0x5175, &(0x7f0000000000)={0x0, 0xfffffffe, 0x20, 0x0, 0x1, 0x0, r2}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r5, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r5, r6, 0x80000) close_range(0xffffffffffffffff, r6, 0x0) semop(0x0, &(0x7f0000000000)=[{0x6, 0xff0b}], 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000100)=0x1) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x101) bind$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000080)=0x30e) 06:11:46 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="020000000000343418010000e7306613669f0215010000001f0000000000000000004000000000000200000000000000400000000500000002000000000000000d0000000000000000000000000000004007000000000000571b675f00000000581b675f00000000581b675f000000000100320001000100571b675f00000000004eed0000000000000000000b00000080002000c0001000c5f8b24bc45846debe38cff0f6f6455b", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x3ff000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54a3afcef605025425e1e86baf045d1b436ec3010b568aceb719abfc9429c1b3c4afc1db2ccfc91417d54e157c5c918d2be1da39a6b2033ab4420297b9e589bd"]) 06:11:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2070d, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00f0ff7f24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 758.693149][ T4264] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:46 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) r4 = semget$private(0x0, 0x1, 0x1b8) semtimedop(r4, &(0x7f00000011c0)=[{0x3, 0x3, 0x1000}, {0x2, 0x2aad, 0x1800}, {0x1, 0x1}, {0x4, 0x15, 0x1000}, {0x4, 0x5}, {0x4, 0x4, 0x1800}, {0x7, 0x2d6, 0x1000}, {0x4, 0x9, 0x1000}, {0x1, 0x2542, 0x1000}], 0x9, &(0x7f0000001200)={0x0, 0x3938700}) [ 758.764897][ T4268] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 758.797137][ T4271] loop4: detected capacity change from 0 to 16368 06:11:46 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 758.809321][ T4268] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:11:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2070e, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="effdffff24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 758.890275][ T4271] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 758.954823][ T4268] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 758.954823][ T4268] !' [ 758.985169][ T4271] NILFS (loop4): unrecognized mount option "T£¯ÎöT%áèk¯]Cnà VŠÎ·«ü”)Á³Ä¯ÁÛ" [ 759.011345][ T4268] CPU: 0 PID: 4268 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 759.021302][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.031372][ T4268] Call Trace: [ 759.034658][ T4268] [ 759.037592][ T4268] dump_stack_lvl+0xcd/0x134 [ 759.042205][ T4268] sysfs_warn_dup.cold+0x1c/0x29 [ 759.047171][ T4268] sysfs_do_create_link_sd+0x11e/0x140 [ 759.052667][ T4268] sysfs_create_link+0x5f/0xc0 [ 759.057451][ T4268] device_add+0x789/0x1ee0 [ 759.061894][ T4268] ? ieee80211_set_bitrate_flags+0x4e6/0x650 [ 759.067910][ T4268] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 759.074166][ T4268] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 759.080448][ T4268] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 759.086707][ T4268] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 759.092713][ T4268] wiphy_register+0x1e94/0x29b0 [ 759.097589][ T4268] ? wiphy_unregister+0xbf0/0xbf0 [ 759.102626][ T4268] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 759.108802][ T4268] ? ieee80211_register_hw+0x1ece/0x3ed0 [ 759.114454][ T4268] ieee80211_register_hw+0x1f18/0x3ed0 [ 759.119956][ T4268] ? ieee80211_restart_hw+0x290/0x290 [ 759.125335][ T4268] ? __hrtimer_init+0x32/0x280 [ 759.130109][ T4268] ? kasan_check_range+0xe/0x180 [ 759.135052][ T4268] ? memset+0x20/0x40 [ 759.139051][ T4268] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 759.145303][ T4268] ? __hrtimer_init+0x136/0x280 [ 759.150179][ T4268] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 759.155928][ T4268] ? hwsim_virtio_rx_work+0x350/0x350 [ 759.161302][ T4268] ? hwsim_new_radio_nl+0x992/0x1080 [ 759.166713][ T4268] ? memcpy+0x39/0x60 [ 759.170723][ T4268] hwsim_new_radio_nl+0x9bc/0x1080 [ 759.175845][ T4268] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 759.181757][ T4268] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 759.189057][ T4268] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xb7/0x290 [ 759.196361][ T4268] genl_family_rcv_msg_doit+0x228/0x320 [ 759.201929][ T4268] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 759.209309][ T4268] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 759.215580][ T4268] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 759.221831][ T4268] ? ns_capable+0xd9/0x100 [ 759.226259][ T4268] genl_rcv_msg+0x328/0x580 [ 759.230777][ T4268] ? genl_get_cmd+0x480/0x480 [ 759.235464][ T4268] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 759.241369][ T4268] ? lock_release+0x720/0x720 [ 759.246061][ T4268] netlink_rcv_skb+0x153/0x420 [ 759.250836][ T4268] ? genl_get_cmd+0x480/0x480 [ 759.255543][ T4268] ? netlink_ack+0xa60/0xa60 [ 759.260161][ T4268] genl_rcv+0x24/0x40 [ 759.264162][ T4268] netlink_unicast+0x533/0x7d0 [ 759.268941][ T4268] ? netlink_attachskb+0x880/0x880 [ 759.274059][ T4268] ? netlink_sendmsg+0x7e3/0xda0 [ 759.279026][ T4268] netlink_sendmsg+0x86d/0xda0 [ 759.283916][ T4268] ? netlink_unicast+0x7d0/0x7d0 [ 759.288864][ T4268] ? sock_sendmsg+0x4b/0x120 [ 759.293463][ T4268] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 759.299889][ T4268] ? sock_sendmsg+0x65/0x120 [ 759.304488][ T4268] ? netlink_unicast+0x7d0/0x7d0 [ 759.309435][ T4268] sock_sendmsg+0xcf/0x120 [ 759.313897][ T4268] ____sys_sendmsg+0x6e8/0x810 [ 759.318673][ T4268] ? kernel_sendmsg+0x50/0x50 [ 759.323362][ T4268] ? do_recvmmsg+0x6d0/0x6d0 [ 759.327971][ T4268] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 759.333960][ T4268] ? lock_chain_count+0x20/0x20 [ 759.338839][ T4268] ___sys_sendmsg+0xf3/0x170 [ 759.343445][ T4268] ? sendmsg_copy_msghdr+0x160/0x160 [ 759.348745][ T4268] ? __fget_files+0x21b/0x3e0 [ 759.353434][ T4268] ? irqentry_enter+0x28/0x50 [ 759.358156][ T4268] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 759.364437][ T4268] ? lockdep_hardirqs_on+0x79/0x100 [ 759.369673][ T4268] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 759.375852][ T4268] ? sockfd_lookup_light+0x6d/0x180 [ 759.381079][ T4268] __sys_sendmsg+0xe5/0x1b0 [ 759.385600][ T4268] ? __sys_sendmsg_sock+0x30/0x30 [ 759.390639][ T4268] ? lockdep_hardirqs_on+0x79/0x100 [ 759.395856][ T4268] ? trace_hardirqs_on+0x39/0x1c0 [ 759.401181][ T4268] ? syscall_enter_from_user_mode+0x2b/0x70 [ 759.407096][ T4268] do_syscall_64+0x35/0xb0 [ 759.411551][ T4268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.417558][ T4268] RIP: 0033:0x7f5d21f6fae9 [ 759.421979][ T4268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.441600][ T4268] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.450030][ T4268] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 759.458007][ T4268] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 759.465982][ T4268] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 759.473957][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.481929][ T4268] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 759.489938][ T4268] 06:11:47 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x884, &(0x7f0000000280), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="caf28bd6926960b5546a8a0b0c9904b3f9f4ad68a843046d60f068b4ba405434f1cf0fb3830cafda8fa04b33b081e5b22d79a21e6f1079834d095d441c7f8b9612018c2cf2de0a9af1bd3fa3013551dd21f79cc90516251230bcb028adafd27a424babc7b3b5f3b5e52205412f18121a4a1ea1c1803097d9f3bf895834a5a4c5a094e34a0f63153453f36043b37d9e48784a030b0a79401629f953ff4da9ed5c43704588156ba610d580f6fccaff7ad5618dfd3ca919a686b433974aecc651f9dc785412191a0d128efd9955e5ea0a629d71e84ebb5da162274adf3dfa8ebd1f50f5106d", @ANYRESDEC=r1], 0x10}, 0x0, 0x4000800}, 0x81) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r4, r5, 0x80000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$rxrpc(0x21, 0x2, 0xa) r8 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = io_uring_setup(0x5174, &(0x7f0000000000)) r10 = dup3(r0, r9, 0x0) read$dsp(r10, &(0x7f0000000080)=""/66, 0x42) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000f000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 759.600628][ T4271] loop4: detected capacity change from 0 to 16368 [ 759.636796][ T4296] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 759.666668][ T4271] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) 06:11:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 759.743776][ T4271] NILFS (loop4): unrecognized mount option "T£¯ÎöT%áèk¯]Cnà VŠÎ·«ü”)Á³Ä¯ÁÛ" 06:11:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2070f, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xc17a, 0x32a8}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) quotactl(0x41000080000101, 0x0, 0x0, 0x0) 06:11:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:47 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x1010, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r1, 0x10000000) dup3(r0, r1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3402000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x10, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 759.962727][ T4322] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20710, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:47 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000600)=0x1) r2 = dup3(r0, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10010, r2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4004, @fd_index=0x3, 0x4, &(0x7f0000000540)=[{&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/139, 0x8b}], 0x6, 0x4, 0x1, {0x0, r4}}, 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x1417, 0x1800}], 0x1) syz_io_uring_setup(0x3abe, &(0x7f0000000780)={0x0, 0x0, 0x20, 0x0, 0x3}, &(0x7f00006d4000/0x4000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000080)=0x1, 0x0, 0x4) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = io_uring_setup(0x53c0, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, r2}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r9}}, 0x7) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r7, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) r10 = semget(0x0, 0x0, 0x100) semtimedop(r10, &(0x7f0000000680)=[{0x4, 0x100}, {0x3, 0x4, 0x800}, {0x4, 0x4, 0x1000}, {0x2, 0x8, 0x1000}, {0x3, 0x1f, 0x800}, {0x2, 0x0, 0x800}, {0x2, 0x4, 0x1800}, {0x0, 0xe94, 0x1400}], 0x8, &(0x7f00000000c0)={0x77359400}) 06:11:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x11, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3403000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3404000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 760.230832][ T4347] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.254557][ T4345] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:11:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3405000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x60, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 760.310460][ T4345] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.435923][ T4345] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 760.435923][ T4345] !' [ 760.448619][ T4345] CPU: 0 PID: 4345 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 760.458555][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.468633][ T4345] Call Trace: [ 760.471927][ T4345] [ 760.474873][ T4345] dump_stack_lvl+0xcd/0x134 [ 760.479497][ T4345] sysfs_warn_dup.cold+0x1c/0x29 [ 760.484639][ T4345] sysfs_do_create_link_sd+0x11e/0x140 [ 760.490134][ T4345] sysfs_create_link+0x5f/0xc0 [ 760.494947][ T4345] device_add+0x789/0x1ee0 [ 760.499399][ T4345] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 760.505583][ T4345] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 760.511895][ T4345] wiphy_register+0x1e94/0x29b0 [ 760.516787][ T4345] ? wiphy_unregister+0xbf0/0xbf0 [ 760.521837][ T4345] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 760.528200][ T4345] ? ieee80211_register_hw+0x1b8f/0x3ed0 [ 760.533864][ T4345] ? ieee80211_register_hw+0x1bde/0x3ed0 [ 760.539532][ T4345] ieee80211_register_hw+0x1f18/0x3ed0 [ 760.545020][ T4345] ? ieee80211_restart_hw+0x290/0x290 [ 760.550401][ T4345] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 760.556579][ T4345] ? memset+0x20/0x40 [ 760.560567][ T4345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 760.566818][ T4345] ? __hrtimer_init+0x136/0x280 [ 760.571804][ T4345] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 760.577553][ T4345] ? hwsim_virtio_rx_work+0x350/0x350 [ 760.582955][ T4345] ? hwsim_new_radio_nl+0x992/0x1080 [ 760.588243][ T4345] ? memcpy+0x39/0x60 [ 760.592249][ T4345] hwsim_new_radio_nl+0x9bc/0x1080 [ 760.597543][ T4345] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 760.603459][ T4345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 760.609711][ T4345] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 760.617099][ T4345] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 760.624403][ T4345] genl_family_rcv_msg_doit+0x228/0x320 [ 760.629960][ T4345] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 760.637341][ T4345] ? security_capable+0x72/0xc0 [ 760.642208][ T4345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 760.648460][ T4345] ? ns_capable+0xd9/0x100 [ 760.652907][ T4345] genl_rcv_msg+0x328/0x580 [ 760.657442][ T4345] ? genl_get_cmd+0x480/0x480 [ 760.662145][ T4345] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 760.668061][ T4345] ? lock_release+0x720/0x720 [ 760.672766][ T4345] netlink_rcv_skb+0x153/0x420 [ 760.677650][ T4345] ? genl_get_cmd+0x480/0x480 [ 760.682367][ T4345] ? netlink_ack+0xa60/0xa60 [ 760.687097][ T4345] ? netlink_deliver_tap+0x1b1/0xc30 [ 760.692431][ T4345] genl_rcv+0x24/0x40 [ 760.696442][ T4345] netlink_unicast+0x533/0x7d0 [ 760.701233][ T4345] ? netlink_attachskb+0x880/0x880 [ 760.706363][ T4345] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 760.712749][ T4345] ? __phys_addr_symbol+0x2c/0x70 [ 760.717883][ T4345] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 760.723740][ T4345] ? __check_object_size+0x16e/0x850 [ 760.729064][ T4345] netlink_sendmsg+0x86d/0xda0 [ 760.733849][ T4345] ? netlink_unicast+0x7d0/0x7d0 [ 760.738911][ T4345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 760.745176][ T4345] ? netlink_unicast+0x7d0/0x7d0 [ 760.750126][ T4345] sock_sendmsg+0xcf/0x120 [ 760.754559][ T4345] ____sys_sendmsg+0x6e8/0x810 [ 760.759351][ T4345] ? kernel_sendmsg+0x50/0x50 [ 760.764054][ T4345] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 760.770239][ T4345] ? ___sys_sendmsg+0xd2/0x170 [ 760.775048][ T4345] ___sys_sendmsg+0xf3/0x170 [ 760.779691][ T4345] ? sendmsg_copy_msghdr+0x160/0x160 [ 760.785033][ T4345] ? __fget_files+0x21b/0x3e0 [ 760.789739][ T4345] ? lock_downgrade+0x6e0/0x6e0 [ 760.794624][ T4345] ? __fget_light+0x89/0x280 [ 760.799283][ T4345] ? __fget_files+0x23d/0x3e0 [ 760.803981][ T4345] ? __fget_light+0xea/0x280 [ 760.808584][ T4345] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 760.814843][ T4345] __sys_sendmsg+0xe5/0x1b0 [ 760.819361][ T4345] ? __sys_sendmsg_sock+0x30/0x30 [ 760.824412][ T4345] ? syscall_enter_from_user_mode+0x21/0x70 [ 760.830417][ T4345] do_syscall_64+0x35/0xb0 [ 760.834852][ T4345] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.840757][ T4345] RIP: 0033:0x7f5d21f6fae9 [ 760.845181][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.864793][ T4345] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.873220][ T4345] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 760.881194][ T4345] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 760.889166][ T4345] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 760.897242][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.905220][ T4345] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 760.913217][ T4345] [ 761.070590][ T4350] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 761.079983][ T4350] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.187606][ T4350] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 761.187606][ T4350] !' [ 761.198137][ T4350] CPU: 0 PID: 4350 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 761.208058][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.218165][ T4350] Call Trace: [ 761.221459][ T4350] [ 761.224411][ T4350] dump_stack_lvl+0xcd/0x134 [ 761.229041][ T4350] sysfs_warn_dup.cold+0x1c/0x29 [ 761.234105][ T4350] sysfs_do_create_link_sd+0x11e/0x140 [ 761.239597][ T4350] sysfs_create_link+0x5f/0xc0 [ 761.244398][ T4350] device_add+0x789/0x1ee0 [ 761.248836][ T4350] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 761.255363][ T4350] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 761.261673][ T4350] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 761.267702][ T4350] wiphy_register+0x1e94/0x29b0 [ 761.272597][ T4350] ? wiphy_unregister+0xbf0/0xbf0 [ 761.277642][ T4350] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 761.283825][ T4350] ? ieee80211_register_hw+0x1cb4/0x3ed0 [ 761.289485][ T4350] ieee80211_register_hw+0x1f18/0x3ed0 [ 761.294988][ T4350] ? ieee80211_restart_hw+0x290/0x290 [ 761.300379][ T4350] ? debug_object_destroy+0x210/0x210 [ 761.305768][ T4350] ? memset+0x20/0x40 [ 761.309787][ T4350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 761.316042][ T4350] ? __hrtimer_init+0x136/0x280 [ 761.320909][ T4350] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 761.326661][ T4350] ? hwsim_virtio_rx_work+0x350/0x350 [ 761.332041][ T4350] ? hwsim_new_radio_nl+0x992/0x1080 [ 761.337425][ T4350] ? memcpy+0x39/0x60 [ 761.341469][ T4350] hwsim_new_radio_nl+0x9bc/0x1080 [ 761.346613][ T4350] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 761.352528][ T4350] ? lockdep_hardirqs_on+0x79/0x100 [ 761.357765][ T4350] genl_family_rcv_msg_doit+0x228/0x320 [ 761.363328][ T4350] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 761.370795][ T4350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 761.377075][ T4350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 761.383326][ T4350] ? ns_capable+0xd9/0x100 [ 761.387773][ T4350] genl_rcv_msg+0x328/0x580 [ 761.392286][ T4350] ? genl_get_cmd+0x480/0x480 [ 761.396970][ T4350] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 761.402977][ T4350] ? lock_release+0x720/0x720 [ 761.407675][ T4350] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 761.413492][ T4350] netlink_rcv_skb+0x153/0x420 [ 761.418268][ T4350] ? genl_get_cmd+0x480/0x480 [ 761.422964][ T4350] ? netlink_ack+0xa60/0xa60 [ 761.427564][ T4350] ? netlink_deliver_tap+0x1b1/0xc30 [ 761.432875][ T4350] genl_rcv+0x24/0x40 [ 761.436865][ T4350] netlink_unicast+0x533/0x7d0 [ 761.441641][ T4350] ? netlink_attachskb+0x880/0x880 [ 761.446771][ T4350] ? kcov_close+0x10/0x10 [ 761.451113][ T4350] netlink_sendmsg+0x86d/0xda0 [ 761.455901][ T4350] ? netlink_unicast+0x7d0/0x7d0 [ 761.460868][ T4350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 761.467146][ T4350] ? netlink_unicast+0x7d0/0x7d0 [ 761.472101][ T4350] sock_sendmsg+0xcf/0x120 [ 761.476538][ T4350] ____sys_sendmsg+0x6e8/0x810 [ 761.481332][ T4350] ? kernel_sendmsg+0x50/0x50 [ 761.486030][ T4350] ? do_recvmmsg+0x6d0/0x6d0 [ 761.490660][ T4350] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 761.496653][ T4350] ? lock_chain_count+0x20/0x20 [ 761.501524][ T4350] ___sys_sendmsg+0xf3/0x170 [ 761.506133][ T4350] ? sendmsg_copy_msghdr+0x160/0x160 [ 761.511444][ T4350] ? __fget_files+0x21b/0x3e0 [ 761.516128][ T4350] ? lock_downgrade+0x6e0/0x6e0 [ 761.521001][ T4350] ? __fget_files+0x23d/0x3e0 [ 761.525687][ T4350] ? __fget_light+0xea/0x280 [ 761.530282][ T4350] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 761.536539][ T4350] __sys_sendmsg+0xe5/0x1b0 [ 761.541063][ T4350] ? __sys_sendmsg_sock+0x30/0x30 [ 761.546098][ T4350] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 761.552266][ T4350] ? lockdep_hardirqs_on+0x79/0x100 [ 761.557570][ T4350] ? ncsi_configure_channel+0xa40/0x18a0 [ 761.563309][ T4350] do_syscall_64+0x35/0xb0 [ 761.567743][ T4350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.573645][ T4350] RIP: 0033:0x7fc78cb95ae9 [ 761.578060][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.597793][ T4350] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.606311][ T4350] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 761.614294][ T4350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 761.622272][ T4350] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 761.630255][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.638224][ T4350] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 761.646219][ T4350] 06:11:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20711, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:49 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x8]}, 0x8, 0x181400) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000100)) r3 = dup3(r0, r1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfe) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@phonet, 0x0, 0x80000, 0x1}, 0x3) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) r8 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) bind$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) 06:11:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3406000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:49 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000240)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r4, r5, 0x80000) flock(r4, 0x4) 06:11:49 executing program 3: syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f00000002c0)="59691b060065c4e6c450e4ba5256f2fd85ae54c6ee3edb62b7b5d6357659d5280d2594b5c0b83b5a5a95f516e1f463a9cd6cccf452321cc3a1cc856b048ebb03934583e44c38be35d2b681a0ae97fd9f8c1b61f8885a4f1b54582f69f953172a6d69c5c1f0e49492902a25492de73064c136d92d6305a4a12e9877", 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)={0x2, 0x5, 0x4, 0x0, 0x9, {r6, r7/1000+60000}, {0x3, 0x0, 0x1f, 0x6, 0x20, 0x9, ':kGW'}, 0x8, 0x2, @offset=0x10000, 0x6}) r8 = socket$rxrpc(0x21, 0x2, 0xa) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x3, 0x8, 0x1000}, {0x0, 0xfffc, 0x800}, {0x4, 0x1}], 0x3, &(0x7f0000000340)={0x77359400}) r9 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r8, r9, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) pselect6(0x40, &(0x7f0000000380)={0x8, 0x7, 0x7e, 0xad, 0xfe95, 0x0, 0x8, 0x100}, &(0x7f00000003c0)={0x0, 0x100, 0x100000000, 0x7fffffff, 0x50e, 0x4, 0x10001, 0x7}, &(0x7f0000000440)={0xfa, 0x80000001, 0x80000001, 0xb371, 0x0, 0x7f, 0x6, 0x2}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x3]}, 0x8}) [ 761.794748][ T4388] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\a\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20712, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x300, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:49 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004940)=[{{&(0x7f0000000480)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r2, r3, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'geneve0\x00', {0x3}, 0x1ff}) [ 761.914332][ T4395] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 761.995443][ T4395] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:11:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\b\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 762.182548][ T4395] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 762.182548][ T4395] !' [ 762.218639][ T4395] CPU: 0 PID: 4395 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 762.228577][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.238652][ T4395] Call Trace: [ 762.241941][ T4395] [ 762.244875][ T4395] dump_stack_lvl+0xcd/0x134 [ 762.249483][ T4395] sysfs_warn_dup.cold+0x1c/0x29 [ 762.254432][ T4395] sysfs_do_create_link_sd+0x11e/0x140 [ 762.259918][ T4395] sysfs_create_link+0x5f/0xc0 [ 762.264697][ T4395] device_add+0x789/0x1ee0 [ 762.269129][ T4395] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 762.275297][ T4395] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 762.281561][ T4395] wiphy_register+0x1e94/0x29b0 [ 762.286432][ T4395] ? wiphy_unregister+0xbf0/0xbf0 [ 762.291474][ T4395] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 762.297646][ T4395] ieee80211_register_hw+0x1f18/0x3ed0 [ 762.303134][ T4395] ? ieee80211_restart_hw+0x290/0x290 [ 762.308533][ T4395] ? debug_object_destroy+0x210/0x210 [ 762.314092][ T4395] ? memset+0x20/0x40 [ 762.318084][ T4395] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 762.324333][ T4395] ? __hrtimer_init+0x136/0x280 [ 762.329193][ T4395] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 762.334939][ T4395] ? hwsim_virtio_rx_work+0x350/0x350 [ 762.340324][ T4395] ? hwsim_new_radio_nl+0x992/0x1080 [ 762.345612][ T4395] ? memcpy+0x39/0x60 [ 762.349607][ T4395] hwsim_new_radio_nl+0x9bc/0x1080 [ 762.354725][ T4395] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 762.360632][ T4395] ? lockdep_hardirqs_on+0x79/0x100 [ 762.365879][ T4395] genl_family_rcv_msg_doit+0x228/0x320 [ 762.371445][ T4395] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 762.378845][ T4395] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 762.385121][ T4395] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 762.391379][ T4395] ? ns_capable+0xd9/0x100 [ 762.395825][ T4395] genl_rcv_msg+0x328/0x580 [ 762.400348][ T4395] ? genl_get_cmd+0x480/0x480 [ 762.405029][ T4395] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 762.410933][ T4395] ? lock_release+0x720/0x720 [ 762.415616][ T4395] ? lockdep_hardirqs_on+0x79/0x100 [ 762.420831][ T4395] netlink_rcv_skb+0x153/0x420 [ 762.425602][ T4395] ? genl_get_cmd+0x480/0x480 [ 762.430290][ T4395] ? netlink_ack+0xa60/0xa60 [ 762.434894][ T4395] ? netlink_deliver_tap+0x1b1/0xc30 [ 762.440192][ T4395] genl_rcv+0x24/0x40 [ 762.444200][ T4395] netlink_unicast+0x533/0x7d0 [ 762.448977][ T4395] ? netlink_attachskb+0x880/0x880 [ 762.454095][ T4395] ? security_netlink_send+0x5e/0xa0 [ 762.459390][ T4395] ? __sanitizer_cov_trace_pc+0x7/0x60 [ 762.464868][ T4395] netlink_sendmsg+0x86d/0xda0 [ 762.469643][ T4395] ? netlink_unicast+0x7d0/0x7d0 [ 762.474595][ T4395] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 762.480847][ T4395] ? netlink_unicast+0x7d0/0x7d0 [ 762.485800][ T4395] sock_sendmsg+0xcf/0x120 [ 762.490228][ T4395] ____sys_sendmsg+0x6e8/0x810 [ 762.495019][ T4395] ? kernel_sendmsg+0x50/0x50 [ 762.499725][ T4395] ? do_recvmmsg+0x6d0/0x6d0 [ 762.504336][ T4395] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 762.510340][ T4395] ? lock_chain_count+0x20/0x20 [ 762.515211][ T4395] ___sys_sendmsg+0xf3/0x170 [ 762.519819][ T4395] ? sendmsg_copy_msghdr+0x160/0x160 [ 762.525395][ T4395] ? __fget_files+0x21b/0x3e0 [ 762.530090][ T4395] ? lock_downgrade+0x6e0/0x6e0 [ 762.534963][ T4395] ? __fget_files+0x23d/0x3e0 [ 762.539654][ T4395] ? __fget_light+0xea/0x280 [ 762.544246][ T4395] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 762.550513][ T4395] __sys_sendmsg+0xe5/0x1b0 [ 762.555045][ T4395] ? __sys_sendmsg_sock+0x30/0x30 [ 762.560096][ T4395] ? syscall_enter_from_user_mode+0x21/0x70 [ 762.566185][ T4395] do_syscall_64+0x35/0xb0 [ 762.570611][ T4395] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 762.576531][ T4395] RIP: 0033:0x7f5d21f6fae9 [ 762.580944][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 762.600553][ T4395] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.608967][ T4395] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 762.616942][ T4395] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 762.624912][ T4395] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 762.632886][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.640854][ T4395] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 762.648844][ T4395] 06:11:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:50 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) r0 = io_uring_setup(0x5174, &(0x7f0000000000)) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 06:11:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, &(0x7f0000000780)={0x40, 0xb, 0x65, {0x65, 0x9, "d454ca34390bce9c142d65b555365dc515d7e63a57c69ae3ab7431e7da4521fd50042361b6a4ca7c4cdabf74ea3c0cc5323f40ee28cc3baa0c625379f2855a771ea3088c5e2b9a04284fe8f5c28ddf62b36a8ac3b0db8f92d9302f78224e08de890348"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000b80)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x0, "13ac6e05"}, @global=@item_012={0x2, 0x1, 0x9, "900d"}, @global=@item_4={0x3, 0x1, 0x0, "31e94c3e"}, @local=@item_012={0x2, 0x2, 0xa, "dd7c"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xa, "ff"}, @global=@item_4={0x3, 0x1, 0x0, '\x00\b\x00'}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe1a, 0x4d, 0x1, {0x22, 0x734}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)={0xa1c027a1e6f0f1f3, 0x0, 0xb2, "bc1302405563748f62fe356269af124c6b9f68d1baabfd1b1f7416fcf46e8a6a6841df568a3d1b47b8993da396e0101e8ad6a363ac7587ae181191430d9142b7c1cd6f728dd3f89e83fa580b099498667917bcec766cc2e19ea4e193d17014f01f8874ef9b9d498fe811973f8a1b151073553c378fd30dbb0f7e81975a299516a26a05df62a15e5531e0c46693bba0550223cda11ee2bb0a97ac2fc8d72f99633ff3b3a974e7eb1a4194afd6e17c1fb34883"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x34}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2001180000f7383c0223ee15bffb"], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0x8, 0xf1, {0xf1, 0x5, "09f58cee9bb4269fa8a6f8fd4200bdd73f8d76617771aadd95c7656e92acbd3d826a762b05aa302f8dc4e645bbddf398bf41b890a7ebba75ca3f65bc47bd5b737cd46012951f9d744500014b047fd3fdfde21351c43bf7df56b5e98ffba81eab9162f8eed128972d6ce1736ad4e6895ab781f7bfa711e7354ac645ffc10165b11d3b9382a93998e24519418a0b1ffd87a28c96bf336435651d1def67c260c249128cfab2307bcc83d9a1d3ac3f769c9793b0fb38e065dba2c63dce936aa7a319860726f6df9a088ec6bcebcbe56d8ef20099a83212dfc83b31c6395063c04a4bb3a0464a3e507426a0268eb2a1dc8c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000180)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x3, 0x8}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x90, 0x9, 0xb3, 0x4, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa0, 0x3, 0x3f, 0x7, "f9a0d3a9", "1adc7c4f"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x6, 0x4, 0x2a, 0x100, 0x7fff}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0x17, 0x54, "28e6bc39c8355c2c9c639144cab6ac69eaf7dc3bcb8c41109e8d0302d7bb6e758aeda65607fce8930408c9a85d8f6ae979604da32c6bc8b42bad315c1ca60342918f2036adbf453a65b2f76a9c975406171d1017"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x3f}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000480)={0x40, 0xb, 0x2, "53b0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000500)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="74be4e810268"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "1e60"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x95, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x60, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "04e5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x9, 0x26}, {0x6, 0x24, 0x1a, 0x8000, 0xc}, [@network_terminal={0x7, 0x24, 0xa, 0x17, 0x5, 0x6, 0x1f}, @country_functional={0x6, 0x24, 0x7, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x3f, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x2be, 0x8, 0x3, 0x6d4, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x9a, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x3f, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ef, 0x0, 0x9, 0x40}}}}}}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x310, 0x7f, 0x40, 0x9, 0x8, 0x7}, 0x76, &(0x7f0000001440)={0x5, 0xf, 0x76, 0x3, [@generic={0x52, 0x10, 0xa, "c3295e481feec1c03991ba743daf0cfe062f6e47b606fe76d0c5bf57b9c0553b3796ab50e994b2d9f4d192b726bd67d6fa1da540a9c071262e73ac45d5aedd5d61341065e67035c7e03f6074c56f7a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6f, 0x9, 0x401, 0xfc}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ce71fb1e35252f01c1327a0750aaa23b"}]}, 0x5, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x2c28}}, {0x27, &(0x7f0000001540)=@string={0x27, 0x3, "bcbd9d649b40c2ba41f32a9188d05fe354117fd80c528e8addc2a5fb46d7979df7915a3117"}}, {0x47, &(0x7f0000001580)=@string={0x47, 0x3, "2a0b35d7046d4c06cd2afd8585ae733bfc0b73ee39d59ad36419b74592b76aa5d1edc677d5aa06a229aa0e6e5d2f531e819d8c4535b2c9632ce54d7a1458f2dab343c1666d"}}, {0x14, &(0x7f0000001600)=@string={0x14, 0x3, "714e34fd8eda059fb0da58675a62e1366f30"}}]}) syz_usb_control_io(r2, &(0x7f0000001880)={0x2c, &(0x7f00000016c0)={0x0, 0x6, 0x5e, {0x5e, 0x21, "de134ab8d600f9607d9c85138c2fb0333868790d7f820b735fc4c7cacdab41beef05fffadebb19c709ff215818ef2c6e91d771a8935d66c5e3a82df318edbf01327b1d5ed2cef83f4340dad714b6d81cbb4b0695e21ac5bed53a96b8"}}, &(0x7f0000001740)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "533ad6e981fe426a619487c06927919a5243efd839ef459bca627bb341f1955117c25c86539699a008af311d463f8ca19dac6dd31255f5082c55c184"}}, &(0x7f00000017c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x80, 0x5, 0x87, "0a2027f2", "51669b46"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x5, 0xbe, 0xff, 0xfff, 0x1}}}, &(0x7f0000001d00)={0x84, &(0x7f00000018c0)={0x20, 0x3, 0x62, "e324508a4a141a136cbcf7b740b59c5a393664a322cb1afd9824a7facd337af0706cca22ed4a2f8f097a8f320e80d3a9b78fb4c457b39f1155ff9faa7242aca10563636a29cf50c43cc0004e6d9cd95fe52fa528633480ab55a0775040bd84eb9ffc"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x6f}, &(0x7f00000019c0)={0x20, 0x0, 0x4}, &(0x7f0000001a00)={0x20, 0x0, 0x8, {0xa0, 0x10, [0x77f0]}}, &(0x7f0000001a40)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001a80)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001ac0)={0x40, 0xb, 0x2, "ff2f"}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001b40)={0x40, 0x13, 0x6}, &(0x7f0000001b80)={0x40, 0x17, 0x6, @local}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, "049e"}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0x48}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001c80)={0x40, 0x1e, 0x1}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io(r1, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x30, 0x5a, {0x5a, 0x22, "bcaa0ef9c2dec4c1ff1ac03ebc7252895e85537537f39f202ff6330fa8d1f6f4c12b18baeaf4fb4580bc67a52ea0f5de8273a003822086d84e2fff777299e286ccc4f181f147106645cc55eba7fe110bd0c430999a17c1f2"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000d00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x80, 0x40, 0x0, "c1d3f4f1", "00fcea0c"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x1, 0x7f, 0x9, 0x1f, 0x200, 0x2}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e00)={0x20, 0x0, 0xb3, "f5778e18dc6f90fdb8024940ff1d613c70352e59ed4396912c40d992f64aa2939690c7e1302dcba8010b3aead1ee13708d72d3edf5e9d72d994720d14d42d6853e6f26506b59a6b788ed79f502ed404051475a6b9b0d81948ae6ec38cc0bc12547e72a407a77016495fbd15d4749f6ed0afbdb244f0431643c8876c66a9e66674eff11596eee54508a50ff0ba8b7b1cbf8e063e420c4686b1f9f13679221577667623a11d958a7a6cfe86afc1b534d4260983e"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x60, 0x1, [0x0]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x19}, &(0x7f0000001040)={0x40, 0xb, 0x2, 'C\"'}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0xf4b9}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001100)={0x40, 0x17, 0x6, @local}, &(0x7f0000001140)={0x40, 0x19, 0x2, '\"n'}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x98}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 06:11:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\t\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20713, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3e8, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x500, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:50 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)={r1, r2+10000000}, 0x1, 0x0, 0x1}, 0xffffffad) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = dup3(r0, r3, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 06:11:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\n\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 763.048477][ T4451] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:11:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20714, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x600, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 763.182710][ T4451] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 763.182710][ T4451] !' [ 763.215200][ T4451] CPU: 1 PID: 4451 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 763.225137][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.235201][ T4451] Call Trace: [ 763.238491][ T4451] [ 763.241431][ T4451] dump_stack_lvl+0xcd/0x134 [ 763.246049][ T4451] sysfs_warn_dup.cold+0x1c/0x29 [ 763.250997][ T4451] sysfs_do_create_link_sd+0x11e/0x140 [ 763.256471][ T4451] sysfs_create_link+0x5f/0xc0 [ 763.261249][ T4451] device_add+0x789/0x1ee0 [ 763.265697][ T4451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 763.271874][ T4451] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 763.278134][ T4451] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 763.284385][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.290636][ T4451] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 763.296637][ T4451] wiphy_register+0x1e94/0x29b0 [ 763.301504][ T4451] ? wiphy_unregister+0xbf0/0xbf0 [ 763.306531][ T4451] ? minstrel_ht_alloc+0x52c/0xa10 [ 763.311665][ T4451] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 763.317837][ T4451] ieee80211_register_hw+0x1f18/0x3ed0 [ 763.323321][ T4451] ? ieee80211_restart_hw+0x290/0x290 [ 763.328831][ T4451] ? debug_object_destroy+0x210/0x210 [ 763.334236][ T4451] ? memset+0x20/0x40 [ 763.338243][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.344505][ T4451] ? __hrtimer_init+0x136/0x280 [ 763.349373][ T4451] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 763.355123][ T4451] ? hwsim_virtio_rx_work+0x350/0x350 [ 763.360505][ T4451] ? hwsim_new_radio_nl+0x992/0x1080 [ 763.365797][ T4451] ? memcpy+0x39/0x60 [ 763.369788][ T4451] hwsim_new_radio_nl+0x9bc/0x1080 [ 763.374908][ T4451] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 763.380832][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.387083][ T4451] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 763.394460][ T4451] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 763.401765][ T4451] genl_family_rcv_msg_doit+0x228/0x320 [ 763.407321][ T4451] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 763.414699][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.420961][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.427207][ T4451] ? ns_capable+0xd9/0x100 [ 763.431635][ T4451] genl_rcv_msg+0x328/0x580 [ 763.436155][ T4451] ? genl_get_cmd+0x480/0x480 [ 763.440926][ T4451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 763.447087][ T4451] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 763.452991][ T4451] ? netlink_rcv_skb+0x29f/0x420 [ 763.457947][ T4451] netlink_rcv_skb+0x153/0x420 [ 763.462720][ T4451] ? genl_get_cmd+0x480/0x480 [ 763.467406][ T4451] ? netlink_ack+0xa60/0xa60 [ 763.472020][ T4451] genl_rcv+0x24/0x40 [ 763.476016][ T4451] netlink_unicast+0x533/0x7d0 [ 763.480791][ T4451] ? netlink_attachskb+0x880/0x880 [ 763.485920][ T4451] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 763.492172][ T4451] ? __phys_addr_symbol+0x2c/0x70 [ 763.497213][ T4451] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 763.502938][ T4451] ? __check_object_size+0x16e/0x850 [ 763.508236][ T4451] netlink_sendmsg+0x86d/0xda0 [ 763.513019][ T4451] ? netlink_unicast+0x7d0/0x7d0 [ 763.517968][ T4451] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 763.523557][ T4451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 763.529810][ T4451] ? netlink_unicast+0x7d0/0x7d0 [ 763.534768][ T4451] sock_sendmsg+0xcf/0x120 [ 763.539193][ T4451] ____sys_sendmsg+0x6e8/0x810 [ 763.543965][ T4451] ? kernel_sendmsg+0x50/0x50 [ 763.548650][ T4451] ? do_recvmmsg+0x6d0/0x6d0 [ 763.553254][ T4451] ? lock_chain_count+0x20/0x20 [ 763.558198][ T4451] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 763.564274][ T4451] ? futex_wait+0x533/0x670 [ 763.568789][ T4451] ___sys_sendmsg+0xf3/0x170 [ 763.573399][ T4451] ? sendmsg_copy_msghdr+0x160/0x160 [ 763.578718][ T4451] ? __fget_files+0x21b/0x3e0 [ 763.583411][ T4451] ? lock_downgrade+0x6e0/0x6e0 [ 763.588311][ T4451] ? __fget_files+0xe8/0x3e0 [ 763.592923][ T4451] ? __fget_files+0x23d/0x3e0 [ 763.597621][ T4451] ? __fget_light+0xea/0x280 [ 763.602221][ T4451] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 763.608488][ T4451] __sys_sendmsg+0xe5/0x1b0 [ 763.613005][ T4451] ? __sys_sendmsg_sock+0x30/0x30 [ 763.618060][ T4451] ? lockdep_hardirqs_on+0x79/0x100 [ 763.623277][ T4451] ? trace_hardirqs_on+0x39/0x1c0 [ 763.628326][ T4451] ? syscall_enter_from_user_mode+0x2b/0x70 [ 763.634325][ T4451] do_syscall_64+0x35/0xb0 [ 763.638747][ T4451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 763.644699][ T4451] RIP: 0033:0x7f5d21f6fae9 [ 763.649145][ T4451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.668771][ T4451] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.677206][ T4451] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 763.685181][ T4451] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 763.693154][ T4451] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 763.701126][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.709097][ T4451] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 763.717090][ T4451] 06:11:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\v\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 763.740677][ T8175] usb 5-1: new high-speed USB device number 8 using dummy_hcd 06:11:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:51 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @local, 0xfffffffe}}, 0x24) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 763.903258][ T4469] __nla_validate_parse: 3 callbacks suppressed [ 763.903277][ T4469] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.930728][ T8175] usb 5-1: device descriptor read/64, error 18 [ 764.085534][ T4488] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 764.121036][ T4488] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.200926][ T8175] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 764.223851][ T4488] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 764.223851][ T4488] !' [ 764.247262][ T4488] CPU: 1 PID: 4488 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 764.257201][ T4488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.267280][ T4488] Call Trace: [ 764.270623][ T4488] [ 764.273570][ T4488] dump_stack_lvl+0xcd/0x134 [ 764.278199][ T4488] sysfs_warn_dup.cold+0x1c/0x29 [ 764.283169][ T4488] sysfs_do_create_link_sd+0x11e/0x140 [ 764.288682][ T4488] sysfs_create_link+0x5f/0xc0 [ 764.293486][ T4488] device_add+0x789/0x1ee0 [ 764.297943][ T4488] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 764.304217][ T4488] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 764.310602][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.316871][ T4488] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 764.322889][ T4488] wiphy_register+0x1e94/0x29b0 [ 764.327775][ T4488] ? wiphy_unregister+0xbf0/0xbf0 [ 764.332829][ T4488] ? minstrel_ht_alloc+0x52c/0xa10 [ 764.337978][ T4488] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 764.344170][ T4488] ieee80211_register_hw+0x1f18/0x3ed0 [ 764.349787][ T4488] ? ieee80211_restart_hw+0x290/0x290 [ 764.355223][ T4488] ? debug_object_destroy+0x210/0x210 [ 764.360652][ T4488] ? memset+0x20/0x40 [ 764.364655][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.370922][ T4488] ? __hrtimer_init+0x136/0x280 [ 764.375807][ T4488] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 764.381663][ T4488] ? hwsim_virtio_rx_work+0x350/0x350 [ 764.387057][ T4488] ? hwsim_new_radio_nl+0x992/0x1080 [ 764.392453][ T4488] ? memcpy+0x39/0x60 [ 764.396457][ T4488] hwsim_new_radio_nl+0x9bc/0x1080 [ 764.401594][ T4488] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 764.407519][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.413788][ T4488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 764.421181][ T4488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 764.428499][ T4488] genl_family_rcv_msg_doit+0x228/0x320 [ 764.434070][ T4488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 764.441470][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.447748][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.454012][ T4488] ? ns_capable+0xd9/0x100 [ 764.458722][ T4488] genl_rcv_msg+0x328/0x580 [ 764.463255][ T4488] ? genl_get_cmd+0x480/0x480 [ 764.467958][ T4488] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 764.473979][ T4488] netlink_rcv_skb+0x153/0x420 [ 764.478893][ T4488] ? genl_get_cmd+0x480/0x480 [ 764.483604][ T4488] ? netlink_ack+0xa60/0xa60 [ 764.488213][ T4488] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 764.494404][ T4488] ? down_read+0x198/0x440 [ 764.498847][ T4488] ? genl_get_cmd+0x480/0x480 [ 764.503564][ T4488] genl_rcv+0x24/0x40 [ 764.507564][ T4488] netlink_unicast+0x533/0x7d0 [ 764.512362][ T4488] ? netlink_attachskb+0x880/0x880 [ 764.517501][ T4488] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 764.523770][ T4488] ? __phys_addr_symbol+0x2c/0x70 [ 764.528817][ T4488] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 764.534569][ T4488] ? __check_object_size+0x16e/0x850 [ 764.539894][ T4488] netlink_sendmsg+0x86d/0xda0 [ 764.544688][ T4488] ? netlink_unicast+0x7d0/0x7d0 [ 764.549651][ T4488] ? bpf_lsm_socket_accept+0x10/0x10 [ 764.554962][ T4488] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.561236][ T4488] ? netlink_unicast+0x7d0/0x7d0 [ 764.566204][ T4488] sock_sendmsg+0xcf/0x120 [ 764.570750][ T4488] ____sys_sendmsg+0x6e8/0x810 [ 764.575544][ T4488] ? kernel_sendmsg+0x50/0x50 [ 764.580252][ T4488] ? do_recvmmsg+0x6d0/0x6d0 [ 764.584893][ T4488] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 764.590904][ T4488] ? lock_chain_count+0x20/0x20 [ 764.595840][ T4488] ___sys_sendmsg+0xf3/0x170 [ 764.600478][ T4488] ? sendmsg_copy_msghdr+0x160/0x160 [ 764.605803][ T4488] ? __fget_files+0x21b/0x3e0 [ 764.610503][ T4488] ? lock_downgrade+0x6e0/0x6e0 [ 764.615380][ T4488] ? __fget_files+0x9f/0x3e0 [ 764.620011][ T4488] ? __fget_files+0x23d/0x3e0 [ 764.624737][ T4488] ? __fget_light+0xea/0x280 [ 764.629349][ T4488] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 764.635634][ T4488] __sys_sendmsg+0xe5/0x1b0 [ 764.640188][ T4488] ? __sys_sendmsg_sock+0x30/0x30 [ 764.645329][ T4488] ? lockdep_hardirqs_on+0x79/0x100 [ 764.650572][ T4488] ? trace_hardirqs_on+0x39/0x1c0 [ 764.655635][ T4488] ? syscall_enter_from_user_mode+0x2b/0x70 [ 764.661564][ T4488] do_syscall_64+0x35/0xb0 [ 764.666005][ T4488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.671921][ T4488] RIP: 0033:0x7f5d21f6fae9 [ 764.676364][ T4488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.696005][ T4488] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.704559][ T4488] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 764.712546][ T4488] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 764.720541][ T4488] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 764.728700][ T4488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.736686][ T4488] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 764.744697][ T4488] [ 764.911337][ T8175] usb 5-1: device descriptor read/64, error 18 [ 765.042646][ T8175] usb usb5-port1: attempt power cycle [ 765.450758][ T8175] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 765.621041][ T8175] usb 5-1: device descriptor read/8, error -61 06:11:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\f\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:53 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r0, 0x0, &(0x7f0000000080)="d5ef9fd03df0dec494faff0d748ff969378e5c9f29d57eeec1989ef4b452c54a305c06eba3b9a8770416c8fd9ab0feda8e9c971aaf5a73541f7a73023f93e17c15083cab1687f6517179dea98a69aeda85e049cf8730bcb50dc213ea3780267a7dc41712efc38d8c27f5ef7a869ed9c028913b1d636ea945d9cdf24ae729481ab21b8740bf213692b5fc46b3404b6ce04d8bb544fd34673a70cffbaa9655d65fad26081a8b2193b4015fa8dac73e8a638844eaffefcea7ecab80a3b9852f8a9d366f2311a4555eb5d211d35635fefbec544af3364ce4725d5d", 0xd9, 0x60}, 0x0) r2 = dup3(r0, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = io_uring_setup(0x5174, &(0x7f0000000000)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r9}}, 0x7) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r7, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r10 = dup3(r7, r8, 0x80000) bind$rxrpc(r10, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r3, r4, r0, r1, r1, r1, r10, r11, r1]}, 0xa) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x700, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20715, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 765.890662][ T8175] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 766.005924][ T4520] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340e000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:53 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) listen(0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 766.048104][ T4522] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 766.076817][ T4522] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.130677][ T8175] usb 5-1: device not accepting address 11, error -71 [ 766.145982][ T8175] usb usb5-port1: unable to enumerate USB device 06:11:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x900, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20716, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 766.276627][ T4522] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 766.276627][ T4522] !' [ 766.307816][ T4522] CPU: 0 PID: 4522 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 766.317774][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.327856][ T4522] Call Trace: [ 766.331150][ T4522] [ 766.334099][ T4522] dump_stack_lvl+0xcd/0x134 [ 766.338731][ T4522] sysfs_warn_dup.cold+0x1c/0x29 [ 766.343700][ T4522] sysfs_do_create_link_sd+0x11e/0x140 [ 766.349197][ T4522] sysfs_create_link+0x5f/0xc0 [ 766.354001][ T4522] device_add+0x789/0x1ee0 [ 766.358450][ T4522] ? ieee80211_set_bitrate_flags+0x163/0x650 [ 766.364462][ T4522] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 766.370736][ T4522] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 766.377010][ T4522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 766.383288][ T4522] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 766.389304][ T4522] wiphy_register+0x1e94/0x29b0 [ 766.394279][ T4522] ? wiphy_unregister+0xbf0/0xbf0 [ 766.399319][ T4522] ? minstrel_ht_alloc+0x52c/0xa10 [ 766.404637][ T4522] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 766.410739][ T4522] ieee80211_register_hw+0x1f18/0x3ed0 [ 766.416327][ T4522] ? ieee80211_restart_hw+0x290/0x290 [ 766.421901][ T4522] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 766.428083][ T4522] ? __hrtimer_init+0x136/0x280 [ 766.432977][ T4522] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 766.438739][ T4522] ? hwsim_virtio_rx_work+0x350/0x350 [ 766.444136][ T4522] ? hwsim_new_radio_nl+0x992/0x1080 [ 766.449448][ T4522] ? memcpy+0x39/0x60 [ 766.453457][ T4522] hwsim_new_radio_nl+0x9bc/0x1080 [ 766.458604][ T4522] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 766.464527][ T4522] ? lockdep_hardirqs_on+0x79/0x100 [ 766.469791][ T4522] genl_family_rcv_msg_doit+0x228/0x320 06:11:53 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0xff0b}], 0x1) [ 766.475380][ T4522] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 766.482789][ T4522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 766.489074][ T4522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 766.495363][ T4522] ? ns_capable+0xd9/0x100 [ 766.499813][ T4522] genl_rcv_msg+0x328/0x580 [ 766.504344][ T4522] ? genl_get_cmd+0x480/0x480 [ 766.509049][ T4522] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 766.515238][ T4522] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 766.521161][ T4522] ? netlink_rcv_skb+0x313/0x420 [ 766.526136][ T4522] netlink_rcv_skb+0x153/0x420 [ 766.530932][ T4522] ? genl_get_cmd+0x480/0x480 [ 766.535638][ T4522] ? netlink_ack+0xa60/0xa60 [ 766.540267][ T4522] ? netlink_deliver_tap+0x1b1/0xc30 [ 766.545597][ T4522] genl_rcv+0x24/0x40 [ 766.549628][ T4522] netlink_unicast+0x533/0x7d0 [ 766.554428][ T4522] ? netlink_attachskb+0x880/0x880 [ 766.559564][ T4522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 766.565861][ T4522] ? __phys_addr_symbol+0x2c/0x70 [ 766.570914][ T4522] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 766.576665][ T4522] ? __check_object_size+0x16e/0x850 [ 766.581987][ T4522] netlink_sendmsg+0x86d/0xda0 [ 766.586789][ T4522] ? netlink_unicast+0x7d0/0x7d0 [ 766.591768][ T4522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 766.598038][ T4522] ? netlink_unicast+0x7d0/0x7d0 [ 766.603008][ T4522] sock_sendmsg+0xcf/0x120 [ 766.607453][ T4522] ____sys_sendmsg+0x6e8/0x810 [ 766.612256][ T4522] ? kernel_sendmsg+0x50/0x50 [ 766.616984][ T4522] ? do_recvmmsg+0x6d0/0x6d0 [ 766.621634][ T4522] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 766.627644][ T4522] ? lock_chain_count+0x20/0x20 [ 766.632536][ T4522] ___sys_sendmsg+0xf3/0x170 [ 766.637242][ T4522] ? sendmsg_copy_msghdr+0x160/0x160 [ 766.642565][ T4522] ? __fget_files+0x21b/0x3e0 [ 766.647267][ T4522] ? lock_downgrade+0x6e0/0x6e0 [ 766.652164][ T4522] ? __fget_files+0x23d/0x3e0 [ 766.656926][ T4522] ? __fget_light+0xea/0x280 [ 766.661539][ T4522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 766.667815][ T4522] __sys_sendmsg+0xe5/0x1b0 [ 766.672440][ T4522] ? __sys_sendmsg_sock+0x30/0x30 [ 766.677516][ T4522] ? syscall_enter_from_user_mode+0x21/0x70 [ 766.683448][ T4522] do_syscall_64+0x35/0xb0 [ 766.687892][ T4522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.693806][ T4522] RIP: 0033:0x7f5d21f6fae9 [ 766.698239][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.717881][ T4522] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.726325][ T4522] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 766.734321][ T4522] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 766.742326][ T4522] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 766.750313][ T4522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.758302][ T4522] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 766.766314][ T4522] 06:11:54 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x4408, &(0x7f0000000000)={0x0, 0xeb7f, 0x0, 0x3, 0x3}) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 766.836771][ T4545] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 766.878503][ T4531] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 766.899720][ T4531] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 767.030017][ T4531] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 767.030017][ T4531] !' [ 767.051451][ T4531] CPU: 1 PID: 4531 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 767.061471][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.071653][ T4531] Call Trace: [ 767.074961][ T4531] [ 767.077886][ T4531] dump_stack_lvl+0xcd/0x134 [ 767.082477][ T4531] sysfs_warn_dup.cold+0x1c/0x29 [ 767.087410][ T4531] sysfs_do_create_link_sd+0x11e/0x140 [ 767.092865][ T4531] sysfs_create_link+0x5f/0xc0 [ 767.097626][ T4531] device_add+0x789/0x1ee0 [ 767.102074][ T4531] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.108335][ T4531] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 767.114570][ T4531] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 767.120805][ T4531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.127231][ T4531] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 767.133228][ T4531] wiphy_register+0x1e94/0x29b0 [ 767.138092][ T4531] ? wiphy_unregister+0xbf0/0xbf0 [ 767.143105][ T4531] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.149253][ T4531] ? wake_up_klogd.part.0+0x8e/0xd0 [ 767.154450][ T4531] ? rtnl_unlock+0x5/0x10 [ 767.158810][ T4531] ieee80211_register_hw+0x1f18/0x3ed0 [ 767.164276][ T4531] ? ieee80211_restart_hw+0x290/0x290 [ 767.169660][ T4531] ? __hrtimer_init+0x136/0x280 [ 767.174507][ T4531] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 767.180245][ T4531] ? hwsim_virtio_rx_work+0x350/0x350 [ 767.185602][ T4531] ? hwsim_new_radio_nl+0x992/0x1080 [ 767.190882][ T4531] ? memcpy+0x39/0x60 [ 767.194856][ T4531] hwsim_new_radio_nl+0x9bc/0x1080 [ 767.199966][ T4531] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 767.205858][ T4531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.212092][ T4531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 767.219455][ T4531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 767.226748][ T4531] genl_family_rcv_msg_doit+0x228/0x320 [ 767.232290][ T4531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 767.239653][ T4531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.245934][ T4531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.252166][ T4531] ? ns_capable+0xd9/0x100 [ 767.256586][ T4531] genl_rcv_msg+0x328/0x580 [ 767.261103][ T4531] ? genl_get_cmd+0x480/0x480 [ 767.265774][ T4531] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.271933][ T4531] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 767.277828][ T4531] netlink_rcv_skb+0x153/0x420 [ 767.282691][ T4531] ? genl_get_cmd+0x480/0x480 [ 767.287364][ T4531] ? netlink_ack+0xa60/0xa60 [ 767.292030][ T4531] ? netlink_deliver_tap+0x1b1/0xc30 [ 767.297309][ T4531] genl_rcv+0x24/0x40 [ 767.301286][ T4531] netlink_unicast+0x533/0x7d0 [ 767.306041][ T4531] ? netlink_attachskb+0x880/0x880 [ 767.311140][ T4531] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.317378][ T4531] ? __phys_addr_symbol+0x2c/0x70 [ 767.322500][ T4531] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 767.328217][ T4531] ? __check_object_size+0x16e/0x850 [ 767.333499][ T4531] netlink_sendmsg+0x86d/0xda0 [ 767.338258][ T4531] ? netlink_unicast+0x7d0/0x7d0 [ 767.343197][ T4531] ? sock_sendmsg+0x4b/0x120 [ 767.347799][ T4531] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 767.354211][ T4531] ? sock_sendmsg+0x65/0x120 [ 767.358790][ T4531] ? netlink_unicast+0x7d0/0x7d0 [ 767.363720][ T4531] sock_sendmsg+0xcf/0x120 [ 767.368148][ T4531] ____sys_sendmsg+0x6e8/0x810 [ 767.372928][ T4531] ? kernel_sendmsg+0x50/0x50 [ 767.377767][ T4531] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.383915][ T4531] ? ___sys_sendmsg+0xd2/0x170 [ 767.388678][ T4531] ? ___sys_sendmsg+0xdc/0x170 [ 767.393467][ T4531] ___sys_sendmsg+0xf3/0x170 [ 767.398051][ T4531] ? sendmsg_copy_msghdr+0x160/0x160 [ 767.403333][ T4531] ? __fget_files+0x21b/0x3e0 [ 767.408001][ T4531] ? lock_downgrade+0x6e0/0x6e0 [ 767.412844][ T4531] ? __fget_files+0x9f/0x3e0 [ 767.417788][ T4531] ? __fget_files+0x23d/0x3e0 [ 767.422465][ T4531] ? __fget_light+0xea/0x280 [ 767.427116][ T4531] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.433371][ T4531] __sys_sendmsg+0xe5/0x1b0 [ 767.437899][ T4531] ? __sys_sendmsg_sock+0x30/0x30 [ 767.443035][ T4531] ? syscall_enter_from_user_mode+0x21/0x70 [ 767.448930][ T4531] do_syscall_64+0x35/0xb0 [ 767.453360][ T4531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.459259][ T4531] RIP: 0033:0x7fc78cb95ae9 [ 767.463754][ T4531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.483369][ T4531] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.491880][ T4531] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 767.500201][ T4531] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 767.508164][ T4531] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 767.516817][ T4531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.524774][ T4531] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 767.532754][ T4531] 06:11:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340f000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xa00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20717, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:55 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x6394, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x110}) r2 = dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) bind$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @loopback, 0x800}}, 0x24) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x56000, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25810000004a000600ffffffffffff0000060066006700"], 0x30}, 0x1, 0x0, 0x0, 0x4048004}, 0x40880) 06:11:55 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000080)) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 767.735552][ T4576] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3410000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xb00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 767.803318][ T4581] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:11:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20718, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 767.859627][ T4581] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:11:55 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'nr0\x00', {}, 0x2ae5}) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 767.999726][ T4581] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 767.999726][ T4581] !' [ 768.045817][ T4581] CPU: 1 PID: 4581 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 768.055766][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.065861][ T4581] Call Trace: [ 768.069154][ T4581] [ 768.072104][ T4581] dump_stack_lvl+0xcd/0x134 [ 768.076730][ T4581] sysfs_warn_dup.cold+0x1c/0x29 [ 768.081699][ T4581] sysfs_do_create_link_sd+0x11e/0x140 [ 768.087196][ T4581] sysfs_create_link+0x5f/0xc0 [ 768.092090][ T4581] device_add+0x789/0x1ee0 [ 768.096547][ T4581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.102820][ T4581] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 768.109192][ T4581] wiphy_register+0x1e94/0x29b0 [ 768.114083][ T4581] ? wiphy_unregister+0xbf0/0xbf0 [ 768.119146][ T4581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.125326][ T4581] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 768.130990][ T4581] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 768.136659][ T4581] ieee80211_register_hw+0x1f18/0x3ed0 [ 768.142160][ T4581] ? ieee80211_restart_hw+0x290/0x290 [ 768.147577][ T4581] ? debug_object_destroy+0x210/0x210 [ 768.152982][ T4581] ? memset+0x20/0x40 [ 768.156984][ T4581] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.163336][ T4581] ? __hrtimer_init+0x136/0x280 [ 768.168210][ T4581] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 768.173974][ T4581] ? hwsim_virtio_rx_work+0x350/0x350 [ 768.179366][ T4581] ? hwsim_new_radio_nl+0x992/0x1080 [ 768.184676][ T4581] ? memcpy+0x39/0x60 [ 768.188716][ T4581] hwsim_new_radio_nl+0x9bc/0x1080 [ 768.193857][ T4581] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 768.199770][ T4581] ? lockdep_hardirqs_on+0x79/0x100 [ 768.205017][ T4581] genl_family_rcv_msg_doit+0x228/0x320 [ 768.210589][ T4581] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 768.217992][ T4581] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.224272][ T4581] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.230798][ T4581] ? ns_capable+0xd9/0x100 [ 768.235245][ T4581] genl_rcv_msg+0x328/0x580 [ 768.239776][ T4581] ? genl_get_cmd+0x480/0x480 [ 768.244476][ T4581] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 768.250405][ T4581] ? lock_release+0x720/0x720 [ 768.255193][ T4581] ? trace_hardirqs_on+0x38/0x1c0 [ 768.260331][ T4581] netlink_rcv_skb+0x153/0x420 [ 768.265121][ T4581] ? genl_get_cmd+0x480/0x480 [ 768.269826][ T4581] ? netlink_ack+0xa60/0xa60 [ 768.274449][ T4581] ? netlink_deliver_tap+0x1b1/0xc30 [ 768.279781][ T4581] genl_rcv+0x24/0x40 [ 768.284133][ T4581] netlink_unicast+0x533/0x7d0 [ 768.289102][ T4581] ? netlink_attachskb+0x880/0x880 [ 768.294264][ T4581] ? __check_object_size+0x16e/0x850 [ 768.299580][ T4581] ? netlink_sendmsg+0x7c6/0xda0 [ 768.304547][ T4581] netlink_sendmsg+0x86d/0xda0 [ 768.309520][ T4581] ? netlink_unicast+0x7d0/0x7d0 [ 768.314494][ T4581] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.321937][ T4581] ? netlink_unicast+0x7d0/0x7d0 [ 768.326919][ T4581] sock_sendmsg+0xcf/0x120 [ 768.331382][ T4581] ____sys_sendmsg+0x6e8/0x810 [ 768.336179][ T4581] ? kernel_sendmsg+0x50/0x50 [ 768.340875][ T4581] ? do_recvmmsg+0x6d0/0x6d0 [ 768.345530][ T4581] ___sys_sendmsg+0xf3/0x170 [ 768.350148][ T4581] ? sendmsg_copy_msghdr+0x160/0x160 [ 768.355470][ T4581] ? irqentry_enter+0x28/0x50 [ 768.360186][ T4581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.366368][ T4581] ? lockdep_hardirqs_on+0x79/0x100 [ 768.371595][ T4581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.377779][ T4581] ? sockfd_lookup_light+0x6d/0x180 [ 768.383011][ T4581] ? __sanitizer_cov_trace_pc+0x7/0x60 [ 768.388540][ T4581] __sys_sendmsg+0xe5/0x1b0 [ 768.393088][ T4581] ? __sys_sendmsg_sock+0x30/0x30 [ 768.398140][ T4581] ? lockdep_hardirqs_on+0x79/0x100 [ 768.403460][ T4581] ? trace_hardirqs_on+0x39/0x1c0 [ 768.408517][ T4581] ? syscall_enter_from_user_mode+0x2b/0x70 [ 768.414447][ T4581] do_syscall_64+0x35/0xb0 [ 768.418890][ T4581] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.424802][ T4581] RIP: 0033:0x7f5d21f6fae9 [ 768.429243][ T4581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.449044][ T4581] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.457488][ T4581] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 768.465576][ T4581] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 768.473589][ T4581] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 768.481576][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.489568][ T4581] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 06:11:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3411000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 768.497587][ T4581] [ 768.609383][ T4601] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 768.651690][ T4590] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 768.673500][ T4590] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 768.780880][ T4590] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 768.780880][ T4590] !' [ 768.798488][ T4590] CPU: 1 PID: 4590 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 768.808527][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.818605][ T4590] Call Trace: [ 768.821905][ T4590] [ 768.824847][ T4590] dump_stack_lvl+0xcd/0x134 [ 768.829468][ T4590] sysfs_warn_dup.cold+0x1c/0x29 [ 768.834438][ T4590] sysfs_do_create_link_sd+0x11e/0x140 [ 768.839934][ T4590] sysfs_create_link+0x5f/0xc0 [ 768.844734][ T4590] device_add+0x789/0x1ee0 [ 768.849189][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.855374][ T4590] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 768.861644][ T4590] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 768.867651][ T4590] ? wiphy_register+0x1e8c/0x29b0 [ 768.872705][ T4590] wiphy_register+0x1e94/0x29b0 [ 768.877591][ T4590] ? wiphy_unregister+0xbf0/0xbf0 [ 768.882652][ T4590] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 768.888751][ T4590] ieee80211_register_hw+0x1f18/0x3ed0 [ 768.894253][ T4590] ? ieee80211_restart_hw+0x290/0x290 [ 768.899662][ T4590] ? __sanitizer_cov_trace_pc+0x7/0x60 [ 768.905161][ T4590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.911427][ T4590] ? __hrtimer_init+0x136/0x280 [ 768.916307][ T4590] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 768.922071][ T4590] ? hwsim_virtio_rx_work+0x350/0x350 [ 768.927461][ T4590] ? hwsim_new_radio_nl+0x992/0x1080 [ 768.932771][ T4590] ? memcpy+0x39/0x60 [ 768.936953][ T4590] hwsim_new_radio_nl+0x9bc/0x1080 [ 768.942094][ T4590] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 768.948068][ T4590] ? lockdep_hardirqs_on+0x79/0x100 [ 768.953400][ T4590] ? genl_family_rcv_msg_doit+0xec/0x320 [ 768.959061][ T4590] ? genl_family_rcv_msg_doit+0xfe/0x320 [ 768.964722][ T4590] genl_family_rcv_msg_doit+0x228/0x320 [ 768.970308][ T4590] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 768.977714][ T4590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.984004][ T4590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 768.990451][ T4590] ? ns_capable+0xd9/0x100 [ 768.994900][ T4590] genl_rcv_msg+0x328/0x580 [ 768.999432][ T4590] ? genl_get_cmd+0x480/0x480 [ 769.004134][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.010318][ T4590] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 769.016253][ T4590] netlink_rcv_skb+0x153/0x420 [ 769.021042][ T4590] ? genl_get_cmd+0x480/0x480 [ 769.025744][ T4590] ? netlink_ack+0xa60/0xa60 [ 769.030365][ T4590] ? netlink_deliver_tap+0x1b1/0xc30 [ 769.035676][ T4590] genl_rcv+0x24/0x40 [ 769.039689][ T4590] netlink_unicast+0x533/0x7d0 [ 769.044479][ T4590] ? netlink_attachskb+0x880/0x880 [ 769.049617][ T4590] ? bpf_lsm_sem_semop+0x10/0x10 [ 769.054599][ T4590] netlink_sendmsg+0x86d/0xda0 [ 769.059391][ T4590] ? netlink_unicast+0x7d0/0x7d0 [ 769.064353][ T4590] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 769.070793][ T4590] ? security_socket_sendmsg+0x66/0xb0 [ 769.076282][ T4590] ? security_socket_sendmsg+0x76/0xb0 [ 769.081855][ T4590] ? netlink_unicast+0x7d0/0x7d0 [ 769.086812][ T4590] sock_sendmsg+0xcf/0x120 [ 769.091257][ T4590] ____sys_sendmsg+0x6e8/0x810 [ 769.096049][ T4590] ? kernel_sendmsg+0x50/0x50 [ 769.100757][ T4590] ? do_recvmmsg+0x6d0/0x6d0 [ 769.105368][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.111810][ T4590] ? lockdep_hardirqs_on+0x79/0x100 [ 769.117028][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.123215][ T4590] ___sys_sendmsg+0xf3/0x170 [ 769.127838][ T4590] ? sendmsg_copy_msghdr+0x160/0x160 [ 769.133161][ T4590] ? irqentry_enter+0x28/0x50 [ 769.137870][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.144051][ T4590] ? lockdep_hardirqs_on+0x79/0x100 [ 769.149285][ T4590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.155472][ T4590] ? sockfd_lookup_light+0x6d/0x180 [ 769.160707][ T4590] ? sockfd_lookup_light+0xd8/0x180 [ 769.165932][ T4590] ? sockfd_lookup_light+0xfd/0x180 [ 769.171162][ T4590] __sys_sendmsg+0xe5/0x1b0 [ 769.175696][ T4590] ? __sys_sendmsg_sock+0x30/0x30 [ 769.180795][ T4590] ? syscall_enter_from_user_mode+0x21/0x70 [ 769.186722][ T4590] do_syscall_64+0x35/0xb0 [ 769.191165][ T4590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.197082][ T4590] RIP: 0033:0x7fc78cb95ae9 [ 769.201540][ T4590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.221175][ T4590] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.229733][ T4590] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 769.237725][ T4590] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 769.245712][ T4590] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 769.253705][ T4590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.261725][ T4590] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 769.269739][ T4590] 06:11:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r8, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) utimensat(r8, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000000)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 06:11:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xc00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4`\x00\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20719, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:56 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) r2 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x0, 0x0, 0xad, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xff, 0x2, 0x0, 0x8, 0x0, 0x0, 0x8000000}, r2, 0x7, 0xffffffffffffffff, 0x2) ptrace$peeksig(0x4209, r2, &(0x7f0000000040)={0x1, 0x1, 0x8}, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_setup(0x7615, &(0x7f0000000280)={0x0, 0x2a92, 0x1, 0x2, 0x1b9}, &(0x7f0000ee6000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r8, r5, &(0x7f00000007c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8a3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r9}}, 0x7) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r6, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r6, r7, 0x80000) kcmp(0xffffffffffffffff, r2, 0x0, r3, r6) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34f0000024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 769.640582][ T4641] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xd00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:57 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x2942, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000001180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfe) r6 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r6, 0x688c, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001140)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {0x0, r6}, 0x9, 0x2, 0x0, {0x0, r7, r8}}, 0x1000) r9 = socket$caif_stream(0x25, 0x1, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000010c0)=@IORING_OP_SEND={0x1a, 0x6519a25ba9b0ab21, 0x0, r9, 0x0, &(0x7f00000000c0)="bc948fc4ea0880d06e9d7b3378005c334ebe0a41ba1b701a9bfe764c2e0c68dd45226e77dcb64acde8f301d9d26e5b0c3552e03581e5df3e0e4d1ccb1ba4b25c05f2c4e7e57366748ea1fa103e44d2b8a7b2d24e589f7986ebb9c964ae21c0132aff460af5f9e994ff42eda158b50a25a5d35fe1ff9d8c9ab5862f03fd5d9e8699b355c98011df9e6f12b7c67d015844fb67b5b80ab5e312330a606e4dd4979b2f4ad597ec9d494ae257bb7a1a82c4495405298efc21ce3fb4e520edebc01c5a0eba854bd69a28e000ece4182a895bb22d7334c32c5abc26bcf858354ee363c3b5195764a6b00b9561fda115d3edb15ebe127f6859c7728e0f9d13a90b3748fbdf066c1543109ad41b10f6ca6d11db92d66cad5dd111a9ba972bb024ad5bfdf5534265780df29cdbeb1f8eef4c6950635f74f1f5bc9f2af5541d614cf75660bb611261c6ec991ee775cf5265be2d35c350a9973e28118b704f55184daeccb034ad95af59ee676772bea01a03d5bfed0709f9a5a66782fd2766582a0647aed4814281d48aa5deabb00090fe811827784b73b542728acf2c07ab20cc43aaebcd89157cea244245e7d433e18acf3d096ea0e3e21c5b239a2392fd130f96d2e07296aac4b6e483bff00ce0f43b2e720ad25fb2e4ce18166452f554d76f0ec18ecb5ecb7d69e4854b9d34eb6dfeef81485dcb473607e281b24e53586ede5b57c735f0fe228ec382ef36d0a16bd3ba7abe88a359747e4ae36ec897a2428bbbcf956a93f8a3d8ad88093c14a35299299c195abb7e30f2c11753d02657fecb2e57bbdc613dd1c52e2fead7916998f29ee64fabbbd54e236cf4a49fd252c3adee67e6ebf158df6e8147a8e1f90dca88914e0bfffef3b7d769755f81027134ed490f3e9c322a7870815db150e61a6731fc74a2bb09d323b7566f841db9fd1d5b1926ca847e3e389d27e5f143bba8a6310a877da3743ce7ca43c4bcccd38dfc4638f0fd1d99a029ec12550c2e23d5ebb4684cdd0618690aa6b6820f5aa69310f8388c11916c1308ae4e2af502c2070b9ded0f1ad2c7c58136739a695dd13f4bdc4bc418e48d151dcef37fcafc31ab13e8f8de1c1089f528b18be4502feab5c158be7a9618965edec055e50c4fc883865bb6452a4898062d670408442ff90dfc88e70dffdd0fd4d595987123e93123f8149e1c081a9a74bc3a1ef5a178e62f7d41fed52e4b8bc24264677c8f78bae3488e1a004379c25e053d4092f0637825beef35ed4b0053415930e55c123b6c21ff2439b25fa1fca71c6e2c2087a7a4037cb42953d55e1c1b35eaa3ef8d6b92884f821a475b8dd427d576c53871619310c1f3dfd738b1510aeb41b9aa2b2e8a74a8001cf8de05269245d053945333957c00f2fc16205e499a3e944b952dbf5b3691911060045c0522557a391d56fcaee3d44f48d8dca4e843b0a579b9823d91b2ca1b195532b8c76f3278f18da35dfa44baa9bad951b2bb4eac0d344ad55d10dff1f0cac94df6cb7b2cf7d6b93801a3a0f2941c44118813166f12ec4fa5791b670cec0a306aca2546dbb8164abf77419f01546c6651f819bd0380bc0e2b7119510237bbbc5dd2a500418d47d545261afc6f045db06ad6726536b3c649cf0506cbbee78b4f47067f84331a48382c39926bed2d7bf58ec1dece6c4a9d17f719113cf61a9a79fe91346a3fa1de478f60be56363de901324de6b49657be6e1a6b6f5e985341ead737a408e254b7182c2e9fbf61f1105a95102f9f03c62d05e4394efcaefc669fd129326d519404d0b2e7bd7892abb7dae4829a3dbf7d602a6111a55414dfd7c57c51e0d00ef36a358556cb8ef9020c1772cb58f05c45cefebcc732e5f922f597e0691cc5f4628f44a57bf020d82a7cdc5ab909d3297a21ccbbfa09af3ee0a43717d84e944ce3ac55ad77b9674458b02214f8e04214cf38e047f1225588f9328876dbee416e8e640d3e1627dbaac0b252d4f33083c0967253250ea9a157254a88f803dd9fcd3bbb0a79c9130354a6f48a2c57db5419cc8c6b225e5c8a808b4a831029369b088b3f3f8fde488e7ef4f0c9c5895376cfa61e6ec04a4307e4503d2d7af4acecf2d6eaafd193902d4dce408deb2b78fe39c7b1ca5499509fe39ba370fb91b84c0d30e7b5ad893dcab0d74f3cfeed446857f584913c456f0cfaacf21368b9aa70b485b5d18bf5216748f3b60f77cd5ccb12c89e966410ca738e15faea1c985e9ec0b0d92131514332d8f53916f629035a5a3ff7bd0400b181b2e88b81395fdb5f4e639878c969ddddfe86b981db001cfe3ac59d2f933e2a83825dade3dbdb6813ba065ddb3d4135dcff42d3833a32299a4fa3d93a6a4ef519cb7589ff499f6f5c7b9750aa55c8ae9c36746a5b100c194db1b98b6184943020ef5ed75f55519eb70c2f174be364fe5edfecf29b7c2ae6391bc59a6bb1a8304ac53ab04d9b6a8a9503167c6394db46b20c4101a804ec5ae29fb820bab5d85f4f15d81d87946aafac188200dd03e6053dcd5e913132da602496ab47dfcebec534e54b514ecd3258840a363d14f2fa9ba54ae4ad25604e6e41c872f3d03cfa54babb8ade8e471cd63f20cae1cac503cf2c649e6f8ffb4c386165eeb5be5b804ef12f3e950b3f299655ef5e10aaa4c178442c69c37004d49d9bdcaf8dfa896ebef1bcd64c36d3bcd02bf2a5fa23855ecc23858e751fae34cbc45889041aa270272ffff5dab3ed56f71efcdee77eb65a6fce444851e4b9527399d79c630ca55e78ec7cdaac81345fa165315e0e39d93dfb7478a081eb583693b28744105e3d05b98658117469766a6c55c780d3d881d884da0b778d8541cbee4a2b756aa1713e7c9ed857c9faabe18c271e5bc39983c8dbb3f60a6349df70bfc979a4ee223c607185c917e1a15b687668b0d5ead6bd174c4428d51417d820a8282a28a4fd5e36027ff68811281a0c3b6118b222c463cd27a189fb17cab9bf1a1006d194356315a2b3c7080e6b21b39946924ca36347984bffc97f7b93f98491ed4a74ef4cf013ce73f01f7c2c29af445120928018efabd606e573e6c3033087e3f4903c5e334fd15b38807892b80dd28c7432aa366ce6a3ff24390bd0dcf0b1515ef49beb7f68dc21b6cfca8a4495b2c1fc6f142c76823b7773365c8882515edc2bce8da27703c07dd226835cc6c0494eb9e4204d9f73e2b9c92b95af9ba005bbf8a0ba3e2777f250509577d625b02869e17b20bf6a20dab31342b2da07c52e3ee1a9bd482eb4e8cb12cd6ab89b7d27cbf990f0d1863abf5071bbb25ecb41a1912e4a409b7fed61127ed923af8162b5ab3ea78c38d8a5e80fc1f831151574efda19386cd79dc21c3d7aa783ab34696c339206af981b685270115839404681d72ff1d92c72210dcc304a1bcd48c552089b238788e1478cb918579e44dd7b98f00dc41362bd1344669190c4022de0da6fa8add55a0162037c36f9a81073def16f377b2af005b7bad7d33eba444afa7346a1af6e9f40acf7ac098a7a3fce5fe1308e70896a9e9b3474f84dc06c2f44527c508125f113004426460b474532909285a2d7bdfec3bec7a2e1aea3de820692be029adf1f709896453699a1793029984aff054587c61ee30d578ebfc4e739a82b5f9cf0e296852928616b93b8c2ef2f30ae1009ef2dd640c01761e62428c9389769110223c27404c86d8a0c5f647b6face121a948fe775543c1668bf2ddf7a19c0d36ddd2f09f78761347ddf1621bf432e5d78029ebf88cee1b87f3fa94a9bcea8805dcb0e9896e51f5065e32a5696e7a33c4c884e617490bb0a168c65eeab6f908c0e6d8c58b3ae5f08da78ebbecfaea7579420bbe1605b6433e08143226773701841e8d389e02b9a152b94d3dcf8c6190159fba8f537b6b9c2807a6697da4325120f1a25a4a723a5a6c33836f5fcc3670e0bd842563d2a05fc784d9fe3f631ffad582f46ba961c6c71bb974bb73b8e41df636cb9ed875b7fc06632cbdc5db5a466f1a72fe48595a808dea4846389784562e2a925a9946a7fb87eff07f83397de99331578fa0b8fa8943f695c0c9cef3900acc404a396754180201e28415a3d88e5d4269b31e510857041965faa225df7eb7f32500a4884488e0b1968ce043c02b75c852b025b7dd5fd73951c6d64b4e19d3467830d7eb80d0cf290eb3081e1ab9da51015d8c0059cda9d27edbd3d99112402cbd7587a87860971053c325592d7d7c29da27276875c89c78485ab4fea729dbb090af456a3304bc2001138fd72885179e81021b0d93c23a6ce522016eb1f76482afb59eb103ca1e6e61634acf74e3463bbee729df089908d7f8b8efae9b9a24c688ab25813404815f046e2eb959948c96767796847e427645328b9ff669cbcfd9b90d32bd52a840f9198c99b5e7057b203d929fc08cb342cc21811209dc55a792f41556439aa82c22799b5388d08d6f293dd8e07f9dedba7b310b1d5fa3ded4e50887962ba89717c8009ea2cd857b6e9a8aab2acce9af1c997486bb10f2d03564f628f0e5cf3e45fc621afe6eb45f1bf708ed34a0580adc2e8e8a23b4003c62234f78b3cfc2bf589caf757c70e7c7f0131d5deefdbbbf3e88736fb7573e05fea514d3b41684fcbc970df1179e87ac058b9a1a1d975f3a62eec66a81090aec4d9c85994c27be352a01cbcfd8fa7671dd3d473af083a19171ac2a4e5e3545ee2552fad4ece02247a11c091e3026b01fb9b2fe26aedf2387bdce9dd3fa8f496f334725caf30121a64a1daeb02fd24789bd7133047f6c17bedcc4697959cf26c8c30045a0653f2053381ccb61e43203b1d79bfd9e771c0ab562a1ddec5337a5c7c43bc7164e987ba351e739f7e777a512f946e351e1f1ac35815f0f39362623b3a500f424f1d2c8709f0d18f7bf39f986028cf397e1eb6f1235dbbc2be9f2febe2c5b41425489b85a0bbfb2a32efc435d7eccd66ec9bc27c6d8bd96519b5cee9ebb1613c1e532869b71d51453b37783b3cd50553a8b91755b360e5de43c65b85af37ebb72059e682e6371a2ce899bc2e53d4efa119aa5f46707a8dc9ea8690db79e9bb3cfe368e438a2c56f4fa78bb3c1170079223d62a8bfc0ea77be1dd74f8bd04a624490e1e3dfa7bfe12cab2214610eb44941d887c35c132f3fb01ee1c9ac0c6c27d1b58336352c3d28b348cdb36d0481e76f806ed9282b30d4ba107fcc28775f46231fac218b1567100ba6adcb315d3ab35e9bccdaf2e98472d9ed514375ebb353150e3399ed2e9beca8ef1e2c9fd3e39393e57e850a3dc08e2b009b8ea018f6a249da7b939c35af760fb3b9806ee8693422c1f27773d63dcbd003d1da174386546d9972533e8fd95c381f20d85c3845c13e8ecee2a334e55bd064a548b918c37946205acfbb5898295c52f1c5d351fc6bf0125da9445df2fbc5828ad725088dc7ade15c644d03b71e590f9031fdcabbf8a2cd9e2822c0153527a6e590b1672cd32d38c25e6556cddc8f5da48455166a647fdcf01b45ce6d296336b60f61fe934e956896bcee5ddefe17aa9552a7e954a717555614a8e2568b86e98ebcd9bfff56d44fa2b57a45354f05e1c09f86db7686f5024233de5ab33b0b9bf01dff788304a65fbc72240f9834a2ab34db00e71fb7d38126f175b19815457815e7ef9f1984f8d305d2be270822735d044c663c16941a66e431f63d129bca46588144a9b08082ba3d96c85a0f34b247a9e4d45d26d7355e46a7d59e9e13935f42d47e5d2d6ab310563e81b04ddd1a095d2c4a460b5a5a318f6d059614c3124e50b0", 0x1000, 0x10}, 0x3) r10 = io_uring_setup(0x5174, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) dup3(r0, r10, 0x0) io_uring_enter(r10, 0x3b6a, 0x5ddb, 0x3, &(0x7f0000000080)={[0x9]}, 0x8) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071a, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 769.787987][ T4654] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 769.826982][ T4654] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:11:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400030024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 769.985868][ T4654] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 769.985868][ T4654] !' [ 770.023082][ T4654] CPU: 1 PID: 4654 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 770.033016][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.043102][ T4654] Call Trace: [ 770.046393][ T4654] [ 770.049333][ T4654] dump_stack_lvl+0xcd/0x134 [ 770.053954][ T4654] sysfs_warn_dup.cold+0x1c/0x29 [ 770.058923][ T4654] sysfs_do_create_link_sd+0x11e/0x140 [ 770.064593][ T4654] sysfs_create_link+0x5f/0xc0 [ 770.069392][ T4654] device_add+0x789/0x1ee0 [ 770.073843][ T4654] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.080025][ T4654] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 770.086309][ T4654] wiphy_register+0x1e94/0x29b0 [ 770.091194][ T4654] ? wiphy_unregister+0xbf0/0xbf0 [ 770.096235][ T4654] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.102423][ T4654] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 770.108097][ T4654] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 770.113755][ T4654] ieee80211_register_hw+0x1f18/0x3ed0 [ 770.119610][ T4654] ? ieee80211_restart_hw+0x290/0x290 [ 770.125016][ T4654] ? debug_object_destroy+0x210/0x210 [ 770.130422][ T4654] ? memset+0x20/0x40 [ 770.134433][ T4654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 770.140703][ T4654] ? __hrtimer_init+0x136/0x280 [ 770.145580][ T4654] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 770.151362][ T4654] ? hwsim_virtio_rx_work+0x350/0x350 [ 770.156747][ T4654] ? hwsim_new_radio_nl+0x992/0x1080 [ 770.162058][ T4654] ? memcpy+0x39/0x60 [ 770.166158][ T4654] hwsim_new_radio_nl+0x9bc/0x1080 [ 770.171301][ T4654] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x173/0x290 [ 770.178708][ T4654] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 770.184644][ T4654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 770.190952][ T4654] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 770.198370][ T4654] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 770.205705][ T4654] genl_family_rcv_msg_doit+0x228/0x320 [ 770.211280][ T4654] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 770.218684][ T4654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 770.224970][ T4654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 770.231240][ T4654] ? ns_capable+0xd9/0x100 [ 770.235694][ T4654] genl_rcv_msg+0x328/0x580 [ 770.240233][ T4654] ? genl_get_cmd+0x480/0x480 [ 770.244930][ T4654] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 770.250854][ T4654] ? lock_release+0x720/0x720 [ 770.255563][ T4654] netlink_rcv_skb+0x153/0x420 [ 770.260368][ T4654] ? genl_get_cmd+0x480/0x480 [ 770.265164][ T4654] ? netlink_ack+0xa60/0xa60 [ 770.269794][ T4654] ? netlink_deliver_tap+0x1b1/0xc30 [ 770.275111][ T4654] genl_rcv+0x24/0x40 [ 770.279124][ T4654] netlink_unicast+0x533/0x7d0 [ 770.284000][ T4654] ? netlink_attachskb+0x880/0x880 [ 770.289139][ T4654] ? netlink_sendmsg+0x7e3/0xda0 [ 770.294121][ T4654] netlink_sendmsg+0x86d/0xda0 [ 770.298926][ T4654] ? netlink_unicast+0x7d0/0x7d0 [ 770.303914][ T4654] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 770.310205][ T4654] ? netlink_unicast+0x7d0/0x7d0 [ 770.315179][ T4654] sock_sendmsg+0xcf/0x120 [ 770.319623][ T4654] ____sys_sendmsg+0x6e8/0x810 [ 770.324417][ T4654] ? kernel_sendmsg+0x50/0x50 [ 770.329115][ T4654] ? do_recvmmsg+0x6d0/0x6d0 [ 770.333745][ T4654] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 770.339836][ T4654] ? lock_chain_count+0x20/0x20 [ 770.344730][ T4654] ___sys_sendmsg+0xf3/0x170 [ 770.349350][ T4654] ? sendmsg_copy_msghdr+0x160/0x160 [ 770.354676][ T4654] ? __fget_files+0x21b/0x3e0 [ 770.359385][ T4654] ? irqentry_enter+0x28/0x50 [ 770.364100][ T4654] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.370280][ T4654] ? lockdep_hardirqs_on+0x79/0x100 [ 770.375526][ T4654] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.381715][ T4654] ? sockfd_lookup_light+0x6d/0x180 [ 770.386954][ T4654] __sys_sendmsg+0xe5/0x1b0 [ 770.391489][ T4654] ? __sys_sendmsg_sock+0x30/0x30 [ 770.396568][ T4654] ? syscall_enter_from_user_mode+0x21/0x70 [ 770.402504][ T4654] do_syscall_64+0x35/0xb0 [ 770.406948][ T4654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.412867][ T4654] RIP: 0033:0x7f5d21f6fae9 [ 770.417294][ T4654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.436918][ T4654] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.445360][ T4654] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 770.453355][ T4654] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 770.461350][ T4654] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 770.469343][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.477360][ T4654] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 770.485374][ T4654] 06:11:58 executing program 4: fchmod(0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x2, 0x8, 0x40000, 0xfffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x842b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xed) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x88400, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x400, 0x5, 0x6, 0x2, 0x5, 0x0, 0x1, 0x0, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x861ec000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x2, 0x0, 0xf080, 0x3}, 0x100) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, 0x0) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0xfc30) 06:11:58 executing program 3: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/229, 0xe5}], 0x1, &(0x7f0000000240)=""/44, 0x2c}, 0x100) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) r3 = dup3(r1, r2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000002c0)={r1, 0x3f, 0x9e8, 0xd501}) 06:11:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34e8030024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400050024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x2b4, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1}) dup3(r0, r1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$rxrpc(0x21, 0x2, 0xa) io_uring_setup(0x45cf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10002a1}) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r9 = dup3(r4, r5, 0x80000) bind$rxrpc(r9, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) shutdown(r9, 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0x4) [ 771.132166][ T4677] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:11:58 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd4', 0x460000, 0x31) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000002c0)="6426f30fc7fb2e660f6f96416bd9e0f23ef0f65316f2adbaf80c66b8bc3e6c81670f4ac4bafc0cb0faeebad004b0002e0fbb9e0f000f8ac5a20f01b200b0", 0x3e}], 0x1, 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000140), 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001d0000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = signalfd4(r5, &(0x7f0000000040)={[0x4]}, 0x8, 0x80800) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000053000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="262664660fdc02660fc69d00000ebaf80c66b8c07e638266efbafc0c66b8d400000066ef0f20e06635000040000f22e0ba4000ec260f320f21380f353ed320319d78c2", 0x43}], 0x1, 0x11, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:11:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400060024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @private2, 0x1f}}, 0x24) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071b, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:11:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xe00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:11:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\a\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:11:58 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:11:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf00, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 771.382052][ T4727] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 771.447571][ T4728] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:11:59 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'btrfs.', '@\\!#(\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r1, r2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 771.522467][ T4728] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:11:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071c, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 771.627968][ T4728] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 771.627968][ T4728] !' [ 771.650752][ T4728] CPU: 1 PID: 4728 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 771.660700][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.670780][ T4728] Call Trace: [ 771.674076][ T4728] 06:11:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\t\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 771.677019][ T4728] dump_stack_lvl+0xcd/0x134 [ 771.681639][ T4728] sysfs_warn_dup.cold+0x1c/0x29 [ 771.686619][ T4728] sysfs_do_create_link_sd+0x11e/0x140 [ 771.692113][ T4728] sysfs_create_link+0x5f/0xc0 [ 771.696908][ T4728] device_add+0x789/0x1ee0 [ 771.701351][ T4728] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 771.707535][ T4728] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 771.713819][ T4728] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 771.719827][ T4728] ? wiphy_register+0x1e8c/0x29b0 [ 771.724900][ T4728] wiphy_register+0x1e94/0x29b0 [ 771.729806][ T4728] ? wiphy_unregister+0xbf0/0xbf0 [ 771.734851][ T4728] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 771.741040][ T4728] ? ieee80211_register_hw+0x1bed/0x3ed0 [ 771.746708][ T4728] ieee80211_register_hw+0x1f18/0x3ed0 [ 771.752221][ T4728] ? ieee80211_restart_hw+0x290/0x290 [ 771.757618][ T4728] ? debug_object_destroy+0x210/0x210 [ 771.763021][ T4728] ? memset+0x20/0x40 [ 771.767017][ T4728] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.773290][ T4728] ? __hrtimer_init+0x136/0x280 [ 771.778261][ T4728] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 771.784022][ T4728] ? hwsim_virtio_rx_work+0x350/0x350 [ 771.789407][ T4728] ? hwsim_new_radio_nl+0x992/0x1080 [ 771.794711][ T4728] ? memcpy+0x39/0x60 [ 771.798726][ T4728] hwsim_new_radio_nl+0x9bc/0x1080 [ 771.803864][ T4728] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 771.809849][ T4728] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.816105][ T4728] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 771.823514][ T4728] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 771.830823][ T4728] genl_family_rcv_msg_doit+0x228/0x320 [ 771.836388][ T4728] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 771.843785][ T4728] ? lockdep_hardirqs_on+0x79/0x100 [ 771.849009][ T4728] ? genl_rcv_msg+0x2f9/0x580 [ 771.853711][ T4728] genl_rcv_msg+0x328/0x580 [ 771.858236][ T4728] ? genl_get_cmd+0x480/0x480 [ 771.862926][ T4728] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 771.868847][ T4728] ? lock_release+0x720/0x720 [ 771.873540][ T4728] ? lockdep_hardirqs_on+0x79/0x100 [ 771.878763][ T4728] netlink_rcv_skb+0x153/0x420 [ 771.883550][ T4728] ? genl_get_cmd+0x480/0x480 [ 771.888257][ T4728] ? netlink_ack+0xa60/0xa60 [ 771.892865][ T4728] ? netlink_deliver_tap+0x1b1/0xc30 [ 771.898168][ T4728] genl_rcv+0x24/0x40 [ 771.902157][ T4728] netlink_unicast+0x533/0x7d0 [ 771.906950][ T4728] ? netlink_attachskb+0x880/0x880 [ 771.912172][ T4728] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 771.918432][ T4728] ? __phys_addr_symbol+0x2c/0x70 [ 771.923481][ T4728] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 771.929212][ T4728] ? __check_object_size+0x16e/0x850 [ 771.934519][ T4728] netlink_sendmsg+0x86d/0xda0 [ 771.939307][ T4728] ? netlink_unicast+0x7d0/0x7d0 [ 771.944337][ T4728] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 771.950768][ T4728] ? security_socket_sendmsg+0x33/0xb0 [ 771.956246][ T4728] ? security_socket_sendmsg+0x42/0xb0 [ 771.961729][ T4728] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.968079][ T4728] ? netlink_unicast+0x7d0/0x7d0 [ 771.973041][ T4728] sock_sendmsg+0xcf/0x120 [ 771.977485][ T4728] ____sys_sendmsg+0x6e8/0x810 [ 771.982293][ T4728] ? kernel_sendmsg+0x50/0x50 [ 771.986993][ T4728] ? do_recvmmsg+0x6d0/0x6d0 [ 771.991643][ T4728] ? lock_chain_count+0x20/0x20 [ 771.996524][ T4728] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 772.002518][ T4728] ? sched_core_balance+0xa30/0xa30 [ 772.007741][ T4728] ___sys_sendmsg+0xf3/0x170 [ 772.012348][ T4728] ? sendmsg_copy_msghdr+0x160/0x160 [ 772.017656][ T4728] ? __fget_files+0x21b/0x3e0 [ 772.022345][ T4728] ? lock_downgrade+0x6e0/0x6e0 [ 772.027229][ T4728] ? __fget_files+0x23d/0x3e0 [ 772.031934][ T4728] ? __fget_light+0xea/0x280 [ 772.036538][ T4728] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 772.042829][ T4728] __sys_sendmsg+0xe5/0x1b0 [ 772.047356][ T4728] ? __sys_sendmsg_sock+0x30/0x30 [ 772.052399][ T4728] ? lockdep_hardirqs_on+0x79/0x100 [ 772.057621][ T4728] ? trace_hardirqs_on+0x39/0x1c0 [ 772.062670][ T4728] ? syscall_enter_from_user_mode+0x2b/0x70 [ 772.068612][ T4728] do_syscall_64+0x35/0xb0 [ 772.073046][ T4728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.078953][ T4728] RIP: 0033:0x7f5d21f6fae9 [ 772.083401][ T4728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.103020][ T4728] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.111448][ T4728] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 772.119426][ T4728] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 772.127402][ T4728] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 772.135394][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.143372][ T4728] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 772.151372][ T4728] [ 772.235120][ T4750] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 772.599655][ T4768] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 772.620576][ T4768] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 772.709451][ T4768] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 772.709451][ T4768] !' [ 772.740749][ T4768] CPU: 1 PID: 4768 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 772.750702][ T4768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.760997][ T4768] Call Trace: [ 772.764295][ T4768] [ 772.767245][ T4768] dump_stack_lvl+0xcd/0x134 [ 772.771863][ T4768] sysfs_warn_dup.cold+0x1c/0x29 [ 772.776832][ T4768] sysfs_do_create_link_sd+0x11e/0x140 [ 772.782332][ T4768] sysfs_create_link+0x5f/0xc0 [ 772.787137][ T4768] device_add+0x789/0x1ee0 [ 772.791592][ T4768] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 772.797867][ T4768] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 772.804138][ T4768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 772.810406][ T4768] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 772.816634][ T4768] wiphy_register+0x1e94/0x29b0 [ 772.821657][ T4768] ? wiphy_unregister+0xbf0/0xbf0 [ 772.826725][ T4768] ? minstrel_ht_alloc+0x52c/0xa10 [ 772.831875][ T4768] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 772.837977][ T4768] ieee80211_register_hw+0x1f18/0x3ed0 [ 772.843478][ T4768] ? ieee80211_restart_hw+0x290/0x290 [ 772.848875][ T4768] ? debug_object_destroy+0x210/0x210 [ 772.854272][ T4768] ? memset+0x20/0x40 [ 772.858270][ T4768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 772.864533][ T4768] ? __hrtimer_init+0x136/0x280 [ 772.869433][ T4768] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 772.875190][ T4768] ? hwsim_virtio_rx_work+0x350/0x350 [ 772.880581][ T4768] ? hwsim_new_radio_nl+0x992/0x1080 [ 772.885881][ T4768] ? memcpy+0x39/0x60 [ 772.889885][ T4768] hwsim_new_radio_nl+0x9bc/0x1080 [ 772.895039][ T4768] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 772.900967][ T4768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 772.907234][ T4768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 772.914621][ T4768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 772.921931][ T4768] genl_family_rcv_msg_doit+0x228/0x320 [ 772.927573][ T4768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 772.934969][ T4768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 772.941242][ T4768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 772.947530][ T4768] ? ns_capable+0xd9/0x100 [ 772.951964][ T4768] genl_rcv_msg+0x328/0x580 [ 772.956492][ T4768] ? genl_get_cmd+0x480/0x480 [ 772.961181][ T4768] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 772.967096][ T4768] ? lock_release+0x720/0x720 [ 772.971794][ T4768] netlink_rcv_skb+0x153/0x420 [ 772.976664][ T4768] ? genl_get_cmd+0x480/0x480 [ 772.981360][ T4768] ? netlink_ack+0xa60/0xa60 [ 772.985975][ T4768] ? netlink_deliver_tap+0x1b1/0xc30 [ 772.991285][ T4768] genl_rcv+0x24/0x40 [ 772.995277][ T4768] netlink_unicast+0x533/0x7d0 [ 773.000060][ T4768] ? netlink_attachskb+0x880/0x880 [ 773.005188][ T4768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 773.011475][ T4768] ? __phys_addr_symbol+0x2c/0x70 [ 773.016529][ T4768] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 773.022260][ T4768] ? __check_object_size+0x16e/0x850 [ 773.027660][ T4768] netlink_sendmsg+0x86d/0xda0 [ 773.032471][ T4768] ? netlink_unicast+0x7d0/0x7d0 [ 773.037449][ T4768] ? netlink_unicast+0x7d0/0x7d0 [ 773.042399][ T4768] sock_sendmsg+0xcf/0x120 [ 773.046836][ T4768] ____sys_sendmsg+0x6e8/0x810 [ 773.051620][ T4768] ? kernel_sendmsg+0x50/0x50 [ 773.056315][ T4768] ? do_recvmmsg+0x6d0/0x6d0 [ 773.060920][ T4768] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 773.067093][ T4768] ? sockfd_lookup_light+0x6d/0x180 [ 773.072319][ T4768] ___sys_sendmsg+0xf3/0x170 [ 773.076929][ T4768] ? sendmsg_copy_msghdr+0x160/0x160 [ 773.082264][ T4768] ? __fget_files+0x21b/0x3e0 [ 773.087217][ T4768] ? lock_downgrade+0x6e0/0x6e0 [ 773.092085][ T4768] ? __fget_files+0x5d/0x3e0 [ 773.096703][ T4768] ? __fget_files+0x23d/0x3e0 [ 773.101401][ T4768] ? __fget_light+0xea/0x280 [ 773.106010][ T4768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 773.112275][ T4768] __sys_sendmsg+0xe5/0x1b0 [ 773.116793][ T4768] ? __sys_sendmsg_sock+0x30/0x30 [ 773.121852][ T4768] ? syscall_enter_from_user_mode+0x21/0x70 [ 773.127774][ T4768] do_syscall_64+0x35/0xb0 [ 773.132205][ T4768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 773.138112][ T4768] RIP: 0033:0x7f5d21f6fae9 [ 773.142535][ T4768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 773.162153][ T4768] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.170575][ T4768] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 773.178561][ T4768] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 773.186539][ T4768] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 773.194514][ T4768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.202491][ T4768] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 773.210525][ T4768] 06:12:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:02 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x8, 0x4000010, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x1, 0x3, 0x0, 0x8, 0x5}, 0x0) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = io_uring_setup(0x5174, &(0x7f0000000000)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r5, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r8 = dup3(r5, r6, 0x80000) bind$rxrpc(r8, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) connect$ax25(r8, &(0x7f0000000080)={{0x3, @bcast, 0x2}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @default, @null]}, 0x48) 06:12:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\n\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1100, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071d, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\v\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 774.741080][ T4800] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 774.786728][ T4802] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 774.821757][ T4802] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf2501000000140046ff6d723000"/34], 0x28}, 0x1, 0x0, 0x0, 0x12001}, 0x4000040) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = io_uring_setup(0x5174, &(0x7f0000000000)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r5, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r8 = dup3(r5, r6, 0x80000) bind$rxrpc(r8, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f00000003c0)=0x2a2, 0x0, 0x4) r9 = io_uring_setup(0x5174, &(0x7f0000000000)={0x0, 0x1181, 0x0, 0x0, 0x0, 0x0, r8}) dup3(r2, r9, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:12:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x5865, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071e, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\f\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 774.968857][ T4802] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 774.968857][ T4802] !' [ 775.020382][ T4802] CPU: 0 PID: 4802 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 775.030330][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.040407][ T4802] Call Trace: [ 775.043702][ T4802] [ 775.046651][ T4802] dump_stack_lvl+0xcd/0x134 [ 775.051270][ T4802] sysfs_warn_dup.cold+0x1c/0x29 [ 775.056248][ T4802] sysfs_do_create_link_sd+0x11e/0x140 [ 775.061831][ T4802] sysfs_create_link+0x5f/0xc0 [ 775.066629][ T4802] device_add+0x789/0x1ee0 [ 775.071078][ T4802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 775.077270][ T4802] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 775.083994][ T4802] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 775.090015][ T4802] ? wiphy_register+0x1e46/0x29b0 [ 775.095075][ T4802] wiphy_register+0x1e94/0x29b0 [ 775.099964][ T4802] ? wiphy_unregister+0xbf0/0xbf0 [ 775.105005][ T4802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 775.111188][ T4802] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 775.116837][ T4802] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 775.122497][ T4802] ieee80211_register_hw+0x1f18/0x3ed0 [ 775.127991][ T4802] ? ieee80211_restart_hw+0x290/0x290 [ 775.133382][ T4802] ? debug_object_destroy+0x210/0x210 [ 775.138854][ T4802] ? memset+0x20/0x40 [ 775.142844][ T4802] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 775.149097][ T4802] ? __hrtimer_init+0x136/0x280 [ 775.153962][ T4802] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 775.159720][ T4802] ? hwsim_virtio_rx_work+0x350/0x350 [ 775.165103][ T4802] ? hwsim_new_radio_nl+0x992/0x1080 [ 775.170396][ T4802] ? memcpy+0x39/0x60 [ 775.174392][ T4802] hwsim_new_radio_nl+0x9bc/0x1080 [ 775.179511][ T4802] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 775.185439][ T4802] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 775.192743][ T4802] genl_family_rcv_msg_doit+0x228/0x320 [ 775.198316][ T4802] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 775.205698][ T4802] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 775.211962][ T4802] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 775.218224][ T4802] ? ns_capable+0xd9/0x100 [ 775.222659][ T4802] genl_rcv_msg+0x328/0x580 [ 775.227177][ T4802] ? genl_get_cmd+0x480/0x480 [ 775.231859][ T4802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 775.238031][ T4802] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 775.243936][ T4802] ? genl_get_cmd+0x480/0x480 [ 775.248629][ T4802] netlink_rcv_skb+0x153/0x420 [ 775.253402][ T4802] ? genl_get_cmd+0x480/0x480 [ 775.258088][ T4802] ? netlink_ack+0xa60/0xa60 [ 775.262703][ T4802] genl_rcv+0x24/0x40 [ 775.266711][ T4802] netlink_unicast+0x533/0x7d0 [ 775.271578][ T4802] ? netlink_attachskb+0x880/0x880 [ 775.276697][ T4802] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 775.282946][ T4802] ? __phys_addr_symbol+0x2c/0x70 [ 775.287991][ T4802] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 775.293729][ T4802] ? __check_object_size+0x16e/0x850 [ 775.299038][ T4802] netlink_sendmsg+0x86d/0xda0 [ 775.303823][ T4802] ? netlink_unicast+0x7d0/0x7d0 [ 775.308774][ T4802] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 775.315199][ T4802] ? security_socket_sendmsg+0x66/0xb0 [ 775.320667][ T4802] ? security_socket_sendmsg+0x71/0xb0 [ 775.326154][ T4802] ? netlink_unicast+0x7d0/0x7d0 [ 775.331097][ T4802] sock_sendmsg+0xcf/0x120 [ 775.335527][ T4802] ____sys_sendmsg+0x6e8/0x810 [ 775.340301][ T4802] ? kernel_sendmsg+0x50/0x50 [ 775.344986][ T4802] ? do_recvmmsg+0x6d0/0x6d0 [ 775.349612][ T4802] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 775.355685][ T4802] ? lock_chain_count+0x20/0x20 [ 775.360638][ T4802] ___sys_sendmsg+0xf3/0x170 [ 775.365242][ T4802] ? sendmsg_copy_msghdr+0x160/0x160 [ 775.370556][ T4802] ? __fget_files+0x21b/0x3e0 [ 775.375243][ T4802] ? lock_downgrade+0x6e0/0x6e0 [ 775.380130][ T4802] ? __fget_files+0x23d/0x3e0 [ 775.384821][ T4802] ? __fget_light+0xea/0x280 [ 775.389417][ T4802] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 775.395686][ T4802] __sys_sendmsg+0xe5/0x1b0 [ 775.400220][ T4802] ? __sys_sendmsg_sock+0x30/0x30 [ 775.405370][ T4802] ? syscall_enter_from_user_mode+0x21/0x70 [ 775.411298][ T4802] do_syscall_64+0x35/0xb0 [ 775.415740][ T4802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.421728][ T4802] RIP: 0033:0x7f5d21f6fae9 [ 775.426155][ T4802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.445779][ T4802] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.454285][ T4802] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 775.462272][ T4802] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 775.470243][ T4802] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 775.478311][ T4802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.486413][ T4802] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 775.494418][ T4802] 06:12:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000e0024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 775.789780][ T4824] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.837962][ T4803] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 775.879894][ T4803] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 775.937124][ T4803] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 775.937124][ T4803] !' [ 775.979013][ T4803] CPU: 0 PID: 4803 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 775.988951][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.999031][ T4803] Call Trace: [ 776.002312][ T4803] [ 776.005246][ T4803] dump_stack_lvl+0xcd/0x134 [ 776.009855][ T4803] sysfs_warn_dup.cold+0x1c/0x29 [ 776.014803][ T4803] sysfs_do_create_link_sd+0x11e/0x140 [ 776.020280][ T4803] sysfs_create_link+0x5f/0xc0 [ 776.025056][ T4803] device_add+0x789/0x1ee0 [ 776.029485][ T4803] ? wait_for_completion_io+0x270/0x270 [ 776.035048][ T4803] ? lock_downgrade+0x6e0/0x6e0 [ 776.039929][ T4803] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 776.046186][ T4803] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 776.052438][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.058696][ T4803] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 776.064712][ T4803] wiphy_register+0x1e94/0x29b0 [ 776.069586][ T4803] ? wiphy_unregister+0xbf0/0xbf0 [ 776.074617][ T4803] ? minstrel_ht_alloc+0x52c/0xa10 [ 776.080358][ T4803] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 776.086444][ T4803] ieee80211_register_hw+0x1f18/0x3ed0 [ 776.091933][ T4803] ? ieee80211_restart_hw+0x290/0x290 [ 776.097318][ T4803] ? debug_object_destroy+0x210/0x210 [ 776.102747][ T4803] ? memset+0x20/0x40 [ 776.106738][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.113104][ T4803] ? __hrtimer_init+0x136/0x280 [ 776.117965][ T4803] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 776.123714][ T4803] ? hwsim_virtio_rx_work+0x350/0x350 [ 776.129093][ T4803] ? hwsim_new_radio_nl+0x992/0x1080 [ 776.134558][ T4803] ? memcpy+0x39/0x60 [ 776.138551][ T4803] hwsim_new_radio_nl+0x9bc/0x1080 [ 776.143667][ T4803] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.149845][ T4803] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 776.155752][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.162011][ T4803] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 776.169389][ T4803] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 776.176691][ T4803] genl_family_rcv_msg_doit+0x228/0x320 [ 776.182250][ T4803] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 776.189630][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.195981][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.202236][ T4803] ? ns_capable+0xd9/0x100 [ 776.206664][ T4803] genl_rcv_msg+0x328/0x580 [ 776.211178][ T4803] ? genl_get_cmd+0x480/0x480 [ 776.215863][ T4803] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 776.221769][ T4803] ? lock_release+0x720/0x720 [ 776.226460][ T4803] netlink_rcv_skb+0x153/0x420 [ 776.231231][ T4803] ? genl_get_cmd+0x480/0x480 [ 776.235917][ T4803] ? netlink_ack+0xa60/0xa60 [ 776.240521][ T4803] ? netlink_deliver_tap+0x1b1/0xc30 [ 776.245824][ T4803] genl_rcv+0x24/0x40 [ 776.249811][ T4803] netlink_unicast+0x533/0x7d0 [ 776.254601][ T4803] ? netlink_attachskb+0x880/0x880 [ 776.259716][ T4803] ? netlink_sendmsg+0x821/0xda0 [ 776.264667][ T4803] netlink_sendmsg+0x86d/0xda0 [ 776.269444][ T4803] ? netlink_unicast+0x7d0/0x7d0 [ 776.274393][ T4803] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 776.280674][ T4803] ? netlink_unicast+0x7d0/0x7d0 [ 776.285625][ T4803] sock_sendmsg+0xcf/0x120 [ 776.290049][ T4803] ____sys_sendmsg+0x6e8/0x810 [ 776.294832][ T4803] ? kernel_sendmsg+0x50/0x50 [ 776.299513][ T4803] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.305769][ T4803] ? ___sys_sendmsg+0xd2/0x170 [ 776.310550][ T4803] ___sys_sendmsg+0xf3/0x170 [ 776.315158][ T4803] ? sendmsg_copy_msghdr+0x160/0x160 [ 776.320564][ T4803] ? __fget_files+0x21b/0x3e0 [ 776.325257][ T4803] ? lock_downgrade+0x6e0/0x6e0 [ 776.330119][ T4803] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.336305][ T4803] ? __fget_files+0x23d/0x3e0 [ 776.340994][ T4803] ? __fget_light+0xea/0x280 [ 776.346035][ T4803] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 776.352304][ T4803] __sys_sendmsg+0xe5/0x1b0 [ 776.356822][ T4803] ? __sys_sendmsg_sock+0x30/0x30 [ 776.361875][ T4803] ? syscall_enter_from_user_mode+0x21/0x70 [ 776.367802][ T4803] do_syscall_64+0x35/0xb0 [ 776.372227][ T4803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.378126][ T4803] RIP: 0033:0x7fc78cb95ae9 [ 776.382544][ T4803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 776.402339][ T4803] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.410785][ T4803] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 776.418756][ T4803] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 776.426728][ T4803] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 776.434696][ T4803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.442664][ T4803] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 776.450835][ T4803] 06:12:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34140e0024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r4, r5, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x6000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2071f, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:03 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x403a11, &(0x7f0000000280)={0x0, 0x6230, 0x0, 0x3, 0xfffffffe}) r2 = dup3(r0, r1, 0x80000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = dup3(r0, r1, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) io_uring_enter(r4, 0x6fec, 0xf274, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) io_uring_enter(r1, 0x4a76, 0xd799, 0x2, &(0x7f0000000040)={[0x1000]}, 0x8) r5 = fcntl$dupfd(r1, 0x0, r4) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = io_uring_setup(0x5174, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r4}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r10}}, 0x7) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r8, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r8, r9, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000500)={0x1, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r3, r9]}, 0x6) 06:12:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000f0024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 776.649662][ T4861] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.724977][ T4862] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20720, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x6558, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 776.774346][ T4862] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:04 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = io_uring_setup(0x5174, &(0x7f0000000000)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r5, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x2000000) accept4(r5, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r5, r6, 0x80000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0xffffffffffffffff, r2, r5], 0x3, 0x0, 0x0, {0x0, r8}}, 0x21) dup3(r0, r1, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x24) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xfffffffffffffe01}) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) 06:12:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400110024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 776.949667][ T4882] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 777.018418][ T4862] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 777.018418][ T4862] !' [ 777.034361][ T4862] CPU: 1 PID: 4862 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 777.044302][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.054382][ T4862] Call Trace: [ 777.057678][ T4862] [ 777.060623][ T4862] dump_stack_lvl+0xcd/0x134 [ 777.065249][ T4862] sysfs_warn_dup.cold+0x1c/0x29 [ 777.070221][ T4862] sysfs_do_create_link_sd+0x11e/0x140 [ 777.075727][ T4862] sysfs_create_link+0x5f/0xc0 [ 777.080527][ T4862] device_add+0x789/0x1ee0 [ 777.084997][ T4862] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 777.091276][ T4862] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 777.097569][ T4862] wiphy_register+0x1e94/0x29b0 [ 777.102466][ T4862] ? wiphy_unregister+0xbf0/0xbf0 [ 777.107513][ T4862] ? minstrel_ht_alloc+0x52c/0xa10 [ 777.112666][ T4862] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 06:12:04 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x18b4, &(0x7f0000000080)={0x0, 0x0, 0xfb33c6bcfd5b2aa6}) dup3(r0, r1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) [ 777.118773][ T4862] ieee80211_register_hw+0x1f18/0x3ed0 [ 777.124368][ T4862] ? ieee80211_restart_hw+0x290/0x290 [ 777.129780][ T4862] ? __hrtimer_init+0x136/0x280 [ 777.134674][ T4862] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 777.140436][ T4862] ? hwsim_virtio_rx_work+0x350/0x350 [ 777.145906][ T4862] ? hwsim_new_radio_nl+0x992/0x1080 [ 777.151237][ T4862] ? memcpy+0x39/0x60 [ 777.155255][ T4862] hwsim_new_radio_nl+0x9bc/0x1080 [ 777.160401][ T4862] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 777.166347][ T4862] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.172620][ T4862] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 777.180025][ T4862] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 777.187443][ T4862] genl_family_rcv_msg_doit+0x228/0x320 [ 777.193035][ T4862] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 777.200719][ T4862] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.207020][ T4862] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.213387][ T4862] ? ns_capable+0xd9/0x100 [ 777.217924][ T4862] genl_rcv_msg+0x328/0x580 [ 777.222460][ T4862] ? genl_get_cmd+0x480/0x480 [ 777.227167][ T4862] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 777.233095][ T4862] ? lock_release+0x720/0x720 [ 777.237804][ T4862] ? lockdep_hardirqs_on+0x79/0x100 [ 777.243049][ T4862] netlink_rcv_skb+0x153/0x420 [ 777.247845][ T4862] ? genl_get_cmd+0x480/0x480 [ 777.252555][ T4862] ? netlink_ack+0xa60/0xa60 [ 777.257188][ T4862] ? netlink_deliver_tap+0x1b1/0xc30 [ 777.262506][ T4862] genl_rcv+0x24/0x40 [ 777.266511][ T4862] netlink_unicast+0x533/0x7d0 [ 777.271398][ T4862] ? netlink_attachskb+0x880/0x880 [ 777.276533][ T4862] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 777.282801][ T4862] ? __phys_addr_symbol+0x2c/0x70 [ 777.287852][ T4862] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 777.293603][ T4862] ? __check_object_size+0x16e/0x850 [ 777.298955][ T4862] netlink_sendmsg+0x86d/0xda0 [ 777.303759][ T4862] ? netlink_unicast+0x7d0/0x7d0 [ 777.308722][ T4862] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 777.315174][ T4862] ? security_socket_sendmsg+0x66/0xb0 [ 777.320661][ T4862] ? security_socket_sendmsg+0x76/0xb0 [ 777.326183][ T4862] ? netlink_unicast+0x7d0/0x7d0 [ 777.331154][ T4862] sock_sendmsg+0xcf/0x120 [ 777.335601][ T4862] ____sys_sendmsg+0x6e8/0x810 [ 777.340519][ T4862] ? kernel_sendmsg+0x50/0x50 [ 777.345225][ T4862] ? do_recvmmsg+0x6d0/0x6d0 [ 777.349854][ T4862] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 777.355858][ T4862] ? lock_chain_count+0x20/0x20 [ 777.360754][ T4862] ___sys_sendmsg+0xf3/0x170 [ 777.365380][ T4862] ? sendmsg_copy_msghdr+0x160/0x160 [ 777.370705][ T4862] ? __fget_files+0x21b/0x3e0 [ 777.375407][ T4862] ? lock_downgrade+0x6e0/0x6e0 [ 777.380311][ T4862] ? __fget_files+0x23d/0x3e0 [ 777.385020][ T4862] ? __fget_light+0xea/0x280 [ 777.389724][ T4862] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 777.396036][ T4862] __sys_sendmsg+0xe5/0x1b0 [ 777.400576][ T4862] ? __sys_sendmsg_sock+0x30/0x30 [ 777.405739][ T4862] ? syscall_enter_from_user_mode+0x21/0x70 [ 777.411675][ T4862] do_syscall_64+0x35/0xb0 [ 777.416120][ T4862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 777.422038][ T4862] RIP: 0033:0x7f5d21f6fae9 [ 777.426488][ T4862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 777.446121][ T4862] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.454602][ T4862] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 777.462596][ T4862] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 777.470612][ T4862] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 777.478606][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.486600][ T4862] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 777.494613][ T4862] [ 777.569170][ T4864] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 777.590582][ T4864] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 777.702675][ T4864] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 777.702675][ T4864] !' [ 777.724748][ T4864] CPU: 1 PID: 4864 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 777.734684][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.744855][ T4864] Call Trace: [ 777.748148][ T4864] [ 777.751090][ T4864] dump_stack_lvl+0xcd/0x134 [ 777.755712][ T4864] sysfs_warn_dup.cold+0x1c/0x29 [ 777.760773][ T4864] sysfs_do_create_link_sd+0x11e/0x140 [ 777.766271][ T4864] sysfs_create_link+0x5f/0xc0 [ 777.771075][ T4864] device_add+0x789/0x1ee0 [ 777.775528][ T4864] ? wait_for_completion_io+0x270/0x270 [ 777.781190][ T4864] ? lock_downgrade+0x6e0/0x6e0 [ 777.786077][ T4864] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 777.792353][ T4864] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 777.798627][ T4864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.804903][ T4864] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 777.810935][ T4864] wiphy_register+0x1e94/0x29b0 [ 777.815828][ T4864] ? wiphy_unregister+0xbf0/0xbf0 [ 777.820892][ T4864] ? minstrel_ht_alloc+0x52c/0xa10 [ 777.826050][ T4864] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 777.832151][ T4864] ieee80211_register_hw+0x1f18/0x3ed0 [ 777.837656][ T4864] ? ieee80211_restart_hw+0x290/0x290 [ 777.843069][ T4864] ? debug_object_destroy+0x210/0x210 [ 777.848568][ T4864] ? memset+0x20/0x40 [ 777.852664][ T4864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.858934][ T4864] ? __hrtimer_init+0x136/0x280 [ 777.863814][ T4864] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 777.869582][ T4864] ? hwsim_virtio_rx_work+0x350/0x350 [ 777.874969][ T4864] ? hwsim_new_radio_nl+0x992/0x1080 [ 777.880280][ T4864] ? memcpy+0x39/0x60 [ 777.884288][ T4864] hwsim_new_radio_nl+0x9bc/0x1080 [ 777.889447][ T4864] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 777.895418][ T4864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.901724][ T4864] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 777.909122][ T4864] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 777.916445][ T4864] genl_family_rcv_msg_doit+0x228/0x320 [ 777.922022][ T4864] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 777.929429][ T4864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.935713][ T4864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 777.941976][ T4864] ? ns_capable+0xd9/0x100 [ 777.946423][ T4864] genl_rcv_msg+0x328/0x580 [ 777.950952][ T4864] ? genl_get_cmd+0x480/0x480 [ 777.955651][ T4864] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 777.961595][ T4864] netlink_rcv_skb+0x153/0x420 [ 777.966476][ T4864] ? genl_get_cmd+0x480/0x480 [ 777.971177][ T4864] ? netlink_ack+0xa60/0xa60 [ 777.975780][ T4864] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 777.981968][ T4864] ? down_read+0x198/0x440 [ 777.986413][ T4864] ? genl_get_cmd+0x480/0x480 [ 777.991119][ T4864] genl_rcv+0x24/0x40 [ 777.995116][ T4864] netlink_unicast+0x533/0x7d0 [ 777.999911][ T4864] ? netlink_attachskb+0x880/0x880 [ 778.005044][ T4864] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 778.011485][ T4864] ? __phys_addr_symbol+0x2c/0x70 [ 778.016532][ T4864] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 778.022274][ T4864] ? __check_object_size+0x16e/0x850 [ 778.027639][ T4864] netlink_sendmsg+0x86d/0xda0 [ 778.032438][ T4864] ? netlink_unicast+0x7d0/0x7d0 [ 778.037405][ T4864] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 778.043846][ T4864] ? security_socket_sendmsg+0x66/0xb0 [ 778.049330][ T4864] ? security_socket_sendmsg+0x71/0xb0 [ 778.054822][ T4864] ? netlink_unicast+0x7d0/0x7d0 [ 778.059872][ T4864] sock_sendmsg+0xcf/0x120 [ 778.064318][ T4864] ____sys_sendmsg+0x6e8/0x810 [ 778.069114][ T4864] ? kernel_sendmsg+0x50/0x50 [ 778.073812][ T4864] ? do_recvmmsg+0x6d0/0x6d0 [ 778.078434][ T4864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 778.084447][ T4864] ___sys_sendmsg+0xf3/0x170 [ 778.089065][ T4864] ? sendmsg_copy_msghdr+0x160/0x160 [ 778.094390][ T4864] ? irqentry_enter+0x28/0x50 [ 778.099099][ T4864] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 778.105285][ T4864] ? lockdep_hardirqs_on+0x79/0x100 [ 778.110518][ T4864] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 778.116713][ T4864] ? __sanitizer_cov_trace_const_cmp8+0x8/0x70 [ 778.122896][ T4864] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 778.129171][ T4864] __sys_sendmsg+0xe5/0x1b0 [ 778.133700][ T4864] ? __sys_sendmsg_sock+0x30/0x30 [ 778.138788][ T4864] ? syscall_enter_from_user_mode+0x21/0x70 [ 778.144718][ T4864] do_syscall_64+0x35/0xb0 [ 778.149158][ T4864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.155088][ T4864] RIP: 0033:0x7fc78cb95ae9 [ 778.159518][ T4864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.179154][ T4864] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.187593][ T4864] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 778.195581][ T4864] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 778.203569][ T4864] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 778.211564][ T4864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.219550][ T4864] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 778.227588][ T4864] 06:12:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:12:05 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r0, r1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x16a, 0x1]) 06:12:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20721, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340e140024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x8100, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:05 executing program 3: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0xdb1, 0x0, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000455000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r1 = semget$private(0x0, 0x4, 0x400) mremap(&(0x7f0000d4a000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00008ea000/0x3000)=nil) r2 = semget$private(0x0, 0x0, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x10) r3 = semget$private(0x0, 0x207, 0x0) semtimedop(r3, &(0x7f00000001c0)=[{0x1, 0x100}, {0x0, 0x0, 0x800}, {0x0, 0xffff}, {0x0, 0x5}, {0x3}, {0x0, 0x3, 0x2000}], 0x6, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000480)=[{0x2, 0xd, 0x1000}, {0x4, 0x4005, 0x1800}, {0x2, 0x3, 0x1800}], 0x3, &(0x7f0000000040)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x2, 0x1000}, {0x2, 0x3f, 0x1000}, {0x3, 0x3d29, 0x800}, {0x3, 0x3, 0x800}], 0x4, &(0x7f0000000240)) semop(r3, &(0x7f0000000080), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x44) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000600)=""/252) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) semtimedop(r2, &(0x7f0000000340)=[{0x1, 0x1000, 0x1000}, {0x1, 0x401, 0x800}, {0x2, 0x7fff, 0x400}, {0x1, 0xffff}], 0x4, &(0x7f0000000380)={0x77359400}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000540)=ANY=[]) semctl$IPC_RMID(r1, 0x0, 0x0) [ 778.560676][ T4930] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4eX\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20722, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:06 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xe803, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 778.823935][ T4940] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 778.906599][ T4940] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 778.931429][ T4944] loop3: detected capacity change from 0 to 264192 [ 779.022576][ T4944] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:12:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00`\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207020902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x10) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000140)=0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) 06:12:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 779.202598][ T4940] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 779.202598][ T4940] !' [ 779.241175][ T4940] CPU: 0 PID: 4940 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 779.251148][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.261264][ T4940] Call Trace: [ 779.264569][ T4940] [ 779.267517][ T4940] dump_stack_lvl+0xcd/0x134 [ 779.272142][ T4940] sysfs_warn_dup.cold+0x1c/0x29 [ 779.277116][ T4940] sysfs_do_create_link_sd+0x11e/0x140 [ 779.282617][ T4940] sysfs_create_link+0x5f/0xc0 [ 779.287610][ T4940] device_add+0x789/0x1ee0 [ 779.292122][ T4940] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 779.298314][ T4940] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 779.304594][ T4940] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 779.310693][ T4940] ? wiphy_register+0x1e46/0x29b0 [ 779.315751][ T4940] wiphy_register+0x1e94/0x29b0 [ 779.320640][ T4940] ? wiphy_unregister+0xbf0/0xbf0 [ 779.325679][ T4940] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 779.331856][ T4940] ? ieee80211_register_hw+0x1cb4/0x3ed0 [ 779.337506][ T4940] ieee80211_register_hw+0x1f18/0x3ed0 [ 779.343001][ T4940] ? ieee80211_restart_hw+0x290/0x290 [ 779.348397][ T4940] ? __sanitizer_cov_trace_const_cmp4+0xc/0x70 [ 779.354564][ T4940] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 779.360820][ T4940] ? __hrtimer_init+0x136/0x280 [ 779.365683][ T4940] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 779.371429][ T4940] ? hwsim_virtio_rx_work+0x350/0x350 [ 779.376817][ T4940] ? hwsim_new_radio_nl+0x992/0x1080 [ 779.382108][ T4940] ? memcpy+0x39/0x60 [ 779.386103][ T4940] hwsim_new_radio_nl+0x9bc/0x1080 [ 779.391222][ T4940] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 779.397127][ T4940] ? lockdep_hardirqs_on+0x79/0x100 [ 779.402366][ T4940] genl_family_rcv_msg_doit+0x228/0x320 [ 779.407925][ T4940] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 779.415304][ T4940] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 779.421610][ T4940] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 779.427870][ T4940] ? ns_capable+0xd9/0x100 [ 779.432300][ T4940] genl_rcv_msg+0x328/0x580 [ 779.436989][ T4940] ? genl_get_cmd+0x480/0x480 [ 779.441686][ T4940] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 779.447591][ T4940] ? lock_release+0x720/0x720 [ 779.452287][ T4940] netlink_rcv_skb+0x153/0x420 [ 779.457061][ T4940] ? genl_get_cmd+0x480/0x480 [ 779.461747][ T4940] ? netlink_ack+0xa60/0xa60 [ 779.466352][ T4940] ? netlink_deliver_tap+0x1b1/0xc30 [ 779.471658][ T4940] genl_rcv+0x24/0x40 [ 779.475660][ T4940] netlink_unicast+0x533/0x7d0 [ 779.480436][ T4940] ? netlink_attachskb+0x880/0x880 [ 779.485557][ T4940] ? netlink_sendmsg+0x7e3/0xda0 [ 779.490513][ T4940] netlink_sendmsg+0x86d/0xda0 [ 779.495293][ T4940] ? netlink_unicast+0x7d0/0x7d0 [ 779.500247][ T4940] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 779.506523][ T4940] ? netlink_unicast+0x7d0/0x7d0 [ 779.511492][ T4940] sock_sendmsg+0xcf/0x120 [ 779.516033][ T4940] ____sys_sendmsg+0x6e8/0x810 [ 779.520850][ T4940] ? kernel_sendmsg+0x50/0x50 [ 779.525547][ T4940] ? do_recvmmsg+0x6d0/0x6d0 [ 779.530252][ T4940] ? lock_chain_count+0x20/0x20 [ 779.535117][ T4940] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 779.541124][ T4940] ? futex_wait+0x533/0x670 [ 779.545640][ T4940] ___sys_sendmsg+0xf3/0x170 [ 779.550242][ T4940] ? sendmsg_copy_msghdr+0x160/0x160 [ 779.555557][ T4940] ? __fget_files+0x21b/0x3e0 [ 779.560240][ T4940] ? lock_downgrade+0x6e0/0x6e0 [ 779.565116][ T4940] ? __fget_files+0x1f9/0x3e0 [ 779.569801][ T4940] ? __fget_files+0x203/0x3e0 [ 779.574492][ T4940] ? __fget_files+0x23d/0x3e0 [ 779.579187][ T4940] ? __fget_light+0xea/0x280 [ 779.583788][ T4940] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 779.590046][ T4940] __sys_sendmsg+0xe5/0x1b0 [ 779.594563][ T4940] ? __sys_sendmsg_sock+0x30/0x30 [ 779.599605][ T4940] ? lockdep_hardirqs_on+0x79/0x100 [ 779.604823][ T4940] ? trace_hardirqs_on+0x39/0x1c0 [ 779.609859][ T4940] ? syscall_enter_from_user_mode+0x2b/0x70 [ 779.615770][ T4940] do_syscall_64+0x35/0xb0 [ 779.620203][ T4940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 779.626102][ T4940] RIP: 0033:0x7f5d21f6fae9 [ 779.630518][ T4940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.650139][ T4940] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.658643][ T4940] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 779.666621][ T4940] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 779.674592][ T4940] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 779.682583][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.690552][ T4940] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 779.698546][ T4940] 06:12:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4Xe\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400810024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20723, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 781.225734][ T5025] __nla_validate_parse: 1 callbacks suppressed [ 781.225755][ T5025] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3403e80024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:08 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x34000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20724, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400f00024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xd0000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 781.929639][ T5050] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:09 executing program 4: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x9}, {0x0}, {0x0}], 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='uid>', @ANYRESDEC=0xee01, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB]) perf_event_open(0x0, 0x0, 0x8000, r0, 0x8) 06:12:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20725, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x400300, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00w\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 782.342128][ T5071] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000ec0000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 782.487742][ T5077] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 782.500860][ T5077] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20726, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 782.562471][ T5063] affs: Unrecognized mount option "uid>00000000000000060929" or missing value [ 782.605461][ T5077] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 782.605461][ T5077] !' [ 782.619265][ T5063] affs: Error parsing options [ 782.638234][ T5077] CPU: 1 PID: 5077 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 782.648172][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.658246][ T5077] Call Trace: [ 782.661542][ T5077] [ 782.664486][ T5077] dump_stack_lvl+0xcd/0x134 [ 782.669227][ T5077] sysfs_warn_dup.cold+0x1c/0x29 [ 782.674228][ T5077] sysfs_do_create_link_sd+0x11e/0x140 [ 782.679730][ T5077] sysfs_create_link+0x5f/0xc0 [ 782.684613][ T5077] device_add+0x789/0x1ee0 [ 782.689065][ T5077] ? ieee80211_set_bitrate_flags+0x2b/0x650 [ 782.694994][ T5077] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 782.701271][ T5077] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.707543][ T5077] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 782.713568][ T5077] wiphy_register+0x1e94/0x29b0 [ 782.718844][ T5077] ? wiphy_unregister+0xbf0/0xbf0 [ 782.723895][ T5077] ? minstrel_ht_alloc+0x52c/0xa10 [ 782.729047][ T5077] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 782.735150][ T5077] ieee80211_register_hw+0x1f18/0x3ed0 [ 782.740658][ T5077] ? ieee80211_restart_hw+0x290/0x290 [ 782.746103][ T5077] ? debug_object_destroy+0x210/0x210 [ 782.751505][ T5077] ? memset+0x20/0x40 [ 782.755511][ T5077] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.761778][ T5077] ? __hrtimer_init+0x136/0x280 [ 782.766663][ T5077] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 782.772427][ T5077] ? hwsim_virtio_rx_work+0x350/0x350 [ 782.777844][ T5077] ? hwsim_new_radio_nl+0x992/0x1080 [ 782.783152][ T5077] ? memcpy+0x39/0x60 [ 782.787157][ T5077] hwsim_new_radio_nl+0x9bc/0x1080 [ 782.792301][ T5077] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 782.798229][ T5077] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.804487][ T5077] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 782.811881][ T5077] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 782.819206][ T5077] genl_family_rcv_msg_doit+0x228/0x320 [ 782.824789][ T5077] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 782.832192][ T5077] ? lockdep_hardirqs_on+0x79/0x100 [ 782.837426][ T5077] ? genl_rcv_msg+0x2f9/0x580 [ 782.842134][ T5077] genl_rcv_msg+0x328/0x580 [ 782.846754][ T5077] ? genl_get_cmd+0x480/0x480 [ 782.851454][ T5077] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 782.857380][ T5077] ? lock_release+0x720/0x720 [ 782.862167][ T5077] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 782.868091][ T5077] netlink_rcv_skb+0x153/0x420 [ 782.872892][ T5077] ? genl_get_cmd+0x480/0x480 [ 782.877603][ T5077] ? netlink_ack+0xa60/0xa60 [ 782.882221][ T5077] ? netlink_deliver_tap+0x1b1/0xc30 [ 782.887529][ T5077] genl_rcv+0x24/0x40 [ 782.891566][ T5077] netlink_unicast+0x533/0x7d0 [ 782.896443][ T5077] ? netlink_attachskb+0x880/0x880 [ 782.901575][ T5077] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 782.907848][ T5077] ? __phys_addr_symbol+0x2c/0x70 [ 782.912891][ T5077] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 782.918630][ T5077] ? __check_object_size+0x16e/0x850 [ 782.923946][ T5077] netlink_sendmsg+0x86d/0xda0 [ 782.928747][ T5077] ? netlink_unicast+0x7d0/0x7d0 [ 782.933711][ T5077] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.939987][ T5077] ? netlink_unicast+0x7d0/0x7d0 [ 782.944946][ T5077] sock_sendmsg+0xcf/0x120 [ 782.949381][ T5077] ____sys_sendmsg+0x6e8/0x810 [ 782.954171][ T5077] ? kernel_sendmsg+0x50/0x50 [ 782.958963][ T5077] ? do_recvmmsg+0x6d0/0x6d0 [ 782.963585][ T5077] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 782.969863][ T5077] ? lockdep_hardirqs_on+0x79/0x100 [ 782.975231][ T5077] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 782.981567][ T5077] ___sys_sendmsg+0xf3/0x170 [ 782.986200][ T5077] ? sendmsg_copy_msghdr+0x160/0x160 [ 782.991519][ T5077] ? __fget_files+0x21b/0x3e0 [ 782.996219][ T5077] ? lock_downgrade+0x6e0/0x6e0 [ 783.001703][ T5077] ? __fget_files+0xe8/0x3e0 [ 783.006319][ T5077] ? __fget_files+0x23d/0x3e0 [ 783.011032][ T5077] ? __fget_light+0xea/0x280 [ 783.015645][ T5077] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 783.021919][ T5077] __sys_sendmsg+0xe5/0x1b0 [ 783.026451][ T5077] ? __sys_sendmsg_sock+0x30/0x30 [ 783.031509][ T5077] ? lockdep_hardirqs_on+0x79/0x100 [ 783.036751][ T5077] ? trace_hardirqs_on+0x39/0x1c0 [ 783.041799][ T5077] ? syscall_enter_from_user_mode+0x2b/0x70 [ 783.047721][ T5077] do_syscall_64+0x35/0xb0 [ 783.052167][ T5077] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.058084][ T5077] RIP: 0033:0x7f5d21f6fae9 [ 783.062516][ T5077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.082147][ T5077] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.090582][ T5077] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 783.098580][ T5077] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 783.106577][ T5077] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 783.114656][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.122658][ T5077] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 783.130675][ T5077] 06:12:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) sched_setattr(r3, &(0x7f00000033c0)={0x38, 0x3, 0x49, 0x7f, 0x2, 0x3f, 0x4, 0x500b, 0x7f, 0x80000000}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fork() sched_setattr(r4, &(0x7f0000000180)={0x38, 0x6, 0x24, 0x1ff, 0x0, 0x400, 0x2, 0xdaf, 0x8, 0x7ff}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x20}, 0x38) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x10000, 0xe) process_vm_writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000001500)=""/133, 0x85}], 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg$unix(r6, &(0x7f0000006400)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="59136dd1218ee870d07b2d0bb733c7a50a38e301dcb8a1dcb50ff2728fc1005eb8a22e2c1f2ed376a0392644bfc5355edacae9f833a690e227e3bc56355800e0723f5f78e8a80bff01b8f473fec73fab3ef7b88f32166a21ce723147d3a2458cbe653dd5c83d2af13ff4b0bcd90714e9ec3d616acc1ae5aac60000000000007261631f76fb2f7061f9c9ee92073f66b79c45a80d1c824f3e00"/164], 0x18}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001680)=""/209, 0xd1}, {&(0x7f0000001780)=""/90, 0x5a}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000001800)=""/47, 0x2f}, {&(0x7f0000001840)=""/142, 0x8e}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001a80)=""/203, 0xcb}, {&(0x7f0000001b80)=""/252, 0xfc}, {&(0x7f0000001c80)=""/171, 0xab}, {&(0x7f0000001d40)=""/209, 0xd1}, {&(0x7f0000001e40)=""/125, 0x7d}, {&(0x7f0000001ec0)=""/145, 0x91}, {&(0x7f0000001f80)=""/22, 0x16}], 0x7, &(0x7f0000002040)=ANY=[@ANYBLOB="28000000000000000100000001ffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002140)=""/5, 0x5}, {&(0x7f0000002180)=""/42, 0x2a}, {&(0x7f00000021c0)=""/110, 0x6e}, {&(0x7f0000002240)=""/59, 0x3b}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/140, 0x8c}], 0x6, &(0x7f00000033c0)}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000004800)=[{&(0x7f0000003480)=""/41, 0x29}, {&(0x7f00000034c0)=""/250, 0xfa}, {&(0x7f00000035c0)=""/127, 0x7f}, {&(0x7f0000003640)=""/125, 0x7d}, {&(0x7f00000036c0)}, {&(0x7f0000003700)=""/193, 0xc1}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7, &(0x7f0000004880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000020000000010000000200f1ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xa0}}, {{&(0x7f0000004940), 0x6e, &(0x7f0000004b40)=[{&(0x7f00000049c0)=""/77, 0x4d}, {&(0x7f0000004a40)=""/219, 0xdb}], 0x2}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/156, 0x9c}, {&(0x7f0000004cc0)=""/227, 0xe3}, {&(0x7f0000004dc0)=""/250, 0xfa}], 0x3, &(0x7f0000004f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000004fc0), 0x6e, &(0x7f0000006380)=[{&(0x7f0000005040)=""/19, 0x13}, {&(0x7f0000005080)=""/102, 0x66}, {&(0x7f0000005100)=""/172, 0xac}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/158, 0x9e}, {&(0x7f0000006280)=""/18, 0x12}, {&(0x7f00000062c0)=""/191, 0xbf}], 0x7}}], 0x8, 0x2040, &(0x7f0000006600)={0x77359400}) 06:12:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400020024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400030024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 783.382361][ T5095] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20727, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400040024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 783.617454][ T5122] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20728, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400050024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 783.795682][ T5136] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20729, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 783.904990][ T5143] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 783.944589][ T5143] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 784.003443][ T5151] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 784.112019][ T5143] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 784.112019][ T5143] !' [ 784.136818][ T5143] CPU: 1 PID: 5143 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 784.146759][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.156831][ T5143] Call Trace: [ 784.160234][ T5143] [ 784.163521][ T5143] dump_stack_lvl+0xcd/0x134 [ 784.168163][ T5143] sysfs_warn_dup.cold+0x1c/0x29 [ 784.173137][ T5143] sysfs_do_create_link_sd+0x11e/0x140 [ 784.178633][ T5143] sysfs_create_link+0x5f/0xc0 [ 784.183439][ T5143] device_add+0x789/0x1ee0 [ 784.187897][ T5143] ? ieee80211_set_bitrate_flags+0x109/0x650 [ 784.194004][ T5143] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 784.200300][ T5143] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 784.206576][ T5143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.212843][ T5143] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 784.218858][ T5143] wiphy_register+0x1e94/0x29b0 [ 784.223766][ T5143] ? wiphy_unregister+0xbf0/0xbf0 [ 784.228808][ T5143] ? minstrel_ht_alloc+0x52c/0xa10 [ 784.233950][ T5143] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 784.240051][ T5143] ieee80211_register_hw+0x1f18/0x3ed0 [ 784.245562][ T5143] ? ieee80211_restart_hw+0x290/0x290 [ 784.250971][ T5143] ? debug_object_destroy+0x210/0x210 [ 784.256400][ T5143] ? memset+0x20/0x40 [ 784.260403][ T5143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.266675][ T5143] ? __hrtimer_init+0x136/0x280 [ 784.271575][ T5143] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 784.277336][ T5143] ? hwsim_virtio_rx_work+0x350/0x350 [ 784.282725][ T5143] ? hwsim_new_radio_nl+0x992/0x1080 [ 784.288033][ T5143] ? memcpy+0x39/0x60 [ 784.292044][ T5143] hwsim_new_radio_nl+0x9bc/0x1080 [ 784.297268][ T5143] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 784.303183][ T5143] ? lockdep_hardirqs_on+0x79/0x100 [ 784.308415][ T5143] ? genl_family_rcv_msg_doit+0xec/0x320 [ 784.314077][ T5143] ? genl_family_rcv_msg_doit+0xfe/0x320 [ 784.319740][ T5143] genl_family_rcv_msg_doit+0x228/0x320 [ 784.325318][ T5143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 784.332724][ T5143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.339003][ T5143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.345275][ T5143] ? ns_capable+0xd9/0x100 [ 784.349816][ T5143] genl_rcv_msg+0x328/0x580 [ 784.354354][ T5143] ? genl_get_cmd+0x480/0x480 [ 784.359055][ T5143] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 784.365236][ T5143] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 784.371172][ T5143] netlink_rcv_skb+0x153/0x420 [ 784.375962][ T5143] ? genl_get_cmd+0x480/0x480 [ 784.380666][ T5143] ? netlink_ack+0xa60/0xa60 [ 784.385296][ T5143] genl_rcv+0x24/0x40 [ 784.389294][ T5143] netlink_unicast+0x533/0x7d0 [ 784.394084][ T5143] ? netlink_attachskb+0x880/0x880 [ 784.399224][ T5143] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 784.405484][ T5143] ? __phys_addr_symbol+0x2c/0x70 [ 784.410551][ T5143] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 784.416297][ T5143] ? __check_object_size+0x16e/0x850 [ 784.421612][ T5143] netlink_sendmsg+0x86d/0xda0 [ 784.426406][ T5143] ? netlink_unicast+0x7d0/0x7d0 [ 784.431374][ T5143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.437644][ T5143] ? netlink_unicast+0x7d0/0x7d0 [ 784.442607][ T5143] sock_sendmsg+0xcf/0x120 [ 784.447046][ T5143] ____sys_sendmsg+0x6e8/0x810 [ 784.451873][ T5143] ? kernel_sendmsg+0x50/0x50 [ 784.456568][ T5143] ? do_recvmmsg+0x6d0/0x6d0 [ 784.461188][ T5143] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 784.467197][ T5143] ? lock_chain_count+0x20/0x20 [ 784.472087][ T5143] ___sys_sendmsg+0xf3/0x170 [ 784.476700][ T5143] ? sendmsg_copy_msghdr+0x160/0x160 [ 784.482014][ T5143] ? __fget_files+0x21b/0x3e0 [ 784.486716][ T5143] ? lock_downgrade+0x6e0/0x6e0 [ 784.491606][ T5143] ? __fget_files+0x23d/0x3e0 [ 784.496331][ T5143] ? __fget_light+0xea/0x280 [ 784.500938][ T5143] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 784.507225][ T5143] __sys_sendmsg+0xe5/0x1b0 [ 784.511760][ T5143] ? __sys_sendmsg_sock+0x30/0x30 [ 784.516832][ T5143] ? syscall_enter_from_user_mode+0x21/0x70 [ 784.522771][ T5143] do_syscall_64+0x35/0xb0 [ 784.527212][ T5143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.533131][ T5143] RIP: 0033:0x7f5d21f6fae9 [ 784.537659][ T5143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.557551][ T5143] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.565994][ T5143] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 784.574095][ T5143] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 784.582092][ T5143] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 784.590085][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.598359][ T5143] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 784.606381][ T5143] 06:12:12 executing program 4: r0 = syz_io_uring_setup(0x489a, &(0x7f0000000080)={0x0, 0xc8d9}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) syz_io_uring_setup(0x787f, &(0x7f00000002c0)={0x0, 0x21fe, 0x1, 0x3, 0x2f0, 0x0, r0}, &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000003480)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd=r6, 0xffffffff00000000, &(0x7f0000000bc0)=[{&(0x7f0000000800)="bdd41165b596486574b4d58ec88f1d8860c7abaa01d3cf3e9f2dbf319a3371d44e64aff2c0b20a46c8024f12192921fa80de0b5c8b8a47af2f091458b2e1f1854b2cecb5176d4b36cf09ee15bf1a9c055601821654c0e6c0874ad5f387937ed69aed5f1bf0c26d3d8f6343bd6fbe44f79e2d71ec263fdc8af27ad822c33145e7bbd2541ab9ebfe3fe053f996f838dd6ac2733d72d0e60b81a4411cde6f56bf7c47d0552c5a128d8107aad1f3e4d097741d353764b52c55901b0032076793639b99562d924870c105dee5fc9e882f1a1e6f3099d7ba0f820086ce8968", 0xdc}, {&(0x7f0000000900)="a47e3baf5b2e8f7104ea326c3e89ac9d6b04a66513f16c6d93439f623c8de03cd13d1d108e0bd2fbf7c000b24f8336df79c8b796d3af13a179a1aa4c423d5019a7415031fa28a0d43e678856ef98f9c149fc80cb0f5baf841245daf892c65f3bc66957afc386a2b6bfc2218aadc530b03dc54f1d232499915604c6b4c65e042a5456bc1ed34f9b762208d636ae5d2bbd6b1ffe3baf4bde9113e984399ccb960520f7", 0xa2}, {&(0x7f00000009c0)="ecccc9b93ff7bff0c9b441f6b3f807aa2508c93c6c5d1d21ce6e", 0x1a}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000a00)="b0788f41d3627a095e02b92cc512ee05d39a5733289c4a4be1d4b314a19cac6a71d8161aa6e3a0f8b5422cd2d5f66ff7733f4123d107b82a1523e3510d04b6fba3a264b4b98ffedf7407b9d98d2d2c329293f12de10a1da3c8d52ae8311ac693c554cc3ff477ff7975971ec67cb8a3c58066de6468ea2372355ff11160e32d1441956943f2112a5fffa98234e50c58d4c326f2132827565eda7488c7d90ee2becdc57478ece5eef7a8f3fbfbe17b32f1831e8eada883c98bd113560e46230d8fb6e2ea", 0xc3}, {&(0x7f0000000b00)="fbb7fa87b9a1a7af26f04e28af2460b14a71bb", 0x13}, {&(0x7f0000000b40)="80880e62c82abc70743c8b0ad94b38870540d3c738b1eb34f502a7b78ee094b41141d2a93e362be524d5b8b91595662a7b0cdce549d4cb76d0a8e7a60fc54ff6cb147323821f2ed66b5cc4", 0x4b}], 0x8, 0x18, 0x1, {0x0, r8}}, 0x564c01d3) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0xc, 0x2, 0x144, &(0x7f0000000380)="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"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x8000600, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000633a77fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 06:12:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400060024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:12 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072a, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\a\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 784.900219][ T5175] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 06:12:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x5000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072b, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\b\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\t\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072c, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x6000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 785.997280][ T5212] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 786.135573][ T5212] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 786.135573][ T5212] !' [ 786.170520][ T5212] CPU: 0 PID: 5212 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 786.180482][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.190559][ T5212] Call Trace: [ 786.193860][ T5212] [ 786.196804][ T5212] dump_stack_lvl+0xcd/0x134 [ 786.201428][ T5212] sysfs_warn_dup.cold+0x1c/0x29 [ 786.206382][ T5212] sysfs_do_create_link_sd+0x11e/0x140 [ 786.211863][ T5212] sysfs_create_link+0x5f/0xc0 [ 786.216645][ T5212] device_add+0x789/0x1ee0 [ 786.221075][ T5212] ? ieee80211_set_bitrate_flags+0x163/0x650 [ 786.227068][ T5212] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 786.233436][ T5212] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.239690][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.245940][ T5212] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 786.251955][ T5212] wiphy_register+0x1e94/0x29b0 [ 786.256844][ T5212] ? wiphy_unregister+0xbf0/0xbf0 [ 786.261881][ T5212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 786.268077][ T5212] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 786.273741][ T5212] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 786.279411][ T5212] ieee80211_register_hw+0x1f18/0x3ed0 [ 786.284902][ T5212] ? ieee80211_restart_hw+0x290/0x290 [ 786.290301][ T5212] ? debug_object_destroy+0x210/0x210 [ 786.295704][ T5212] ? memset+0x20/0x40 [ 786.299701][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.306058][ T5212] ? __hrtimer_init+0x136/0x280 [ 786.310930][ T5212] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 786.316775][ T5212] ? hwsim_virtio_rx_work+0x350/0x350 [ 786.322171][ T5212] ? hwsim_new_radio_nl+0x992/0x1080 [ 786.327469][ T5212] ? memcpy+0x39/0x60 [ 786.331464][ T5212] hwsim_new_radio_nl+0x9bc/0x1080 [ 786.336588][ T5212] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 786.342500][ T5212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 786.349803][ T5212] genl_family_rcv_msg_doit+0x228/0x320 [ 786.355362][ T5212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 786.362867][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.369211][ T5212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.375503][ T5212] ? ns_capable+0xd9/0x100 [ 786.379949][ T5212] genl_rcv_msg+0x328/0x580 [ 786.384505][ T5212] ? genl_get_cmd+0x480/0x480 [ 786.389201][ T5212] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 786.395135][ T5212] ? lock_release+0x720/0x720 [ 786.399959][ T5212] netlink_rcv_skb+0x153/0x420 [ 786.404745][ T5212] ? genl_get_cmd+0x480/0x480 [ 786.409435][ T5212] ? netlink_ack+0xa60/0xa60 [ 786.414047][ T5212] ? netlink_deliver_tap+0x1b1/0xc30 [ 786.419353][ T5212] genl_rcv+0x24/0x40 [ 786.423443][ T5212] netlink_unicast+0x533/0x7d0 [ 786.428242][ T5212] ? netlink_attachskb+0x880/0x880 [ 786.433362][ T5212] ? netlink_sendmsg+0x7e3/0xda0 [ 786.438323][ T5212] netlink_sendmsg+0x86d/0xda0 [ 786.443113][ T5212] ? netlink_unicast+0x7d0/0x7d0 [ 786.448074][ T5212] ? sock_sendmsg+0x4b/0x120 [ 786.452670][ T5212] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 786.459099][ T5212] ? netlink_unicast+0x7d0/0x7d0 [ 786.464039][ T5212] sock_sendmsg+0xcf/0x120 [ 786.468466][ T5212] ____sys_sendmsg+0x6e8/0x810 [ 786.473245][ T5212] ? kernel_sendmsg+0x50/0x50 [ 786.477978][ T5212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 786.484161][ T5212] ? ___sys_sendmsg+0xd2/0x170 [ 786.488983][ T5212] ___sys_sendmsg+0xf3/0x170 [ 786.493600][ T5212] ? sendmsg_copy_msghdr+0x160/0x160 [ 786.498948][ T5212] ? __fget_files+0x21b/0x3e0 [ 786.503735][ T5212] ? lock_downgrade+0x6e0/0x6e0 [ 786.508613][ T5212] ? __fget_files+0x23d/0x3e0 [ 786.513311][ T5212] ? __fget_light+0xea/0x280 [ 786.518005][ T5212] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 786.524268][ T5212] __sys_sendmsg+0xe5/0x1b0 [ 786.528886][ T5212] ? __sys_sendmsg_sock+0x30/0x30 [ 786.534008][ T5212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 786.540190][ T5212] ? lockdep_hardirqs_on+0x79/0x100 [ 786.545682][ T5212] ? ncsi_configure_channel+0xa40/0x18a0 [ 786.551354][ T5212] do_syscall_64+0x35/0xb0 [ 786.555784][ T5212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.561687][ T5212] RIP: 0033:0x7f5d21f6fae9 [ 786.566121][ T5212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.585733][ T5212] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.594174][ T5212] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 786.602497][ T5212] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 786.610470][ T5212] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 786.618439][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.626412][ T5212] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 786.634409][ T5212] 06:12:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\n\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 786.737263][ T5225] __nla_validate_parse: 2 callbacks suppressed [ 786.737285][ T5225] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x7000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072d, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 786.884132][ T5220] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 786.918464][ T5220] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 787.018141][ T5220] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 787.018141][ T5220] !' [ 787.060783][ T5220] CPU: 1 PID: 5220 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 787.070745][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.080822][ T5220] Call Trace: [ 787.084116][ T5220] [ 787.087063][ T5220] dump_stack_lvl+0xcd/0x134 [ 787.091683][ T5220] sysfs_warn_dup.cold+0x1c/0x29 [ 787.096673][ T5220] sysfs_do_create_link_sd+0x11e/0x140 [ 787.102166][ T5220] sysfs_create_link+0x5f/0xc0 [ 787.106970][ T5220] device_add+0x789/0x1ee0 [ 787.111439][ T5220] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 787.117717][ T5220] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 787.123995][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.130264][ T5220] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 787.136284][ T5220] wiphy_register+0x1e94/0x29b0 [ 787.141169][ T5220] ? wiphy_unregister+0xbf0/0xbf0 [ 787.146215][ T5220] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 787.152409][ T5220] ieee80211_register_hw+0x1f18/0x3ed0 [ 787.157917][ T5220] ? ieee80211_restart_hw+0x290/0x290 [ 787.163330][ T5220] ? debug_object_destroy+0x210/0x210 [ 787.168735][ T5220] ? memset+0x20/0x40 [ 787.172744][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.179017][ T5220] ? __hrtimer_init+0x136/0x280 [ 787.183898][ T5220] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 787.189683][ T5220] ? hwsim_virtio_rx_work+0x350/0x350 [ 787.195077][ T5220] ? hwsim_new_radio_nl+0x992/0x1080 [ 787.200390][ T5220] ? memcpy+0x39/0x60 [ 787.204401][ T5220] hwsim_new_radio_nl+0x9bc/0x1080 [ 787.209536][ T5220] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 787.215464][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.221731][ T5220] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 787.229133][ T5220] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 787.236459][ T5220] genl_family_rcv_msg_doit+0x228/0x320 [ 787.242051][ T5220] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 787.249457][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.255746][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.262027][ T5220] ? ns_capable+0xd9/0x100 [ 787.266478][ T5220] genl_rcv_msg+0x328/0x580 [ 787.271191][ T5220] ? genl_get_cmd+0x480/0x480 [ 787.275894][ T5220] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 787.281993][ T5220] ? lock_release+0x720/0x720 [ 787.286705][ T5220] netlink_rcv_skb+0x153/0x420 [ 787.291502][ T5220] ? genl_get_cmd+0x480/0x480 [ 787.296207][ T5220] ? netlink_ack+0xa60/0xa60 [ 787.300833][ T5220] ? netlink_deliver_tap+0x1b1/0xc30 [ 787.306150][ T5220] genl_rcv+0x24/0x40 [ 787.310159][ T5220] netlink_unicast+0x533/0x7d0 [ 787.314956][ T5220] ? netlink_attachskb+0x880/0x880 [ 787.320349][ T5220] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 787.326611][ T5220] ? __phys_addr_symbol+0x2c/0x70 [ 787.331749][ T5220] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 787.337503][ T5220] ? __check_object_size+0x16e/0x850 [ 787.343082][ T5220] netlink_sendmsg+0x86d/0xda0 [ 787.347876][ T5220] ? netlink_unicast+0x7d0/0x7d0 [ 787.352851][ T5220] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 787.359120][ T5220] ? netlink_unicast+0x7d0/0x7d0 [ 787.364149][ T5220] sock_sendmsg+0xcf/0x120 [ 787.368592][ T5220] ____sys_sendmsg+0x6e8/0x810 [ 787.373471][ T5220] ? kernel_sendmsg+0x50/0x50 [ 787.378175][ T5220] ? do_recvmmsg+0x6d0/0x6d0 [ 787.382798][ T5220] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 787.388970][ T5220] ? lockdep_hardirqs_on+0x79/0x100 [ 787.394194][ T5220] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 787.400378][ T5220] ___sys_sendmsg+0xf3/0x170 [ 787.405005][ T5220] ? sendmsg_copy_msghdr+0x160/0x160 [ 787.410406][ T5220] ? __fget_files+0x21b/0x3e0 [ 787.415102][ T5220] ? lock_downgrade+0x6e0/0x6e0 [ 787.420070][ T5220] ? __fget_files+0x23d/0x3e0 [ 787.424779][ T5220] ? __fget_light+0xea/0x280 [ 787.429401][ T5220] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 787.435674][ T5220] __sys_sendmsg+0xe5/0x1b0 [ 787.440210][ T5220] ? __sys_sendmsg_sock+0x30/0x30 [ 787.445458][ T5220] ? syscall_enter_from_user_mode+0x21/0x70 [ 787.451388][ T5220] do_syscall_64+0x35/0xb0 [ 787.455827][ T5220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.461735][ T5220] RIP: 0033:0x7fc78cb95ae9 [ 787.466165][ T5220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 787.485793][ T5220] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.494313][ T5220] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 787.502311][ T5220] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 787.510307][ T5220] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 787.518314][ T5220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.526393][ T5220] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 787.534415][ T5220] [ 787.613551][ T5242] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\v\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072e, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:15 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 787.933714][ T5258] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\f\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 788.004565][ T5264] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 788.022961][ T5264] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2072f, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 788.123781][ T5264] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 788.123781][ T5264] !' [ 788.163952][ T5264] CPU: 1 PID: 5264 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 788.173895][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.184103][ T5264] Call Trace: [ 788.187397][ T5264] [ 788.190342][ T5264] dump_stack_lvl+0xcd/0x134 [ 788.194967][ T5264] sysfs_warn_dup.cold+0x1c/0x29 [ 788.199929][ T5264] sysfs_do_create_link_sd+0x11e/0x140 [ 788.205417][ T5264] sysfs_create_link+0x5f/0xc0 [ 788.210215][ T5264] device_add+0x789/0x1ee0 [ 788.214658][ T5264] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.220920][ T5264] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 788.227204][ T5264] wiphy_register+0x1e94/0x29b0 [ 788.232103][ T5264] ? wiphy_unregister+0xbf0/0xbf0 [ 788.237154][ T5264] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.243704][ T5264] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 788.249382][ T5264] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 788.255175][ T5264] ieee80211_register_hw+0x1f18/0x3ed0 [ 788.260679][ T5264] ? ieee80211_restart_hw+0x290/0x290 [ 788.266087][ T5264] ? __hrtimer_init+0xed/0x280 [ 788.270871][ T5264] ? __sanitizer_cov_trace_pc+0x59/0x60 [ 788.276444][ T5264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 788.282712][ T5264] ? __hrtimer_init+0x136/0x280 [ 788.287701][ T5264] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 788.293465][ T5264] ? hwsim_virtio_rx_work+0x350/0x350 [ 788.298947][ T5264] ? hwsim_new_radio_nl+0x992/0x1080 [ 788.304268][ T5264] ? memcpy+0x39/0x60 [ 788.308286][ T5264] hwsim_new_radio_nl+0x9bc/0x1080 [ 788.313590][ T5264] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 788.319506][ T5264] ? __nla_validate_parse+0x2df/0x2410 [ 788.325087][ T5264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 788.331367][ T5264] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 788.338764][ T5264] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 788.346083][ T5264] genl_family_rcv_msg_doit+0x228/0x320 [ 788.351670][ T5264] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 788.359066][ T5264] ? ns_capable+0x7b/0x100 [ 788.363522][ T5264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 788.369789][ T5264] ? ns_capable+0xd9/0x100 [ 788.374238][ T5264] genl_rcv_msg+0x328/0x580 [ 788.378766][ T5264] ? genl_get_cmd+0x480/0x480 [ 788.383476][ T5264] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 788.389398][ T5264] ? lock_release+0x720/0x720 [ 788.394131][ T5264] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 788.399968][ T5264] netlink_rcv_skb+0x153/0x420 [ 788.404755][ T5264] ? genl_get_cmd+0x480/0x480 [ 788.409541][ T5264] ? netlink_ack+0xa60/0xa60 [ 788.414168][ T5264] ? netlink_deliver_tap+0x1b1/0xc30 [ 788.419478][ T5264] genl_rcv+0x24/0x40 [ 788.423499][ T5264] netlink_unicast+0x533/0x7d0 [ 788.428284][ T5264] ? netlink_attachskb+0x880/0x880 [ 788.433406][ T5264] ? __check_object_size+0x16e/0x850 [ 788.438726][ T5264] netlink_sendmsg+0x86d/0xda0 [ 788.443521][ T5264] ? netlink_unicast+0x7d0/0x7d0 [ 788.448484][ T5264] ? kcov_close+0x10/0x10 [ 788.452838][ T5264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 788.459105][ T5264] ? netlink_unicast+0x7d0/0x7d0 [ 788.464062][ T5264] sock_sendmsg+0xcf/0x120 [ 788.468503][ T5264] ____sys_sendmsg+0x6e8/0x810 [ 788.473291][ T5264] ? kernel_sendmsg+0x50/0x50 [ 788.478105][ T5264] ? do_recvmmsg+0x6d0/0x6d0 [ 788.482731][ T5264] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 788.488731][ T5264] ? lock_chain_count+0x20/0x20 [ 788.493612][ T5264] ___sys_sendmsg+0xf3/0x170 [ 788.498241][ T5264] ? sendmsg_copy_msghdr+0x160/0x160 [ 788.503562][ T5264] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.509744][ T5264] ? lockdep_hardirqs_on+0x79/0x100 [ 788.514968][ T5264] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.521156][ T5264] ? __fget_light+0xe1/0x280 [ 788.525791][ T5264] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 788.531361][ T5264] ? __fget_light+0xea/0x280 [ 788.535964][ T5264] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 788.542229][ T5264] __sys_sendmsg+0xe5/0x1b0 [ 788.546753][ T5264] ? __sys_sendmsg_sock+0x30/0x30 [ 788.551820][ T5264] ? syscall_enter_from_user_mode+0x21/0x70 [ 788.557743][ T5264] do_syscall_64+0x35/0xb0 [ 788.562270][ T5264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 788.568186][ T5264] RIP: 0033:0x7f5d21f6fae9 [ 788.572611][ T5264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.592238][ T5264] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.600777][ T5264] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 788.608867][ T5264] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 788.616860][ T5264] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 788.624853][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.632838][ T5264] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 788.640853][ T5264] [ 788.656812][ T10] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 06:12:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x9000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 788.723167][ T5275] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000e0024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20730, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000f0024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 788.925642][ T5288] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 788.964366][ T5288] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. 06:12:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xa000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 789.074126][ T5288] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 789.074126][ T5288] !' [ 789.119125][ T5288] CPU: 1 PID: 5288 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 789.129063][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.139143][ T5288] Call Trace: [ 789.142432][ T5288] [ 789.145376][ T5288] dump_stack_lvl+0xcd/0x134 [ 789.150000][ T5288] sysfs_warn_dup.cold+0x1c/0x29 [ 789.154966][ T5288] sysfs_do_create_link_sd+0x11e/0x140 [ 789.160459][ T5288] sysfs_create_link+0x5f/0xc0 [ 789.165267][ T5288] device_add+0x789/0x1ee0 [ 789.169713][ T5288] ? ieee80211_set_bitrate_flags+0x144/0x650 [ 789.175722][ T5288] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 789.181998][ T5288] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 789.188268][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.194536][ T5288] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 789.200557][ T5288] wiphy_register+0x1e94/0x29b0 [ 789.205460][ T5288] ? wiphy_unregister+0xbf0/0xbf0 [ 789.210500][ T5288] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 789.216684][ T5288] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 789.222349][ T5288] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 789.228017][ T5288] ieee80211_register_hw+0x1f18/0x3ed0 [ 789.233627][ T5288] ? ieee80211_restart_hw+0x290/0x290 [ 789.239030][ T5288] ? debug_object_destroy+0x210/0x210 [ 789.244433][ T5288] ? memset+0x20/0x40 [ 789.248435][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.254714][ T5288] ? __hrtimer_init+0x136/0x280 [ 789.259585][ T5288] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 789.265354][ T5288] ? hwsim_virtio_rx_work+0x350/0x350 [ 789.270746][ T5288] ? hwsim_new_radio_nl+0x992/0x1080 [ 789.276058][ T5288] ? memcpy+0x39/0x60 [ 789.280086][ T5288] hwsim_new_radio_nl+0x9bc/0x1080 [ 789.285228][ T5288] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 789.291151][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.297410][ T5288] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 789.304949][ T5288] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 789.312275][ T5288] genl_family_rcv_msg_doit+0x228/0x320 [ 789.317854][ T5288] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 789.325258][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.331547][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.337819][ T5288] ? ns_capable+0xd9/0x100 [ 789.342256][ T5288] genl_rcv_msg+0x328/0x580 [ 789.346783][ T5288] ? genl_get_cmd+0x480/0x480 [ 789.351478][ T5288] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 789.357402][ T5288] ? lock_release+0x720/0x720 [ 789.362110][ T5288] netlink_rcv_skb+0x153/0x420 [ 789.366894][ T5288] ? genl_get_cmd+0x480/0x480 [ 789.371598][ T5288] ? netlink_ack+0xa60/0xa60 [ 789.376221][ T5288] ? netlink_deliver_tap+0x1b1/0xc30 [ 789.381536][ T5288] genl_rcv+0x24/0x40 [ 789.385563][ T5288] netlink_unicast+0x533/0x7d0 [ 789.390356][ T5288] ? netlink_attachskb+0x880/0x880 [ 789.395494][ T5288] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 789.401763][ T5288] ? __phys_addr_symbol+0x2c/0x70 [ 789.406898][ T5288] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 789.412897][ T5288] ? __check_object_size+0x16e/0x850 [ 789.418211][ T5288] netlink_sendmsg+0x86d/0xda0 [ 789.422998][ T5288] ? netlink_unicast+0x7d0/0x7d0 [ 789.427962][ T5288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 789.434232][ T5288] ? netlink_unicast+0x7d0/0x7d0 [ 789.439206][ T5288] sock_sendmsg+0xcf/0x120 [ 789.443650][ T5288] ____sys_sendmsg+0x6e8/0x810 [ 789.448437][ T5288] ? kernel_sendmsg+0x50/0x50 [ 789.453133][ T5288] ? do_recvmmsg+0x6d0/0x6d0 [ 789.457757][ T5288] ? lock_chain_count+0x20/0x20 [ 789.462633][ T5288] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 789.468641][ T5288] ? sched_core_balance+0xa30/0xa30 [ 789.473861][ T5288] ? lock_downgrade+0x6e0/0x6e0 [ 789.478739][ T5288] ___sys_sendmsg+0xf3/0x170 [ 789.483355][ T5288] ? sendmsg_copy_msghdr+0x160/0x160 [ 789.488670][ T5288] ? __fget_files+0x21b/0x3e0 [ 789.493366][ T5288] ? lock_downgrade+0x6e0/0x6e0 [ 789.498262][ T5288] ? __fget_files+0x23d/0x3e0 [ 789.502971][ T5288] ? __fget_light+0xea/0x280 [ 789.507666][ T5288] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 789.513946][ T5288] __sys_sendmsg+0xe5/0x1b0 [ 789.518476][ T5288] ? __sys_sendmsg_sock+0x30/0x30 [ 789.523619][ T5288] ? lockdep_hardirqs_on+0x79/0x100 [ 789.528854][ T5288] ? trace_hardirqs_on+0x39/0x1c0 [ 789.533902][ T5288] ? syscall_enter_from_user_mode+0x2b/0x70 [ 789.539831][ T5288] do_syscall_64+0x35/0xb0 [ 789.544355][ T5288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.550269][ T5288] RIP: 0033:0x7fc78cb95ae9 [ 789.554706][ T5288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.574334][ T5288] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.582945][ T5288] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 789.590941][ T5288] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 789.598937][ T5288] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 789.606928][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.614915][ T5288] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 789.623017][ T5288] [ 790.177157][ T5298] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400100024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xb000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20731, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = io_uring_setup(0x5174, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r4, r5, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400110024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 790.567130][ T5327] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 790.572718][ T5324] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 06:12:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xc000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 790.652191][ T5324] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. 06:12:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20732, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 790.788116][ T5324] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 790.788116][ T5324] !' [ 790.813720][ T5324] CPU: 1 PID: 5324 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 790.823658][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.833761][ T5324] Call Trace: [ 790.837053][ T5324] [ 790.839998][ T5324] dump_stack_lvl+0xcd/0x134 [ 790.844711][ T5324] sysfs_warn_dup.cold+0x1c/0x29 [ 790.849689][ T5324] sysfs_do_create_link_sd+0x11e/0x140 [ 790.855185][ T5324] sysfs_create_link+0x5f/0xc0 [ 790.859980][ T5324] device_add+0x789/0x1ee0 [ 790.864437][ T5324] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 790.870717][ T5324] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 790.876988][ T5324] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 790.883258][ T5324] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 790.889449][ T5324] wiphy_register+0x1e94/0x29b0 [ 790.894355][ T5324] ? wiphy_unregister+0xbf0/0xbf0 [ 790.899406][ T5324] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 790.905615][ T5324] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 790.911282][ T5324] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 790.916947][ T5324] ieee80211_register_hw+0x1f18/0x3ed0 [ 790.922455][ T5324] ? ieee80211_restart_hw+0x290/0x290 [ 790.927890][ T5324] ? debug_object_destroy+0x210/0x210 [ 790.933292][ T5324] ? memset+0x20/0x40 [ 790.937293][ T5324] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 790.943562][ T5324] ? __hrtimer_init+0x136/0x280 [ 790.948448][ T5324] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 790.954220][ T5324] ? hwsim_virtio_rx_work+0x350/0x350 [ 790.959701][ T5324] ? hwsim_new_radio_nl+0x992/0x1080 [ 790.965010][ T5324] ? memcpy+0x39/0x60 [ 790.969021][ T5324] hwsim_new_radio_nl+0x9bc/0x1080 [ 790.974172][ T5324] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 790.980083][ T5324] ? lockdep_hardirqs_on+0x79/0x100 [ 790.985333][ T5324] genl_family_rcv_msg_doit+0x228/0x320 [ 790.990904][ T5324] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 790.998301][ T5324] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.004585][ T5324] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.010860][ T5324] ? ns_capable+0xd9/0x100 [ 791.015305][ T5324] genl_rcv_msg+0x328/0x580 [ 791.019845][ T5324] ? genl_get_cmd+0x480/0x480 [ 791.024562][ T5324] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 791.030734][ T5324] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 791.036663][ T5324] netlink_rcv_skb+0x153/0x420 [ 791.041463][ T5324] ? genl_get_cmd+0x480/0x480 [ 791.046172][ T5324] ? netlink_ack+0xa60/0xa60 [ 791.050795][ T5324] ? netlink_deliver_tap+0x1b1/0xc30 [ 791.056114][ T5324] genl_rcv+0x24/0x40 [ 791.060122][ T5324] netlink_unicast+0x533/0x7d0 [ 791.064920][ T5324] ? netlink_attachskb+0x880/0x880 [ 791.070053][ T5324] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 791.076320][ T5324] ? __phys_addr_symbol+0x2c/0x70 [ 791.081460][ T5324] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 791.087209][ T5324] ? __check_object_size+0x16e/0x850 [ 791.092527][ T5324] netlink_sendmsg+0x86d/0xda0 [ 791.097412][ T5324] ? netlink_unicast+0x7d0/0x7d0 [ 791.102389][ T5324] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.108668][ T5324] ? netlink_unicast+0x7d0/0x7d0 [ 791.113721][ T5324] sock_sendmsg+0xcf/0x120 [ 791.118169][ T5324] ____sys_sendmsg+0x6e8/0x810 [ 791.122961][ T5324] ? kernel_sendmsg+0x50/0x50 [ 791.127662][ T5324] ? do_recvmmsg+0x6d0/0x6d0 [ 791.132287][ T5324] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 791.138290][ T5324] ? lock_chain_count+0x20/0x20 [ 791.143175][ T5324] ___sys_sendmsg+0xf3/0x170 [ 791.147795][ T5324] ? sendmsg_copy_msghdr+0x160/0x160 [ 791.153123][ T5324] ? __fget_files+0x21b/0x3e0 [ 791.157822][ T5324] ? lock_downgrade+0x6e0/0x6e0 [ 791.162710][ T5324] ? __fget_files+0x23d/0x3e0 [ 791.167419][ T5324] ? __fget_light+0xea/0x280 [ 791.172043][ T5324] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 791.178350][ T5324] __sys_sendmsg+0xe5/0x1b0 [ 791.182884][ T5324] ? __sys_sendmsg_sock+0x30/0x30 [ 791.187961][ T5324] ? syscall_enter_from_user_mode+0x21/0x70 [ 791.193893][ T5324] do_syscall_64+0x35/0xb0 [ 791.198337][ T5324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 791.204260][ T5324] RIP: 0033:0x7fc78cb95ae9 [ 791.208689][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 791.228319][ T5324] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:12:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00`\x00$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 791.237107][ T5324] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 791.245103][ T5324] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 791.253098][ T5324] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 791.261088][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.269109][ T5324] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 791.277131][ T5324] [ 791.384474][ T5331] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:18 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xe000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20733, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 791.517183][ T5331] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 791.517183][ T5331] !' [ 791.567887][ T5331] CPU: 1 PID: 5331 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 791.577827][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.587904][ T5331] Call Trace: [ 791.591198][ T5331] [ 791.594141][ T5331] dump_stack_lvl+0xcd/0x134 [ 791.598771][ T5331] sysfs_warn_dup.cold+0x1c/0x29 [ 791.603748][ T5331] sysfs_do_create_link_sd+0x11e/0x140 [ 791.609247][ T5331] sysfs_create_link+0x5f/0xc0 [ 791.614045][ T5331] device_add+0x789/0x1ee0 [ 791.618512][ T5331] ? wait_for_completion_io+0x270/0x270 [ 791.624092][ T5331] ? lock_downgrade+0x6e0/0x6e0 [ 791.628972][ T5331] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 791.635249][ T5331] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 791.641522][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.647801][ T5331] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 791.653829][ T5331] wiphy_register+0x1e94/0x29b0 [ 791.658720][ T5331] ? wiphy_unregister+0xbf0/0xbf0 [ 791.663767][ T5331] ? minstrel_ht_alloc+0x52c/0xa10 [ 791.668919][ T5331] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 791.675025][ T5331] ieee80211_register_hw+0x1f18/0x3ed0 [ 791.680529][ T5331] ? ieee80211_restart_hw+0x290/0x290 [ 791.685927][ T5331] ? debug_object_destroy+0x210/0x210 [ 791.691329][ T5331] ? memset+0x20/0x40 [ 791.695337][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.701604][ T5331] ? __hrtimer_init+0x136/0x280 [ 791.706575][ T5331] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 791.712340][ T5331] ? hwsim_virtio_rx_work+0x350/0x350 [ 791.717911][ T5331] ? hwsim_new_radio_nl+0x992/0x1080 [ 791.723225][ T5331] ? memcpy+0x39/0x60 [ 791.727238][ T5331] hwsim_new_radio_nl+0x9bc/0x1080 [ 791.732412][ T5331] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 791.738347][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.744621][ T5331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 791.752016][ T5331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 791.759426][ T5331] genl_family_rcv_msg_doit+0x228/0x320 [ 791.765012][ T5331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 791.772503][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.778782][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.785043][ T5331] ? ns_capable+0xd9/0x100 [ 791.789484][ T5331] genl_rcv_msg+0x328/0x580 [ 791.794025][ T5331] ? genl_get_cmd+0x480/0x480 [ 791.798745][ T5331] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 791.804842][ T5331] ? lock_release+0x720/0x720 [ 791.809606][ T5331] netlink_rcv_skb+0x153/0x420 [ 791.814397][ T5331] ? genl_get_cmd+0x480/0x480 [ 791.819095][ T5331] ? netlink_ack+0xa60/0xa60 [ 791.823727][ T5331] ? netlink_deliver_tap+0x1b1/0xc30 [ 791.829045][ T5331] genl_rcv+0x24/0x40 [ 791.833053][ T5331] netlink_unicast+0x533/0x7d0 [ 791.837846][ T5331] ? netlink_attachskb+0x880/0x880 [ 791.843247][ T5331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 791.849522][ T5331] ? __phys_addr_symbol+0x2c/0x70 [ 791.854659][ T5331] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 791.860416][ T5331] ? __check_object_size+0x16e/0x850 [ 791.865741][ T5331] netlink_sendmsg+0x86d/0xda0 [ 791.870551][ T5331] ? netlink_unicast+0x7d0/0x7d0 [ 791.875525][ T5331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 791.881797][ T5331] ? netlink_unicast+0x7d0/0x7d0 [ 791.886860][ T5331] sock_sendmsg+0xcf/0x120 [ 791.891312][ T5331] ____sys_sendmsg+0x6e8/0x810 [ 791.896119][ T5331] ? kernel_sendmsg+0x50/0x50 [ 791.900823][ T5331] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 791.907026][ T5331] ? ___sys_sendmsg+0xd2/0x170 [ 791.911946][ T5331] ___sys_sendmsg+0xf3/0x170 [ 791.916569][ T5331] ? sendmsg_copy_msghdr+0x160/0x160 [ 791.922105][ T5331] ? __fget_files+0x21b/0x3e0 [ 791.926805][ T5331] ? lock_downgrade+0x6e0/0x6e0 [ 791.931700][ T5331] ? __fget_files+0x23d/0x3e0 [ 791.936586][ T5331] ? __fget_light+0xea/0x280 [ 791.941206][ T5331] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 791.947486][ T5331] __sys_sendmsg+0xe5/0x1b0 [ 791.952021][ T5331] ? __sys_sendmsg_sock+0x30/0x30 [ 791.957224][ T5331] ? syscall_enter_from_user_mode+0x21/0x70 [ 791.963333][ T5331] do_syscall_64+0x35/0xb0 [ 791.967788][ T5331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 791.973714][ T5331] RIP: 0033:0x7f5d21f6fae9 [ 791.978146][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 791.997773][ T5331] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.006300][ T5331] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 06:12:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 792.014298][ T5331] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 792.022295][ T5331] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 792.030302][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.038301][ T5331] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 792.046328][ T5331] 06:12:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400f00024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 792.497816][ T5362] __nla_validate_parse: 2 callbacks suppressed [ 792.497835][ T5362] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.518791][ T5365] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 792.537692][ T5365] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. [ 792.616397][ T5365] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 792.616397][ T5365] !' [ 792.659859][ T5365] CPU: 0 PID: 5365 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 792.669817][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.679899][ T5365] Call Trace: [ 792.683194][ T5365] [ 792.686138][ T5365] dump_stack_lvl+0xcd/0x134 [ 792.690766][ T5365] sysfs_warn_dup.cold+0x1c/0x29 [ 792.695738][ T5365] sysfs_do_create_link_sd+0x11e/0x140 [ 792.701236][ T5365] sysfs_create_link+0x5f/0xc0 [ 792.706035][ T5365] device_add+0x789/0x1ee0 [ 792.710508][ T5365] ? wait_for_completion_io+0x270/0x270 [ 792.716123][ T5365] ? lock_downgrade+0x6e0/0x6e0 [ 792.721004][ T5365] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 792.727279][ T5365] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 792.733666][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.739952][ T5365] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 792.745978][ T5365] wiphy_register+0x1e94/0x29b0 [ 792.750848][ T5365] ? wiphy_unregister+0xbf0/0xbf0 [ 792.755896][ T5365] ? minstrel_ht_alloc+0x52c/0xa10 [ 792.761040][ T5365] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 792.767188][ T5365] ieee80211_register_hw+0x1f18/0x3ed0 [ 792.772678][ T5365] ? ieee80211_restart_hw+0x290/0x290 [ 792.778154][ T5365] ? debug_object_destroy+0x210/0x210 [ 792.783560][ T5365] ? memset+0x20/0x40 [ 792.787546][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.793799][ T5365] ? __hrtimer_init+0x136/0x280 [ 792.798660][ T5365] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 792.804409][ T5365] ? hwsim_virtio_rx_work+0x350/0x350 [ 792.809785][ T5365] ? hwsim_new_radio_nl+0x992/0x1080 [ 792.815083][ T5365] ? memcpy+0x39/0x60 [ 792.819077][ T5365] hwsim_new_radio_nl+0x9bc/0x1080 [ 792.824198][ T5365] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 792.830139][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.836399][ T5365] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 792.843783][ T5365] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 792.851090][ T5365] genl_family_rcv_msg_doit+0x228/0x320 [ 792.856657][ T5365] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 792.864049][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.870330][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.876580][ T5365] ? ns_capable+0xd9/0x100 [ 792.881007][ T5365] genl_rcv_msg+0x328/0x580 [ 792.885523][ T5365] ? genl_get_cmd+0x480/0x480 [ 792.890209][ T5365] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 792.896114][ T5365] ? lock_release+0x720/0x720 [ 792.900821][ T5365] netlink_rcv_skb+0x153/0x420 [ 792.905613][ T5365] ? genl_get_cmd+0x480/0x480 [ 792.910304][ T5365] ? netlink_ack+0xa60/0xa60 [ 792.914909][ T5365] ? netlink_deliver_tap+0x1b1/0xc30 [ 792.920217][ T5365] genl_rcv+0x24/0x40 [ 792.924232][ T5365] netlink_unicast+0x533/0x7d0 [ 792.929009][ T5365] ? netlink_attachskb+0x880/0x880 [ 792.934213][ T5365] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 792.940481][ T5365] ? __phys_addr_symbol+0x2c/0x70 [ 792.945509][ T5365] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 792.951237][ T5365] ? __check_object_size+0x16e/0x850 [ 792.956552][ T5365] netlink_sendmsg+0x86d/0xda0 [ 792.961346][ T5365] ? netlink_unicast+0x7d0/0x7d0 [ 792.966304][ T5365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.972563][ T5365] ? netlink_unicast+0x7d0/0x7d0 [ 792.977507][ T5365] sock_sendmsg+0xcf/0x120 [ 792.982022][ T5365] ____sys_sendmsg+0x6e8/0x810 [ 792.986796][ T5365] ? kernel_sendmsg+0x50/0x50 [ 792.991478][ T5365] ? do_recvmmsg+0x6d0/0x6d0 [ 792.996081][ T5365] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 793.002075][ T5365] ? lock_chain_count+0x20/0x20 [ 793.006950][ T5365] ___sys_sendmsg+0xf3/0x170 [ 793.011565][ T5365] ? sendmsg_copy_msghdr+0x160/0x160 [ 793.016866][ T5365] ? __fget_files+0x21b/0x3e0 [ 793.021557][ T5365] ? lock_downgrade+0x6e0/0x6e0 [ 793.026440][ T5365] ? __fget_files+0x23d/0x3e0 [ 793.031128][ T5365] ? __fget_light+0xea/0x280 [ 793.035731][ T5365] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.041991][ T5365] __sys_sendmsg+0xe5/0x1b0 [ 793.046506][ T5365] ? __sys_sendmsg_sock+0x30/0x30 [ 793.051540][ T5365] ? lockdep_hardirqs_on+0x79/0x100 [ 793.056862][ T5365] ? trace_hardirqs_on+0x39/0x1c0 [ 793.061913][ T5365] ? syscall_enter_from_user_mode+0x2b/0x70 [ 793.067824][ T5365] do_syscall_64+0x35/0xb0 [ 793.072252][ T5365] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.078166][ T5365] RIP: 0033:0x7fc78cb95ae9 [ 793.082603][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.102325][ T5365] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.110927][ T5365] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 793.118898][ T5365] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 793.126880][ T5365] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 793.134861][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.143008][ T5365] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 793.151002][ T5365] 06:12:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20734, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000324000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 793.285016][ T5386] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 793.314161][ T5386] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.379697][ T5398] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400e80324000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 793.538405][ T5386] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 793.538405][ T5386] !' [ 793.579540][ T5386] CPU: 1 PID: 5386 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 793.590181][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.600369][ T5386] Call Trace: [ 793.603667][ T5386] [ 793.606615][ T5386] dump_stack_lvl+0xcd/0x134 [ 793.611240][ T5386] sysfs_warn_dup.cold+0x1c/0x29 [ 793.616210][ T5386] sysfs_do_create_link_sd+0x11e/0x140 [ 793.621711][ T5386] sysfs_create_link+0x5f/0xc0 [ 793.626527][ T5386] device_add+0x789/0x1ee0 [ 793.630986][ T5386] ? ieee80211_set_bitrate_flags+0xad/0x650 [ 793.636915][ T5386] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 793.643195][ T5386] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 793.649472][ T5386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.655761][ T5386] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 793.661785][ T5386] wiphy_register+0x1e94/0x29b0 [ 793.666682][ T5386] ? wiphy_unregister+0xbf0/0xbf0 [ 793.671740][ T5386] ? minstrel_ht_alloc+0x52c/0xa10 [ 793.676978][ T5386] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 793.683083][ T5386] ieee80211_register_hw+0x1f18/0x3ed0 [ 793.688587][ T5386] ? ieee80211_restart_hw+0x290/0x290 [ 793.693999][ T5386] ? __sanitizer_cov_trace_pc+0x7/0x60 [ 793.699485][ T5386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.705759][ T5386] ? __hrtimer_init+0x136/0x280 [ 793.710639][ T5386] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 793.716409][ T5386] ? hwsim_virtio_rx_work+0x350/0x350 [ 793.721797][ T5386] ? hwsim_new_radio_nl+0x992/0x1080 [ 793.727109][ T5386] ? memcpy+0x39/0x60 [ 793.731121][ T5386] hwsim_new_radio_nl+0x9bc/0x1080 [ 793.736260][ T5386] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 793.742179][ T5386] ? lockdep_hardirqs_on+0x79/0x100 [ 793.747422][ T5386] genl_family_rcv_msg_doit+0x228/0x320 [ 793.753000][ T5386] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 793.760490][ T5386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.766779][ T5386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.773132][ T5386] ? ns_capable+0xd9/0x100 [ 793.777584][ T5386] genl_rcv_msg+0x328/0x580 [ 793.782117][ T5386] ? genl_get_cmd+0x480/0x480 [ 793.786821][ T5386] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 793.792747][ T5386] ? lock_release+0x720/0x720 [ 793.797463][ T5386] netlink_rcv_skb+0x153/0x420 [ 793.802242][ T5386] ? genl_get_cmd+0x480/0x480 [ 793.806936][ T5386] ? netlink_ack+0xa60/0xa60 [ 793.811545][ T5386] ? netlink_deliver_tap+0x1b1/0xc30 [ 793.816846][ T5386] genl_rcv+0x24/0x40 [ 793.820845][ T5386] netlink_unicast+0x533/0x7d0 [ 793.825710][ T5386] ? netlink_attachskb+0x880/0x880 [ 793.830833][ T5386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.837089][ T5386] ? __phys_addr_symbol+0x2c/0x70 [ 793.842127][ T5386] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 793.847877][ T5386] ? __check_object_size+0x16e/0x850 [ 793.853181][ T5386] netlink_sendmsg+0x86d/0xda0 [ 793.857974][ T5386] ? netlink_unicast+0x7d0/0x7d0 [ 793.862939][ T5386] ? sock_sendmsg+0x4b/0x120 [ 793.867540][ T5386] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 793.873987][ T5386] ? netlink_unicast+0x7d0/0x7d0 [ 793.878939][ T5386] sock_sendmsg+0xcf/0x120 [ 793.883373][ T5386] ____sys_sendmsg+0x6e8/0x810 [ 793.888158][ T5386] ? kernel_sendmsg+0x50/0x50 [ 793.892846][ T5386] ? do_recvmmsg+0x6d0/0x6d0 [ 793.897460][ T5386] ? lock_chain_count+0x20/0x20 [ 793.902437][ T5386] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 793.908438][ T5386] ? sched_core_balance+0xa30/0xa30 [ 793.913650][ T5386] ? lock_downgrade+0x6e0/0x6e0 [ 793.918535][ T5386] ___sys_sendmsg+0xf3/0x170 [ 793.923149][ T5386] ? sendmsg_copy_msghdr+0x160/0x160 [ 793.928463][ T5386] ? __fget_files+0x21b/0x3e0 [ 793.933155][ T5386] ? lock_downgrade+0x6e0/0x6e0 [ 793.938034][ T5386] ? __fget_files+0x23d/0x3e0 [ 793.942727][ T5386] ? __fget_light+0xea/0x280 [ 793.947323][ T5386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.953596][ T5386] __sys_sendmsg+0xe5/0x1b0 [ 793.958113][ T5386] ? __sys_sendmsg_sock+0x30/0x30 [ 793.963165][ T5386] ? syscall_enter_from_user_mode+0x21/0x70 [ 793.969081][ T5386] do_syscall_64+0x35/0xb0 [ 793.973508][ T5386] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.979433][ T5386] RIP: 0033:0x7f5d21f6fae9 [ 793.983855][ T5386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.003674][ T5386] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.012197][ T5386] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 794.020168][ T5386] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 06:12:21 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000006c0)={0x1, [{r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {r3}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r3}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2}, {r2, r4}, {}, {r3}, {r2}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r2}, {r3}, {}, {r3, r4}, {r2, r4}, {r3}, {r3}, {r3}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {r2, r4}, {r2}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {}, {r3, r4}, {r2, r4}, {}, {r3, r4}, {r3, r4}, {r2}, {r3}, {r2}, {r2}, {r3, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3}, {r3, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {r3}, {r3}, {r3, r4}, {0x0, r4}, {r2, r4}, {r2}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {}, {}, {r2}, {}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r2, r4}, {}, {r3}, {r2}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r3}, {r2}, {}, {}, {r2, r4}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, 0x0}, {r3}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2}, {r3}, {r3}, {r2}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r2, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {}, {r3}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2}, {r2, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {r3}, {r2}, {0x0, r4}, {}, {r2, r4}, {r3}, {r3}, {}, {r3, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {r3, r4}, {r3, r4}, {r3, r4}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r2, r4}, {r2}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {r2}, {0x0, r4}], 0x9, "bd70f1bfd167a9"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000006c0)={0x1, [{r8, r9}, {r8, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r8}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {r8}, {r7}, {r7}, {0x0, r9}, {r7, r9}, {}, {r7}, {r7, r9}, {r7, r9}, {r8}, {r7, r9}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r7}, {r7, r9}, {}, {r8}, {r7}, {r8}, {r8}, {r8, r9}, {}, {r7, r9}, {0x0, r9}, {r7}, {}, {r7}, {r8}, {}, {r8, r9}, {r7, r9}, {r8}, {r8}, {r8}, {r8}, {0x0, r9}, {0x0, r9}, {}, {r7}, {}, {r7, r9}, {r7}, {r8, r9}, {r7, r9}, {r7}, {r8, r9}, {}, {r8, r9}, {r7, r9}, {}, {r8, r9}, {r8, r9}, {r7}, {r8}, {r7}, {r7}, {r8, r9}, {}, {r7, r9}, {r8, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8}, {r8, r9}, {}, {r8}, {r7, r9}, {0x0, r9}, {r7}, {r8}, {r8}, {r8}, {r8, r9}, {0x0, r9}, {r7, r9}, {r7}, {r8, r9}, {}, {r7, r9}, {r7, r9}, {r8, r9}, {}, {}, {r7}, {}, {}, {r7, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {}, {0x0, r9}, {r7, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {r8, r9}, {r7, r9}, {}, {r8}, {r7}, {r8}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r8}, {r7}, {}, {}, {r7, r9}, {r7}, {r8}, {0x0, r9}, {r8, r9}, {r8, r9}, {r8}, {0x0, r9}, {r7, r9}, {r8, r9}, {}, {}, {r8}, {}, {0x0, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {r8}, {r8}, {r7}, {}, {r8}, {0x0, r9}, {0x0, r9}, {r7, r9}, {}, {r7, r9}, {r7}, {0x0, r9}, {r8, r9}, {r7}, {0x0, r9}, {}, {r8}, {}, {r8}, {r7, r9}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {}, {r7, r9}, {0x0, r9}, {0x0, r9}, {r7}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r7, r9}, {r7, r9}, {r8}, {}, {r8, r9}, {0x0, r9}, {r8}, {r7}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {r7, r9}, {r8}, {r7}, {0x0, r5}, {}, {r7, r9}, {r8}, {r8}, {}, {r8, r9}, {r8}, {}, {r7, r9}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r8}, {r7}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r7, r9}, {r7}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7}, {0x0, r9}, {r7}, {r7, r9}, {r7, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {r7, r9}, {r7}, {0x0, r9}], 0x9, "bd70f1bfd167a9"}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r11, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000006c0)={0x1, [{r13, r14}, {r13, r14}, {r13, r14}, {0x0, r14}, {r12, r14}, {r13}, {r13, r14}, {r12, r14}, {r12, r14}, {r13, r14}, {r13}, {r12, r14}, {r13}, {r12}, {r12}, {0x0, r14}, {r12, r14}, {}, {r12}, {r12, r14}, {r12, r14}, {r13}, {r12, r14}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r12}, {r12, r14}, {}, {r13}, {r12}, {r13}, {r13}, {r13, r14}, {}, {r12, r14}, {0x0, r14}, {r12}, {}, {r12}, {r13}, {}, {r13, r14}, {r12, r14}, {r13}, {r13}, {r13}, {r13}, {0x0, r14}, {0x0, r14}, {}, {r12}, {}, {r12, r14}, {r12}, {r13, r14}, {r12, r14}, {r12}, {r13, r14}, {}, {r13, r14}, {r12, r14}, {}, {r13, r14}, {r10, r14}, {r12}, {r13}, {r12}, {r12}, {r13, r14}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {r13, r14}, {r13, r14}, {r13, r14}, {r13, r14}, {r13}, {r13, r14}, {}, {r13}, {r12, r14}, {0x0, r14}, {r12}, {r13}, {r13}, {r13}, {r13, r14}, {0x0, r14}, {r12, r14}, {r12}, {r13, r14}, {}, {r12, r14}, {r12, r14}, {r13, r14}, {}, {}, {r12}, {}, {}, {r12, r14}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {r12, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13, r14}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {r13, r14}, {r12, r14}, {}, {r13}, {r12}, {r13}, {0x0, r14}, {0x0, r14}, {r13, r14}, {r13}, {r12}, {}, {}, {r12, r14}, {r12}, {r13}, {0x0, r14}, {r13, r14}, {r13, r14}, {r13}, {0x0, r14}, {r12, r14}, {r13, r14}, {}, {}, {r13}, {}, {0x0, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r12}, {r13}, {r13}, {r12}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {r12, r14}, {r12}, {0x0, r14}, {r13, r14}, {r12}, {0x0, r14}, {}, {r13}, {}, {r13}, {r12, r14}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {r12, r14}, {0x0, r14}, {0x0, r14}, {r12}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {r12}, {r12, r14}, {r12, r14}, {r13}, {}, {r13, r14}, {0x0, r14}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {0x0, r14}, {0x0, r14}, {}, {r12, r14}, {r13}, {r12}, {0x0, r14}, {}, {r12, r14}, {r13}, {r13}, {}, {r13, r14}, {r13}, {}, {r12, r14}, {0x0, r14}, {r12}, {r13}, {r13, r14}, {r13, r14}, {r13, r14}, {r12, r14}, {r12}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {r12}, {0x0, r14}, {0x0, r14}, {r12}, {}, {r12, r14}, {r12}, {r12, r14}, {0x0, r14}, {r13, r14}, {r12}, {0x0, r14}, {r12}, {r12, r14}, {r12, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r12}, {r12, r14}, {r12}, {0x0, r14}], 0x9, "bd70f1bfd167a9"}) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r15, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000006c0)={0x1, [{r17, r18}, {r17, r18}, {r17, r18}, {0x0, r18}, {r16, r18}, {r17}, {r17, r18}, {r16, r18}, {r16, r18}, {r17, r18}, {r17}, {r16, r18}, {r17}, {r16}, {r16}, {0x0, r18}, {r16, r18}, {}, {r16}, {r16, r18}, {r16, r18}, {r17}, {r16, r18}, {0x0, r18}, {0x0, r18}, {r16, r18}, {r16}, {r16, r18}, {}, {r17}, {r16}, {r17}, {r17}, {r17, r18}, {}, {r16, r18}, {0x0, r18}, {r16}, {}, {r16}, {r17}, {}, {r17, r18}, {r16, r18}, {r17}, {r17}, {r17}, {r17}, {0x0, r18}, {0x0, r18}, {}, {r16}, {}, {r16, r18}, {r16}, {r17, r18}, {r16, r18}, {r16}, {r17, r18}, {}, {r17, r18}, {r16, r18}, {}, {r17, r18}, {r17, r18}, {r16}, {r17}, {r16}, {r16}, {r17, r18}, {}, {r16, r18}, {r17, r18}, {0x0, r18}, {r17, r18}, {r17, r18}, {r17, r18}, {r17, r18}, {r17}, {r17, r18}, {}, {r17}, {r16, r18}, {0x0, r18}, {r16}, {r17}, {r17}, {r17}, {r17, r18}, {0x0, r18}, {r16, r18}, {r16}, {r17, r18}, {}, {r16, r18}, {r16, r18}, {r17, r18}, {}, {}, {r16}, {}, {}, {r16, r18}, {r16, r18}, {r17, r18}, {0x0, r18}, {}, {0x0, r18}, {r16, r18}, {}, {0x0, r18}, {0x0, r18}, {}, {0x0, r18}, {0x0, r18}, {0x0, r18}, {0x0, r18}, {r16, r18}, {r17, r18}, {0x0, r18}, {0x0, r18}, {}, {0x0, r18}, {r17, r18}, {r16, r18}, {}, {r17}, {r16}, {r17}, {0x0, r18}, {0x0, r18}, {r17, r18}, {r17}, {r16}, {}, {}, {r16, r18}, {r16}, {r17}, {0x0, r18}, {r17, r18}, {r17, r18}, {r17}, {0x0, r18}, {r16, r18}, {r17, r18}, {}, {}, {r17}, {}, {0x0, r18}, {0x0, r18}, {r17, r18}, {0x0, r18}, {r16}, {r17}, {r17}, {r16}, {}, {r17}, {0x0, r18}, {0x0, r18}, {r16, r18}, {}, {r16, r18}, {r16}, {0x0, r18}, {r17, r18}, {r16}, {0x0, r18}, {}, {r17}, {}, {r17}, {r16, r18}, {0x0, r18}, {r16, r18}, {0x0, r18}, {r17, r18}, {0x0, r18}, {}, {r16, r18}, {0x0, r18}, {0x0, r18}, {r16}, {r17}, {0x0, r18}, {}, {}, {0x0, r18}, {r16}, {r16, r18}, {r16, r18}, {r17}, {}, {r17, r18}, {0x0, r18}, {r17}, {r16}, {0x0, r18}, {r17, r18}, {0x0, r18}, {0x0, r18}, {}, {r16, r18}, {r17}, {r16}, {0x0, r18}, {}, {r16, r18}, {r17}, {r17}, {}, {r17, r18}, {r17}, {}, {r16, r18}, {0x0, r18}, {r16}, {r17}, {r17, r18}, {r17, r18}, {r17, r18}, {r16, r18}, {r16}, {}, {0x0, r18}, {}, {0x0, r18}, {}, {r17}, {r16}, {0x0, r18}, {0x0, r18}, {r16}, {}, {r16, r18}, {r16}, {r16, r18}, {0x0, r18}, {r17, r18}, {r16}, {0x0, r18}, {r16}, {r16, r18}, {r16, r18}, {0x0, r18}, {0x0, r18}, {0x0, r18}, {r17, r18}, {0x0, r18}, {r16}, {r16, r18}, {r16}, {0x0, r18}], 0x9, "bd70f1bfd167a9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051f00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r9}, {r13, r18}], 0xff, "088b66d47f5f8e"}) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) [ 794.028136][ T5386] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 794.036108][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.044078][ T5386] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 794.052072][ T5386] 06:12:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000524000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x10000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20735, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="de406f12ce6fccc787ec5f8493a4c04b60289f9535d7bb54", 0x18, 0x4f0e}, {&(0x7f0000000180)="e08dfafc88db64aed6b17484a72e4ab81cbd8f28712432789e6196af20d8b9b197ca622d923599c5f70a15ee6fce726a722018aebb9e00b7cd6db8520a8045d0b3c99ecfc1a2b334ab612bc8a9c087135a2e8db47c31f6ccbd5a7189c018f79cdb7fbaaddd790a917421cc65d67309fb377b318c443573e80d546440f630d9653d3c348e39da42965324137450ce3c76529178cda1f0b13b5fe6ef5be0b9c9b91f5a28901e5ab2cb49a24d5a25ffae77b4ab130e7f44eed9754e585f71c60ea8", 0xc0, 0x101}, {&(0x7f00000002c0)="6c38d6b0f28f38f99ed24b5ab7dffea5d62893e6e2f21d0824f645c88b4ac0f7541566c7b33211bf43a73b8cd8a292083631ee938678e5fb93c6dd51954ceeb39dd5adde8c26b506cb26f369e2d18c990907857cb0fbf0707b0fdf513eccf69737ca46814ee1449165c231d2c731a65206ddda44393809096f78cc6cf67efe4372457c3fcbc89c055acfb720d9ca40386a3b3571053ac4d96a9a908ca0c45ee2a9a5fc6d35c4f36dbc25a75fc2412f01c0fccc88e5af74a49abde6ca53da92e21cd24b05cf999d15475d54aae93ec8e9dae0c99c1b71a640845a3fb7da65dbf9e568e49de67fb81e57dab09bf6", 0xed, 0x7ff}], 0x200000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_user=],\x00']) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) sched_setattr(r0, &(0x7f0000000580)={0x38, 0x0, 0x20, 0x10000, 0x987, 0x3, 0x7b3a, 0x3, 0x2, 0x8}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x505001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 794.338618][ T5427] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 794.435231][ T5434] loop3: detected capacity change from 0 to 79 [ 794.463270][ T5434] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 06:12:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000624000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x11000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 794.517000][ T5434] loop3: detected capacity change from 0 to 79 [ 794.528078][ T5434] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 06:12:22 executing program 3: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) eventfd(0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x6, 0x4, 0x0, 0x5, 0x0, 0x806, 0x800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x6, @perf_bp={&(0x7f00000000c0), 0x6}, 0xa00, 0xfffffffffffffffe, 0xa2ca, 0x2, 0x4, 0x6, 0x3, 0x0, 0x18, 0x0, 0x5}, 0x0, 0x10, r0, 0x8) syz_mount_image$vxfs(&(0x7f0000000080), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="aea895e7a7a700"]) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) 06:12:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\a$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 794.633446][ T5453] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.713756][ T5457] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 06:12:22 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x60000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 794.760946][ T5457] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.4'. 06:12:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3ffff, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\t$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 795.018495][ T5461] vxfs: WRONG superblock magic 00000000 at 1 [ 795.042450][ T5457] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 795.042450][ T5457] !' [ 795.063964][ T5457] CPU: 0 PID: 5457 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 795.064212][ T5461] vxfs: WRONG superblock magic 00000000 at 8 [ 795.074030][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.074052][ T5457] Call Trace: [ 795.074064][ T5457] [ 795.074076][ T5457] dump_stack_lvl+0xcd/0x134 [ 795.074117][ T5457] sysfs_warn_dup.cold+0x1c/0x29 [ 795.074156][ T5457] sysfs_do_create_link_sd+0x11e/0x140 [ 795.074194][ T5457] sysfs_create_link+0x5f/0xc0 [ 795.074230][ T5457] device_add+0x789/0x1ee0 [ 795.074266][ T5457] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 795.074303][ T5457] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 795.074356][ T5457] wiphy_register+0x1e94/0x29b0 [ 795.074397][ T5457] ? wiphy_unregister+0xbf0/0xbf0 [ 795.074422][ T5457] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 795.074459][ T5457] ? ieee80211_register_hw+0x1db8/0x3ed0 [ 795.074495][ T5457] ? ieee80211_register_hw+0x1ece/0x3ed0 [ 795.074534][ T5457] ieee80211_register_hw+0x1f18/0x3ed0 [ 795.074586][ T5457] ? ieee80211_restart_hw+0x290/0x290 [ 795.074623][ T5457] ? debug_object_destroy+0x210/0x210 [ 795.074658][ T5457] ? memset+0x20/0x40 [ 795.074684][ T5457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 795.074718][ T5457] ? __hrtimer_init+0x136/0x280 [ 795.074753][ T5457] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 795.074806][ T5457] ? hwsim_virtio_rx_work+0x350/0x350 [ 795.074832][ T5457] ? hwsim_new_radio_nl+0x992/0x1080 [ 795.074862][ T5457] ? memcpy+0x39/0x60 [ 795.074895][ T5457] hwsim_new_radio_nl+0x9bc/0x1080 [ 795.074927][ T5457] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 795.074955][ T5457] ? lockdep_hardirqs_on+0x79/0x100 [ 795.074998][ T5457] ? genl_family_rcv_msg_doit+0xec/0x320 [ 795.075033][ T5457] ? genl_family_rcv_msg_doit+0xfe/0x320 [ 795.075070][ T5457] genl_family_rcv_msg_doit+0x228/0x320 [ 795.075106][ T5457] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 795.075162][ T5457] ? genl_rcv_msg+0x2f9/0x580 [ 795.075204][ T5457] genl_rcv_msg+0x328/0x580 [ 795.075239][ T5457] ? genl_get_cmd+0x480/0x480 [ 795.075270][ T5457] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 795.075304][ T5457] ? lock_release+0x720/0x720 [ 795.075343][ T5457] netlink_rcv_skb+0x153/0x420 [ 795.075374][ T5457] ? genl_get_cmd+0x480/0x480 [ 795.075405][ T5457] ? netlink_ack+0xa60/0xa60 [ 795.075443][ T5457] ? netlink_deliver_tap+0x1b1/0xc30 [ 795.075481][ T5457] genl_rcv+0x24/0x40 [ 795.075507][ T5457] netlink_unicast+0x533/0x7d0 [ 795.075543][ T5457] ? netlink_attachskb+0x880/0x880 [ 795.075573][ T5457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 795.075607][ T5457] ? __phys_addr_symbol+0x2c/0x70 [ 795.075635][ T5457] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 795.075667][ T5457] ? __check_object_size+0x16e/0x850 [ 795.075708][ T5457] netlink_sendmsg+0x86d/0xda0 [ 795.075744][ T5457] ? netlink_unicast+0x7d0/0x7d0 [ 795.075783][ T5457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 795.075819][ T5457] ? netlink_unicast+0x7d0/0x7d0 [ 795.075849][ T5457] sock_sendmsg+0xcf/0x120 [ 795.075883][ T5457] ____sys_sendmsg+0x6e8/0x810 [ 795.075918][ T5457] ? kernel_sendmsg+0x50/0x50 [ 795.075946][ T5457] ? do_recvmmsg+0x6d0/0x6d0 [ 795.075988][ T5457] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 795.123405][ T5461] vxfs: can't find superblock. [ 795.128523][ T5457] ? lock_chain_count+0x20/0x20 [ 795.128571][ T5457] ___sys_sendmsg+0xf3/0x170 [ 795.128609][ T5457] ? sendmsg_copy_msghdr+0x160/0x160 [ 795.128649][ T5457] ? __fget_files+0x21b/0x3e0 [ 795.128677][ T5457] ? lock_downgrade+0x6e0/0x6e0 [ 795.128725][ T5457] ? __fget_files+0x23d/0x3e0 [ 795.128760][ T5457] ? __fget_light+0xea/0x280 [ 795.128788][ T5457] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 795.128829][ T5457] __sys_sendmsg+0xe5/0x1b0 [ 795.128862][ T5457] ? __sys_sendmsg_sock+0x30/0x30 [ 795.128913][ T5457] ? syscall_enter_from_user_mode+0x21/0x70 [ 795.128957][ T5457] do_syscall_64+0x35/0xb0 [ 795.128987][ T5457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.129017][ T5457] RIP: 0033:0x7fc78cb95ae9 [ 795.129037][ T5457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.129063][ T5457] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.129091][ T5457] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 795.129111][ T5457] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 795.129137][ T5457] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 795.129155][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.129172][ T5457] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 795.129213][ T5457] [ 795.595074][ T5479] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\n$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:23 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32e6ff00008000000073797a310000000014000000020a0900000000000a00000002000006140011000178829f66062c4f7a36fb27956c2b719b50bd"], 0x94}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4045) clone(0x400, &(0x7f00000003c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x180000, 0xffff, {r1}, {0xffffffffffffffff}, 0x6, 0x2}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000380)=[{}, {}, {}, {}]) [ 795.791675][ T5459] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 795.812290][ T5459] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 795.851730][ T5459] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 795.851730][ T5459] !' [ 795.868261][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.889636][ T5459] CPU: 1 PID: 5459 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 795.899574][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.909656][ T5459] Call Trace: [ 795.912959][ T5459] [ 795.915900][ T5459] dump_stack_lvl+0xcd/0x134 [ 795.920532][ T5459] sysfs_warn_dup.cold+0x1c/0x29 [ 795.925597][ T5459] sysfs_do_create_link_sd+0x11e/0x140 [ 795.931096][ T5459] sysfs_create_link+0x5f/0xc0 [ 795.935896][ T5459] device_add+0x789/0x1ee0 [ 795.940352][ T5459] ? wait_for_completion_io+0x270/0x270 [ 795.945931][ T5459] ? lock_downgrade+0x6e0/0x6e0 [ 795.950818][ T5459] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 795.957095][ T5459] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 795.963369][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 795.969649][ T5459] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 795.975669][ T5459] wiphy_register+0x1e94/0x29b0 [ 795.980573][ T5459] ? wiphy_unregister+0xbf0/0xbf0 [ 795.985628][ T5459] ? minstrel_ht_alloc+0x52c/0xa10 [ 795.990784][ T5459] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 795.996888][ T5459] ieee80211_register_hw+0x1f18/0x3ed0 [ 796.002400][ T5459] ? ieee80211_restart_hw+0x290/0x290 [ 796.007893][ T5459] ? debug_object_destroy+0x210/0x210 [ 796.013305][ T5459] ? memset+0x20/0x40 [ 796.017311][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.023641][ T5459] ? __hrtimer_init+0x136/0x280 [ 796.028524][ T5459] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 796.034393][ T5459] ? hwsim_virtio_rx_work+0x350/0x350 [ 796.039815][ T5459] ? hwsim_new_radio_nl+0x992/0x1080 [ 796.045139][ T5459] ? memcpy+0x39/0x60 [ 796.049414][ T5459] hwsim_new_radio_nl+0x9bc/0x1080 [ 796.054558][ T5459] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 796.060489][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.066762][ T5459] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 796.074166][ T5459] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 796.081489][ T5459] genl_family_rcv_msg_doit+0x228/0x320 [ 796.087076][ T5459] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 796.094572][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.100859][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.107134][ T5459] ? ns_capable+0xd9/0x100 [ 796.111602][ T5459] genl_rcv_msg+0x328/0x580 [ 796.116145][ T5459] ? genl_get_cmd+0x480/0x480 [ 796.120850][ T5459] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 796.126782][ T5459] ? lock_release+0x720/0x720 [ 796.131524][ T5459] netlink_rcv_skb+0x153/0x420 [ 796.136322][ T5459] ? genl_get_cmd+0x480/0x480 [ 796.141030][ T5459] ? netlink_ack+0xa60/0xa60 [ 796.145773][ T5459] ? netlink_deliver_tap+0x1b1/0xc30 [ 796.151233][ T5459] genl_rcv+0x24/0x40 [ 796.155245][ T5459] netlink_unicast+0x533/0x7d0 [ 796.160042][ T5459] ? netlink_attachskb+0x880/0x880 [ 796.165186][ T5459] ? bpf_lsm_sem_semop+0x10/0x10 [ 796.170163][ T5459] netlink_sendmsg+0x86d/0xda0 [ 796.174963][ T5459] ? netlink_unicast+0x7d0/0x7d0 [ 796.179940][ T5459] ? bpf_lsm_socket_accept+0x10/0x10 [ 796.185257][ T5459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.191534][ T5459] ? netlink_unicast+0x7d0/0x7d0 [ 796.196520][ T5459] sock_sendmsg+0xcf/0x120 [ 796.200973][ T5459] ____sys_sendmsg+0x6e8/0x810 [ 796.205770][ T5459] ? kernel_sendmsg+0x50/0x50 [ 796.210501][ T5459] ? do_recvmmsg+0x6d0/0x6d0 [ 796.215208][ T5459] ? lock_chain_count+0x20/0x20 [ 796.220086][ T5459] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 796.226182][ T5459] ? sched_core_balance+0xa30/0xa30 [ 796.231416][ T5459] ? lock_downgrade+0x6e0/0x6e0 [ 796.236309][ T5459] ___sys_sendmsg+0xf3/0x170 [ 796.240939][ T5459] ? sendmsg_copy_msghdr+0x160/0x160 [ 796.246281][ T5459] ? __fget_files+0x21b/0x3e0 [ 796.250986][ T5459] ? lock_downgrade+0x6e0/0x6e0 [ 796.255886][ T5459] ? __fget_files+0x23d/0x3e0 [ 796.260600][ T5459] ? __fget_light+0xea/0x280 [ 796.265221][ T5459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 796.271517][ T5459] __sys_sendmsg+0xe5/0x1b0 [ 796.276143][ T5459] ? __sys_sendmsg_sock+0x30/0x30 [ 796.281235][ T5459] ? syscall_enter_from_user_mode+0x21/0x70 [ 796.287263][ T5459] do_syscall_64+0x35/0xb0 [ 796.291716][ T5459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.297639][ T5459] RIP: 0033:0x7f5d21f6fae9 [ 796.302074][ T5459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.321703][ T5459] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.330154][ T5459] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 796.338156][ T5459] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 796.346170][ T5459] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 06:12:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 796.354249][ T5459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.362243][ T5459] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 796.370269][ T5459] 06:12:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x65580000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\v$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:23 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32e6ff00008000000073797a310000000014000000020a0900000000000a00000002000006140011000178829f66062c4f7a36fb27956c2b719b50bd"], 0x94}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4045) clone(0x400, &(0x7f00000003c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x180000, 0xffff, {r1}, {0xffffffffffffffff}, 0x6, 0x2}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000380)=[{}, {}, {}, {}]) [ 796.471069][ T5513] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 796.585167][ T5513] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 796.585167][ T5513] !' [ 796.635711][ T5513] CPU: 1 PID: 5513 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 796.645656][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.655825][ T5513] Call Trace: [ 796.659122][ T5513] [ 796.662072][ T5513] dump_stack_lvl+0xcd/0x134 [ 796.666699][ T5513] sysfs_warn_dup.cold+0x1c/0x29 [ 796.671669][ T5513] sysfs_do_create_link_sd+0x11e/0x140 [ 796.677166][ T5513] sysfs_create_link+0x5f/0xc0 [ 796.682005][ T5513] device_add+0x789/0x1ee0 [ 796.686462][ T5513] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 796.692751][ T5513] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 796.699034][ T5513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.705482][ T5513] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 796.711595][ T5513] wiphy_register+0x1e94/0x29b0 [ 796.716484][ T5513] ? wiphy_unregister+0xbf0/0xbf0 [ 796.721530][ T5513] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 796.727894][ T5513] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 796.733571][ T5513] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 796.739240][ T5513] ieee80211_register_hw+0x1f18/0x3ed0 [ 796.744746][ T5513] ? ieee80211_restart_hw+0x290/0x290 [ 796.750158][ T5513] ? __hrtimer_init+0x136/0x280 [ 796.755047][ T5513] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 796.760814][ T5513] ? hwsim_virtio_rx_work+0x350/0x350 [ 796.766472][ T5513] ? hwsim_new_radio_nl+0x992/0x1080 [ 796.771788][ T5513] ? memcpy+0x39/0x60 [ 796.775804][ T5513] hwsim_new_radio_nl+0x9bc/0x1080 [ 796.780947][ T5513] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 796.786874][ T5513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.793246][ T5513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 796.800648][ T5513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 796.807978][ T5513] genl_family_rcv_msg_doit+0x228/0x320 [ 796.813558][ T5513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 796.821051][ T5513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.827342][ T5513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.833615][ T5513] ? ns_capable+0xd9/0x100 [ 796.838064][ T5513] genl_rcv_msg+0x328/0x580 [ 796.842603][ T5513] ? genl_get_cmd+0x480/0x480 [ 796.847308][ T5513] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 796.853575][ T5513] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 796.859614][ T5513] netlink_rcv_skb+0x153/0x420 [ 796.864414][ T5513] ? genl_get_cmd+0x480/0x480 [ 796.869124][ T5513] ? netlink_ack+0xa60/0xa60 [ 796.873770][ T5513] genl_rcv+0x24/0x40 [ 796.877775][ T5513] netlink_unicast+0x533/0x7d0 [ 796.882573][ T5513] ? netlink_attachskb+0x880/0x880 [ 796.887801][ T5513] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 796.894078][ T5513] ? __phys_addr_symbol+0x2c/0x70 [ 796.899213][ T5513] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 796.905070][ T5513] ? __check_object_size+0x16e/0x850 [ 796.910485][ T5513] netlink_sendmsg+0x86d/0xda0 [ 796.915287][ T5513] ? netlink_unicast+0x7d0/0x7d0 [ 796.920258][ T5513] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 796.926543][ T5513] ? netlink_unicast+0x7d0/0x7d0 [ 796.931783][ T5513] sock_sendmsg+0xcf/0x120 [ 796.936241][ T5513] ____sys_sendmsg+0x6e8/0x810 [ 796.941040][ T5513] ? kernel_sendmsg+0x50/0x50 [ 796.945746][ T5513] ? do_recvmmsg+0x6d0/0x6d0 [ 796.950375][ T5513] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 796.956430][ T5513] ? lock_chain_count+0x20/0x20 [ 796.961322][ T5513] ___sys_sendmsg+0xf3/0x170 [ 796.965949][ T5513] ? sendmsg_copy_msghdr+0x160/0x160 [ 796.971276][ T5513] ? __fget_files+0x21b/0x3e0 [ 796.975978][ T5513] ? lock_downgrade+0x6e0/0x6e0 [ 796.980872][ T5513] ? __fget_files+0x23d/0x3e0 [ 796.985586][ T5513] ? __fget_light+0xea/0x280 [ 796.990200][ T5513] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 796.996477][ T5513] __sys_sendmsg+0xe5/0x1b0 [ 797.001022][ T5513] ? __sys_sendmsg_sock+0x30/0x30 [ 797.006106][ T5513] ? syscall_enter_from_user_mode+0x21/0x70 [ 797.012051][ T5513] do_syscall_64+0x35/0xb0 [ 797.016507][ T5513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.022455][ T5513] RIP: 0033:0x7fc78cb95ae9 [ 797.026892][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 797.046770][ T5513] RSP: 002b:00007fc78bb0b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.055214][ T5513] RAX: ffffffffffffffda RBX: 00007fc78cca8f60 RCX: 00007fc78cb95ae9 [ 797.063214][ T5513] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 797.071208][ T5513] RBP: 00007fc78cbefff7 R08: 0000000000000000 R09: 0000000000000000 [ 797.079203][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 06:12:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\f$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 797.087286][ T5513] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 797.095312][ T5513] 06:12:24 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$getown(r1, 0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000900bb49cb7a6a2057adba805e61ca2000000000000280012800a000700000000000000000018000280140001001b000000da043b704ee13ab5b46c13cdd5b043b65fefdfb250054af93b3d8787626350ce67538ec7c7b26197bfc661cea10d8934aeda107c7decfdbaaec69638403258c001b6f26fbede", @ANYRES32=0x0, @ANYBLOB="eb"], 0x48}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400800024000b0fff0200000013aebd78912a3f6e4c430ce2335d74ea7691b0832832d854762c3cd8d0eae5b09b430afdaa0b7c51b0aaffb5cdf7c2b51fe75d473cd98cab85f3d1a6885346343336db9c9602797afa77cf4a98a4ace777bb9d9deda9fca09f9c1641273cbebac6e7ad29b2d0ef84529cce8a500847bcd38be781676f78d455190fdc9bd4177a17a677e6d957e87c4d96701702f4563da18caae25112b76408bf9a93db7b5ac3b8b0f2e2f7f50e11d2939d09ad62d6a5a8bf3c00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000001400020008000300000000000800050000000000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000003b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003b00)={&(0x7f0000002800)=ANY=[@ANYBLOB="dc120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3100000000000000001c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480001801400020067656e657665310000000000000000e1ffffffffffffff6576653100000000000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c0002800400010004000100"], 0x12dc}, 0x1, 0x0, 0x0, 0x80}, 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000024000b0f00000000000000ba00105400", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000001400020008000300000000000800050000000000"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_getroute={0xf8, 0x1a, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x1, 0xfc, 0x4, 0xfe, 0x6, 0x1100}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x80}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x40}}, @RTA_MARK={0x8, 0x10, 0x7b70}, @RTA_METRICS={0x7d, 0x8, 0x0, 0x1, "c525dde9d6482eff46673b6a203851aa2e6089c6a49d889def37d3d07b3b3b30d4aeea68c0acfc2c63607734d6f515290eef73daee84a677d0fa5edcea10a9ecdeffe0f3bd499a56a337ca2b7eea7d1f8344927c03820d3e711b749fd16aefb6bf73657dfd8cc7443af318438ce502ea9a5ec7c94fdc037222"}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_OIF={0x8, 0x4, r8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x165001, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x10010, r9, 0x4d5a) socket$can_bcm(0x1d, 0x2, 0x2) 06:12:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000e24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x81000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 797.422381][ T5530] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x70200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 797.537882][ T5530] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 797.537882][ T5530] !' [ 797.567059][ T5530] CPU: 0 PID: 5530 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 797.577001][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:12:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400140e24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 797.587100][ T5530] Call Trace: [ 797.590410][ T5530] [ 797.593357][ T5530] dump_stack_lvl+0xcd/0x134 [ 797.597984][ T5530] sysfs_warn_dup.cold+0x1c/0x29 [ 797.602951][ T5530] sysfs_do_create_link_sd+0x11e/0x140 [ 797.608448][ T5530] sysfs_create_link+0x5f/0xc0 [ 797.613297][ T5530] device_add+0x789/0x1ee0 [ 797.617750][ T5530] ? ieee80211_set_bitrate_flags+0x2b/0x650 [ 797.623677][ T5530] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 797.630294][ T5530] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 797.636571][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.643049][ T5530] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 797.649137][ T5530] wiphy_register+0x1e94/0x29b0 [ 797.654055][ T5530] ? wiphy_unregister+0xbf0/0xbf0 [ 797.659110][ T5530] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 797.664798][ T5530] ? ieee80211_register_hw+0x1eee/0x3ed0 [ 797.670518][ T5530] ? wiphy_register+0xc/0x29b0 [ 797.675333][ T5530] ieee80211_register_hw+0x1f18/0x3ed0 [ 797.680938][ T5530] ? ieee80211_restart_hw+0x290/0x290 [ 797.686477][ T5530] ? memset+0x20/0x40 [ 797.690480][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.696851][ T5530] ? __hrtimer_init+0x136/0x280 [ 797.701737][ T5530] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 797.707503][ T5530] ? hwsim_virtio_rx_work+0x350/0x350 [ 797.712908][ T5530] ? hwsim_new_radio_nl+0x992/0x1080 [ 797.718305][ T5530] ? memcpy+0x39/0x60 [ 797.722318][ T5530] hwsim_new_radio_nl+0x9bc/0x1080 [ 797.727544][ T5530] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 797.733632][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.739905][ T5530] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 797.747285][ T5530] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 797.754587][ T5530] genl_family_rcv_msg_doit+0x228/0x320 [ 797.760159][ T5530] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 797.767549][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.773818][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.780073][ T5530] ? ns_capable+0xd9/0x100 [ 797.784507][ T5530] genl_rcv_msg+0x328/0x580 [ 797.789029][ T5530] ? genl_get_cmd+0x480/0x480 [ 797.793709][ T5530] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.799877][ T5530] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 797.805823][ T5530] netlink_rcv_skb+0x153/0x420 [ 797.810611][ T5530] ? genl_get_cmd+0x480/0x480 [ 797.815293][ T5530] ? netlink_ack+0xa60/0xa60 [ 797.819911][ T5530] ? netlink_deliver_tap+0x1b1/0xc30 [ 797.825222][ T5530] genl_rcv+0x24/0x40 [ 797.829207][ T5530] netlink_unicast+0x533/0x7d0 [ 797.833997][ T5530] ? netlink_attachskb+0x880/0x880 [ 797.839141][ T5530] ? _copy_from_iter+0x305/0x11c0 [ 797.844176][ T5530] netlink_sendmsg+0x86d/0xda0 [ 797.849053][ T5530] ? netlink_unicast+0x7d0/0x7d0 [ 797.854006][ T5530] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.860176][ T5530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 797.866426][ T5530] ? netlink_unicast+0x7d0/0x7d0 [ 797.871464][ T5530] sock_sendmsg+0xcf/0x120 [ 797.875894][ T5530] ____sys_sendmsg+0x6e8/0x810 [ 797.880668][ T5530] ? kernel_sendmsg+0x50/0x50 [ 797.885347][ T5530] ? do_recvmmsg+0x6d0/0x6d0 [ 797.890055][ T5530] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 797.896041][ T5530] ? lock_chain_count+0x20/0x20 [ 797.901222][ T5530] ___sys_sendmsg+0xf3/0x170 [ 797.905820][ T5530] ? sendmsg_copy_msghdr+0x160/0x160 [ 797.911121][ T5530] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.917281][ T5530] ? lockdep_hardirqs_on+0x79/0x100 [ 797.922486][ T5530] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.928652][ T5530] ? __fget_light+0xe1/0x280 [ 797.933262][ T5530] ? __sanitizer_cov_trace_pc+0x4c/0x60 [ 797.938818][ T5530] ? __fget_light+0xea/0x280 [ 797.943413][ T5530] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 797.949664][ T5530] __sys_sendmsg+0xe5/0x1b0 [ 797.954175][ T5530] ? __sys_sendmsg_sock+0x30/0x30 [ 797.959219][ T5530] ? syscall_enter_from_user_mode+0x21/0x70 [ 797.965126][ T5530] do_syscall_64+0x35/0xb0 [ 797.969564][ T5530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.975547][ T5530] RIP: 0033:0x7f5d21f6fae9 [ 797.979976][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 797.999602][ T5530] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.008044][ T5530] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 798.016036][ T5530] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 798.024007][ T5530] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 798.031977][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.040045][ T5530] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 798.048045][ T5530] [ 798.110566][ T5551] __nla_validate_parse: 6 callbacks suppressed [ 798.110647][ T5551] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.134921][ T5569] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.266769][ T5569] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:25 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x240080, 0x1, 0x2}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x62e8a240251bae69, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x1000, 0x2, 0x4, 0x2, 0x1f, {0x77359400}, {0x2, 0x1, 0x2, 0x8, 0x7, 0x2, "e3e01d58"}, 0xe5, 0x3, @offset=0x1, 0x3}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x10000, 0x9, {0x77359400}, {0x0, 0x2, 0x2, 0x0, 0x9, 0x4, "b35f8b24"}, 0x0, 0x4, @fd, 0xf6c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x8080) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 06:12:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r4, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000f24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:25 executing program 3: lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.id\x00') r0 = socket(0x10, 0x80002, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x46605}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 06:12:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400001124000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 798.549944][ T5594] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.606808][ T5587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.616708][ T5587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.626018][ T5587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.633546][ T5587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.643147][ T5587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.648708][ T5598] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 798.652816][ T5587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.654236][ T5587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.655826][ T5587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.656563][ T5587] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.692624][ T5587] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 798.709973][ T5598] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000e1424000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 799.174454][ T5610] 8021q: adding VLAN 0 to HW filter on device bond1 06:12:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe0ffff, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 799.232859][ T5598] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 799.232859][ T5598] !' [ 799.270611][ T5598] CPU: 0 PID: 5598 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 799.280987][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.291156][ T5598] Call Trace: [ 799.294454][ T5598] [ 799.297418][ T5598] dump_stack_lvl+0xcd/0x134 [ 799.302060][ T5598] sysfs_warn_dup.cold+0x1c/0x29 [ 799.307037][ T5598] sysfs_do_create_link_sd+0x11e/0x140 [ 799.312538][ T5598] sysfs_create_link+0x5f/0xc0 [ 799.317380][ T5598] device_add+0x789/0x1ee0 [ 799.321845][ T5598] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 799.328184][ T5598] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 799.334463][ T5598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 799.340741][ T5598] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 799.346765][ T5598] wiphy_register+0x1e94/0x29b0 [ 799.351658][ T5598] ? wiphy_unregister+0xbf0/0xbf0 [ 799.356707][ T5598] ? minstrel_ht_alloc+0x832/0xa10 [ 799.361955][ T5598] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 799.368067][ T5598] ieee80211_register_hw+0x1f18/0x3ed0 [ 799.373590][ T5598] ? ieee80211_restart_hw+0x290/0x290 [ 799.379058][ T5598] ? debug_object_destroy+0x210/0x210 [ 799.384465][ T5598] ? memset+0x20/0x40 [ 799.388477][ T5598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 799.394751][ T5598] ? __hrtimer_init+0x136/0x280 [ 799.399633][ T5598] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 799.405491][ T5598] ? hwsim_virtio_rx_work+0x350/0x350 [ 799.410890][ T5598] ? hwsim_new_radio_nl+0x992/0x1080 [ 799.416211][ T5598] ? memcpy+0x39/0x60 [ 799.420227][ T5598] hwsim_new_radio_nl+0x9bc/0x1080 [ 799.425371][ T5598] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 799.431302][ T5598] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 799.438632][ T5598] genl_family_rcv_msg_doit+0x228/0x320 [ 799.444234][ T5598] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 799.451646][ T5598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 799.457947][ T5598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 799.464226][ T5598] ? ns_capable+0xd9/0x100 [ 799.468680][ T5598] genl_rcv_msg+0x328/0x580 [ 799.473219][ T5598] ? genl_get_cmd+0x480/0x480 [ 799.477962][ T5598] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 799.483904][ T5598] ? lock_release+0x720/0x720 [ 799.488626][ T5598] netlink_rcv_skb+0x153/0x420 [ 799.493424][ T5598] ? genl_get_cmd+0x480/0x480 [ 799.498141][ T5598] ? netlink_ack+0xa60/0xa60 [ 799.502769][ T5598] ? netlink_deliver_tap+0x1b1/0xc30 [ 799.508094][ T5598] genl_rcv+0x24/0x40 [ 799.512105][ T5598] netlink_unicast+0x533/0x7d0 [ 799.516906][ T5598] ? netlink_attachskb+0x880/0x880 [ 799.522049][ T5598] ? netlink_unicast+0x19/0x7d0 [ 799.526939][ T5598] netlink_sendmsg+0x86d/0xda0 [ 799.531739][ T5598] ? netlink_unicast+0x7d0/0x7d0 [ 799.536709][ T5598] ? sock_sendmsg+0x4b/0x120 [ 799.541326][ T5598] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 799.547830][ T5598] ? netlink_unicast+0x7d0/0x7d0 [ 799.552809][ T5598] sock_sendmsg+0xcf/0x120 [ 799.557263][ T5598] ____sys_sendmsg+0x6e8/0x810 [ 799.562063][ T5598] ? kernel_sendmsg+0x50/0x50 [ 799.566769][ T5598] ? do_recvmmsg+0x6d0/0x6d0 [ 799.571403][ T5598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 799.577761][ T5598] ? lock_chain_count+0x20/0x20 06:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 799.582654][ T5598] ___sys_sendmsg+0xf3/0x170 [ 799.587282][ T5598] ? sendmsg_copy_msghdr+0x160/0x160 [ 799.592617][ T5598] ? __fget_files+0x21b/0x3e0 [ 799.597336][ T5598] ? lock_downgrade+0x6e0/0x6e0 [ 799.602239][ T5598] ? __fget_files+0x23d/0x3e0 [ 799.606953][ T5598] ? __fget_light+0xea/0x280 [ 799.611573][ T5598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 799.617859][ T5598] __sys_sendmsg+0xe5/0x1b0 [ 799.622406][ T5598] ? __sys_sendmsg_sock+0x30/0x30 [ 799.627480][ T5598] ? syscall_enter_from_user_mode+0x21/0x70 [ 799.633412][ T5598] do_syscall_64+0x35/0xb0 [ 799.637856][ T5598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.643782][ T5598] RIP: 0033:0x7f5d21f6fae9 [ 799.648215][ T5598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.668075][ T5598] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 799.676517][ T5598] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 06:12:27 executing program 3: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x14) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x5, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "49f8633de77c47"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000059b40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r5}], 0x6, "234a01065843f0"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) [ 799.684516][ T5598] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 799.692514][ T5598] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 799.700510][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.708605][ T5598] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 799.716627][ T5598] 06:12:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00eX$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 799.852447][ T5663] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2288, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r1, 0x688c, 0x0, 0x0, 0x0, 0x0) close(r1) 06:12:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xe8030000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00`$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xd0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x0) 06:12:27 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00Xe$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 800.129619][ T5684] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 800.143995][ T5689] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 800.161638][ T5684] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:27 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@acquire, @clear_death, @acquire_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000300)="afcde087"}) 06:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 800.356011][ T5684] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 800.356011][ T5684] !' [ 800.408580][ T5684] CPU: 1 PID: 5684 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 800.418870][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.429057][ T5684] Call Trace: [ 800.432526][ T5684] [ 800.435463][ T5684] dump_stack_lvl+0xcd/0x134 [ 800.440082][ T5684] sysfs_warn_dup.cold+0x1c/0x29 [ 800.445059][ T5684] sysfs_do_create_link_sd+0x11e/0x140 [ 800.450567][ T5684] sysfs_create_link+0x5f/0xc0 [ 800.455371][ T5684] device_add+0x789/0x1ee0 [ 800.459842][ T5684] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 800.466042][ T5684] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 800.472305][ T5684] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 800.478316][ T5684] ? wiphy_register+0x1e46/0x29b0 [ 800.483366][ T5684] wiphy_register+0x1e94/0x29b0 [ 800.488247][ T5684] ? wiphy_unregister+0xbf0/0xbf0 [ 800.493293][ T5684] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 800.499513][ T5684] ieee80211_register_hw+0x1f18/0x3ed0 [ 800.505119][ T5684] ? ieee80211_restart_hw+0x290/0x290 [ 800.510547][ T5684] ? memset_erms+0xb/0x10 [ 800.515008][ T5684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.521300][ T5684] ? __hrtimer_init+0x136/0x280 [ 800.526176][ T5684] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 800.531939][ T5684] ? hwsim_virtio_rx_work+0x350/0x350 [ 800.537320][ T5684] ? hwsim_new_radio_nl+0x992/0x1080 [ 800.542620][ T5684] ? memcpy+0x39/0x60 [ 800.547231][ T5684] hwsim_new_radio_nl+0x9bc/0x1080 [ 800.552367][ T5684] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 800.558294][ T5684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.564548][ T5684] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 800.571935][ T5684] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 800.579252][ T5684] genl_family_rcv_msg_doit+0x228/0x320 [ 800.584818][ T5684] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 800.592323][ T5684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.598598][ T5684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.604854][ T5684] ? ns_capable+0xd9/0x100 [ 800.609289][ T5684] genl_rcv_msg+0x328/0x580 [ 800.613838][ T5684] ? genl_get_cmd+0x480/0x480 [ 800.618616][ T5684] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 800.624540][ T5684] ? lock_release+0x720/0x720 [ 800.629246][ T5684] ? lockdep_hardirqs_on+0x79/0x100 [ 800.634495][ T5684] netlink_rcv_skb+0x153/0x420 [ 800.639295][ T5684] ? genl_get_cmd+0x480/0x480 [ 800.644016][ T5684] ? netlink_ack+0xa60/0xa60 [ 800.648643][ T5684] ? netlink_deliver_tap+0x1b1/0xc30 [ 800.653978][ T5684] genl_rcv+0x24/0x40 [ 800.658061][ T5684] netlink_unicast+0x533/0x7d0 [ 800.662848][ T5684] ? netlink_attachskb+0x880/0x880 [ 800.667970][ T5684] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 800.674227][ T5684] ? __phys_addr_symbol+0x2c/0x70 [ 800.679287][ T5684] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 800.685023][ T5684] ? __check_object_size+0x16e/0x850 [ 800.690351][ T5684] netlink_sendmsg+0x86d/0xda0 [ 800.695143][ T5684] ? netlink_unicast+0x7d0/0x7d0 [ 800.700120][ T5684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.706388][ T5684] ? netlink_unicast+0x7d0/0x7d0 [ 800.711343][ T5684] sock_sendmsg+0xcf/0x120 [ 800.715783][ T5684] ____sys_sendmsg+0x6e8/0x810 [ 800.720575][ T5684] ? kernel_sendmsg+0x50/0x50 [ 800.725288][ T5684] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 800.731466][ T5684] ? ___sys_sendmsg+0xd2/0x170 [ 800.736276][ T5684] ___sys_sendmsg+0xf3/0x170 [ 800.740917][ T5684] ? sendmsg_copy_msghdr+0x160/0x160 [ 800.746229][ T5684] ? __fget_files+0x21b/0x3e0 [ 800.750918][ T5684] ? lock_downgrade+0x6e0/0x6e0 [ 800.755892][ T5684] ? __fget_files+0x23d/0x3e0 [ 800.760601][ T5684] ? __fget_light+0xea/0x280 [ 800.765217][ T5684] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 800.771484][ T5684] __sys_sendmsg+0xe5/0x1b0 [ 800.776440][ T5684] ? __sys_sendmsg_sock+0x30/0x30 [ 800.781483][ T5684] ? lockdep_hardirqs_on+0x79/0x100 [ 800.786728][ T5684] ? trace_hardirqs_on+0x39/0x1c0 [ 800.791776][ T5684] ? syscall_enter_from_user_mode+0x2b/0x70 [ 800.797698][ T5684] do_syscall_64+0x35/0xb0 [ 800.802146][ T5684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.808258][ T5684] RIP: 0033:0x7f5d21f6fae9 [ 800.812797][ T5684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.832606][ T5684] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.841039][ T5684] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 800.849026][ T5684] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 800.857039][ T5684] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 800.865067][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.873255][ T5684] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 800.881274][ T5684] [ 801.049751][ T5709] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400008124000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:28 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@acquire, @clear_death, @acquire_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000300)="afcde087"}) 06:12:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @local, 0xe2}, 0x1c) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000061c0), 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@local, 0x6, 0x2, 0x3, 0x8, 0x3, 0xf7ff}, 0x20) ftruncate(0xffffffffffffffff, 0x1) 06:12:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340003e824000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 801.275502][ T5722] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:28 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@acquire, @clear_death, @acquire_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000300)="afcde087"}) [ 801.342899][ T5722] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000f024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 801.492349][ T5722] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 801.492349][ T5722] !' [ 801.528855][ T5722] CPU: 1 PID: 5722 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 801.538942][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.549548][ T5722] Call Trace: [ 801.552854][ T5722] [ 801.555810][ T5722] dump_stack_lvl+0xcd/0x134 [ 801.560449][ T5722] sysfs_warn_dup.cold+0x1c/0x29 [ 801.565429][ T5722] sysfs_do_create_link_sd+0x11e/0x140 [ 801.570936][ T5722] sysfs_create_link+0x5f/0xc0 [ 801.576242][ T5722] device_add+0x789/0x1ee0 [ 801.580706][ T5722] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 801.587067][ T5722] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.593324][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.599688][ T5722] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 801.605786][ T5722] wiphy_register+0x1e94/0x29b0 [ 801.610764][ T5722] ? wiphy_unregister+0xbf0/0xbf0 [ 801.615821][ T5722] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 801.621997][ T5722] ? ieee80211_register_hw+0x1edf/0x3ed0 [ 801.627648][ T5722] ? ieee80211_register_hw+0x1ca5/0x3ed0 [ 801.633305][ T5722] ieee80211_register_hw+0x1f18/0x3ed0 [ 801.638811][ T5722] ? ieee80211_restart_hw+0x290/0x290 [ 801.644206][ T5722] ? debug_object_destroy+0x210/0x210 [ 801.649593][ T5722] ? memset+0x20/0x40 [ 801.653583][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.659838][ T5722] ? __hrtimer_init+0x136/0x280 [ 801.664725][ T5722] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 801.670586][ T5722] ? hwsim_virtio_rx_work+0x350/0x350 [ 801.675968][ T5722] ? hwsim_new_radio_nl+0x992/0x1080 [ 801.681265][ T5722] ? memcpy+0x39/0x60 [ 801.685282][ T5722] hwsim_new_radio_nl+0x9bc/0x1080 [ 801.690413][ T5722] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 801.696333][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.702686][ T5722] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 801.710114][ T5722] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 801.717424][ T5722] genl_family_rcv_msg_doit+0x228/0x320 [ 801.722987][ T5722] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 801.730547][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.736817][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.743070][ T5722] ? ns_capable+0xd9/0x100 [ 801.747504][ T5722] genl_rcv_msg+0x328/0x580 [ 801.752032][ T5722] ? genl_get_cmd+0x480/0x480 [ 801.756746][ T5722] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 801.762657][ T5722] ? lock_release+0x720/0x720 [ 801.767344][ T5722] ? check_path.constprop.0+0x50/0x50 [ 801.772736][ T5722] netlink_rcv_skb+0x153/0x420 [ 801.777514][ T5722] ? genl_get_cmd+0x480/0x480 [ 801.782209][ T5722] ? netlink_ack+0xa60/0xa60 [ 801.786820][ T5722] ? netlink_deliver_tap+0x1b1/0xc30 [ 801.792124][ T5722] genl_rcv+0x24/0x40 [ 801.796125][ T5722] netlink_unicast+0x533/0x7d0 [ 801.800925][ T5722] ? netlink_attachskb+0x880/0x880 [ 801.806045][ T5722] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 801.812297][ T5722] ? __phys_addr_symbol+0x2c/0x70 [ 801.817331][ T5722] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 801.823074][ T5722] ? __check_object_size+0x16e/0x850 [ 801.828389][ T5722] netlink_sendmsg+0x86d/0xda0 [ 801.833192][ T5722] ? netlink_unicast+0x7d0/0x7d0 [ 801.838135][ T5722] ? lockdep_hardirqs_on+0x79/0x100 [ 801.843359][ T5722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.849704][ T5722] ? netlink_unicast+0x7d0/0x7d0 [ 801.854653][ T5722] sock_sendmsg+0xcf/0x120 [ 801.859085][ T5722] ____sys_sendmsg+0x6e8/0x810 [ 801.863868][ T5722] ? kernel_sendmsg+0x50/0x50 [ 801.868557][ T5722] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 801.874729][ T5722] ? ___sys_sendmsg+0xd2/0x170 [ 801.879520][ T5722] ___sys_sendmsg+0xf3/0x170 [ 801.884126][ T5722] ? sendmsg_copy_msghdr+0x160/0x160 [ 801.889435][ T5722] ? __fget_files+0x21b/0x3e0 [ 801.894119][ T5722] ? lock_downgrade+0x6e0/0x6e0 [ 801.899003][ T5722] ? __fget_files+0x23d/0x3e0 [ 801.903698][ T5722] ? __fget_light+0xea/0x280 [ 801.908299][ T5722] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 801.914563][ T5722] __sys_sendmsg+0xe5/0x1b0 [ 801.919082][ T5722] ? __sys_sendmsg_sock+0x30/0x30 [ 801.924119][ T5722] ? lockdep_hardirqs_on+0x79/0x100 [ 801.929347][ T5722] ? trace_hardirqs_on+0x39/0x1c0 [ 801.934387][ T5722] ? syscall_enter_from_user_mode+0x2b/0x70 [ 801.940311][ T5722] do_syscall_64+0x35/0xb0 [ 801.944741][ T5722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.950643][ T5722] RIP: 0033:0x7f5d21f6fae9 [ 801.955120][ T5722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.975262][ T5722] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.983687][ T5722] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 06:12:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000f000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 801.991672][ T5722] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 801.999659][ T5722] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 802.007895][ T5722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.015884][ T5722] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 802.023889][ T5722] 06:12:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000224000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:29 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x510}}], 0x344, 0x10122, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffffffffe2dd) 06:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:29 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@acquire, @clear_death, @acquire_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000300)="afcde087"}) 06:12:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:29 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000324000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 802.504869][ T5775] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:30 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) 06:12:30 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000424000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 802.693409][ T5775] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 802.693409][ T5775] !' [ 802.757142][ T5775] CPU: 0 PID: 5775 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 802.767085][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.777250][ T5775] Call Trace: [ 802.780546][ T5775] [ 802.783479][ T5775] dump_stack_lvl+0xcd/0x134 [ 802.788097][ T5775] sysfs_warn_dup.cold+0x1c/0x29 [ 802.793051][ T5775] sysfs_do_create_link_sd+0x11e/0x140 [ 802.798529][ T5775] sysfs_create_link+0x5f/0xc0 [ 802.803316][ T5775] device_add+0x789/0x1ee0 [ 802.807747][ T5775] ? ieee80211_set_bitrate_flags+0x2b/0x650 [ 802.813660][ T5775] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 802.819917][ T5775] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 802.826179][ T5775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 802.832433][ T5775] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 802.838434][ T5775] wiphy_register+0x1e94/0x29b0 [ 802.843302][ T5775] ? wiphy_unregister+0xbf0/0xbf0 [ 802.848329][ T5775] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 802.854502][ T5775] ? ieee80211_register_hw+0x1d4b/0x3ed0 [ 802.860174][ T5775] ieee80211_register_hw+0x1f18/0x3ed0 [ 802.865662][ T5775] ? ieee80211_restart_hw+0x290/0x290 [ 802.871049][ T5775] ? debug_object_destroy+0x210/0x210 [ 802.876443][ T5775] ? memset+0x20/0x40 [ 802.880427][ T5775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 802.886681][ T5775] ? __hrtimer_init+0x136/0x280 [ 802.891562][ T5775] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 802.897314][ T5775] ? hwsim_virtio_rx_work+0x350/0x350 [ 802.902687][ T5775] ? hwsim_new_radio_nl+0x992/0x1080 [ 802.907980][ T5775] ? memcpy+0x39/0x60 [ 802.911973][ T5775] hwsim_new_radio_nl+0x9bc/0x1080 [ 802.917092][ T5775] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 802.923004][ T5775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 802.929252][ T5775] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 802.936640][ T5775] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 802.943940][ T5775] genl_family_rcv_msg_doit+0x228/0x320 [ 802.949849][ T5775] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 802.957227][ T5775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 802.963493][ T5775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 802.969753][ T5775] ? ns_capable+0xd9/0x100 [ 802.974190][ T5775] genl_rcv_msg+0x328/0x580 [ 802.978711][ T5775] ? genl_get_cmd+0x480/0x480 [ 802.983408][ T5775] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 802.989315][ T5775] ? lock_release+0x720/0x720 [ 802.994008][ T5775] netlink_rcv_skb+0x153/0x420 [ 802.998953][ T5775] ? genl_get_cmd+0x480/0x480 [ 803.003640][ T5775] ? netlink_ack+0xa60/0xa60 [ 803.008245][ T5775] ? netlink_deliver_tap+0x1b1/0xc30 [ 803.013546][ T5775] genl_rcv+0x24/0x40 [ 803.017539][ T5775] netlink_unicast+0x533/0x7d0 [ 803.022325][ T5775] ? netlink_attachskb+0x880/0x880 [ 803.027441][ T5775] ? security_netlink_send+0x2e/0xa0 [ 803.032749][ T5775] ? security_netlink_send+0x3d/0xa0 [ 803.038046][ T5775] netlink_sendmsg+0x86d/0xda0 [ 803.042839][ T5775] ? netlink_unicast+0x7d0/0x7d0 [ 803.047783][ T5775] ? sock_sendmsg+0x4b/0x120 [ 803.052395][ T5775] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 803.058825][ T5775] ? netlink_unicast+0x7d0/0x7d0 [ 803.063767][ T5775] sock_sendmsg+0xcf/0x120 [ 803.068193][ T5775] ____sys_sendmsg+0x6e8/0x810 [ 803.072973][ T5775] ? kernel_sendmsg+0x50/0x50 [ 803.078089][ T5775] ? do_recvmmsg+0x6d0/0x6d0 [ 803.082788][ T5775] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 803.088954][ T5775] ? sockfd_lookup_light+0x6d/0x180 [ 803.094171][ T5775] ___sys_sendmsg+0xf3/0x170 [ 803.098776][ T5775] ? sendmsg_copy_msghdr+0x160/0x160 [ 803.104077][ T5775] ? __fget_files+0x21b/0x3e0 [ 803.108758][ T5775] ? lock_downgrade+0x6e0/0x6e0 [ 803.113628][ T5775] ? lockdep_hardirqs_off+0x90/0xd0 [ 803.118846][ T5775] ? __fget_files+0x23d/0x3e0 [ 803.123559][ T5775] ? __fget_light+0xea/0x280 [ 803.128151][ T5775] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 803.134408][ T5775] __sys_sendmsg+0xe5/0x1b0 [ 803.138934][ T5775] ? __sys_sendmsg_sock+0x30/0x30 [ 803.144202][ T5775] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 803.150381][ T5775] ? lockdep_hardirqs_on+0x79/0x100 [ 803.155594][ T5775] ? ncsi_configure_channel+0xa40/0x18a0 [ 803.161263][ T5775] do_syscall_64+0x35/0xb0 [ 803.165704][ T5775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.171607][ T5775] RIP: 0033:0x7f5d21f6fae9 [ 803.176027][ T5775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.195648][ T5775] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.204079][ T5775] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 803.212068][ T5775] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 803.220051][ T5775] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 803.228106][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.236079][ T5775] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 803.244069][ T5775] 06:12:30 executing program 3: clone(0x100, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 06:12:30 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) 06:12:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000524000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 803.462628][ T5790] __nla_validate_parse: 3 callbacks suppressed [ 803.462648][ T5790] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000624000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 803.702311][ T5815] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:31 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='--\x00') 06:12:31 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 803.743139][ T5815] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 803.851202][ T5826] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 803.965220][ T5815] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 803.965220][ T5815] !' [ 803.985684][ T5815] CPU: 1 PID: 5815 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 803.995617][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.005698][ T5815] Call Trace: [ 804.008990][ T5815] [ 804.011932][ T5815] dump_stack_lvl+0xcd/0x134 [ 804.016557][ T5815] sysfs_warn_dup.cold+0x1c/0x29 [ 804.021526][ T5815] sysfs_do_create_link_sd+0x11e/0x140 [ 804.027110][ T5815] sysfs_create_link+0x5f/0xc0 [ 804.031917][ T5815] device_add+0x789/0x1ee0 [ 804.036369][ T5815] ? check_kcov_mode+0x7/0x40 [ 804.041072][ T5815] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.047343][ T5815] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 804.053613][ T5815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.059881][ T5815] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 804.065898][ T5815] wiphy_register+0x1e94/0x29b0 [ 804.070786][ T5815] ? wiphy_unregister+0xbf0/0xbf0 [ 804.076193][ T5815] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 804.082298][ T5815] ieee80211_register_hw+0x1f18/0x3ed0 [ 804.087806][ T5815] ? ieee80211_restart_hw+0x290/0x290 [ 804.093226][ T5815] ? debug_object_destroy+0x210/0x210 [ 804.098631][ T5815] ? memset+0x20/0x40 [ 804.102639][ T5815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.108906][ T5815] ? __hrtimer_init+0x136/0x280 [ 804.113783][ T5815] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 804.119553][ T5815] ? hwsim_virtio_rx_work+0x350/0x350 [ 804.124945][ T5815] ? hwsim_new_radio_nl+0x992/0x1080 [ 804.130253][ T5815] ? memcpy+0x39/0x60 [ 804.134264][ T5815] hwsim_new_radio_nl+0x9bc/0x1080 [ 804.139404][ T5815] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 804.145319][ T5815] ? lockdep_hardirqs_on+0x79/0x100 [ 804.150576][ T5815] genl_family_rcv_msg_doit+0x228/0x320 [ 804.156156][ T5815] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 804.163563][ T5815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.169852][ T5815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.176131][ T5815] ? ns_capable+0xd9/0x100 [ 804.180580][ T5815] genl_rcv_msg+0x328/0x580 [ 804.185121][ T5815] ? genl_get_cmd+0x480/0x480 [ 804.189826][ T5815] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 804.195750][ T5815] ? lock_release+0x720/0x720 [ 804.200476][ T5815] netlink_rcv_skb+0x153/0x420 [ 804.205276][ T5815] ? genl_get_cmd+0x480/0x480 [ 804.209982][ T5815] ? netlink_ack+0xa60/0xa60 [ 804.214610][ T5815] ? netlink_deliver_tap+0x1b1/0xc30 [ 804.220016][ T5815] genl_rcv+0x24/0x40 [ 804.224024][ T5815] netlink_unicast+0x533/0x7d0 [ 804.228826][ T5815] ? netlink_attachskb+0x880/0x880 [ 804.233968][ T5815] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 804.240244][ T5815] ? __phys_addr_symbol+0x2c/0x70 [ 804.245299][ T5815] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 804.251044][ T5815] ? __check_object_size+0x16e/0x850 [ 804.256369][ T5815] netlink_sendmsg+0x86d/0xda0 [ 804.261190][ T5815] ? netlink_unicast+0x7d0/0x7d0 [ 804.266152][ T5815] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 804.272596][ T5815] ? security_socket_sendmsg+0x66/0xb0 [ 804.278081][ T5815] ? security_socket_sendmsg+0x76/0xb0 [ 804.283595][ T5815] ? netlink_unicast+0x7d0/0x7d0 [ 804.288654][ T5815] sock_sendmsg+0xcf/0x120 [ 804.293100][ T5815] ____sys_sendmsg+0x6e8/0x810 [ 804.297911][ T5815] ? kernel_sendmsg+0x50/0x50 [ 804.302613][ T5815] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 804.308798][ T5815] ? ___sys_sendmsg+0xd2/0x170 [ 804.313602][ T5815] ___sys_sendmsg+0xf3/0x170 [ 804.318225][ T5815] ? sendmsg_copy_msghdr+0x160/0x160 [ 804.323557][ T5815] ? __fget_files+0x21b/0x3e0 [ 804.328437][ T5815] ? lock_downgrade+0x6e0/0x6e0 [ 804.333334][ T5815] ? __fget_files+0x23d/0x3e0 [ 804.338043][ T5815] ? __fget_light+0xea/0x280 [ 804.342657][ T5815] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 804.349069][ T5815] __sys_sendmsg+0xe5/0x1b0 [ 804.353607][ T5815] ? __sys_sendmsg_sock+0x30/0x30 [ 804.358672][ T5815] ? lockdep_hardirqs_on+0x79/0x100 [ 804.363910][ T5815] ? trace_hardirqs_on+0x39/0x1c0 [ 804.368963][ T5815] ? syscall_enter_from_user_mode+0x2b/0x70 [ 804.374903][ T5815] do_syscall_64+0x35/0xb0 [ 804.379346][ T5815] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.385260][ T5815] RIP: 0033:0x7f5d21f6fae9 [ 804.389691][ T5815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.409498][ T5815] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.417934][ T5815] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 804.425930][ T5815] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 804.433927][ T5815] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 804.441918][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.449912][ T5815] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 804.458274][ T5815] 06:12:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\a$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:32 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) 06:12:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 804.522015][ T5822] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 804.561119][ T5822] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.3'. [ 804.640342][ T5850] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 804.733558][ T5822] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 804.733558][ T5822] !' [ 804.765247][ T5822] CPU: 1 PID: 5822 Comm: syz-executor.3 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 804.775189][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.785264][ T5822] Call Trace: [ 804.788550][ T5822] [ 804.791514][ T5822] dump_stack_lvl+0xcd/0x134 [ 804.796128][ T5822] sysfs_warn_dup.cold+0x1c/0x29 [ 804.801078][ T5822] sysfs_do_create_link_sd+0x11e/0x140 [ 804.806571][ T5822] sysfs_create_link+0x5f/0xc0 [ 804.811350][ T5822] device_add+0x789/0x1ee0 [ 804.815786][ T5822] ? ieee80211_set_bitrate_flags+0x144/0x650 [ 804.821816][ T5822] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.828072][ T5822] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 804.834412][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.840662][ T5822] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 804.846669][ T5822] wiphy_register+0x1e94/0x29b0 [ 804.851545][ T5822] ? wiphy_unregister+0xbf0/0xbf0 [ 804.856581][ T5822] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 804.862856][ T5822] ? ieee80211_register_hw+0x1d4b/0x3ed0 [ 804.868533][ T5822] ieee80211_register_hw+0x1f18/0x3ed0 [ 804.874117][ T5822] ? ieee80211_restart_hw+0x290/0x290 [ 804.879507][ T5822] ? debug_object_destroy+0x210/0x210 [ 804.884895][ T5822] ? memset+0x20/0x40 [ 804.888881][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.895146][ T5822] ? __hrtimer_init+0x136/0x280 [ 804.900008][ T5822] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 804.905769][ T5822] ? hwsim_virtio_rx_work+0x350/0x350 [ 804.911150][ T5822] ? hwsim_new_radio_nl+0x992/0x1080 [ 804.916454][ T5822] ? memcpy+0x39/0x60 [ 804.920447][ T5822] hwsim_new_radio_nl+0x9bc/0x1080 [ 804.925577][ T5822] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 804.931495][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.937748][ T5822] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 804.945128][ T5822] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 804.952432][ T5822] genl_family_rcv_msg_doit+0x228/0x320 [ 804.957995][ T5822] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 804.965374][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.971901][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 804.978331][ T5822] ? ns_capable+0xd9/0x100 [ 804.982764][ T5822] genl_rcv_msg+0x328/0x580 [ 804.987299][ T5822] ? genl_get_cmd+0x480/0x480 [ 804.991996][ T5822] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 804.997917][ T5822] netlink_rcv_skb+0x153/0x420 [ 805.002710][ T5822] ? genl_get_cmd+0x480/0x480 [ 805.007402][ T5822] ? netlink_ack+0xa60/0xa60 [ 805.012000][ T5822] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 805.018274][ T5822] ? down_read+0x198/0x440 [ 805.022709][ T5822] ? genl_get_cmd+0x480/0x480 [ 805.027405][ T5822] genl_rcv+0x24/0x40 [ 805.031392][ T5822] netlink_unicast+0x533/0x7d0 [ 805.036185][ T5822] ? netlink_attachskb+0x880/0x880 [ 805.041303][ T5822] ? _copy_from_iter+0x305/0x11c0 [ 805.046346][ T5822] netlink_sendmsg+0x86d/0xda0 [ 805.051130][ T5822] ? netlink_unicast+0x7d0/0x7d0 [ 805.056070][ T5822] ? lockdep_hardirqs_on+0x79/0x100 [ 805.061288][ T5822] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 805.067541][ T5822] ? netlink_unicast+0x7d0/0x7d0 [ 805.072492][ T5822] sock_sendmsg+0xcf/0x120 [ 805.076922][ T5822] ____sys_sendmsg+0x6e8/0x810 [ 805.081805][ T5822] ? kernel_sendmsg+0x50/0x50 [ 805.086497][ T5822] ? do_recvmmsg+0x6d0/0x6d0 [ 805.091104][ T5822] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 805.097269][ T5822] ? lockdep_hardirqs_on+0x79/0x100 [ 805.102482][ T5822] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 805.108653][ T5822] ___sys_sendmsg+0xf3/0x170 [ 805.113256][ T5822] ? sendmsg_copy_msghdr+0x160/0x160 [ 805.118650][ T5822] ? __fget_files+0x21b/0x3e0 [ 805.123334][ T5822] ? lock_downgrade+0x6e0/0x6e0 [ 805.128217][ T5822] ? __fget_light+0x89/0x280 [ 805.132834][ T5822] ? __fget_files+0x23d/0x3e0 [ 805.137530][ T5822] ? __fget_light+0xea/0x280 [ 805.142146][ T5822] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 805.148409][ T5822] __sys_sendmsg+0xe5/0x1b0 [ 805.152934][ T5822] ? __sys_sendmsg_sock+0x30/0x30 [ 805.158058][ T5822] ? lockdep_hardirqs_on+0x79/0x100 [ 805.163293][ T5822] ? trace_hardirqs_on+0x39/0x1c0 [ 805.168345][ T5822] ? syscall_enter_from_user_mode+0x2b/0x70 [ 805.174261][ T5822] do_syscall_64+0x35/0xb0 [ 805.178692][ T5822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.184782][ T5822] RIP: 0033:0x7f91f1c75ae9 [ 805.189203][ T5822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.208831][ T5822] RSP: 002b:00007f91f0beb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.217251][ T5822] RAX: ffffffffffffffda RBX: 00007f91f1d88f60 RCX: 00007f91f1c75ae9 [ 805.225226][ T5822] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 805.233226][ T5822] RBP: 00007f91f1ccfff7 R08: 0000000000000000 R09: 0000000000000000 [ 805.241202][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.249186][ T5822] R13: 00007ffc0ae5f64f R14: 00007f91f0beb300 R15: 0000000000022000 [ 805.257213][ T5822] 06:12:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\b$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\t$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:33 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(r2, r3, 0x80000) 06:12:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffff1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 805.640492][ T5875] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:33 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) dup3(r2, r3, 0x80000) 06:12:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\n$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\v$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 806.003928][ T5898] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:33 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) dup3(r2, r3, 0x80000) 06:12:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\f$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:33 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) dup3(r1, r2, 0x80000) 06:12:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 806.286222][ T5916] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:34 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r1, r2, 0x80000) 06:12:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000e24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:34 executing program 3: getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x24) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast}, [@netrom, @netrom, @default, @rose, @null, @rose, @netrom, @rose]}, 0x0) getpeername(r2, &(0x7f0000000480)=@tipc=@name, &(0x7f0000000580)=0x80) r3 = accept(r2, 0x0, 0x0) listen(r3, 0x101) r4 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x5, 0x5, 0x40, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x800, 0x516d}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x10, &(0x7f0000000480)={&(0x7f0000000800)=""/252, 0xfc, 0x0}}, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x0, 0x4, 0x1, 0x6, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x90}, @map={0x18, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x7a, &(0x7f00000009c0)=""/122, 0x41000, 0x0, '\x00', r5, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0x2, 0x5}, 0x10, r6, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x9, 0x6, 0x8, 0x40, 0x11}]}, &(0x7f0000000100)='GPL\x00', 0x66, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x1c, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f00000027c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002800)={0x1, 0xa, 0x1, 0x5}, 0x10, r6}, 0x78) getdents64(r1, &(0x7f0000000300)=""/214, 0xd6) 06:12:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 806.651953][ T5937] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000f24000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:34 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r1, r2, 0x80000) 06:12:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x3, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400001024000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 806.987706][ T5957] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:34 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x5174, &(0x7f0000000000)) dup3(r1, r2, 0x80000) 06:12:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x4, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400001124000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:35 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x5, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:35 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) 06:12:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00`$\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:35 executing program 3: add_key$fscrypt_v1(&(0x7f0000000340), 0x0, &(0x7f00000004c0)={0x0, "c38ee282e60a1ac5309f4007980fce7bbf18ead4b74c60816b3f672f370dae58f8e0f3fcd212a7828a56444f50223e7022e9b1508db52093ceb1693df996f85b", 0x26}, 0x48, 0xfffffffffffffffa) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="1bf9b1a5c01e5fe7e65865efe92e74e74db9ed6f3a23ff662f3430ef8aee84234249e794e28f2602d4fb846b0bf8258244bc510f51624cd67a85655b0a73", 0x3e, 0xfffffffffffffff8) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='rxrpc\x00', 0x0, r0) add_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="03c3c38ebd5aa66ba58d7e77caf1fdb24711f4e873c19c", 0x17, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x3, r3, r2, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0], 0x70}}, 0x80) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)='user:', r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3cusgrVex:De', 0x0) readv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) 06:12:35 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) [ 808.171655][ T6000] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00w\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 808.238048][ T6000] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 808.238048][ T6000] !' [ 808.249651][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.255977][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.335601][ T6000] CPU: 0 PID: 6000 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 808.345553][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.355635][ T6000] Call Trace: [ 808.358937][ T6000] [ 808.361887][ T6000] dump_stack_lvl+0xcd/0x134 [ 808.366517][ T6000] sysfs_warn_dup.cold+0x1c/0x29 [ 808.371489][ T6000] sysfs_do_create_link_sd+0x11e/0x140 [ 808.376988][ T6000] sysfs_create_link+0x5f/0xc0 [ 808.381912][ T6000] device_add+0x789/0x1ee0 [ 808.386369][ T6000] ? wait_for_completion_io+0x270/0x270 [ 808.391951][ T6000] ? lock_downgrade+0x6e0/0x6e0 [ 808.396833][ T6000] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 808.403100][ T6000] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 808.409364][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.415632][ T6000] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 808.421645][ T6000] wiphy_register+0x1e94/0x29b0 [ 808.426528][ T6000] ? wiphy_unregister+0xbf0/0xbf0 [ 808.431844][ T6000] ? minstrel_ht_alloc+0x52c/0xa10 [ 808.436980][ T6000] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 808.443682][ T6000] ieee80211_register_hw+0x1f18/0x3ed0 [ 808.449177][ T6000] ? ieee80211_restart_hw+0x290/0x290 [ 808.454568][ T6000] ? debug_object_destroy+0x210/0x210 [ 808.459953][ T6000] ? memset+0x20/0x40 [ 808.463936][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.470187][ T6000] ? __hrtimer_init+0x136/0x280 [ 808.475049][ T6000] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 808.480795][ T6000] ? hwsim_virtio_rx_work+0x350/0x350 [ 808.486256][ T6000] ? hwsim_new_radio_nl+0x992/0x1080 [ 808.491544][ T6000] ? memcpy+0x39/0x60 [ 808.495621][ T6000] hwsim_new_radio_nl+0x9bc/0x1080 [ 808.500743][ T6000] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 808.506668][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.512937][ T6000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 808.520355][ T6000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 808.527668][ T6000] genl_family_rcv_msg_doit+0x228/0x320 [ 808.533391][ T6000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 808.540778][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.547050][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.553301][ T6000] ? ns_capable+0xd9/0x100 [ 808.557732][ T6000] genl_rcv_msg+0x328/0x580 [ 808.562260][ T6000] ? genl_get_cmd+0x480/0x480 [ 808.566942][ T6000] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 808.572847][ T6000] ? lock_release+0x720/0x720 [ 808.577566][ T6000] netlink_rcv_skb+0x153/0x420 [ 808.582341][ T6000] ? genl_get_cmd+0x480/0x480 [ 808.587029][ T6000] ? netlink_ack+0xa60/0xa60 [ 808.591635][ T6000] ? netlink_deliver_tap+0x1b1/0xc30 [ 808.596935][ T6000] genl_rcv+0x24/0x40 [ 808.600926][ T6000] netlink_unicast+0x533/0x7d0 [ 808.605722][ T6000] ? netlink_attachskb+0x880/0x880 [ 808.610842][ T6000] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 808.617181][ T6000] ? __phys_addr_symbol+0x2c/0x70 [ 808.622212][ T6000] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 808.627955][ T6000] ? __check_object_size+0x16e/0x850 [ 808.633311][ T6000] netlink_sendmsg+0x86d/0xda0 [ 808.638117][ T6000] ? netlink_unicast+0x7d0/0x7d0 [ 808.643110][ T6000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.649376][ T6000] ? netlink_unicast+0x7d0/0x7d0 [ 808.654327][ T6000] sock_sendmsg+0xcf/0x120 [ 808.658757][ T6000] ____sys_sendmsg+0x6e8/0x810 [ 808.663710][ T6000] ? kernel_sendmsg+0x50/0x50 [ 808.668393][ T6000] ? do_recvmmsg+0x6d0/0x6d0 [ 808.672998][ T6000] ? lock_chain_count+0x20/0x20 [ 808.677945][ T6000] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 808.683949][ T6000] ? sched_core_balance+0xa30/0xa30 [ 808.689269][ T6000] ? lock_downgrade+0x6e0/0x6e0 [ 808.694151][ T6000] ___sys_sendmsg+0xf3/0x170 [ 808.698758][ T6000] ? sendmsg_copy_msghdr+0x160/0x160 [ 808.704071][ T6000] ? __fget_files+0x21b/0x3e0 [ 808.708765][ T6000] ? lock_downgrade+0x6e0/0x6e0 [ 808.713653][ T6000] ? __fget_files+0x23d/0x3e0 [ 808.718364][ T6000] ? __fget_light+0xea/0x280 [ 808.722959][ T6000] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 808.729315][ T6000] __sys_sendmsg+0xe5/0x1b0 [ 808.733827][ T6000] ? __sys_sendmsg_sock+0x30/0x30 [ 808.738888][ T6000] ? syscall_enter_from_user_mode+0x21/0x70 [ 808.744811][ T6000] do_syscall_64+0x35/0xb0 [ 808.749237][ T6000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.755136][ T6000] RIP: 0033:0x7f5d21f6fae9 [ 808.759550][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.779593][ T6000] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.788016][ T6000] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 808.795987][ T6000] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 808.803956][ T6000] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 808.811925][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.819897][ T6000] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 808.827907][ T6000] 06:12:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000ec0000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:36 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f00000009c0)=[{&(0x7f0000010000)="90e42e8500000000000001000000000000000000000000000800000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d0000000000000060000000000000001000000", 0x8c, 0x10000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7d3e9c1c29aa1bafb0c629d18e95f164bf5a99f1"]) open(&(0x7f0000000200)='./file0\x00', 0x622000, 0x6) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x80, 0x20, 0xa0, 0x0, 0x1, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x2, 0x3, 0x9, 0x7fffffff, 0x9, 0x3f, 0x0, 0xaaa, 0x0, 0xf2}, 0x0, 0x2, r0, 0xb) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000280)=0x3b53) 06:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x6, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:36 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) 06:12:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000f000b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 809.090881][ T6040] __nla_validate_parse: 3 callbacks suppressed [ 809.090902][ T6040] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.113559][ T6035] loop3: detected capacity change from 0 to 256 06:12:36 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) [ 809.210510][ T6048] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 809.218946][ T6048] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:36 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) [ 809.277054][ T6035] loop3: detected capacity change from 0 to 256 [ 809.287421][ T6048] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 809.287421][ T6048] !' [ 809.342113][ T6048] CPU: 0 PID: 6048 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 809.352181][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.362370][ T6048] Call Trace: [ 809.365665][ T6048] [ 809.368613][ T6048] dump_stack_lvl+0xcd/0x134 [ 809.373234][ T6048] sysfs_warn_dup.cold+0x1c/0x29 [ 809.378206][ T6048] sysfs_do_create_link_sd+0x11e/0x140 [ 809.383705][ T6048] sysfs_create_link+0x5f/0xc0 [ 809.388510][ T6048] device_add+0x789/0x1ee0 [ 809.393064][ T6048] ? wait_for_completion_io+0x270/0x270 [ 809.398637][ T6048] ? lock_downgrade+0x6e0/0x6e0 [ 809.403508][ T6048] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 809.409785][ T6048] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 809.416045][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.422298][ T6048] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 809.428299][ T6048] wiphy_register+0x1e94/0x29b0 [ 809.433169][ T6048] ? wiphy_unregister+0xbf0/0xbf0 [ 809.438980][ T6048] ? minstrel_ht_alloc+0x52c/0xa10 [ 809.444115][ T6048] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 809.450295][ T6048] ieee80211_register_hw+0x1f18/0x3ed0 [ 809.455783][ T6048] ? ieee80211_restart_hw+0x290/0x290 [ 809.461169][ T6048] ? debug_object_destroy+0x210/0x210 [ 809.466554][ T6048] ? memset+0x20/0x40 [ 809.470559][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.476817][ T6048] ? __hrtimer_init+0x136/0x280 [ 809.481679][ T6048] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 809.487425][ T6048] ? hwsim_virtio_rx_work+0x350/0x350 [ 809.492816][ T6048] ? hwsim_new_radio_nl+0x992/0x1080 [ 809.498113][ T6048] ? memcpy+0x39/0x60 [ 809.502107][ T6048] hwsim_new_radio_nl+0x9bc/0x1080 [ 809.507227][ T6048] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 809.513132][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.519383][ T6048] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 809.526767][ T6048] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 809.534210][ T6048] genl_family_rcv_msg_doit+0x228/0x320 [ 809.540157][ T6048] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 809.547643][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.553920][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.560177][ T6048] ? ns_capable+0xd9/0x100 [ 809.564613][ T6048] genl_rcv_msg+0x328/0x580 [ 809.569138][ T6048] ? genl_get_cmd+0x480/0x480 [ 809.573822][ T6048] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 809.579728][ T6048] ? lock_release+0x720/0x720 [ 809.584414][ T6048] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 809.590234][ T6048] netlink_rcv_skb+0x153/0x420 [ 809.595010][ T6048] ? genl_get_cmd+0x480/0x480 [ 809.599711][ T6048] ? netlink_ack+0xa60/0xa60 [ 809.604324][ T6048] ? netlink_deliver_tap+0x1b1/0xc30 [ 809.609622][ T6048] genl_rcv+0x24/0x40 [ 809.613614][ T6048] netlink_unicast+0x533/0x7d0 [ 809.618389][ T6048] ? netlink_attachskb+0x880/0x880 [ 809.623864][ T6048] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 809.630233][ T6048] ? __phys_addr_symbol+0x2c/0x70 [ 809.635283][ T6048] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 809.641024][ T6048] ? __check_object_size+0x16e/0x850 [ 809.646340][ T6048] netlink_sendmsg+0x86d/0xda0 [ 809.651218][ T6048] ? netlink_unicast+0x7d0/0x7d0 [ 809.656171][ T6048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.662466][ T6048] ? netlink_unicast+0x7d0/0x7d0 [ 809.667414][ T6048] sock_sendmsg+0xcf/0x120 [ 809.671858][ T6048] ____sys_sendmsg+0x6e8/0x810 [ 809.676639][ T6048] ? kernel_sendmsg+0x50/0x50 [ 809.681334][ T6048] ? do_recvmmsg+0x6d0/0x6d0 [ 809.685940][ T6048] ? lock_chain_count+0x20/0x20 [ 809.690812][ T6048] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 809.696818][ T6048] ? sched_core_balance+0xa30/0xa30 [ 809.702039][ T6048] ? lock_downgrade+0x6e0/0x6e0 [ 809.706915][ T6048] ___sys_sendmsg+0xf3/0x170 [ 809.711526][ T6048] ? sendmsg_copy_msghdr+0x160/0x160 [ 809.716923][ T6048] ? __fget_files+0x21b/0x3e0 [ 809.721694][ T6048] ? lock_downgrade+0x6e0/0x6e0 [ 809.726575][ T6048] ? __fget_files+0x23d/0x3e0 [ 809.731264][ T6048] ? __fget_light+0xea/0x280 [ 809.736120][ T6048] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 809.742381][ T6048] __sys_sendmsg+0xe5/0x1b0 [ 809.746900][ T6048] ? __sys_sendmsg_sock+0x30/0x30 [ 809.751961][ T6048] ? syscall_enter_from_user_mode+0x21/0x70 [ 809.757964][ T6048] do_syscall_64+0x35/0xb0 [ 809.762570][ T6048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.768574][ T6048] RIP: 0033:0x7f5d21f6fae9 [ 809.773000][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:12:36 executing program 3: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3f, 0x32, 0x9, 0x0, 0x2, 0x3e, 0xfffffffe, 0x217, 0x40, 0x12c, 0x8, 0x7, 0x38, 0x1, 0x9040, 0x800, 0x3}, [{0x2, 0x3, 0x7d, 0xb62, 0x8, 0x0, 0x2, 0x9}, {0x6, 0x6, 0xffffffff80000001, 0x100000001, 0x100000000, 0x7, 0x6, 0x3f}], "b1537358fd193c7fde19352d3358df0e85a1c42853bc93470880b59ec00b1f499d37b38a5936c5aee355f1d3fd66b05c91a84c26a7115f67d2f56f693ef655e9d42c72a3ee10135f0a2e6cfc16f39ccb240baca139f490c86b80c08f1309d2dfa50db72095c7b20819de43ae95e84419bd800ee451a13f38cb97efb8b4fbf85e0dcd5af53aad9a12de2a92982b459fcadbff850bca1e1edba6d07b561eec143383025459045c197db5b95ca966f216561f176b23274f68e36db811b51a7b436e468324ce97358226f0bcbc31dd3183a3a2adfef7515182d7067b4c41fde42c8c88b5aec1af21627f224597fa2f", ['\x00', '\x00']}, 0x39d) fstat(0xffffffffffffffff, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) getresuid(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@dellink={0x58, 0x11, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48040}, [@IFLA_IFALIASn={0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_MASTER={0x8}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "9ec863482a"}, @IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x58}}, 0x0) chdir(&(0x7f00000000c0)='./file2\x00') 06:12:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00w\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 809.792716][ T6048] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.801141][ T6048] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 809.809113][ T6048] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 809.817087][ T6048] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 809.825057][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.833026][ T6048] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 809.841020][ T6048] 06:12:37 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) 06:12:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x7, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000c00e0b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:37 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024020b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 810.341601][ T6091] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 810.391518][ T6091] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:37 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024030b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 810.790656][ T6097] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.824585][ T6091] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 810.824585][ T6091] !' [ 810.842476][ T6091] CPU: 1 PID: 6091 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 810.852417][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.862504][ T6091] Call Trace: [ 810.865804][ T6091] [ 810.868781][ T6091] dump_stack_lvl+0xcd/0x134 [ 810.873409][ T6091] sysfs_warn_dup.cold+0x1c/0x29 [ 810.878381][ T6091] sysfs_do_create_link_sd+0x11e/0x140 [ 810.883883][ T6091] sysfs_create_link+0x5f/0xc0 [ 810.888737][ T6091] device_add+0x789/0x1ee0 [ 810.893202][ T6091] ? wait_for_completion_io+0x270/0x270 [ 810.898798][ T6091] ? lock_downgrade+0x6e0/0x6e0 [ 810.904375][ T6091] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 810.910652][ T6091] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 810.916932][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 810.923216][ T6091] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 810.929246][ T6091] wiphy_register+0x1e94/0x29b0 [ 810.934230][ T6091] ? wiphy_unregister+0xbf0/0xbf0 [ 810.939304][ T6091] ? minstrel_ht_alloc+0x52c/0xa10 [ 810.944459][ T6091] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 810.950565][ T6091] ieee80211_register_hw+0x1f18/0x3ed0 [ 810.956068][ T6091] ? ieee80211_restart_hw+0x290/0x290 [ 810.961482][ T6091] ? debug_object_destroy+0x210/0x210 [ 810.966884][ T6091] ? memset+0x20/0x40 [ 810.970887][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 810.977247][ T6091] ? __hrtimer_init+0x136/0x280 [ 810.982128][ T6091] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 810.987906][ T6091] ? hwsim_virtio_rx_work+0x350/0x350 [ 810.993294][ T6091] ? hwsim_new_radio_nl+0x992/0x1080 [ 810.998605][ T6091] ? memcpy+0x39/0x60 [ 811.002615][ T6091] hwsim_new_radio_nl+0x9bc/0x1080 [ 811.008966][ T6091] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 811.014897][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 811.021171][ T6091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 811.028565][ T6091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 811.035885][ T6091] genl_family_rcv_msg_doit+0x228/0x320 [ 811.041462][ T6091] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 811.048861][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 811.055149][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 811.061421][ T6091] ? ns_capable+0xd9/0x100 [ 811.065867][ T6091] genl_rcv_msg+0x328/0x580 [ 811.070403][ T6091] ? genl_get_cmd+0x480/0x480 [ 811.075104][ T6091] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 811.081029][ T6091] ? lock_release+0x720/0x720 [ 811.085740][ T6091] netlink_rcv_skb+0x153/0x420 [ 811.090532][ T6091] ? genl_get_cmd+0x480/0x480 [ 811.095237][ T6091] ? netlink_ack+0xa60/0xa60 [ 811.099862][ T6091] ? netlink_deliver_tap+0x1b1/0xc30 [ 811.105185][ T6091] genl_rcv+0x24/0x40 [ 811.109192][ T6091] netlink_unicast+0x533/0x7d0 [ 811.114008][ T6091] ? netlink_attachskb+0x880/0x880 [ 811.119140][ T6091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 811.125410][ T6091] ? __phys_addr_symbol+0x2c/0x70 [ 811.130486][ T6091] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 811.136232][ T6091] ? __check_object_size+0x16e/0x850 [ 811.141550][ T6091] netlink_sendmsg+0x86d/0xda0 [ 811.146352][ T6091] ? netlink_unicast+0x7d0/0x7d0 [ 811.151531][ T6091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 811.157823][ T6091] ? netlink_unicast+0x7d0/0x7d0 [ 811.163049][ T6091] sock_sendmsg+0xcf/0x120 [ 811.167495][ T6091] ____sys_sendmsg+0x6e8/0x810 [ 811.172290][ T6091] ? kernel_sendmsg+0x50/0x50 [ 811.176997][ T6091] ? do_recvmmsg+0x6d0/0x6d0 [ 811.181706][ T6091] ? lock_chain_count+0x20/0x20 [ 811.186667][ T6091] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 811.192691][ T6091] ? sched_core_balance+0xa30/0xa30 [ 811.197926][ T6091] ? lock_downgrade+0x6e0/0x6e0 [ 811.202812][ T6091] ___sys_sendmsg+0xf3/0x170 [ 811.207430][ T6091] ? sendmsg_copy_msghdr+0x160/0x160 [ 811.212753][ T6091] ? __fget_files+0x21b/0x3e0 [ 811.217456][ T6091] ? lock_downgrade+0x6e0/0x6e0 [ 811.222440][ T6091] ? __fget_files+0x23d/0x3e0 [ 811.227192][ T6091] ? __fget_light+0xea/0x280 [ 811.231810][ T6091] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 811.238123][ T6091] __sys_sendmsg+0xe5/0x1b0 [ 811.242659][ T6091] ? __sys_sendmsg_sock+0x30/0x30 [ 811.247739][ T6091] ? syscall_enter_from_user_mode+0x21/0x70 [ 811.253761][ T6091] do_syscall_64+0x35/0xb0 [ 811.258203][ T6091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 811.264125][ T6091] RIP: 0033:0x7f5d21f6fae9 [ 811.268564][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.288366][ T6091] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.296810][ T6091] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 811.304806][ T6091] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 811.312800][ T6091] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 811.320813][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.328809][ T6091] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 811.336915][ T6091] 06:12:38 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000005a40)=[{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000040)="1a8fccb494b9838151567b7f6d62d96036188c1c4200a487c27938ed673e50512ff5368498bd4cdb275538c02adf62a0f6461b9a47370d9112a6190585ded29ed163dda33471437985b6d21483145869e78bf435cce756f10c312f0b08e593d607d6e4c2de888a316a07f794c245c170426a6a8545d80219f0335dcbdf02d1ddca87806b2a35ea22c93dd1665e6b40f3bf932a9129718dd788c602115dff33bdf8a67a1f22b46fe79d3b4987b8a752aafed87a87c468f95f140a9872ccabd564b6e7d6f619bbadff8e047de5cb8acf983487e10e0b0d8618f02eba7885082e8fe80ef60167e60d829554c6e326f512b32fa3cabb6f54b2fcd948331201a828fc7bcc20e31c4c55094dcb641cc799eea8f77c352accae9db264b506516ebf0a2551e58d2ab279a41d1f2822cc51b89d9080fac2fcb8acfbfdfdc2947ed57e6cc3b3f3b3da0ff2fe92503889d4d1cf280518992f0e136adb8371c8d4bfc6d688b06700c77413e61d832465103e91aaaabc29c3692bca5f3d28f275274031f9f84cca782f18699ac9d61656e3b95d884ff884dce6e73e1fa55361c093bb3a8adee4e1d0a68a9b58dd8aee7b62cd3669acd4f6ec36438aa374fefba70e282cc65f723fc58b82a1a3aba8f5fd4fb2304db9bab557270fc1b0aa66b38afcdcf399e4c5d2e121f3ed359f1e4435cd8453858e395a072dd1a7376164a18269f967294a6cb78cbd487128b15b62cc5e893218144b24cb350451d55e0b24c90ed3634abebd402cfe5b1b896bce909639a9f41bbd0277a26764312dc5e61a0454ae5507665f3fa25d411ffe43f62c1e1de7b05d4015a09479100e5aa4ea626c4b851a4f234394e44dc3c796eb2dd9ec474221a036bec9f31c0a75b86ddffd5d52777ce2fbdab2604802e8173b657d2b365120939aee93e5127750762cdc7d305c69982f27205b627f1b5982992a0934d516cf92f4c56fd6057372f249eabb1d866bb3ca3fb3abdaaf15cb15d4df06f23bd06eee37a1dda94bd05ba3bc9bdb52c82fb4022b844235c25144abd373a484f05a48338ca458fd724b657a0c28e546472b83864286e0d4264f86161ffe9feb0922a1bad34845321481b16a88c666fb3f2b35087dca33fac14ebfffd4ec0fa2afda5d32e2f244223b0968a1a25bfc4a0ebfb222aba6106ea4ce4a3eb05a3ae0e87ba468ba96020a5dcd96d1fa1d3e5f311e8fd85abce2c078965c6463f2b5c789131e09f81bbfca0e1a72644950e2df3eb5012cc688a3561ecf831ad68d081f2aa42f1a727cd4745d00aee414382712a90ccf8c574de246c022694e097c1406052d38c1343fba8a70928634050af3ddf39bed58435bc6374b19598f766e50cc5b18165d86697714067974093dc7552d336cc9663a011a0dc2b56b247ad3f2bf0c26b704fab060291d0171eaff343338402be526186e75ff880ea34304faa348147d94305b39721617b1f2fb141aa6ad1435e8002d120ed1b4b5245c127dc3b6ad6f79efc332225a0a83fe6a6587760c7ea27342f8b5d46616283e08c0e690cacf6244405c05ad3d404b06aca251dca4da50a4eed57222bf53cef6472c5ce99de96437a3237e8717c5c96bba6f88bbc39bec5dddc63948be2629a3dd33dae61c8932d1bf2e3d2a0bbb4ffd4800f0915dcd80ab9679b21e32b67cfff1da405745f9596910a2f7e25c56ce7c0e396ce9608c1f7d5c04c923084e38297261dff73b20153c24160d4ee341c0d2c76e73cca343d8fa113738c9c017ef90af6ebbf28b7e54006355cde62c84122b9801f8034f28a555de255512e04476830a140868084f0fbdd9ec87457a72fa01ed2ebf182ab3c748d3e30614212ce3c6c7da1b0de17d82231fa10bbc59a20f59e1f7eecf8ce56272a5730568e4ac4e2fd1dd0a0c6667c7d500e750b346b27ba24b30a62dd8f553e887c63cdad38dc66225ab423ce5c67b0a77361ba4374104397e0d935728c81e6cb56e5679496585c83fa77f2a6a9df91f40cf0b5c83c88fcb45392f25f4db3c557d653fabced9058dada33bd17ad871e9662c7cbc7bff4c4df90e18a089648931c3cc84b85af2b232e000ee337273aa287677c4943222c19d73c244bf36f1224202acba636db2c5dba8547792f64773f26c8d0cac27c1c5d3a5e896cd9b984ee157b13714a64fee61341515fe097c61668a1ddfe08373caab881508e65ca43c670135b2be9093cc89775b7e8c7442c925ce3d5b1b1a9ba1ec048f3048414e47e85e21bc187e0e0d34d4b4eaaddcb29c666c55d42f86e51d382e0611424d914ceded6f5c4f3b5555bea746d4ee41568a8344c03952f18480c1774051ef501bae7c388a44ec58ec66604cfbd0490598410d2fe790b183cd64ef2ec71d8ba90d113c17f6a37272ab07988c2ccafaf557207cb182137ceb1ae0b230fe80dfabca7d60bed84f3c104af5937a56f7b68aed9c2d5542549b7d245e6da268bcb1cf5fd187efafbf82ba5cc69ed04ea8614969c3e1703fd7c51fbcaf0edc98e6d46077f30a6c1eab3f63a3c0b7aee63fdbc7f5015e834e93946a75cbfc9aa0fe768a28fabe6b5441e82fbb9d3c0d680d430672e0617e0e839500516693f8ea2721d04c3ddb5d07061b32092c515abf81bcc7954eab3d2b08e89d913aa635ccb839d681077a8bc268b473fd69284d376e19915d4f26d975b4d7c2355642ec675ffea1099e5d674ad45b7fd44a489c924e326dd23ece1e43479e8e684547583acb5c2f670ae7813550755dd2fd36cc38d484f370e2122368aaea24ee4e52c93259a2ef4940a743ed5de60ab17c055d723b65a526d5f496d97c867d148474a00dae207ea859519bacbc9e0102ec9d142293274fc87e1257fb0c434a49280cd700739d3c85be4047b0eba69e24495cb1176960acd2605936e8db273faff0bac5c786c83f5027c52b0706ed861da8abfd88d470e93551703630e8740bf05810ff5227433428b4e20e3872f147c52c0ee76f7c1e69433eaa6969b42eddf7ddd139f18d1d541676a65c7540af378bf26fbb4bcbc1b638e792986aa3eb273ea9f23d561ecabecec5515b8c34446a8ebece9e6bf3d3416b2e6d9bc265eff620c14ed7ccdb8f80b4bb9cefda5bc6ad9c9d19fc43e8a70ecbcd773c5564d65b7b0b2c3cdd7b22163f5ed08180b8e54079adf5999d219bf879cc84687c404e6b8a73f446ae618c8054a30d7fdbc5d572e475d06f7157b3b8c0b689392b5d406b65f11b6532ae3d3461049609fa6d7eee52e1b538a1fa68f45d016fc35a2dd6c07ed67a5b31f6152a29321e318625eb7235426b10bd7d10b6dc7d7c087fa28412e48b4b14b93aa3d0bbbd4120f6b3a3d0d18e295ea7b370acf80a2522e5fd91adf7d309a7ce43dc955c4eaac814a917d19dae8cb779cc54135674f9f5ef09aa2403888d10bac156eab0f653e6d953d2a7c57bb65a4b99243d9e304360df213495d021b6b8c58dc31f7e468b74a2de97f923711b0e5988a225cf5ff9c8f7c2f857e842d3e6b47cbf2816465839a50ad8d3c4a35963aaf70d7f6666384635577a1b97bc9a5cf89bc3a496d734ce3dd8bf23b6d30f8695e0cf5fbf22c151c67a543db82bce0a3acd861ac2a738bf89a1ba13699bbe543ab7a1ad177427ffb3e5916d3da4aae89243eab13405455d204137883d8433ec96979c3cff1ec8f8ae0ca300f6a9e378beddfcb9102d1828c41da386fe82a06da8e18a6b4ece153c2c39fdedf9de6629d245f0f56b3851d50d8c9cb6f7548520112ef0aef5b68593a43ce8c6c25774533e420ca43a1c9f00fbdd90c8ccaf8616e52bab8b3c202d83cf4e5ec3ffd57a09818ece4df2813e7cd3d069fac2df092635e3f7075d28b0f528d0bb8fd7f5aa0c9b77ddb89b76bc6e08a6fa844a57fe1eb17633f710a9dfc3dc9132177db6e1af8175b6dc44b7c1c47a79c109da655a054fccdd2ed30472f7332ccedfe505aadc612461841a5c129bad8c27f0dbd22711f3e2dc52e839e48d2460fc361f95d79ccf5ccde10be7f5a7b798250b1a323e48092d3c647eb96dc29d6facc2fc31cbe24e2318f0df0d9ea4bd837f8775c61955d07196bc709a674485048909781ae8d21be515ec70e5d710a9ab284fcfae1708243a3a4ef7dbfbab02e44d1b8d71afb61726581ae114e70bb88fae1e092d6732d14ff8e821b6241fa37fef755318c3405088fb67497d402336731f3052293422bdf23bc65717a42379657d60cecb86d8691279535508f1c49e40a1593d63ad24d9ef8a332d956bab78b3cbfd0dd768b8e00761e3ee6490b816af38f79234102c49a6b2550c8718a1e6ae0f922b901e209313eb5b755e7815d5ca25f25000130365044a31e313250a5ea5e41033aeb8dc8eb20af39941738998fc34c1d978f88294dddb3347442e2bfe32b4bcc7b48f37e4cdd2d33bb287ab9a5d9363950cb860c21d82d712a05e651e11c138b243d15323568c5964a859f1e54018f2a4366e2389bd922c6097e48af53a1865f47a97a94c0eec6f533d381ced3a6c8a9fc15d464eb3625839a90c96175b8fa5c8eda6260fcd0908163adfe93d4706eef7f3856b21dbf44a355fb96d5c3461180eb8530667aee7a7ffa9edb1af161c75b453eb970659c16e0ada9b9501870664b0b2b7eb66e694c44fcd966689087b98ad93ee4de38c939d041be76007757238cd0c3d92bb18f4a5d64a03eb714fa9d17235b753048a1a48832554a1e5915afde7fb0daf7b42bde6a7a0822db1592a2e6731cd6953c1aa1b9d7804501aca14b177bb287af74ab920eb0908a8a5c03b8e2122badf03c1fca5d7aeaabad7693c78683fe81a8524a19c33253c0bf146029c0ada54c435ffa9749348367e51e27637877cd33e7f579e9e14563f9c231a45329833c2a1d788726b28c1ffd68b9afc68bc6ba3ab6966a44165d74ec91997e2056be1427697a68a79a37d7e65edc6507e08e0c6a15036c7642f0c6f6218858430c725c07741a1fcdf82fb55f095fd31aae6640a03bd5e74a282f2e55325b0a6109118e4883b5eceb57b74ec3ae6787ecfb070d33ed5dff3dd1a453e1dd326a5c461012ffb84f7df4cbc7a6e7d50efb0779df80d20657dde705175eaf2e187eb9760941fe79f0576eb7b124bfae17c573706d0eaae71b4a5987f2d311bff52c1a6e588e87221aa9fc5a703aaee57b453661f3f424df2ee1c71044fc38085fd5b8d797c434e1fcf5585b0582f9ab1d556354bc3b7e37740f342b506d2ce7b86a350af80fe671b5b8be5e242813eced7d70de7276aa66ea95bae1eaf6c99331efd917475cb66c8ec3db6e2c43c6cdbdacf95483d3565cd23ffee21fc6e64a506b8f5b577034f5ee36328fc1497649c30ea79aa5fcf0d862e10501cbb17422a0287d16b43aa58b620b6ad4c8f88fdafb5556efd373ff4554467e5ef5a5d2981ed6775c235dcf41aca29293cd3b29b52343eb37db40896a96b9edef5aa2c1e936c6465cb8990137a27ece84aec0aec7ae8eb9b49178085cd33c9c6b81279d4035c1404caf41dce3a0451aab4678d3890728b8eb3231aa38b154f760fabee1b3e0086c59bd69346d70c37a09758f1a911dffa4289862cbe90dcb5fc253286e0f4dc04be67182c0aa5215c90baba56ec988f381a0bd8fbf6b1d47c76eeebeb26ff0a65f82fa1066d686a4f335dc86a4402709666d15d8f508a6a8871dc1ed02eb2de76d9709d016a6576989237577ac0461c3d407288b583a7fd82787e3bb0ba7fe26383ac6d00a795f99939111b92a2dc276b443c0fef14bf5a611c849a59a19492", 0x1000}, {&(0x7f0000001040)="3faed79adfbd0a626ebf4bf0d26c705688d72c2be22f5836ab35ca20d66506d93e2c4938a64b21d94a9ac21bc4164ac9d58c4d72eec96fda3040309d20f87cb42e9fbbe49ce8453aa54c604d812bc5", 0x4f}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="591053d98c9a23", 0x7}], 0x4, &(0x7f0000002140)=[@iv={0x30, 0x117, 0x2, 0x1c, "1af91bd51902fd37fbddcfd23c8b9f7c73e7ce3bd9248e6d5b691a3c"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x911}], 0xc0, 0x8801}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002200)="2ac45debdf5150580385404ec3be7402efe1b096a703dfe16b13edef88e421fadc06f112aaf99724d87f1ff1aef7b34ddbe544bda80250f5ce1ebd18a7eafd4c21be427ab19db0895c8d63cc50a3f16d145065e1ccec8ff104486b375e9b930a55b57448d83619399527777d44dbe743afbb1a228432d1794369531ae72bc0fff46c3d2446ffe6a567519e5af2899cef8e57dc097e30cb84adc9101f46fa0c7dfbfb2e85fb5e5b0d7e7449f3cd56ea", 0xaf}, {&(0x7f00000022c0)="a257a134d4b71bd773af3b92c2b08f09ee531bcbe48d92bf4d6387493ed7997a54eeb6789e2bb38e5753c6195c0fdcbb50866ebc20f685fe", 0x38}, {&(0x7f0000002300)="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", 0x1000}], 0x3, &(0x7f0000003340)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @iv={0x18}], 0x48, 0x40}, {0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000033c0)="9d20bab5f13905667afc7134c601adccf0e37ef2109a6baf7f9d73529a92dc3c440e0be741078191e3c9f39ae2cde5d5c959cf173c51203f60fc0bb237a026eb503fa5a518011fa9328b85f86bd58c21ea7020d8eae2a4294c95a5a0c7b4b2383c68c383242280b5d5a4a1a1973ef44ad91132dd495308143ff6f12d7e534837f8d6390442693a548c30595d0abb961c374388b6d417d95a1ec8a954c7e9d69f1771a60a343240c4613a92ce503eccd9378b248b3ee97149178dfbb59c68368a6ecf75cb0dee8fcdde7d035e6386319ac325a80ba202f24712f54a2570c23758ad71befdd9f201a780fa781bb91c27e15d9048", 0xf3}, {&(0x7f00000034c0)="dfde85fc71ad5c605a0e94d1078dc627c872c9dec76faebff4e94308ae00216034775a9dc860d51df4019ffe152b47863b5f54fcecf2af3925e41a0f147614515f3a7d7f1041e871b8289df090ac6b658a73befbe20a", 0x56}, {&(0x7f0000003540)="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", 0xfb}, {&(0x7f0000003640)="0c53914b5aad4578237fdcad0ffa28a03ed799845185c202e12ed1481910fe30d7b97032ca574ec7b58d52a56aaa3eab7303ffd4da21ce8a243d87a51a21c85fe9298349c3c177f1fd0932306b86a87152eb796ab6efd3d50ffd", 0x5a}, {&(0x7f00000036c0)="a2c0f550147989028a6850c84751a5c9d595efa7b3af266beb38a9e52dea7a60332840b600b5ccd9f36dfac2dea6d932e58d787187f93500e73a3ba5ac2200219397ab341efe54164c991cd5660b5645c777f685c633cbce6d6a594ea21a36b0a1a0ad688ac634fb153ae052661975845d008909ec73656f3a448c25f7277895811784420dc9b04fb36276053812d3a241d8e0ceafbccb196653d38b21556166f6f6dc327722d7a1a859e96242e9bdf4cea65cb51ae76353e7736c409548bb747ea8e794281ba23251a7223759896f117ae61b24", 0xd4}, {&(0x7f00000037c0)="48f59ed40315e24f915c5a78d0571d0fe850351fe95eba07b55c093a1711c673da6f2ddd7c71c72d12767a8d6db5814a3a7fcb9b2d5ca5710103ccad749e60dfc72fd44723d03eaa49e26c5caa6d82e9b3ed8ee44ec0547160f2377cfaa7f4600779d037ccf53e7a4a02118da19c", 0x6e}, {&(0x7f0000003840)="d4d78e9ee3fbcc5540578b3a4d01b0d28471b721e68a402380bcf26a436e9ce055d2e26f2561acc8b36356892330dc59a2cf044836a7d184a886508a68b3565d42a59c22f5c05d05851f194a549c5f7553b06f6493d48582aff0fffc29d61e014075328c873f28b1d492a76bdc4eacd3988a76eb4bcb912215a207614a14569af17d9db53b276b6f72901bec20cec363a663972214b1a5d72f113c2a7e34c2e9297f18a96a03bc8c5167f03d17b1cb177cd39a83abe1db51b1b6158da95d212120e8505c591fd6273b16b8650739d2d0fc81acc9ffa5be82ff33a467e5d12a3616f68ad47675a855888ee05faa425c0a", 0xf0}, {&(0x7f0000003940)="21d6666e92295221a57df1b7217f6ace40ff25a900f37463791a064e33c3aae78b33accf6e1635a79fb4d6043b3bd539ff738c5416b86f63a6196ada8718ffb70f599fc1e0f0f41a573ff009d0c79c91e2ee0fd9b71120f8d8839db33d977e4a4945f6e1f09d31543849a8b3ac0f7086d670e91a4cfaa675c630f5a48b6b9ac4d5a7bef0c95281fb31321149c10e79dddd05c050ee239eacf4d4b08491df7da295dcb3bdec87f6d329b6d01d77c51c69d034e7", 0xb3}, {&(0x7f0000003a00)="0fe0ebe6494e283dfd0b39ffcb69b2832d9a6860ef5374706636dc6d69d6aaf70d6c2f740db008948c29e6a5149454d022abe081a96c23771fb905526eb639681b587dc054191fd5ebfa9fb6c50705b0015e387db92aac40a26111dbde1bca9c6469326cf1cc274e5ce73f072c38207b81e119fa6541cefe5fd74330a4add23ac3aa46ff939e331082f80a3d1ed63782141ad128021ec816fd4d7864cb00b4176deec14b9ff882a1fe688620695adcc8", 0xb0}], 0x9, &(0x7f0000003b80)=[@iv={0xa8, 0x117, 0x2, 0x8d, "8815251c2d44114c2247286ca139fa7b381dc6926c61b00d9a09ec10b835ccd5fa5e4e09e9375486a32ca90b1e620f6aeb9012c11384d745f875742814a82a0dc6367ca0985539b9420ca14127c5164671283580fca4ba6a02d7af0c0ac2054b8e9e70899378277d3e442b9977b60cc3ebffe65181a8fe8beb4cff6fb744cba7a1863241640d118406e5eb0fcb"}, @assoc={0x18, 0x117, 0x4, 0x3f}], 0xc0, 0x800}, {0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003c40)="3d429fed9564a27352596ca13f76e949d1a680db260df3b62fcd81b2f113908d12ec0f9fb9405ede54733734e6e953cd353e50aa28d6e9ef26ad05df2a90172acab42a9a576e80e6735ec56274c413840da040c91e23ded25d2a0639126cb303c077ed6f3e68acca694d502c18dc9bbffa5132fdb150da137f6258efc820773e35b7", 0x82}, {&(0x7f0000003d00)="06f9b5c6c60a6c9229231054eef9155e6389f834769747004a0f6bdf318721f5b0225d8e57196d4cacb25c68a44481c5e58e372a567460d98ad079c255e1ae0bf0e6be0764a84d763dff6791b6296245315168f0d0c03f5ccb88ffced165dcc35741f8edae89f8f44367c85c871e29c81d18cafd0bfcb815c59cccbdd22ff1df77b50adff6f52b912d20ffab7a3fab2794300c26d68707099f663cbe410db6b89376c96127dbeee266204096a77838855f54f2332496e2156892bff1ac5e09b07a459f288f", 0xc5}], 0x2, &(0x7f0000003e40)=[@assoc={0x18, 0x117, 0x4, 0x99}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffff}], 0x60, 0x4000000}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003ec0)="e5ce32461342dd8ef9b00a40e1f588e6ba250235c7b41571453a06620324cfed49db243ebb2c41d86beb468ec22e8aad4be486084ce907ee802ff0a816197c3957f6db02bc7440e47eca61af09f6db59727ee00113854bb1e01b741b6da1f3591051b806ac09d561ef05324b7c85d70c1d79cb5ebedaf2eb5ee426ef482e87f16322b20d9c6e748e9204bec11e57d20d09ad3ddfdbdbe23ee508afed84311f0cb7a6013553326b8e49eac93e9fbbad4b6b01207ebfab2928bd285f37609201b4ad264aa52631c8e21cd9ba9d9370d9f91810a5aec4ad9fd279bba0d767728b8573350f350f6d2172e98d35", 0xeb}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)="c49f9b843c4fe5b2296aaeceb131c71fac8084fc0c6f6b3aaf8d140d24e9592219b51b99e1771bdea3d9e02ad11c36ec9a50924df17eca9ce09174e3e9982eb2ab4fe9514039e218340a6a6c958cb4b384f6f2bc50aa7f", 0x57}, {&(0x7f0000004080)="5855e183ca89840fb89e7c6f91177b7cb1891d763db16146007951bb02be38e17a142368b9637de4e229bc5ec35a056396d575b94ea4647a166e2aba247380d9d712a5bdde0ad06f5ebff8d719d314c9a450558128816a86c8af549e37209413a0d4423984b5041d3e35bbc422b8", 0x6e}, {&(0x7f0000004100)="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", 0xfa}, {&(0x7f0000004200)="94af8141c79c49d66e0bc9480a1cb327eaf7ad806714c9f7d70a1cc7f9abd8dfb48934e5014be3d3f0b3b7fc817d2054bf07c02f886c779233b001472dcf4f7ab1581f49ac7e09277cd51a6fc19d62877bd353", 0x53}], 0x6, &(0x7f0000004300)=[@assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0xd0, 0x117, 0x2, 0xb9, "51a04290274bbf7fecb3b4196d1ebff09e10c85d42f96f1e95b3f2ca4d2b4cdf1abfbbc6b14f6de00f7f06aa98f024aba04af621314d2c802d72ca7eb77523b19069deb59d2e5132c4a7ec82bfa7b569e1c5acd9d793ee814ed764057197e90c1c02e62fc247efcbb346e40033595fe1ce397ecd3612c35ce4720ddf474daefeb90bffba5114d68a291c2917a9f5f42ac2bd7ed07459699ae49e71a84291f4d160e64df012685f54ee62e5eb09fdc4b8350ec4a4a981ffc7ba"}], 0xe8, 0x20000800}, {0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000004400)="1d1e58b88b9cdaa2df56b3424e73b0d39a51351d645815b1b1ede118fc5f56e565efe38e512c618230340d44bb0ad534e3550eb776635c31e43fbebd77e44e63257752a5071a9b10d789659a7abfa3a7bd1f069277c726cb27ee404501fe8335c02cb67b314b2d1932ca0da74bd515c335a3b9606a03e0ca8eb78b4f6c738b7948", 0x81}, {&(0x7f00000044c0)="8d8e76c7f6d05fc0ab4c2925d68b289dcd2eac31e583f3b06c86bdd89510d1607028b0296e473ac3efbe623c52c420fb6ee3eaa2f2a09aa326d99d51cf73690ebe7766edd757fa7a9f6c65926348a5c977aab89ddcf225650898ecb3aad4168ebe8d5ff443cb13ecfc1774ae0a3a885319ada8b45b158883595e9f1c717d184cb1462b453ee9e29c3aeced5fbc718281a87c", 0x92}, {&(0x7f0000004580)="b43c876e21728d297e86f8f1ff83c4a4584f4db24a5a5c65b984930f93f4fecc07a2190e0414f1e70b400565f6cb70fbdc16c8d93eddf93c052bdcdaec1be7f3ab7a1952774121c712df0d53a64f9242b922f046482b53843add0e9a7af7ac225a46e2c1bb96b325bc1f8cb4ef6a14ddee4268dd569e743102b82cd41eb5c28775bd1275c4ba48e5c62a38662a70a5a00318a6a237d4e824752a901c37d900974f56b9ca9a565361fe646af2901438ce73ce0c6da5911275", 0xb8}, {&(0x7f0000004640)="ed7415943f0a1ca267212c0c48cc296a7551814c8b5e41fdc90d0a839cb6f01874ed50a7e40f7f5ad0fd4bce0eeb09c2d2e7e3bb77b8fafa9039a6ecca6f37234b6c97401bc912ffc55296e254e7333f0079f084225299dbf817640482fbde6d45e211ec24f946b2339e5358201dee9258b33c75fd93c1f34d94abe368a097c1d288308129294f044020c0fa1794bdb778b48ffa3da7eec98c034adc72fd3043656957008024d21f509d2e914368c82f3bfcfc28e1309f02ed97ef7909347495ef10204e539cabb94c2bb9c4eb84a8c04770", 0xd2}, {&(0x7f0000004740)="ed1037d2196b7868eb59a1ff8cf59894e1491aa5266c9414daf05cdc4a500ccaa4f6a28edf5d8cf61a5ece6ed25aa3ef59c23a80f81eda7902139161633c0b649ecac7ee91460298706af798", 0x4c}, {&(0x7f00000047c0)="cf7f0fad8386e59f946e1760412516bfee1fd36f18323a9e922fe777a5bc89d65c115b21d42d8b7560347ef69bb25a6e971644b16c2be5f92bf9b0abeab816cd7748b7a173e5ca0ed898899dfba4d655b737e543c9a84d5d93a971083f0167988b86161b51edb1", 0x67}, {&(0x7f0000004840)="ec4807fecd6f6b0cc589f02e7f7c6b9a166634a46d47af7a2e5deaff90745bf9f52142e92dfc59d0728569aafa934ac7fcd8c22ffac82f8349ad060289d7854939d98cbb811b2b6a6584f82a25f5c9176183ad62582139c60662ae143a338a47f9ac484f1f3852b6d18f62d07af1cef2e98bd7d4f772661187b85e2593824915", 0x80}, {&(0x7f00000048c0)}, {&(0x7f0000004900)="9132c2a0901e6d50dd322fe7af1726c38122b1408ca9da2cc8c2a8d02209c7226be825b1e4576f0915bfff33981a25ae0e44d89d096f859b", 0x38}, {&(0x7f0000004940)="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", 0x1000}], 0xa, &(0x7f0000005a00)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18, 0x4040800}], 0x6, 0x20000001) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) r6 = accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r7 = dup3(r3, r4, 0x80000) bind$rxrpc(r7, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000003fc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$rfkill(r8, 0x0, 0x0) 06:12:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024040b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:38 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x8, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:38 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:39 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x9, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024050b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 811.812172][ T6142] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 811.832932][ T6142] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:39 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024060b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 811.978896][ T6141] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:39 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 812.083470][ T6142] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 812.083470][ T6142] !' [ 812.118140][ T6142] CPU: 1 PID: 6142 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 812.128204][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.138291][ T6142] Call Trace: [ 812.141597][ T6142] [ 812.144552][ T6142] dump_stack_lvl+0xcd/0x134 [ 812.149178][ T6142] sysfs_warn_dup.cold+0x1c/0x29 [ 812.154170][ T6142] sysfs_do_create_link_sd+0x11e/0x140 [ 812.159756][ T6142] sysfs_create_link+0x5f/0xc0 [ 812.164560][ T6142] device_add+0x789/0x1ee0 [ 812.169149][ T6142] ? wait_for_completion_io+0x270/0x270 [ 812.174825][ T6142] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 812.181222][ T6142] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 812.187499][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.193783][ T6142] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 812.199807][ T6142] wiphy_register+0x1e94/0x29b0 [ 812.204707][ T6142] ? wiphy_unregister+0xbf0/0xbf0 [ 812.209754][ T6142] ? minstrel_ht_alloc+0x52c/0xa10 [ 812.214910][ T6142] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 812.221018][ T6142] ieee80211_register_hw+0x1f18/0x3ed0 [ 812.226527][ T6142] ? ieee80211_restart_hw+0x290/0x290 [ 812.231941][ T6142] ? debug_object_destroy+0x210/0x210 [ 812.237444][ T6142] ? memset+0x20/0x40 [ 812.241467][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.247745][ T6142] ? __hrtimer_init+0x136/0x280 [ 812.252631][ T6142] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 812.258394][ T6142] ? hwsim_virtio_rx_work+0x350/0x350 [ 812.263786][ T6142] ? hwsim_new_radio_nl+0x992/0x1080 [ 812.269095][ T6142] ? memcpy+0x39/0x60 [ 812.273113][ T6142] hwsim_new_radio_nl+0x9bc/0x1080 [ 812.278424][ T6142] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 812.284354][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.290639][ T6142] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 812.298035][ T6142] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 812.305361][ T6142] genl_family_rcv_msg_doit+0x228/0x320 [ 812.310955][ T6142] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 812.318371][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.324673][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.331122][ T6142] ? ns_capable+0xd9/0x100 [ 812.335571][ T6142] genl_rcv_msg+0x328/0x580 [ 812.340107][ T6142] ? genl_get_cmd+0x480/0x480 [ 812.344814][ T6142] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 812.350744][ T6142] ? lock_release+0x720/0x720 [ 812.355486][ T6142] netlink_rcv_skb+0x153/0x420 [ 812.360281][ T6142] ? genl_get_cmd+0x480/0x480 [ 812.364989][ T6142] ? netlink_ack+0xa60/0xa60 [ 812.369610][ T6142] ? netlink_deliver_tap+0x1b1/0xc30 [ 812.374956][ T6142] genl_rcv+0x24/0x40 [ 812.378962][ T6142] netlink_unicast+0x533/0x7d0 [ 812.383768][ T6142] ? netlink_attachskb+0x880/0x880 [ 812.389085][ T6142] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 812.395352][ T6142] ? __phys_addr_symbol+0x2c/0x70 [ 812.400403][ T6142] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 812.406148][ T6142] ? __check_object_size+0x16e/0x850 [ 812.411465][ T6142] netlink_sendmsg+0x86d/0xda0 [ 812.416269][ T6142] ? netlink_unicast+0x7d0/0x7d0 [ 812.421336][ T6142] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 812.427615][ T6142] ? netlink_unicast+0x7d0/0x7d0 [ 812.432598][ T6142] sock_sendmsg+0xcf/0x120 [ 812.437049][ T6142] ____sys_sendmsg+0x6e8/0x810 [ 812.441848][ T6142] ? kernel_sendmsg+0x50/0x50 [ 812.446545][ T6142] ? do_recvmmsg+0x6d0/0x6d0 [ 812.451171][ T6142] ? lock_chain_count+0x20/0x20 [ 812.456046][ T6142] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 812.462062][ T6142] ? futex_wait+0x533/0x670 [ 812.466593][ T6142] ___sys_sendmsg+0xf3/0x170 [ 812.471211][ T6142] ? sendmsg_copy_msghdr+0x160/0x160 [ 812.476526][ T6142] ? __fget_files+0x21b/0x3e0 [ 812.481222][ T6142] ? lock_downgrade+0x6e0/0x6e0 [ 812.486111][ T6142] ? __fget_files+0x23d/0x3e0 [ 812.490818][ T6142] ? __fget_light+0xea/0x280 [ 812.495432][ T6142] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 812.501705][ T6142] __sys_sendmsg+0xe5/0x1b0 [ 812.506329][ T6142] ? __sys_sendmsg_sock+0x30/0x30 [ 812.511399][ T6142] ? syscall_enter_from_user_mode+0x21/0x70 [ 812.517323][ T6142] do_syscall_64+0x35/0xb0 [ 812.521766][ T6142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 812.527680][ T6142] RIP: 0033:0x7f5d21f6fae9 [ 812.532109][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.552083][ T6142] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.560559][ T6142] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 812.568641][ T6142] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 812.576636][ T6142] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 812.584622][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.592705][ T6142] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 812.600807][ T6142] 06:12:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000076000503000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) 06:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:40 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\a\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 812.834603][T29468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:12:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0xa, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:40 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:40 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 812.980547][T29468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 06:12:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="140000001500055b925a802dd504811a45fe4f90", 0x14}], 0x1}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x202, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x40001}) clone(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r3, &(0x7f0000000280)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x50, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0xfffffffffffffdb7, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/55}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000000240)=""/15}, {&(0x7f0000000500)=""/149}, {&(0x7f0000000640)=""/245}, {&(0x7f0000000740)=""/223}], 0x0, &(0x7f0000000a00)=""/17, 0x17}, 0x40010000) recvmsg(r0, 0x0, 0x0) 06:12:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\b\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 813.102148][ T6186] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:40 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 813.235133][ T6198] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 813.254666][T29468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.271665][ T6198] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0xb, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 813.329331][ T6198] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 813.329331][ T6198] !' [ 813.374181][ T6198] CPU: 0 PID: 6198 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 813.384213][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.394295][ T6198] Call Trace: [ 813.397589][ T6198] [ 813.400538][ T6198] dump_stack_lvl+0xcd/0x134 [ 813.405162][ T6198] sysfs_warn_dup.cold+0x1c/0x29 [ 813.410116][ T6198] sysfs_do_create_link_sd+0x11e/0x140 [ 813.415617][ T6198] sysfs_create_link+0x5f/0xc0 [ 813.420408][ T6198] device_add+0x789/0x1ee0 [ 813.424839][ T6198] ? wait_for_completion_io+0x270/0x270 [ 813.430574][ T6198] ? lock_downgrade+0x6e0/0x6e0 [ 813.435441][ T6198] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 813.441694][ T6198] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 813.447949][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.454214][ T6198] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 813.460229][ T6198] wiphy_register+0x1e94/0x29b0 [ 813.465122][ T6198] ? wiphy_unregister+0xbf0/0xbf0 [ 813.470158][ T6198] ? minstrel_ht_alloc+0x52c/0xa10 [ 813.475295][ T6198] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 813.481380][ T6198] ieee80211_register_hw+0x1f18/0x3ed0 [ 813.487042][ T6198] ? ieee80211_restart_hw+0x290/0x290 [ 813.492425][ T6198] ? debug_object_destroy+0x210/0x210 [ 813.497821][ T6198] ? memset+0x20/0x40 [ 813.501843][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.508445][ T6198] ? __hrtimer_init+0x136/0x280 [ 813.513320][ T6198] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 813.519078][ T6198] ? hwsim_virtio_rx_work+0x350/0x350 [ 813.524454][ T6198] ? hwsim_new_radio_nl+0x992/0x1080 [ 813.529749][ T6198] ? memcpy+0x39/0x60 [ 813.533742][ T6198] hwsim_new_radio_nl+0x9bc/0x1080 [ 813.538872][ T6198] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 813.544784][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.551053][ T6198] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 813.558532][ T6198] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 813.565831][ T6198] genl_family_rcv_msg_doit+0x228/0x320 [ 813.571387][ T6198] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 813.578767][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.585043][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.591382][ T6198] ? ns_capable+0xd9/0x100 [ 813.595821][ T6198] genl_rcv_msg+0x328/0x580 [ 813.600347][ T6198] ? genl_get_cmd+0x480/0x480 [ 813.605033][ T6198] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 813.610948][ T6198] ? lock_release+0x720/0x720 [ 813.615636][ T6198] netlink_rcv_skb+0x153/0x420 [ 813.620407][ T6198] ? genl_get_cmd+0x480/0x480 [ 813.625094][ T6198] ? netlink_ack+0xa60/0xa60 [ 813.629699][ T6198] ? netlink_deliver_tap+0x1b1/0xc30 [ 813.634999][ T6198] genl_rcv+0x24/0x40 [ 813.638984][ T6198] netlink_unicast+0x533/0x7d0 [ 813.643759][ T6198] ? netlink_attachskb+0x880/0x880 [ 813.648875][ T6198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 813.655123][ T6198] ? __phys_addr_symbol+0x2c/0x70 [ 813.660152][ T6198] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 813.665878][ T6198] ? __check_object_size+0x16e/0x850 [ 813.671178][ T6198] netlink_sendmsg+0x86d/0xda0 [ 813.675956][ T6198] ? netlink_unicast+0x7d0/0x7d0 [ 813.680910][ T6198] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.687164][ T6198] ? netlink_unicast+0x7d0/0x7d0 [ 813.692134][ T6198] sock_sendmsg+0xcf/0x120 [ 813.696560][ T6198] ____sys_sendmsg+0x6e8/0x810 [ 813.701335][ T6198] ? kernel_sendmsg+0x50/0x50 [ 813.706024][ T6198] ? do_recvmmsg+0x6d0/0x6d0 [ 813.710628][ T6198] ? lock_chain_count+0x20/0x20 [ 813.715497][ T6198] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 813.721492][ T6198] ? futex_wait+0x533/0x670 [ 813.726006][ T6198] ___sys_sendmsg+0xf3/0x170 [ 813.730608][ T6198] ? sendmsg_copy_msghdr+0x160/0x160 [ 813.735909][ T6198] ? __fget_files+0x21b/0x3e0 [ 813.740590][ T6198] ? lock_downgrade+0x6e0/0x6e0 [ 813.745467][ T6198] ? __fget_files+0x23d/0x3e0 [ 813.750158][ T6198] ? __fget_light+0xea/0x280 [ 813.754759][ T6198] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 813.761042][ T6198] __sys_sendmsg+0xe5/0x1b0 [ 813.765563][ T6198] ? __sys_sendmsg_sock+0x30/0x30 [ 813.770627][ T6198] ? syscall_enter_from_user_mode+0x21/0x70 [ 813.776549][ T6198] do_syscall_64+0x35/0xb0 [ 813.780976][ T6198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.786894][ T6198] RIP: 0033:0x7f5d21f6fae9 [ 813.791314][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.810942][ T6198] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.819378][ T6198] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 813.827348][ T6198] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 813.835405][ T6198] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 813.843377][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.851353][ T6198] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 813.859361][ T6198] 06:12:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\t\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:41 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:41 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\n\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\v\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 814.510689][T29468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.554216][ T6212] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:42 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 814.844134][ T6258] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 814.908001][ T6258] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 814.959735][ T6258] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 814.959735][ T6258] !' [ 814.984891][ T6258] CPU: 0 PID: 6258 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 814.994830][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.004905][ T6258] Call Trace: [ 815.008200][ T6258] [ 815.011160][ T6258] dump_stack_lvl+0xcd/0x134 [ 815.015798][ T6258] sysfs_warn_dup.cold+0x1c/0x29 [ 815.020768][ T6258] sysfs_do_create_link_sd+0x11e/0x140 [ 815.026276][ T6258] sysfs_create_link+0x5f/0xc0 [ 815.031160][ T6258] device_add+0x789/0x1ee0 [ 815.035620][ T6258] ? wait_for_completion_io+0x270/0x270 [ 815.041195][ T6258] ? lock_downgrade+0x6e0/0x6e0 [ 815.046087][ T6258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 815.052364][ T6258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 815.058652][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.065004][ T6258] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 815.071095][ T6258] wiphy_register+0x1e94/0x29b0 [ 815.075969][ T6258] ? wiphy_unregister+0xbf0/0xbf0 [ 815.081000][ T6258] ? minstrel_ht_alloc+0x52c/0xa10 [ 815.086134][ T6258] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 815.092228][ T6258] ieee80211_register_hw+0x1f18/0x3ed0 [ 815.097739][ T6258] ? ieee80211_restart_hw+0x290/0x290 [ 815.103123][ T6258] ? debug_object_destroy+0x210/0x210 [ 815.108507][ T6258] ? memset+0x20/0x40 [ 815.112494][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.118746][ T6258] ? __hrtimer_init+0x136/0x280 [ 815.123607][ T6258] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 815.129350][ T6258] ? hwsim_virtio_rx_work+0x350/0x350 [ 815.134726][ T6258] ? hwsim_new_radio_nl+0x992/0x1080 [ 815.140014][ T6258] ? memcpy+0x39/0x60 [ 815.144008][ T6258] hwsim_new_radio_nl+0x9bc/0x1080 [ 815.149132][ T6258] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 815.155045][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.161312][ T6258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 815.168780][ T6258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 815.176278][ T6258] genl_family_rcv_msg_doit+0x228/0x320 [ 815.181839][ T6258] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 815.189307][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.195571][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.201823][ T6258] ? ns_capable+0xd9/0x100 [ 815.206256][ T6258] genl_rcv_msg+0x328/0x580 [ 815.210775][ T6258] ? genl_get_cmd+0x480/0x480 [ 815.215459][ T6258] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 815.221365][ T6258] ? lock_release+0x720/0x720 [ 815.226058][ T6258] netlink_rcv_skb+0x153/0x420 [ 815.230833][ T6258] ? genl_get_cmd+0x480/0x480 [ 815.235518][ T6258] ? netlink_ack+0xa60/0xa60 [ 815.240127][ T6258] ? netlink_deliver_tap+0x1b1/0xc30 [ 815.245423][ T6258] genl_rcv+0x24/0x40 [ 815.249427][ T6258] netlink_unicast+0x533/0x7d0 [ 815.254213][ T6258] ? netlink_attachskb+0x880/0x880 [ 815.259333][ T6258] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 815.265584][ T6258] ? __phys_addr_symbol+0x2c/0x70 [ 815.270615][ T6258] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 815.276356][ T6258] ? __check_object_size+0x16e/0x850 [ 815.281656][ T6258] netlink_sendmsg+0x86d/0xda0 [ 815.286437][ T6258] ? netlink_unicast+0x7d0/0x7d0 [ 815.291389][ T6258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 815.297648][ T6258] ? netlink_unicast+0x7d0/0x7d0 [ 815.302606][ T6258] sock_sendmsg+0xcf/0x120 [ 815.307032][ T6258] ____sys_sendmsg+0x6e8/0x810 [ 815.311817][ T6258] ? kernel_sendmsg+0x50/0x50 [ 815.316500][ T6258] ? do_recvmmsg+0x6d0/0x6d0 [ 815.321106][ T6258] ? lock_chain_count+0x20/0x20 [ 815.325963][ T6258] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 815.331950][ T6258] ? futex_wait+0x533/0x670 [ 815.336553][ T6258] ___sys_sendmsg+0xf3/0x170 [ 815.341153][ T6258] ? sendmsg_copy_msghdr+0x160/0x160 [ 815.346463][ T6258] ? __fget_files+0x21b/0x3e0 [ 815.351143][ T6258] ? lock_downgrade+0x6e0/0x6e0 [ 815.356053][ T6258] ? __fget_files+0x23d/0x3e0 [ 815.360760][ T6258] ? __fget_light+0xea/0x280 [ 815.365369][ T6258] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 815.371656][ T6258] __sys_sendmsg+0xe5/0x1b0 [ 815.376207][ T6258] ? __sys_sendmsg_sock+0x30/0x30 [ 815.381354][ T6258] ? syscall_enter_from_user_mode+0x21/0x70 [ 815.387277][ T6258] do_syscall_64+0x35/0xb0 [ 815.391701][ T6258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 815.397779][ T6258] RIP: 0033:0x7f5d21f6fae9 [ 815.402200][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 815.421904][ T6258] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.430425][ T6258] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 815.438666][ T6258] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 815.446726][ T6258] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 815.454699][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.462674][ T6258] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 815.470680][ T6258] [ 817.315631][T29468] device hsr_slave_0 left promiscuous mode [ 817.333596][T29468] device hsr_slave_1 left promiscuous mode [ 817.349056][T29468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.356651][T29468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.377785][T29468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.385594][T29468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.394344][T29468] device bridge_slave_1 left promiscuous mode [ 817.400746][T29468] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.409665][T29468] device bridge_slave_0 left promiscuous mode [ 817.415952][T29468] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.427250][T29468] device veth1_macvtap left promiscuous mode [ 817.433557][T29468] device veth0_macvtap left promiscuous mode [ 817.439912][T29468] device veth1_vlan left promiscuous mode [ 817.445916][T29468] device veth0_vlan left promiscuous mode [ 817.543600][T29468] bond1 (unregistering): Released all slaves [ 817.664511][T29468] team0 (unregistering): Port device team_slave_1 removed [ 817.683260][T29468] team0 (unregistering): Port device team_slave_0 removed [ 817.701498][T29468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.718888][T29468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.800664][T29468] bond0 (unregistering): Released all slaves [ 819.855866][ T6301] chnl_net:caif_netlink_parms(): no params data found [ 819.942369][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.950775][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.959469][ T6301] device bridge_slave_0 entered promiscuous mode [ 819.968587][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.975734][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.983964][ T6301] device bridge_slave_1 entered promiscuous mode [ 820.012480][ T6301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.025985][ T6301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.073582][ T6301] team0: Port device team_slave_0 added [ 820.084610][ T6301] team0: Port device team_slave_1 added [ 820.117724][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.124917][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.151148][ T6301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.165134][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.172869][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.199632][ T6301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.245664][ T6301] device hsr_slave_0 entered promiscuous mode [ 820.252796][ T6301] device hsr_slave_1 entered promiscuous mode [ 820.264685][ T6301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.272951][ T6301] Cannot create hsr debugfs directory [ 820.400746][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.407902][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.415365][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.422617][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.484785][ T6301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.506547][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 820.515615][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.523880][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.532900][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 820.550050][ T6301] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.563700][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 820.572321][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.579468][ T8138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.599846][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 820.610488][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.617537][ T8138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.642681][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 820.652140][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 820.662647][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 820.673363][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 820.688294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 820.697297][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 820.717047][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.726104][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.741543][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.826249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 820.851789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 820.861022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 820.872900][ T6301] device veth0_vlan entered promiscuous mode [ 820.881322][ T1987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 820.890993][ T1987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 820.909781][ T6301] device veth1_vlan entered promiscuous mode [ 820.933711][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 820.947702][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 820.956980][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 820.966273][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.979776][ T6301] device veth0_macvtap entered promiscuous mode [ 820.992892][ T6301] device veth1_macvtap entered promiscuous mode [ 821.012402][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 821.024009][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.034317][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 821.045308][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.055354][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 821.065932][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.075881][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 821.086867][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.096824][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 821.109919][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.121864][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.130877][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 821.140019][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 821.149343][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 821.158457][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 821.170948][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 821.181942][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.192292][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 821.203163][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.213893][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 821.225500][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.238469][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 821.249466][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.260078][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 821.271219][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.282527][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.292017][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 821.301638][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.383729][ T3945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.419194][ T3945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.450321][T29468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.464805][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 821.479464][T29468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.498013][ T8175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 821.698451][ T8175] Bluetooth: hci5: command 0x0409 tx timeout 06:12:49 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:49 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0xc, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\f\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 822.022243][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 822.042780][ T6680] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000240e0b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 822.063202][ T6680] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. [ 822.101882][ T6680] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 822.101882][ T6680] !' [ 822.131410][ T6680] CPU: 0 PID: 6680 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 822.141355][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.151435][ T6680] Call Trace: [ 822.154734][ T6680] [ 822.157680][ T6680] dump_stack_lvl+0xcd/0x134 [ 822.162312][ T6680] sysfs_warn_dup.cold+0x1c/0x29 [ 822.167281][ T6680] sysfs_do_create_link_sd+0x11e/0x140 [ 822.172788][ T6680] sysfs_create_link+0x5f/0xc0 [ 822.177591][ T6680] device_add+0x789/0x1ee0 [ 822.182045][ T6680] ? wait_for_completion_io+0x270/0x270 [ 822.187625][ T6680] ? lock_downgrade+0x6e0/0x6e0 [ 822.192513][ T6680] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 822.198799][ T6680] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 822.205083][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.211361][ T6680] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 822.217381][ T6680] wiphy_register+0x1e94/0x29b0 [ 822.222271][ T6680] ? wiphy_unregister+0xbf0/0xbf0 [ 822.227323][ T6680] ? minstrel_ht_alloc+0x52c/0xa10 [ 822.232475][ T6680] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 822.238579][ T6680] ieee80211_register_hw+0x1f18/0x3ed0 [ 822.244092][ T6680] ? ieee80211_restart_hw+0x290/0x290 [ 822.249501][ T6680] ? debug_object_destroy+0x210/0x210 [ 822.254902][ T6680] ? memset+0x20/0x40 [ 822.258914][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.265271][ T6680] ? __hrtimer_init+0x136/0x280 [ 822.270160][ T6680] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 822.275959][ T6680] ? hwsim_virtio_rx_work+0x350/0x350 [ 822.281357][ T6680] ? hwsim_new_radio_nl+0x992/0x1080 [ 822.286671][ T6680] ? memcpy+0x39/0x60 [ 822.290684][ T6680] hwsim_new_radio_nl+0x9bc/0x1080 [ 822.295828][ T6680] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 822.301855][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.308126][ T6680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 822.315538][ T6680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 822.322860][ T6680] genl_family_rcv_msg_doit+0x228/0x320 [ 822.328560][ T6680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 822.335970][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.342274][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.348549][ T6680] ? ns_capable+0xd9/0x100 [ 822.352998][ T6680] genl_rcv_msg+0x328/0x580 [ 822.357533][ T6680] ? genl_get_cmd+0x480/0x480 [ 822.362235][ T6680] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 822.368170][ T6680] ? lock_release+0x720/0x720 [ 822.372891][ T6680] netlink_rcv_skb+0x153/0x420 [ 822.377684][ T6680] ? genl_get_cmd+0x480/0x480 [ 822.382391][ T6680] ? netlink_ack+0xa60/0xa60 [ 822.387104][ T6680] ? netlink_deliver_tap+0x1b1/0xc30 [ 822.392427][ T6680] genl_rcv+0x24/0x40 [ 822.396824][ T6680] netlink_unicast+0x533/0x7d0 [ 822.401622][ T6680] ? netlink_attachskb+0x880/0x880 [ 822.406760][ T6680] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 822.413027][ T6680] ? __phys_addr_symbol+0x2c/0x70 [ 822.418076][ T6680] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 822.423821][ T6680] ? __check_object_size+0x16e/0x850 [ 822.429145][ T6680] netlink_sendmsg+0x86d/0xda0 [ 822.433942][ T6680] ? netlink_unicast+0x7d0/0x7d0 [ 822.438913][ T6680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 822.445360][ T6680] ? netlink_unicast+0x7d0/0x7d0 [ 822.450335][ T6680] sock_sendmsg+0xcf/0x120 [ 822.454780][ T6680] ____sys_sendmsg+0x6e8/0x810 [ 822.459613][ T6680] ? kernel_sendmsg+0x50/0x50 [ 822.464315][ T6680] ? do_recvmmsg+0x6d0/0x6d0 [ 822.468939][ T6680] ? lock_chain_count+0x20/0x20 [ 822.473815][ T6680] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 822.479822][ T6680] ? sched_core_balance+0xa30/0xa30 [ 822.485131][ T6680] ? lock_downgrade+0x6e0/0x6e0 [ 822.490024][ T6680] ___sys_sendmsg+0xf3/0x170 [ 822.494647][ T6680] ? sendmsg_copy_msghdr+0x160/0x160 [ 822.499971][ T6680] ? __fget_files+0x21b/0x3e0 [ 822.504703][ T6680] ? lock_downgrade+0x6e0/0x6e0 [ 822.509593][ T6680] ? __fget_files+0x23d/0x3e0 [ 822.514468][ T6680] ? __fget_light+0xea/0x280 [ 822.519184][ T6680] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 822.525456][ T6680] __sys_sendmsg+0xe5/0x1b0 [ 822.530019][ T6680] ? __sys_sendmsg_sock+0x30/0x30 [ 822.535105][ T6680] ? syscall_enter_from_user_mode+0x21/0x70 [ 822.541043][ T6680] do_syscall_64+0x35/0xb0 [ 822.545485][ T6680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 822.551412][ T6680] RIP: 0033:0x7f5d21f6fae9 [ 822.555852][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.575479][ T6680] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.584163][ T6680] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 822.592236][ T6680] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 06:12:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 822.600210][ T6680] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 822.608183][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.616174][ T6680] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 822.624180][ T6680] 06:12:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 822.659147][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 822.675747][ T6686] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 06:12:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000240f0b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 822.703286][ T6686] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.3'. 06:12:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 822.986729][ T6729] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 823.080813][ T6729] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0xf, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x37}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024100b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:50 executing program 3: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x4000000000001, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180)}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32, @ANYRES32], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x9, 0x80, 0x1, 0x1, 0x0, 0x6, 0x2008, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000011c0)}, 0x40, 0x5, 0x1ff, 0x7, 0x4, 0xfff, 0x7, 0x0, 0x7b939675, 0x0, 0x50e8}, 0xffffffffffffffff, 0x5, r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x196, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000012c0), 0xb}, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x10003f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4088, 0x7ffff000}], 0x1, 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\x00') 06:12:50 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x10, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 823.263130][ T6748] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024110b00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 823.309155][ T6748] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 823.373811][ T6748] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 823.373811][ T6748] !' [ 823.433587][ T6748] CPU: 0 PID: 6748 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 823.443525][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.453604][ T6748] Call Trace: [ 823.456901][ T6748] [ 823.459846][ T6748] dump_stack_lvl+0xcd/0x134 [ 823.464462][ T6748] sysfs_warn_dup.cold+0x1c/0x29 [ 823.469417][ T6748] sysfs_do_create_link_sd+0x11e/0x140 [ 823.474914][ T6748] sysfs_create_link+0x5f/0xc0 [ 823.479696][ T6748] device_add+0x789/0x1ee0 [ 823.484129][ T6748] ? wait_for_completion_io+0x270/0x270 [ 823.489674][ T6748] ? lock_downgrade+0x6e0/0x6e0 [ 823.494619][ T6748] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 823.500897][ T6748] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 823.507140][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.513402][ T6748] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 823.519384][ T6748] wiphy_register+0x1e94/0x29b0 [ 823.524262][ T6748] ? wiphy_unregister+0xbf0/0xbf0 [ 823.529297][ T6748] ? minstrel_ht_alloc+0x52c/0xa10 [ 823.534421][ T6748] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 823.540519][ T6748] ieee80211_register_hw+0x1f18/0x3ed0 [ 823.546039][ T6748] ? ieee80211_restart_hw+0x290/0x290 [ 823.551462][ T6748] ? debug_object_destroy+0x210/0x210 [ 823.556859][ T6748] ? memset+0x20/0x40 [ 823.561152][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.567419][ T6748] ? __hrtimer_init+0x136/0x280 [ 823.572307][ T6748] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 823.578049][ T6748] ? hwsim_virtio_rx_work+0x350/0x350 [ 823.583417][ T6748] ? hwsim_new_radio_nl+0x992/0x1080 [ 823.588698][ T6748] ? memcpy+0x39/0x60 [ 823.592678][ T6748] hwsim_new_radio_nl+0x9bc/0x1080 [ 823.597803][ T6748] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 823.603742][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.610094][ T6748] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 823.617488][ T6748] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 823.624811][ T6748] genl_family_rcv_msg_doit+0x228/0x320 [ 823.630379][ T6748] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 823.637773][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.644056][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.650300][ T6748] ? ns_capable+0xd9/0x100 [ 823.654721][ T6748] genl_rcv_msg+0x328/0x580 [ 823.659314][ T6748] ? genl_get_cmd+0x480/0x480 [ 823.664000][ T6748] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 823.669901][ T6748] ? lock_release+0x720/0x720 [ 823.674601][ T6748] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 823.680428][ T6748] netlink_rcv_skb+0x153/0x420 [ 823.685205][ T6748] ? genl_get_cmd+0x480/0x480 [ 823.689903][ T6748] ? netlink_ack+0xa60/0xa60 [ 823.694521][ T6748] ? netlink_deliver_tap+0x1b1/0xc30 [ 823.699813][ T6748] genl_rcv+0x24/0x40 [ 823.703792][ T6748] netlink_unicast+0x533/0x7d0 [ 823.708648][ T6748] ? netlink_attachskb+0x880/0x880 [ 823.713784][ T6748] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 823.720049][ T6748] ? __phys_addr_symbol+0x2c/0x70 [ 823.725089][ T6748] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 823.730800][ T6748] ? __check_object_size+0x16e/0x850 [ 823.736097][ T6748] netlink_sendmsg+0x86d/0xda0 [ 823.740866][ T6748] ? netlink_unicast+0x7d0/0x7d0 [ 823.745813][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.752126][ T6748] ? netlink_unicast+0x7d0/0x7d0 [ 823.757226][ T6748] sock_sendmsg+0xcf/0x120 [ 823.761649][ T6748] ____sys_sendmsg+0x6e8/0x810 [ 823.766513][ T6748] ? kernel_sendmsg+0x50/0x50 [ 823.771295][ T6748] ? do_recvmmsg+0x6d0/0x6d0 [ 823.776051][ T6748] ? lock_chain_count+0x20/0x20 [ 823.780904][ T6748] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 823.787066][ T6748] ? futex_wait+0x533/0x670 [ 823.791619][ T6748] ___sys_sendmsg+0xf3/0x170 [ 823.796234][ T6748] ? sendmsg_copy_msghdr+0x160/0x160 [ 823.801528][ T6748] ? __fget_files+0x21b/0x3e0 [ 823.806226][ T6748] ? lock_downgrade+0x6e0/0x6e0 [ 823.811143][ T6748] ? __fget_files+0x23d/0x3e0 [ 823.815828][ T6748] ? __fget_light+0xea/0x280 [ 823.820417][ T6748] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 823.826696][ T6748] __sys_sendmsg+0xe5/0x1b0 [ 823.831203][ T6748] ? __sys_sendmsg_sock+0x30/0x30 [ 823.836239][ T6748] ? syscall_enter_from_user_mode+0x21/0x70 [ 823.842138][ T6748] do_syscall_64+0x35/0xb0 [ 823.846550][ T6748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 823.852441][ T6748] RIP: 0033:0x7f5d21f6fae9 [ 823.856859][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.876489][ T6748] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.884925][ T6748] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 823.892915][ T6748] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 823.900883][ T6748] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 823.908844][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.916802][ T6748] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 823.924779][ T6748] [ 823.936873][ T1987] Bluetooth: hci5: command 0x041b tx timeout 06:12:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$`\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:51 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0200"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:51 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 824.317289][ T6757] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x11, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:51 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/\x00s/sync_\x00le\xf44.\xab%n\x00'/36}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001280)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000180)=ANY=[@ANYBLOB="000016ad5071339d000000000000024b0f2ce4000000010000000000000009000000000000001c0000000000000006000000000000003f000000000000000e000000000000010000fabd74207a864f4d0000000000000400000000000000"]}, @subvolid=0x4ff}) fchdir(r0) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000280)=""/4096, 0x9008) pipe(&(0x7f0000000000)) 06:12:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0300"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:51 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 824.567022][ T6806] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 824.583543][ T6807] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 06:12:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0400"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 824.632294][ T6807] netlink: 179380 bytes leftover after parsing attributes in process `syz-executor.1'. 06:12:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 824.722514][ T6807] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 824.722514][ T6807] !' [ 824.760432][ T6807] CPU: 1 PID: 6807 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 824.770372][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.780447][ T6807] Call Trace: [ 824.783745][ T6807] [ 824.786684][ T6807] dump_stack_lvl+0xcd/0x134 [ 824.791305][ T6807] sysfs_warn_dup.cold+0x1c/0x29 [ 824.796274][ T6807] sysfs_do_create_link_sd+0x11e/0x140 [ 824.801767][ T6807] sysfs_create_link+0x5f/0xc0 [ 824.806575][ T6807] device_add+0x789/0x1ee0 [ 824.811109][ T6807] ? wait_for_completion_io+0x270/0x270 [ 824.816682][ T6807] ? lock_downgrade+0x6e0/0x6e0 [ 824.821585][ T6807] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 824.827861][ T6807] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 824.834130][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.840397][ T6807] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 824.846412][ T6807] wiphy_register+0x1e94/0x29b0 [ 824.851295][ T6807] ? wiphy_unregister+0xbf0/0xbf0 [ 824.856335][ T6807] ? minstrel_ht_alloc+0x52c/0xa10 [ 824.861479][ T6807] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 824.867580][ T6807] ieee80211_register_hw+0x1f18/0x3ed0 [ 824.873102][ T6807] ? ieee80211_restart_hw+0x290/0x290 [ 824.878503][ T6807] ? debug_object_destroy+0x210/0x210 [ 824.883927][ T6807] ? memset+0x20/0x40 [ 824.887932][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.894291][ T6807] ? __hrtimer_init+0x136/0x280 [ 824.899175][ T6807] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 824.904935][ T6807] ? hwsim_virtio_rx_work+0x350/0x350 [ 824.910332][ T6807] ? hwsim_new_radio_nl+0x992/0x1080 [ 824.915643][ T6807] ? memcpy+0x39/0x60 [ 824.919653][ T6807] hwsim_new_radio_nl+0x9bc/0x1080 [ 824.924824][ T6807] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 824.931008][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.937274][ T6807] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 824.944675][ T6807] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 824.951994][ T6807] genl_family_rcv_msg_doit+0x228/0x320 [ 824.957659][ T6807] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 824.965056][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.971341][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.977605][ T6807] ? ns_capable+0xd9/0x100 [ 824.982046][ T6807] genl_rcv_msg+0x328/0x580 [ 824.986758][ T6807] ? genl_get_cmd+0x480/0x480 [ 824.991457][ T6807] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 824.997383][ T6807] ? lock_release+0x720/0x720 [ 825.002181][ T6807] netlink_rcv_skb+0x153/0x420 [ 825.006972][ T6807] ? genl_get_cmd+0x480/0x480 [ 825.011692][ T6807] ? netlink_ack+0xa60/0xa60 [ 825.016309][ T6807] ? netlink_deliver_tap+0x1b1/0xc30 [ 825.021623][ T6807] genl_rcv+0x24/0x40 [ 825.025622][ T6807] netlink_unicast+0x533/0x7d0 [ 825.031206][ T6807] ? netlink_attachskb+0x880/0x880 [ 825.036341][ T6807] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 825.042608][ T6807] ? __phys_addr_symbol+0x2c/0x70 [ 825.047653][ T6807] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 825.053396][ T6807] ? __check_object_size+0x16e/0x850 [ 825.058714][ T6807] netlink_sendmsg+0x86d/0xda0 [ 825.063501][ T6807] ? netlink_unicast+0x7d0/0x7d0 [ 825.068648][ T6807] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.074922][ T6807] ? netlink_unicast+0x7d0/0x7d0 [ 825.079891][ T6807] sock_sendmsg+0xcf/0x120 [ 825.084339][ T6807] ____sys_sendmsg+0x6e8/0x810 [ 825.089193][ T6807] ? kernel_sendmsg+0x50/0x50 [ 825.093890][ T6807] ? do_recvmmsg+0x6d0/0x6d0 [ 825.098515][ T6807] ? lock_chain_count+0x20/0x20 [ 825.103384][ T6807] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 825.109384][ T6807] ? futex_wait+0x533/0x670 [ 825.113924][ T6807] ___sys_sendmsg+0xf3/0x170 [ 825.118549][ T6807] ? sendmsg_copy_msghdr+0x160/0x160 [ 825.123863][ T6807] ? __fget_files+0x21b/0x3e0 [ 825.128562][ T6807] ? lock_downgrade+0x6e0/0x6e0 [ 825.133451][ T6807] ? __fget_files+0x23d/0x3e0 [ 825.138153][ T6807] ? __fget_light+0xea/0x280 [ 825.142765][ T6807] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 825.149032][ T6807] __sys_sendmsg+0xe5/0x1b0 [ 825.153739][ T6807] ? __sys_sendmsg_sock+0x30/0x30 [ 825.158806][ T6807] ? syscall_enter_from_user_mode+0x21/0x70 [ 825.164736][ T6807] do_syscall_64+0x35/0xb0 [ 825.169184][ T6807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 825.175097][ T6807] RIP: 0033:0x7f5d21f6fae9 [ 825.179526][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 825.199165][ T6807] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.207602][ T6807] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 825.215683][ T6807] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 06:12:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18006a4c0d7071d573790000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7d0affff0000000008ff3384010000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9e, &(0x7f0000000140)=""/158, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9}, 0x8, 0x10, 0x0, 0x0, 0xa0d9}, 0x78) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x4000) creat(&(0x7f0000000480)='./file0\x00', 0x1) 06:12:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 825.223676][ T6807] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 825.231690][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.239768][ T6807] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 825.247788][ T6807] 06:12:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:53 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffcc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="140000001500055b925a802dd504811a3dfe4f90", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) fcntl$getown(r0, 0x9) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7301}, 0x3f9c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=0xa4, 0x8, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x44, 0x26, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xd, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4005) 06:12:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x2, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0600"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 825.651390][ T6858] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 825.719632][ T6858] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 825.719632][ T6858] !' [ 825.773218][ T6858] CPU: 1 PID: 6858 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 825.783251][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.793417][ T6858] Call Trace: [ 825.796724][ T6858] [ 825.799678][ T6858] dump_stack_lvl+0xcd/0x134 [ 825.804302][ T6858] sysfs_warn_dup.cold+0x1c/0x29 [ 825.809275][ T6858] sysfs_do_create_link_sd+0x11e/0x140 [ 825.814776][ T6858] sysfs_create_link+0x5f/0xc0 [ 825.819576][ T6858] device_add+0x789/0x1ee0 [ 825.824026][ T6858] ? wait_for_completion_io+0x270/0x270 [ 825.829603][ T6858] ? lock_downgrade+0x6e0/0x6e0 [ 825.834484][ T6858] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 825.840756][ T6858] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 825.847026][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.853300][ T6858] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 825.859317][ T6858] wiphy_register+0x1e94/0x29b0 [ 825.864206][ T6858] ? wiphy_unregister+0xbf0/0xbf0 [ 825.869250][ T6858] ? minstrel_ht_alloc+0x52c/0xa10 [ 825.874405][ T6858] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 825.880521][ T6858] ieee80211_register_hw+0x1f18/0x3ed0 [ 825.886024][ T6858] ? ieee80211_restart_hw+0x290/0x290 [ 825.891433][ T6858] ? debug_object_destroy+0x210/0x210 [ 825.896836][ T6858] ? memset+0x20/0x40 [ 825.900840][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.907108][ T6858] ? __hrtimer_init+0x136/0x280 [ 825.911987][ T6858] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 825.917756][ T6858] ? hwsim_virtio_rx_work+0x350/0x350 [ 825.923155][ T6858] ? hwsim_new_radio_nl+0x992/0x1080 [ 825.928463][ T6858] ? memcpy+0x39/0x60 [ 825.932485][ T6858] hwsim_new_radio_nl+0x9bc/0x1080 [ 825.937622][ T6858] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 825.943551][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.949824][ T6858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 825.957243][ T6858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 825.964566][ T6858] genl_family_rcv_msg_doit+0x228/0x320 [ 825.970146][ T6858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 825.977554][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.983846][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 825.990118][ T6858] ? ns_capable+0xd9/0x100 [ 825.994579][ T6858] genl_rcv_msg+0x328/0x580 [ 825.999118][ T6858] ? genl_get_cmd+0x480/0x480 [ 826.003820][ T6858] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 826.007918][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 826.009828][ T6858] ? lock_release+0x720/0x720 [ 826.009863][ T6858] ? __rcu_read_unlock+0x29c/0x570 [ 826.009905][ T6858] netlink_rcv_skb+0x153/0x420 [ 826.030413][ T6858] ? genl_get_cmd+0x480/0x480 [ 826.035382][ T6858] ? netlink_ack+0xa60/0xa60 [ 826.040011][ T6858] ? netlink_deliver_tap+0x1b1/0xc30 [ 826.045326][ T6858] genl_rcv+0x24/0x40 [ 826.049333][ T6858] netlink_unicast+0x533/0x7d0 [ 826.054131][ T6858] ? netlink_attachskb+0x880/0x880 [ 826.059269][ T6858] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 826.065539][ T6858] ? __phys_addr_symbol+0x2c/0x70 [ 826.070587][ T6858] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 826.076332][ T6858] ? __check_object_size+0x16e/0x850 [ 826.081657][ T6858] netlink_sendmsg+0x86d/0xda0 [ 826.086458][ T6858] ? netlink_unicast+0x7d0/0x7d0 [ 826.091435][ T6858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 826.097709][ T6858] ? netlink_unicast+0x7d0/0x7d0 [ 826.102672][ T6858] sock_sendmsg+0xcf/0x120 [ 826.107118][ T6858] ____sys_sendmsg+0x6e8/0x810 [ 826.111934][ T6858] ? kernel_sendmsg+0x50/0x50 [ 826.116638][ T6858] ? do_recvmmsg+0x6d0/0x6d0 [ 826.121259][ T6858] ? lock_chain_count+0x20/0x20 [ 826.126138][ T6858] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 826.132142][ T6858] ? futex_wait+0x533/0x670 [ 826.136677][ T6858] ___sys_sendmsg+0xf3/0x170 [ 826.141299][ T6858] ? sendmsg_copy_msghdr+0x160/0x160 [ 826.146622][ T6858] ? __fget_files+0x21b/0x3e0 [ 826.151320][ T6858] ? lock_downgrade+0x6e0/0x6e0 [ 826.156241][ T6858] ? __fget_files+0x23d/0x3e0 [ 826.160948][ T6858] ? __fget_light+0xea/0x280 [ 826.165561][ T6858] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 826.171838][ T6858] __sys_sendmsg+0xe5/0x1b0 [ 826.176383][ T6858] ? __sys_sendmsg_sock+0x30/0x30 [ 826.181557][ T6858] ? syscall_enter_from_user_mode+0x21/0x70 [ 826.187487][ T6858] do_syscall_64+0x35/0xb0 [ 826.191933][ T6858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 826.197942][ T6858] RIP: 0033:0x7f5d21f6fae9 [ 826.202375][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.222024][ T6858] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.230471][ T6858] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 826.238468][ T6858] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 826.246460][ T6858] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 826.254457][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.262451][ T6858] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 826.270468][ T6858] 06:12:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\a\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:53 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x3, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:53 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:54 executing program 3: io_uring_enter(0xffffffffffffffff, 0x5c, 0xdb16, 0x3, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x12, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 06:12:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x4, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\b\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x5, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\t\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:54 executing program 3: io_uring_enter(0xffffffffffffffff, 0x5c, 0xdb16, 0x3, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x12, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 826.849948][ T6919] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 826.907310][ T6919] sysfs: cannot create duplicate filename '/class/ieee80211/ [ 826.907310][ T6919] !' [ 826.952195][ T6919] CPU: 0 PID: 6919 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 826.962137][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.972214][ T6919] Call Trace: [ 826.975505][ T6919] [ 826.978448][ T6919] dump_stack_lvl+0xcd/0x134 [ 826.983077][ T6919] sysfs_warn_dup.cold+0x1c/0x29 [ 826.988054][ T6919] sysfs_do_create_link_sd+0x11e/0x140 [ 826.993557][ T6919] sysfs_create_link+0x5f/0xc0 [ 826.998356][ T6919] device_add+0x789/0x1ee0 [ 827.002806][ T6919] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 827.008987][ T6919] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 827.015263][ T6919] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.021524][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.027775][ T6919] ? ieee80211_set_bitrate_flags+0x474/0x650 [ 827.033780][ T6919] wiphy_register+0x1e94/0x29b0 [ 827.038656][ T6919] ? wiphy_unregister+0xbf0/0xbf0 [ 827.043683][ T6919] ? minstrel_ht_alloc+0x52c/0xa10 [ 827.048823][ T6919] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 827.054909][ T6919] ieee80211_register_hw+0x1f18/0x3ed0 [ 827.060928][ T6919] ? ieee80211_restart_hw+0x290/0x290 [ 827.066320][ T6919] ? debug_object_destroy+0x210/0x210 [ 827.071721][ T6919] ? memset+0x20/0x40 [ 827.075881][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.082221][ T6919] ? __hrtimer_init+0x136/0x280 [ 827.087084][ T6919] mac80211_hwsim_new_radio+0x24b9/0x4b20 [ 827.092834][ T6919] ? hwsim_virtio_rx_work+0x350/0x350 [ 827.098210][ T6919] ? hwsim_new_radio_nl+0x992/0x1080 [ 827.103498][ T6919] ? memcpy+0x39/0x60 [ 827.107499][ T6919] hwsim_new_radio_nl+0x9bc/0x1080 [ 827.112620][ T6919] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 827.118530][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.124778][ T6919] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 827.132166][ T6919] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 827.139468][ T6919] genl_family_rcv_msg_doit+0x228/0x320 [ 827.145027][ T6919] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 827.152494][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.158774][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.165026][ T6919] ? ns_capable+0xd9/0x100 [ 827.169453][ T6919] genl_rcv_msg+0x328/0x580 [ 827.173968][ T6919] ? genl_get_cmd+0x480/0x480 [ 827.178653][ T6919] ? mac80211_hwsim_new_radio+0x4b20/0x4b20 [ 827.184573][ T6919] ? lock_release+0x720/0x720 [ 827.189274][ T6919] netlink_rcv_skb+0x153/0x420 [ 827.194046][ T6919] ? genl_get_cmd+0x480/0x480 [ 827.198733][ T6919] ? netlink_ack+0xa60/0xa60 [ 827.203342][ T6919] ? netlink_deliver_tap+0x1b1/0xc30 [ 827.208639][ T6919] genl_rcv+0x24/0x40 [ 827.212626][ T6919] netlink_unicast+0x533/0x7d0 [ 827.217406][ T6919] ? netlink_attachskb+0x880/0x880 [ 827.222526][ T6919] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 827.228777][ T6919] ? __phys_addr_symbol+0x2c/0x70 [ 827.233814][ T6919] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 827.239543][ T6919] ? __check_object_size+0x16e/0x850 [ 827.244930][ T6919] netlink_sendmsg+0x86d/0xda0 [ 827.249709][ T6919] ? netlink_unicast+0x7d0/0x7d0 [ 827.254688][ T6919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.260945][ T6919] ? netlink_unicast+0x7d0/0x7d0 [ 827.265904][ T6919] sock_sendmsg+0xcf/0x120 [ 827.270329][ T6919] ____sys_sendmsg+0x6e8/0x810 [ 827.275107][ T6919] ? kernel_sendmsg+0x50/0x50 [ 827.279789][ T6919] ? do_recvmmsg+0x6d0/0x6d0 [ 827.284393][ T6919] ? lock_chain_count+0x20/0x20 [ 827.289252][ T6919] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.295244][ T6919] ? futex_wait+0x533/0x670 [ 827.299763][ T6919] ___sys_sendmsg+0xf3/0x170 [ 827.304374][ T6919] ? sendmsg_copy_msghdr+0x160/0x160 [ 827.309674][ T6919] ? __fget_files+0x21b/0x3e0 [ 827.314370][ T6919] ? lock_downgrade+0x6e0/0x6e0 [ 827.319244][ T6919] ? __fget_files+0x23d/0x3e0 [ 827.323945][ T6919] ? __fget_light+0xea/0x280 [ 827.328554][ T6919] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 827.334833][ T6919] __sys_sendmsg+0xe5/0x1b0 [ 827.339365][ T6919] ? __sys_sendmsg_sock+0x30/0x30 [ 827.344424][ T6919] ? syscall_enter_from_user_mode+0x21/0x70 [ 827.350340][ T6919] do_syscall_64+0x35/0xb0 [ 827.354779][ T6919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.360682][ T6919] RIP: 0033:0x7f5d21f6fae9 [ 827.365101][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.384716][ T6919] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.393137][ T6919] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 827.401112][ T6919] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 827.409085][ T6919] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 827.417056][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.425027][ T6919] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 827.433022][ T6919] 06:12:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0x0, 0x0, @mcast2}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0xe, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x5}, &(0x7f00000000c0)) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200002, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x80000400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000500)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000540)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000580)="8081000000180000daf4655fdaf4655f1d1fb660e877daf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x43, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6000, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) statx(r2, &(0x7f0000003f40)='./file0\x00', 0x6000, 0x800, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000004080)={{}, {0x1, 0x5}, [{0x2, 0x4, r3}, {0x2, 0x4}, {0x2, 0x1, r3}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x4}], {0x4, 0x1}, [{}, {}, {0x8, 0x0, r4}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x3) setuid(0x0) setrlimit(0x0, &(0x7f0000000180)={0x4}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xff, 0x5, 0x4, 0x44, 0x0, 0xff, 0x50200, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000440), 0x1}, 0x19, 0xffffffff, 0x7, 0x2, 0x7, 0xafd, 0x2, 0x0, 0x19cbcc33, 0x0, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 827.606581][ T6929] __nla_validate_parse: 6 callbacks suppressed [ 827.606600][ T6929] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 827.803194][ T6947] loop3: detected capacity change from 0 to 264192 06:12:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:55 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x6, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\n\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 827.969332][ T6947] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 828.079158][ T6947] loop3: detected capacity change from 0 to 264192 [ 828.129036][ T6947] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 828.169045][ T7] Bluetooth: hci5: command 0x0419 tx timeout 06:12:55 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 828.213521][ T6967] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180)}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000040)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, &(0x7f0000000000)={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x3a1601, 0x2) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ftruncate(r3, 0x200002) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 06:12:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x7, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 828.537643][ T6988] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x2}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x5}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = dup3(r3, r1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={0x0, 0x30}}, 0x40082) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="de470000000000f0ffe977b945a91000d91248a00f440aa35e62a5696c0e0e69ebd9219bc588fce67c618012647857c1205be973336e9ffdd1db2e8109fad8a8789e53e07dd3759b5aee9163013a6fc077aab5036bcf2ae465b2a769882eae0e71a3de445b1da642213e1acd88c2a95a444958a87f8e3f2adb4631e9754118df89567e50270505411a1b3a89e02d6c3ba3cbd3c0c5ff63ef301e40daa20120c286333198c423e8faa8ee6138e98ea1f2505b1a4c8880cefc573c1d9c", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468113c746f5f7465616d0000000400cc0008000500040000001400040073ca61f2c3b555b170cb3a84696eb881a283a0fcb9e9f7d71544c09ee04a16f85a0e8145c953be5a8ce750a49b3102cdc0eca72cb546ee074fa7fc0192d4c78fabd141e8"], 0x58}}, 0x20008000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC]) io_setup(0x0, &(0x7f0000000100)) connect$ax25(r5, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x9}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0xc586, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="796135b81b24", 0x6}, 0x0]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x20}, 0xc) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x9, 0x0, 0xce, 0x0, 0x9, 0x30401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000300), 0x3}, 0x400, 0x0, 0x5, 0x3, 0x10001, 0x6, 0x80, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) ftruncate(r5, 0x600004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) [ 828.688175][ T6988] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x8, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\f\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)={[{@swalloc}]}) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = io_uring_setup(0x5174, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r5 = dup3(r2, r3, 0x80000) bind$rxrpc(r5, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) write$binfmt_elf64(r5, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x40, 0x1, 0x3, 0x8, 0x2, 0x3, 0x7f, 0x31f, 0x40, 0x305, 0x585, 0x3e13, 0x38, 0x2, 0x8, 0x7}, [{0x4, 0xd05, 0x3, 0x8, 0x35d, 0xd808, 0xf1e3, 0x5}, {0x60000000, 0x6, 0x0, 0x7f, 0x80000001, 0x7fff, 0x5f1, 0xe701}], "f783f93314c7ee69ad07fad66f198f07dc63e77b2a6c201debb836be46025d8a6d04fedaaa6b67e911fec9969e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8dd) [ 828.906687][ T26] audit: type=1800 audit(1638684776.339:115): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15035 res=0 errno=0 06:12:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0e00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) [ 828.978832][ T7017] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x9, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xa, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 829.292142][ T7053] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.325447][ T7032] XFS (loop3): Invalid superblock magic number 06:12:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) 06:12:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b1000"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xb, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x13070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 829.653621][ T7081] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.790410][ T7032] XFS (loop3): Invalid superblock magic number 06:12:57 executing program 3: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) sendmmsg(r0, &(0x7f0000000b80), 0x40002d2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x90a00, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @none, 0x3}, 0xe) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000280)=""/54, 0x36}, {&(0x7f0000000500)=""/121, 0x79}, {0x0}], 0x5}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0xb, 0x0, 0x1000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002800101028bd7000fddbdf2500af2e0087749645347735b7168b6eb85770085139cb4b01965888c1a44bbf142225db72c4f6d98db857c70c6f72ddc575fe1e3d073dfb57e62dfe24d10f994467da2a92519151c434985206742e5e2d268896367793daef79b4eb01bd0a5a08603380f3b7b66aa88c0814f56cf90d29d0c83c5a5a873c93209df413721df3240564635376bccf4f88a4591f446baba8", @ANYRES32=r3, @ANYBLOB="02000900ffff0800f2ff070006000500ff0500000600050007060000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) inotify_init1(0x80000) 06:12:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) 06:12:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b1100"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xc, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x14070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 830.173053][ T7121] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) 06:12:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x15070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xe, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v`\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) [ 830.490622][ T7141] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:58 executing program 3: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000010f00)="10c4645f010000000100000001000000040000000b0000000020", 0x1a, 0xb200}, {&(0x7f0000011100)="10c4645f010000000200000001000000040000000b0000000060", 0x1a, 0xb400}], 0x0, &(0x7f000006d200)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x1000}, 0x16, 0x3) 06:12:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000bf000"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0xf, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x16070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) [ 830.807580][ T5] Bluetooth: hci3: command 0x0406 tx timeout 06:12:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e004030029000505d23480648c63940d0424fc60100011400a2f0000013582c137153e370848098000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 830.872488][ T7161] loop3: detected capacity change from 0 to 180 [ 830.885544][ T7163] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:12:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) [ 830.946409][ T7161] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 830.946409][ T7161] 06:12:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b000300"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x10, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 831.008253][ T7161] ERROR: (device loop3): remounting filesystem as read-only [ 831.015587][ T7161] xtLookup: xtSearch returned -5 06:12:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x17070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x0) [ 831.057873][ T7161] read_mapping_page failed! [ 831.068190][ T7161] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 831.088864][ T7161] Mount JFS Failure: -5 [ 831.101325][ T7161] jfs_mount failed w/return code = -5 [ 831.173002][ T7161] loop3: detected capacity change from 0 to 180 [ 831.210492][ T7161] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 831.210492][ T7161] [ 831.248879][ T7161] ERROR: (device loop3): remounting filesystem as read-only [ 831.280728][ T7161] xtLookup: xtSearch returned -5 [ 831.322194][ T7161] read_mapping_page failed! [ 831.326762][ T7161] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 831.346121][ T7161] Mount JFS Failure: -5 [ 831.355457][ T7161] jfs_mount failed w/return code = -5 06:12:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x0) (fail_nth: 1) 06:12:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x11, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000be80300"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18030000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:12:58 executing program 3: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000005c0)={{0x0, 0xd6, 0x7, 0xb24b, 0x80000000, 0x7fff, 0x7, 0x1, 0x2, 0x0, 0x9, 0x7fff, 0x8, 0x6, 0x4}}) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) io_uring_setup(0x5174, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x688c, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfe) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\'j'], 0x0) [ 831.594041][ T7224] FAULT_INJECTION: forcing a failure. [ 831.594041][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:12:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x60, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b000500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:59 executing program 3: setxattr$trusted_overlay_upper(0x0, &(0x7f0000000440), 0x0, 0x0, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000b40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000bc0)="5f4442988034beffe3ad3bc617bc620258d7d7f339ae4ae7594587bef54978808ef6633fd1d0a5d8541cfe38aa85a7300fbe0e3ebe3da6f6e9d51fc650aa45a684d5b22eff53fe50e26cdcbf497cd27164a0c7990cb13c7ea62af6d2c2a127e8368428b70dc217d09962536e08aa9bf30351824cd3c973bb508fe1c5f595d3891ed98504099fa65bd0f41ea5a351334852258e952cf83ec610d40e631baf4cc3a67c9a21e1223a09587567ecfc6ddcdac16d6a358f16e45f3fb99fe95cf53ceafe9e101362580c742eea50ab2e94cf3e", 0xd0}, {&(0x7f0000000240)="2da68488e1cb813bcc34e72bc510e2d625f76cd74b590d951b7b7bf07ea74676df35851194712f128b8f186bd8a19c84a5ac29a2943926bc134853ef11b82edc08329dfff8c8ee08e23bffadb74e485d443722f753791ef55555e8ee734f605094245d81a946598ecf4f70278b7c424f47c3a929712bf2cb20279c6fbbd86ccafe7d2afe72a209511d0668917461fec19b4909f2450d7554c1e5cafb89aae957e0e6e890f54683b0377f939b792bc9b28de98dd4514f73b8ed1b3af0c7dfae88232d92", 0xc3}, {&(0x7f0000001f80)}, {&(0x7f0000000540)="70cfa77a52963ca96ce6d118eb90be08f4204185f3fff1", 0x17}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x62}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xffffab63}}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) stat(&(0x7f0000000140)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0xa8010, &(0x7f0000002bc0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',acc', @ANYRESDEC=0x0, @ANYBLOB="2c6163636573733d757365722c63616368657461673d2c63616368653d6c6f6f73652c63616368657461673d2c63616368653d6e6f6e652c616e160939b7616d653d21255c2764272c2c706f73697861636c2c63", @ANYBLOB=',hash,eui', @ANYRESDEC, @ANYBLOB=',euid>', @ANYBLOB]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0x1f, 0x0, 0xc0, 0x0, 0xffffffff, 0x38, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x8001, 0x3}, 0x240, 0x0, 0x1, 0x4, 0xfffffffffffffff8, 0x80000000, 0x1c52, 0x0, 0x3ff}, r2, 0x10, r1, 0x3) tkill(r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x40008d0) request_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) [ 831.697084][ T7224] CPU: 1 PID: 7224 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 831.707069][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.717232][ T7224] Call Trace: [ 831.720522][ T7224] [ 831.723465][ T7224] dump_stack_lvl+0xcd/0x134 [ 831.728097][ T7224] should_fail.cold+0x5/0xa [ 831.732631][ T7224] _copy_to_user+0x2c/0x150 [ 831.737165][ T7224] simple_read_from_buffer+0xcc/0x160 [ 831.742577][ T7224] proc_fail_nth_read+0x187/0x220 [ 831.747632][ T7224] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 831.753553][ T7224] ? security_file_permission+0xab/0xd0 [ 831.759128][ T7224] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 831.764877][ T7224] vfs_read+0x1b5/0x600 [ 831.769063][ T7224] ksys_read+0x12d/0x250 [ 831.773333][ T7224] ? vfs_write+0xae0/0xae0 [ 831.777777][ T7224] ? syscall_enter_from_user_mode+0x21/0x70 [ 831.783709][ T7224] do_syscall_64+0x35/0xb0 [ 831.788154][ T7224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 831.794080][ T7224] RIP: 0033:0x7fc78cb4869c [ 831.798514][ T7224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 831.818319][ T7224] RSP: 002b:00007fc78bb0b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 831.826762][ T7224] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc78cb4869c [ 831.834759][ T7224] RDX: 000000000000000f RSI: 00007fc78bb0b1e0 RDI: 0000000000000006 [ 831.842751][ T7224] RBP: 00007fc78bb0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 831.850741][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.858764][ T7224] R13: 00007ffc93a9f41f R14: 00007fc78bb0b300 R15: 0000000000022000 [ 831.866789][ T7224] 06:12:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b000600"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x0) 06:12:59 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:12:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x19070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:12:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00\a\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:12:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1a070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x8, 0x40, 0x2, 0x0, 0x3, 0x80222, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000001}, 0x4000, 0x13d0, 0x8000, 0x2, 0x6, 0x5, 0xc3, 0x0, 0x5, 0x0, 0x10000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000380)={r4, r5+60000000}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2000000f, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 06:13:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x2) 06:13:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x2, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00\t\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1b070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x3, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00\n\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 832.813353][ T7290] __nla_validate_parse: 5 callbacks suppressed [ 832.813373][ T7290] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x7) 06:13:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x4, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00\v\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 833.004316][ T7290] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x8) 06:13:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x5, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000180)='./file0\x00') accept(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x111000, 0xd0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe52, 0x10574}]) 06:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1c070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00\f\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x700) 06:13:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x6, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x7, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 833.843235][ T7338] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b000e00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 833.889415][ T7342] loop3: detected capacity change from 0 to 16 [ 833.932373][ T26] audit: type=1800 audit(1638684781.370:116): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048614 res=0 errno=0 06:13:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x1f00) 06:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1d070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b140e00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 834.127008][ T7352] syz-executor.3: attempt to access beyond end of device [ 834.127008][ T7352] loop3: rw=2049, want=256, limit=16 [ 834.144831][ T7342] syz-executor.3: attempt to access beyond end of device [ 834.144831][ T7342] loop3: rw=2049, want=224, limit=16 [ 834.263512][ T26] audit: type=1800 audit(1638684781.700:117): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048614 res=0 errno=0 [ 834.265040][ T7352] syz-executor.3: attempt to access beyond end of device [ 834.265040][ T7352] loop3: rw=2049, want=256, limit=16 [ 834.340213][ T7365] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, 0x0) 06:13:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x2000) 06:13:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b000f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x9, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1e070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) [ 834.599205][ T7381] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x3f00) 06:13:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b001100"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xa, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x1a000, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004844}, 0x20004010) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000010000080900010073797a30000000006c000000160a01000000e5ff00000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c00038014000100766c616e310000000000000000000000140001007369743000000000000000000000000048000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100626f6e6430"], 0xfc}}, 0x0) 06:13:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b0e1400"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xb, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 834.956317][ T7415] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x4000) 06:13:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1, 0x0, 0xffffffff}, 0x10, 0xffffffffffffffff, r0}, 0x78) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x3}}}, &(0x7f0000000340)={0x60, 0x0, 0x0, {{0xfff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200}}}, &(0x7f00000003c0)={0x18, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000440)={0x20}, 0x0, 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB="3022cb34e1e8c2191c732b00000000e9f3f02bc3da5e21fe36001000000700000000000000000000000000008519e0adafa234fe9e7e8a64c620010000000500000000000000252a262c2f07341b43695d44f2a4938dea6e3a8580e6bb18d05bf4d7c92fc219bfdbbaac3fcbad9f39654e02c297f1360510ca2dc943773bb068ebd731a97ad443cd4a68c6f7e700000000"], 0x0, &(0x7f0000000940)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x1f, 0x3, 0x7fff, {0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2, 0xb857}}, {0x0, 0x8}}}, 0x0}) pipe(&(0x7f0000000900)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x8f, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x160, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 06:13:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\veX\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xc, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 835.268971][ T7435] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\v\x00`\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x20000) 06:13:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xd, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 835.426115][ T7441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.474042][ T7448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.570976][ T7458] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20030000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00$\x00\vXe\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) [ 835.857480][ T7474] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) bind$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xe, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:03 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80000) 06:13:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b008100"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:03 executing program 3: fchdir(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0xd8d9ae5101022038, 0x80, 0x2, 0x1, 0x3f, 0x3a, 0x0, 0x20, 0x40, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x10000, 0x100000001}, 0x4000, 0xa3, 0x0, 0x6, 0x1, 0x40, 0x5, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="c9c9478093f552d6fc01541863e1d6483a179c483e85bf6dba0c05813a75ed8baf8d00de53d79532e3bda4c51815e7757beff1486093fcb7eb021d07e8cdba1eef67c21172eedba5f577354e441af5d485dbaf2624ce25a2641f907caf5aca6d51a1d716aa85546a8e89be2836202bf35eaec6af56fb93bf7194c7c6bde02563ac76aaad42a3cd33a3ac045d59a7932ccb0edf57e05667097a200eb34683a2ab316e8e0a994b58", 0xa7}, {&(0x7f0000000140)="b986b7e76c7fc8e6e02205284b59cbb896797659eb6ccabb154fe5f224b1ba34e8071c0b44496e2fee590bb5f8c700d3aab841fef50c57ba6b813e66c20918529c899d2e26f615b7378a024e6611bf172fd717dd3cf78f52ab0458cd4b8f525ae49c80e9fa4b1b5c0e7af6de74ce991fe31b2f9b297616632fd979a9f4004238d705164f94b11a", 0x87}], 0x2, 0xe) r1 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000280)={0x6, "2464ddce3d8a3fcc33b8f36e22cd2df27871f72a90dee514597ab8b90611ff8a", 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0xfb, @local, 0xa3ac}, 0x1c) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000300)={0x40000000, 0x100, "b9ce9b733dfd2be791f7d57f54f42c50d5c6990d9873ee75ba2b819c32438288", 0x7e9, 0xffffffff, 0x9, 0x80000000, 0x4, 0x101, 0x1000, 0x6, [0x3f3, 0x7, 0xff, 0x4]}) getdents(0xffffffffffffff9c, &(0x7f0000000400)=""/20, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000440)={0xb0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "9d0d954ba57569"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001440)={{0x0, 0x8, 0xca6, 0x8e3, 0x9, 0x8, 0x5, 0x2, 0x1f, 0x6, 0x800, 0x6, 0x80000000, 0xfa5e, 0x37}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001500)={{0x0, 0xc2, 0x0, 0x0, 0x1, 0x643, 0x4, 0x6, 0x8, 0x7, 0x4, 0x80000001, 0x2, 0xb1, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002500)={0x0, 0x0, "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", "899c025a8b15b18c1d793913d6a8c4da29344b815610413791e1a53d079d73d4eda50e8ee48f4a50528edccef86efb9a3e8333f9e808aca8ef9f7e6bcade845697e2766fbf6c921e2a8371230b77af480f7d8a2f71103607359cf67a9bf77eaea0dee0c76a32cb2b2eb655a73f68d796f6687c0328fe46b178d2a3d44a95fce15b1cc3204a2e63fe8b746c63e47dd80ec98f1e9e3f779b30b7746d2c3f43684898e8b67ce62a4978f7561ed1cc98554cc4b433a9df1c0d62f25277141f71a681c1474cb90f7582860af18cbabdd94fdf5023959bfa075ad1c7272417f458880982c87bbeff963c8ca4641efcf080f45ef59c33251b5c50046155f748336205fcbd0371fcb9d465b129c83f64fb5524829fc4e8eb5e559264b1323fa6c7b6c1b858306506840db9ba38708303b3846b4f77c6f3cd85933bb3f7cb5786151d3555af4d787242c5c8ac4f3b3a76c2869af2132d1ba6da9911e863b4f3896b4fb017fa44e8df35d3118eb7301832ec27f601b703b16489b5c6c838fdcf493b998c3734fa36909e858d2ce40c20d9d8740263013490587bee499ecbb8b776bc196bff80d732f6a7596964efc3d0fb90902b7d154885fadc87bf3247dc3774910171a04ea8a6e9d961044a3f08666f046b811dcf784a4fa7df2af8244a5212bdf18d4255c0b369647ddcde459d5e1fc25a10bc59aa01ed585e89588fa0e7f89ab68244272092efd8bde09507f788939b72494d2861135d1cb401d8714b53ebd795462cd3e4157947ad08d1e3c91ee60d810a6e1c262de31ae339930783f015e93cac72d192d698d0d462f5dc96df36259a25ca9ac5a20b73a5957d3c1f8841b75a1f248e1687a7bc8c262f629cc7c9312f29da4c45c63eef760ba36f5d6e1fcf5ffce3a6c59295f3d306185714ccc8b73734cabb68f31e984a2d7ccb6378ebb85dca9a4678a34fc40d0d73213ddcc3ed6c617b7d0b07a406dd609f01e53e6cf30e3fcb5bf60fef2ca7b2eee99d8476dd69986809caaccee81f137d1de2ddb104004cdd399398957d0adeb66c90ae3790950056d2735ff3e100ad9352b3c99d622ba2a8a50f27e817a1d780aead72b490ef0246f95bca710ce520d2e87f0ca80542f40b95741b22d29e3b0ccafe0611c52675965069801080a27ed0f908e1123e968a8c3797e42d795670ddf72680e196dd9ba10f05b8f1f421d9c44bd3df13982b96e2ce0bc25ce0d857bf457b848397dcdcbfe87602e5fc4ff0d762a2438f80f2e8820bb14c4b4ca8304313f26022a43bae74a9999218292e87fde4ae9ae1e6ed8ce31733da35e460f77db706d93a72534fdec7611e7ee8d6f6712815c647129e845bbf65eb3c78186b18cf19182b94e90ff6cf0c5a98a4f370eaebb9e6bf1069a0cc623f5a4a54754bf7893ebcb52507644e11c9eb1383c6a9a96e24076b50fc95812d046a064c4a659d5723af592e8da8b8f02a0a036fd7d41e5de62203b6029050ef9f45a3d311305fdb4eee1013865fc484e0c3c202fc965f571d11c3035268ca5704d2e58d5d81c46d5727a36d4f52e33738843c8c03af007edf1f1a971821c2c2a1f590afd5b7e0bcd3677b86e279be44e168de10e2b1c90b99675b19de09b0a3fef049930521d3a0808851108a6104a83895662e853c38c704084a5e50ad80077f3263ec8b246494c4e5c07b0bb826a9ba3f4eda7ade339d3f4891959177def44f09db0a0e06590defdef7773c79d0a086a4dbb283bbda753e38e78a90cdb6bb61a24e6cab0cc7ffb8819ef644345b35555ef39482f2165b02297412efa1aac6b518af21913acbe64be7f5d7b177138c34a970e4acea6682968fa2686d5903ae001936ab21c5bdbce15d006c4e6b991b9b6e2dc3e68e4d42b8fff311606499571d7541cde0b203f00654a15903a93a3eb6f7b3e63bf1d37837f589cf10f7f7f35f209bde63845eaef094b00a995f1b1d8c130276cfa89f5fc87b6cbe7aee0e335f043b7d4cef7cc711aa2c818e745919240e71ec12d61adb8293c6e79a17999b8c650ebd9f63345e48e59e28f9f2bd86bf712784c5506f3774d77eeb12ee86316b161f26323a23af21c2df6d72516054f634062afbe668fb517f5fea5fbe8482ecd1f084e3c7cfcdd660dd23390576504e79cb7df4a9f0769999678c83284b8f0f8a42548cffa91c343d9bc762cd690ce5330186180262e0ad92f9935b0d37797871218950c5ba809ac1238c776328100998be291b0cb177a2a16d6a0d1bcdd976e5c2a30ede188bfe6e24fa75ae75624231f808768a2127f771a59def84d73fa8bc44fe4bd848f62791231777c8e821fd638f72b282e144d0f44ab39aea4eba6230e713a72f84ee4ed88ff31d3f72eef722063814ac4699d8d5ad7fe959cb5eec0a9cce6dd7447203260015397e4fd120c9f1126c9fe1147e627db74abbb45e7c5020fc3ba60c429fef5d6064d133689a4a2702d8fb45bc167cdcbd7622f55e4540c80c4cce87e883a28fea4c6467bc17530075c01b8ed3d620be2dd0ba0cf682b16557a1583db45b5a157344a9d106ce5d65bc32bf9de965c6d22d3e40c1b815c03e108c710f52bea40a360c2cadbd1d5323a4442b3af8b9824cb45a2d1f89b258056936e30b69f84098b29e69502337697a449525391ab57281149b1f742b7bf252894341706c0eec49571503110ce819a1f1e8b25bdf86caf991717b77e83a340eb138703ec2a2d161991e3405e92890f3cda1f4713dee41e9ef57b796906339f0e6eb179c4dee7a2fb12824978156a0f0d7bf414f7c678df5100d3071aef2bca75596cb4ed2a82e6c161665d940727ec7efa5db05d4be0cadd84f7304926cd5c774f155c3576743fd6a32d03c196cb62cdae366aa097c4a892a01e5fff32226109fd9f579d6b97548b81f8e41cc67a9362ba71190b18cd9452861cbdb3d1dee8497f7556ebeac4434447e9e95b8ec1ceb39f6f46d60d11e8f6af491af9a8f0dd7066b13f8105896a586b9d17d6d037ed5fa122659a40360cc1bdaeaf860ae79be06443f426e575039e3e1052b595f7d796b8ba5211eff0880a4644c7c897d0aa2f1b6a332f6a0a95771f4998b8181f95e2abde9e8e063103b6eb4eb0d7ccfeb3402acb9806fab123b5e9dcd19d9c15c4167700c3e93be94181e36ff643f3e9a9f3bb00838760d8ba46dd9f5526f11822f5ad777101fc7f2e10701651f3c7159916e1e29c954ad4dffcb17c261fbb5730edb2038ef9c2c14c2e7c4fe2e292308859ab127d8ae2f7c60c3a851b720bd14397d3fbb09f739362c9374d4ecbd1c87a671d1b45330a1e93aaaf99433758744f15d933c12853b8802ab6773fddaf8b52837087dddf1036108dbce5b4ec7ed8f839822fae7cf3117c47640c5c7001f69d5775250dbb5fe18d411c4acf0c7bd1336f0c6e128a735297d7823a3bd41199d8e05dd9bf8e0c20a3e8dd1120a9adda1aee71cf09beb79ed5eb19e13233ed98662940ec852e021fcc2d9d8040f44e64a2fc928e6d335e22c27d77e11f895cc14e684a8e1794d8007eb2d21470c4d59df8b88ed0be7be40061c15e850dd8da4203367cb153ab2f0288bff3b074f48cd642733638f66b795963c5782ad52c534a55af9f3bc85de165cc6eb0c5b7f85c914e044db00a3403b248d6df41a00a9dc646acf488d8eb126a64d43f84d145f3be4774b4dd789123c4fc1891dfd27a04b4fb8e2b2569379c938f3357ba48d6991258f0b9eb387593b8c8c0ac0ce4f70eefd2f5d8d9bd1a0447acfe40482912fa955947d88e302678e444035dc9fea0db542ab2d4635a0d4ec696efc17b85baa5d05d684fa4afccaff5174331e80ac99a7b4a81afa1501f4821f7317821c8126bcaf8075bb686d5541ee179dc4d164bdbea45174086b542b861c1009dcaa6a5712457f722acaff795600ac4f7a9ed18957fcd1422b20028868977711af74d15e86024af050b3f59ec22c9740eb48831e330167d3ece3ff12cad1f5d9259c871322760cca06325044722e7bfceb709bbe1f684f904c1477b0cbe0916663468a112c0bbf414658ac55a407ae4ea8188a85b8cd529675172b365f3b1ad94c7ff9dd13592ad91ba2f2c08e8b20b733aacdb17216bf41337661b6d69c50345b78ee0c85277a6e1896930bd6710d44b8f13faeb750c76532dc13a351c9ee3aca10157252a69f3e6a58bbdb5def14d66f1493545f863ddf02d73bff2c072d428e6c489a292b4cca15e2e4320c4695b4dd491da08f9126d3c5971d6c6e15ffdb4ab49822d1f494175631128955049433ac9aec84f5a14a5c0d23abc283958e7e618538ae2b06e3ee32c60b7b75c6491625d2b2abe5e99758b9a394179a85067045fb8d696963ca90b9c019e13ef1a973eb1e31532708fab5ac807fd04c5d5c9d44f7bdf49eabf03d9c34d2b8b7e8f57ab741d42e315f728b56810a9d7e3007e956f76057eadf00b526dbcec0cd9c939d869e452d836d531e95a080081c54762c13b32f96c5525b9b42d6b69cda6309444f5c22ca71eff6c3fca648b9b223b40591cc507a922f9c143cbbee4ff213530b37f2b061c10b895295fed184145024907afd7e2479ef91db928931778cb812ee10dedd36985888d966e78229acdb2a9a366f79c6f5240fafb7c7feacb0af4bdc7b34c24e647d22da4df605fff3c300acec0844498acc2545a60aeeaa14f7c8acff0e1fe063d321de0333ba8e9ae8decb33a6f96e5a665f52c026f9d605b122ca41aab84b0dbad7d3fb0eec9ffd4efa851e55754499a77b2580acf9d6d1f8acd63b158115f070ed1b5d9ebc3b502ff9a5ee899f5b307c50c33f4c1fcdc91570f332d916945952b3ec9925ed9992c275b8390eb267a490385950e5e5f2379750619dae714fff15e3a7afb987827c6cca6d8bd96d4ed531313d1ba9fcecc160725c1d1c520947e5c5112b68f24e8b0cec9f8b30cfc4baece4a4f487bf600f3408583b47aef03b3930c451f3400713dced6e66ffea625d12c6a170f9f2589ab920e28c751d3017bc89418bca6b50759fe916ec91a614f404bc8d3308d163ef089a70c07f5ca3cfc7ab281ce2091ab2423a571847a8480bb09d36c0e866c6d4309cbb1550468900803925eade9368eb058d6c7ed9cc8a40a2d22e040e9841a39282a71f0ada6be5e40388482c6f7c6b5f770e5c74c4ac1bd45e1fe26919310199451e77a0348544c7d50966d363b952cf86b6eebf437ff723e26dadb2072c8b3b3660d66b62da709f46e5d9d0b6314f943495595aa310faef527fdb82723e6b72e782ae5f079fae48bc87be26467a1dc949c8547e743de9479aebedfa28bfea1ea9733ed05e53310e0a79457490dcb486601b0b6bde734396d4729b08901b6b1d213cca88c95b5254d6c348b8b3a47c4ebfb2afddf0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003700)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "76d54ff511943e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000004700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000005700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000005b00)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "5a26fe7bfff829"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000006b00)={{0x0, 0x13, 0x87b5, 0x3ff, 0x2, 0x2, 0x7, 0x3, 0xfffffffe, 0x5, 0x92, 0x4, 0x8, 0x7fffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005fd80)={0x100, [{r2}, {r3}, {r4}, {}, {r5, r6}, {0x0, r7}, {0x0, r8}, {}, {}, {0x0, r9}, {}, {0x0, r10}, {}, {0x0, r11}, {}, {r12}], 0x2, "5179499fbc877f"}) 06:13:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:03 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x200000) 06:13:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b03e800"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:03 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000026c0)={0x3, 0x40}) sendmmsg(r6, &(0x7f0000002640)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="98a7130c0313e0d6e1f4e2acbe310ab62c4f285503dc14d539278c952ef1ec7983ff60d1d7ca8ab41aeebb69b2943cf4f0c99245d503b8be3028f86088cae550226899543d0d3c2416fcdd74f4b753084e99caa9d729ab60de6d6c300e6ebf72d7c58b588f49cc48dc443e2dab98c3037af3f9d0558ccb948a1870994eae7cf91d3d893286527ae574be11", 0x8b}], 0x1}}, {{&(0x7f0000000240)=@caif=@dbg={0x25, 0x6b, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="cbba3d02e00b4ab09da4ccda37e10d2c187df4fe8a1a62670e0e1a0db8a94244f1e199342050969ae14d199e114c63a1dae323c615dcd97a751cb90ef0e49c269e7e267c233506a8c8bbac7d0b0d4bb04d1a86f4e628a196d5cec0e5bbe0c5deeada6fa3e1c857194f0a17fc67678a87a450973b50e7c481a543901328f5b6e599088e7d2ff6a0dc81b3d9bc33933240b1d9eec1ce30daab70c439c208f6487078f754d63a648f9d144856e3aeadba39c7be065d56efece16db2d96feddbdec9b45e6ec621f2e22e131aa162706211b6b2d6c1166b1585823ae6b1c7e9", 0xdd}], 0x1, &(0x7f0000000400)=[{0x1010, 0x11, 0xbd, "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"}, {0x98, 0x101, 0x1, "6ba13dbe709327e4cf9f54b3f9610d1ec2f0ee2cf728d6f8bf51796488d92f58c2193a02d9d9d65cae0c6ea12970a49dfad0e10dfd4802a0f29c85cdc16642393252e64896c6b2ad9f50829999ffaf67505bfeb5fff4ca30f653f2f5944f751e8f27155d92fc0cfe9fa0d98feb74bb2cc565d72d6c3e2bab8356ecbfebff081a966e62bf0e"}, {0x1010, 0x8a, 0x75ea684e, "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"}, {0x60, 0x10e, 0x1, "aa38735214be3958a5f3008d8480e16d7f0e8895c11b2b3a166b06086881bfba12efd8aaa940d70bbb9f4a923192230b9f04886b685237344474936152fd1ab0054583a8432b78ec85f4966fe3de25c9"}, {0xf8, 0x1b, 0x1, "9a3979ff4139f28753410a12c296d0618316a8d9b8ee7c4ea874ac002a7a0d6537ebe86b515fc7b25bafdfc6c5f7215529f3ac7bf5a148cf140c81fa58641f7e47a3c4440d010969dedf8ef80cb8918657180590f253961e31f19e33865adb86495fc23d315d9585607cf38b317e95be379bfb5d4aaae1a4932ce162717137dbdd7452fcbcd26bb160553850a484e4f548efa74e6c23854b79d0fac7bc7704c89cd278272af7b11d5fe2b4deb2882f721c7289d3604f176d3aa8cf6683456a998a6c955d21c76512f7e7acf090ed06e4ee2ae764b05a48574a775613587ed2f329b312f4a59a4e61"}], 0x2210}}], 0x2, 0x4000810) r7 = dup(r0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) syz_usb_connect$cdc_ecm(0x0, 0x8b, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0xa8000, 0x6) listen(r8, 0x200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) [ 836.204379][ T7497] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x21070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00f000"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) bind$rxrpc(r3, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x10, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:03 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x400000) 06:13:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00400300"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x11, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x22070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x60, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00000500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x80ffff) 06:13:04 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000026c0)={0x3, 0x40}) sendmmsg(r6, &(0x7f0000002640)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="98a7130c0313e0d6e1f4e2acbe310ab62c4f285503dc14d539278c952ef1ec7983ff60d1d7ca8ab41aeebb69b2943cf4f0c99245d503b8be3028f86088cae550226899543d0d3c2416fcdd74f4b753084e99caa9d729ab60de6d6c300e6ebf72d7c58b588f49cc48dc443e2dab98c3037af3f9d0558ccb948a1870994eae7cf91d3d893286527ae574be11", 0x8b}], 0x1}}, {{&(0x7f0000000240)=@caif=@dbg={0x25, 0x6b, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="cbba3d02e00b4ab09da4ccda37e10d2c187df4fe8a1a62670e0e1a0db8a94244f1e199342050969ae14d199e114c63a1dae323c615dcd97a751cb90ef0e49c269e7e267c233506a8c8bbac7d0b0d4bb04d1a86f4e628a196d5cec0e5bbe0c5deeada6fa3e1c857194f0a17fc67678a87a450973b50e7c481a543901328f5b6e599088e7d2ff6a0dc81b3d9bc33933240b1d9eec1ce30daab70c439c208f6487078f754d63a648f9d144856e3aeadba39c7be065d56efece16db2d96feddbdec9b45e6ec621f2e22e131aa162706211b6b2d6c1166b1585823ae6b1c7e9", 0xdd}], 0x1, &(0x7f0000000400)=[{0x1010, 0x11, 0xbd, "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"}, {0x98, 0x101, 0x1, "6ba13dbe709327e4cf9f54b3f9610d1ec2f0ee2cf728d6f8bf51796488d92f58c2193a02d9d9d65cae0c6ea12970a49dfad0e10dfd4802a0f29c85cdc16642393252e64896c6b2ad9f50829999ffaf67505bfeb5fff4ca30f653f2f5944f751e8f27155d92fc0cfe9fa0d98feb74bb2cc565d72d6c3e2bab8356ecbfebff081a966e62bf0e"}, {0x1010, 0x8a, 0x75ea684e, "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"}, {0x60, 0x10e, 0x1, "aa38735214be3958a5f3008d8480e16d7f0e8895c11b2b3a166b06086881bfba12efd8aaa940d70bbb9f4a923192230b9f04886b685237344474936152fd1ab0054583a8432b78ec85f4966fe3de25c9"}, {0xf8, 0x1b, 0x1, "9a3979ff4139f28753410a12c296d0618316a8d9b8ee7c4ea874ac002a7a0d6537ebe86b515fc7b25bafdfc6c5f7215529f3ac7bf5a148cf140c81fa58641f7e47a3c4440d010969dedf8ef80cb8918657180590f253961e31f19e33865adb86495fc23d315d9585607cf38b317e95be379bfb5d4aaae1a4932ce162717137dbdd7452fcbcd26bb160553850a484e4f548efa74e6c23854b79d0fac7bc7704c89cd278272af7b11d5fe2b4deb2882f721c7289d3604f176d3aa8cf6683456a998a6c955d21c76512f7e7acf090ed06e4ee2ae764b05a48574a775613587ed2f329b312f4a59a4e61"}], 0x2210}}], 0x2, 0x4000810) r7 = dup(r0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) syz_usb_connect$cdc_ecm(0x0, 0x8b, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0xa8000, 0x6) listen(r8, 0x200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 06:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x23070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r1, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) bind$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) 06:13:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xf0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00034000"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x1000000) 06:13:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000bfffff000"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x300, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x24070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x2000000) 06:13:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00000001000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25010000, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:05 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = io_uring_setup(0x5174, &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r3, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r6 = dup3(r3, r4, 0x80000) bind$rxrpc(r6, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000026c0)={0x3, 0x40}) sendmmsg(r6, &(0x7f0000002640)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="98a7130c0313e0d6e1f4e2acbe310ab62c4f285503dc14d539278c952ef1ec7983ff60d1d7ca8ab41aeebb69b2943cf4f0c99245d503b8be3028f86088cae550226899543d0d3c2416fcdd74f4b753084e99caa9d729ab60de6d6c300e6ebf72d7c58b588f49cc48dc443e2dab98c3037af3f9d0558ccb948a1870994eae7cf91d3d893286527ae574be11", 0x8b}], 0x1}}, {{&(0x7f0000000240)=@caif=@dbg={0x25, 0x6b, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="cbba3d02e00b4ab09da4ccda37e10d2c187df4fe8a1a62670e0e1a0db8a94244f1e199342050969ae14d199e114c63a1dae323c615dcd97a751cb90ef0e49c269e7e267c233506a8c8bbac7d0b0d4bb04d1a86f4e628a196d5cec0e5bbe0c5deeada6fa3e1c857194f0a17fc67678a87a450973b50e7c481a543901328f5b6e599088e7d2ff6a0dc81b3d9bc33933240b1d9eec1ce30daab70c439c208f6487078f754d63a648f9d144856e3aeadba39c7be065d56efece16db2d96feddbdec9b45e6ec621f2e22e131aa162706211b6b2d6c1166b1585823ae6b1c7e9", 0xdd}], 0x1, &(0x7f0000000400)=[{0x1010, 0x11, 0xbd, "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"}, {0x98, 0x101, 0x1, "6ba13dbe709327e4cf9f54b3f9610d1ec2f0ee2cf728d6f8bf51796488d92f58c2193a02d9d9d65cae0c6ea12970a49dfad0e10dfd4802a0f29c85cdc16642393252e64896c6b2ad9f50829999ffaf67505bfeb5fff4ca30f653f2f5944f751e8f27155d92fc0cfe9fa0d98feb74bb2cc565d72d6c3e2bab8356ecbfebff081a966e62bf0e"}, {0x1010, 0x8a, 0x75ea684e, "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"}, {0x60, 0x10e, 0x1, "aa38735214be3958a5f3008d8480e16d7f0e8895c11b2b3a166b06086881bfba12efd8aaa940d70bbb9f4a923192230b9f04886b685237344474936152fd1ab0054583a8432b78ec85f4966fe3de25c9"}, {0xf8, 0x1b, 0x1, "9a3979ff4139f28753410a12c296d0618316a8d9b8ee7c4ea874ac002a7a0d6537ebe86b515fc7b25bafdfc6c5f7215529f3ac7bf5a148cf140c81fa58641f7e47a3c4440d010969dedf8ef80cb8918657180590f253961e31f19e33865adb86495fc23d315d9585607cf38b317e95be379bfb5d4aaae1a4932ce162717137dbdd7452fcbcd26bb160553850a484e4f548efa74e6c23854b79d0fac7bc7704c89cd278272af7b11d5fe2b4deb2882f721c7289d3604f176d3aa8cf6683456a998a6c955d21c76512f7e7acf090ed06e4ee2ae764b05a48574a775613587ed2f329b312f4a59a4e61"}], 0x2210}}], 0x2, 0x4000810) r7 = dup(r0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) syz_usb_connect$cdc_ecm(0x0, 0x8b, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0xa8000, 0x6) listen(r8, 0x200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 06:13:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x3e8, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 06:13:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x5174, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) dup3(r0, r1, 0x7000000) 06:13:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000024000b00000002000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a000100636f64656c000000040002"], 0x34}}, 0x0) 06:13:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x25070200, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c0002800800010003000000080001000000000008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xe4}}, 0x0) 06:13:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) accept4(r1, &(0x7f0000000180)=@nfc, &(0x7f0000000240)=0x80, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) bind$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x44, 0x0) [ 837.866041][ T7611] __nla_validate_parse: 5 callbacks suppressed [ 837.866062][ T7611] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 837.874869][ T7616] divide error: 0000 [#1] PREEMPT SMP KASAN [ 837.887735][ T7616] CPU: 1 PID: 7616 Comm: syz-executor.1 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 837.897641][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.907698][ T7616] RIP: 0010:netem_enqueue+0x1474/0x3550 [ 837.913324][ T7616] Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 62 83 61 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 f1 48 b8 00 00 00 00 00 fc ff df 48 01 d3 48 89 d9 48 c1 e9 03 [ 837.932942][ T7616] RSP: 0018:ffffc9000a8cf4f0 EFLAGS: 00010246 [ 837.939005][ T7616] RAX: 00000000f40e09b7 RBX: ffff888023514000 RCX: 0000000000000000 [ 837.946972][ T7616] RDX: 0000000000000000 RSI: ffff8880719f8280 RDI: ffff8880719f82f4 [ 837.954954][ T7616] RBP: ffff8880790ca330 R08: ffff8880719f8350 R09: 0000000000000000 [ 837.962922][ T7616] R10: ffffffff83dfec3d R11: 0000000000000000 R12: 0000000000000001 [ 837.970886][ T7616] R13: 0000000000000020 R14: ffff8880790ca000 R15: 0000000000000000 [ 837.978853][ T7616] FS: 00007f5d20ee5700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 837.987782][ T7616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.994805][ T7616] CR2: 00007f5d2207f000 CR3: 000000007f407000 CR4: 00000000003506e0 [ 838.002773][ T7616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.010748][ T7616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 838.018712][ T7616] Call Trace: [ 838.021981][ T7616] [ 838.024908][ T7616] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 838.031158][ T7616] ? netem_dump+0x11d0/0x11d0 [ 838.035849][ T7616] ? __skb_clone+0x597/0x780 [ 838.040447][ T7616] netem_enqueue+0x2048/0x3550 [ 838.045216][ T7616] ? lock_release+0x720/0x720 [ 838.049900][ T7616] ? netem_dump+0x11d0/0x11d0 [ 838.054581][ T7616] ? do_raw_spin_lock+0x120/0x2b0 [ 838.059955][ T7616] ? rwlock_bug.part.0+0x90/0x90 [ 838.064894][ T7616] dev_qdisc_enqueue+0x40/0x300 [ 838.069761][ T7616] __dev_queue_xmit+0x1f61/0x3620 [ 838.074788][ T7616] ? skb_clone+0x170/0x3c0 [ 838.079211][ T7616] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 838.084526][ T7616] ? memcpy+0x39/0x60 [ 838.088509][ T7616] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 838.094757][ T7616] ? memcpy+0x39/0x60 [ 838.098736][ T7616] ? __skb_clone+0x597/0x780 [ 838.103334][ T7616] netlink_deliver_tap+0x9cb/0xc30 [ 838.108458][ T7616] netlink_unicast+0x5e5/0x7d0 [ 838.113230][ T7616] ? netlink_attachskb+0x880/0x880 [ 838.118340][ T7616] ? __build_skb_around+0x23e/0x2f0 [ 838.123545][ T7616] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 838.129791][ T7616] ? __check_object_size+0x2d/0x850 [ 838.135008][ T7616] ? __alloc_skb+0x184/0x340 [ 838.139606][ T7616] netlink_sendmsg+0x86d/0xda0 [ 838.144376][ T7616] ? netlink_unicast+0x7d0/0x7d0 [ 838.149332][ T7616] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 838.155580][ T7616] ? netlink_unicast+0x7d0/0x7d0 [ 838.160522][ T7616] sock_sendmsg+0xcf/0x120 [ 838.164959][ T7616] ____sys_sendmsg+0x6e8/0x810 [ 838.169732][ T7616] ? kernel_sendmsg+0x50/0x50 [ 838.174410][ T7616] ? do_recvmmsg+0x6d0/0x6d0 [ 838.179027][ T7616] ? lock_chain_count+0x20/0x20 [ 838.183883][ T7616] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 838.189863][ T7616] ? sched_core_balance+0xa30/0xa30 [ 838.195065][ T7616] ? lock_downgrade+0x6e0/0x6e0 [ 838.199932][ T7616] ___sys_sendmsg+0xf3/0x170 [ 838.204550][ T7616] ? sendmsg_copy_msghdr+0x160/0x160 [ 838.209931][ T7616] ? __fget_files+0x21b/0x3e0 [ 838.214610][ T7616] ? lock_downgrade+0x6e0/0x6e0 [ 838.219468][ T7616] ? __fget_files+0x23d/0x3e0 [ 838.224150][ T7616] ? __fget_light+0xea/0x280 [ 838.228752][ T7616] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 838.235003][ T7616] __sys_sendmsg+0xe5/0x1b0 [ 838.239517][ T7616] ? __sys_sendmsg_sock+0x30/0x30 [ 838.244557][ T7616] ? syscall_enter_from_user_mode+0x21/0x70 [ 838.250468][ T7616] do_syscall_64+0x35/0xb0 [ 838.254895][ T7616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 838.260798][ T7616] RIP: 0033:0x7f5d21f6fae9 [ 838.265224][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 838.285092][ T7616] RSP: 002b:00007f5d20ee5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.293506][ T7616] RAX: ffffffffffffffda RBX: 00007f5d22082f60 RCX: 00007f5d21f6fae9 [ 838.301473][ T7616] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 838.309444][ T7616] RBP: 00007f5d21fc9ff7 R08: 0000000000000000 R09: 0000000000000000 [ 838.317415][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.325522][ T7616] R13: 00007ffced4dd60f R14: 00007f5d20ee5300 R15: 0000000000022000 [ 838.333519][ T7616] [ 838.336534][ T7616] Modules linked in: [ 838.340540][ T7616] ---[ end trace 05290ae10ec8e633 ]--- [ 838.346025][ T7616] RIP: 0010:netem_enqueue+0x1474/0x3550 [ 838.351634][ T7616] Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 62 83 61 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 f1 48 b8 00 00 00 00 00 fc ff df 48 01 d3 48 89 d9 48 c1 e9 03 [ 838.371294][ T7616] RSP: 0018:ffffc9000a8cf4f0 EFLAGS: 00010246 [ 838.377407][ T7616] RAX: 00000000f40e09b7 RBX: ffff888023514000 RCX: 0000000000000000 [ 838.385398][ T7616] RDX: 0000000000000000 RSI: ffff8880719f8280 RDI: ffff8880719f82f4 [ 838.393413][ T7616] RBP: ffff8880790ca330 R08: ffff8880719f8350 R09: 0000000000000000 [ 838.401910][ T7616] R10: ffffffff83dfec3d R11: 0000000000000000 R12: 0000000000000001 [ 838.409939][ T7616] R13: 0000000000000020 R14: ffff8880790ca000 R15: 0000000000000000 [ 838.417950][ T7616] FS: 00007f5d20ee5700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 838.426922][ T7616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.433522][ T7616] CR2: 00007f5d2207f000 CR3: 000000007f407000 CR4: 00000000003506e0 [ 838.441544][ T7616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.449556][ T7616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 838.457571][ T7616] Kernel panic - not syncing: Fatal exception in interrupt [ 838.465062][ T7616] Kernel Offset: disabled [ 838.469387][ T7616] Rebooting in 86400 seconds..