0x11, 0x0, 0x0)

[ 2252.251909][T10720] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:18:57 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9)

03:18:57 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900003ffc033c6a539d7caf72eb8e300004fd03006c000008001000f79caffacefcaed2a86df8ffffff08000300ab994cb614a6812cd013a8dadc1353248ec76f700292"], 0x2c}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e571)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9)

[ 2252.471313][T10726] 8021q: adding VLAN 0 to HW filter on device batadv11
[ 2252.494858][T10726] bond11: (slave batadv11): Enslaving as a backup interface with an up link
[ 2252.555988][T10734] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2252.609612][T10720] bond11 (unregistering): (slave batadv11): Releasing backup interface
[ 2252.685504][T10720] bond11 (unregistering): Released all slaves
03:18:58 executing program 1:
unshare(0x44040600)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000c00)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0xd2b}, 0x2c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40041002d0f51e613b61ce391dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f1ff0b000900e0fff2ff09000600050004fd0000060005007f04000008000b0000020000060005007fc00000060005000504000009000100666c6f77000000002400020008000700b59b5b6508000200000000000800050007000000080008000200000008000b000600000006000500021f00000900010072737670000000000c0002000800020064010102"], 0xa4}}, 0x15)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = accept4$rose(r3, &(0x7f0000000280)=@short={0xb, @dev, @netrom}, &(0x7f0000000300)=0x1c, 0x800)
recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/45, 0x2d}], 0x2, &(0x7f0000000400)=""/1, 0x1}, 0x6}, {{&(0x7f0000000440)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/136, 0x88}], 0x2, &(0x7f0000000640)=""/136, 0x88}, 0xb0000000}, {{&(0x7f0000000700)=@phonet, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/235, 0xeb}], 0x5, &(0x7f0000000bc0)=""/1, 0x1}, 0x8}, {{&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/24, 0x18}, {&(0x7f0000000d00)=""/131, 0x83}], 0x2, &(0x7f0000000e00)=""/245, 0xf5}, 0x7ff}], 0x4, 0x40000100, &(0x7f0000001000)={0x0, 0x989680})
r6 = socket(0x10, 0x80002, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r4, @ANYBLOB="00000010020000001c001a800800028009002d0008000200f5642d", @ANYRES8=r1], 0x44}}, 0x0)

03:18:58 executing program 5:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)

03:18:58 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000000000000002000", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441347712804650cc7d8236"}}, 0x80}}, 0x0)

03:18:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d3, 0x20000000)

03:18:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000500)=0x4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476eca13cb094450a00"/44, @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x8000, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x80000000000000, 0x0, 0x5, 0x0, 0x9, 0xfffffffffffffc00, 0x4, 0x7}, {0x1, 0x6, 0x9, 0x200000000}, 0xffff, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x2, 0x2, 0x1000, 0x7, 0x5}}, 0xe8)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r12, 0x0, 0x40, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}, 0x1, 0x60}, 0x0)

03:18:58 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val, @val, @mpls}, 0xe)

03:18:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d3, 0x20000000)

03:18:58 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000040)={'wlan1\x00'})

03:18:58 executing program 3:
unshare(0x64060480)
socket$pptp(0x18, 0x1, 0x2)

[ 2252.962827][T10749] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:18:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d3, 0x20000000)

03:18:58 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x40afc}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044004}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000007e", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

[ 2253.164010][T10753] 8021q: adding VLAN 0 to HW filter on device batadv12
[ 2253.188665][T10753] bond11: (slave batadv12): Enslaving as a backup interface with an up link
03:18:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d3, 0x20000000)

[ 2253.209800][T10758] xfrm0 speed is unknown, defaulting to 1000
[ 2253.222473][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2254.096614][T10749] bond11 (unregistering): (slave batadv12): Releasing backup interface
[ 2254.122660][T10749] bond11 (unregistering): Released all slaves
[ 2254.147145][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2254.170767][T10763] xfrm0 speed is unknown, defaulting to 1000
[ 2254.187300][T10780] bridge_slave_1: left allmulticast mode
[ 2254.220981][T10780] bridge_slave_1: left promiscuous mode
[ 2254.227712][T10780] bridge3: port 1(bridge_slave_1) entered disabled state
[ 2254.266359][T10758] bond0 speed is unknown, defaulting to 1000
[ 2254.395720][T10763] bond0 speed is unknown, defaulting to 1000
03:19:02 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0}, 0x70)

03:19:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c93429b0df00000500000008000300", @ANYRES32=r0], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000500)=0x4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476eca13cb094450a00"/44, @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x8000, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x80000000000000, 0x0, 0x5, 0x0, 0x9, 0xfffffffffffffc00, 0x4, 0x7}, {0x1, 0x6, 0x9, 0x200000000}, 0xffff, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x2, 0x2, 0x1000, 0x7, 0x5}}, 0xe8)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r12, 0x0, 0x40, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}, 0x1, 0x60}, 0x0)

03:19:02 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x40afc}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044004}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000007e", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

03:19:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2f, 0x32d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

03:19:02 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x4e}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r1, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001f40)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

03:19:02 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

[ 2257.514456][T10803] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
03:19:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2f, 0x32d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

[ 2257.592548][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:19:02 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0}, 0x70)

[ 2257.653016][   T27] audit: type=1804 audit(1686885542.767:1200): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4294087422/syzkaller.YDhwBM/2020/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0
[ 2257.686378][T10807] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.0'.
03:19:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2f, 0x32d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

[ 2257.774480][T10814] 8021q: adding VLAN 0 to HW filter on device batadv13
[ 2257.803892][T10814] bond11: (slave batadv13): Enslaving as a backup interface with an up link
03:19:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c93429b0df00000500000008000300", @ANYRES32=r0], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:02 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0}, 0x70)

[ 2257.829139][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x18, 0x3c, 0xb, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0)

03:19:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2f, 0x32d, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

[ 2257.935511][T10824] bond11 (unregistering): (slave batadv13): Releasing backup interface
[ 2258.001010][T10824] bond11 (unregistering): Released all slaves
[ 2258.148774][   T27] audit: type=1804 audit(1686885543.257:1201): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4294087422/syzkaller.YDhwBM/2021/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0
[ 2258.181352][T10838] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.0'.
03:19:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000500)=0x4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476eca13cb094450a00"/44, @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3b0a1cbd17"], 0x20000600}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x8000, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x80000000000000, 0x0, 0x5, 0x0, 0x9, 0xfffffffffffffc00, 0x4, 0x7}, {0x1, 0x6, 0x9, 0x200000000}, 0xffff, 0x6e6bb1, 0x2, 0x1, 0x1}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x2, 0x2, 0x1000, 0x7, 0x5}}, 0xe8)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r12, 0x0, 0x40, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}, 0x1, 0x60}, 0x0)

03:19:03 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0xf, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)

03:19:03 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7, 0x0}, 0x70)

03:19:03 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd}, 0x48)

03:19:03 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x40afc}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044004}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000007e", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

[ 2258.333494][T10848] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2258.348409][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:19:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:03 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000001600)="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", 0xff7}], 0x1, 0x0, 0x0, 0x4000800}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="31ad3df04549b4c324ff1d60c5967fd05d5d5000b8da883c", 0x18}, {&(0x7f0000000a00)}], 0x3, 0x0, 0x0, 0x20000000}}], 0x3, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
write$binfmt_script(r5, 0x0, 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

03:19:03 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c93429b0df00000500000008000300", @ANYRES32=r0], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:03 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

[ 2258.483670][T10853] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[ 2258.586236][T10858] 8021q: adding VLAN 0 to HW filter on device batadv14
[ 2258.595300][T10858] bond11: (slave batadv14): Enslaving as a backup interface with an up link
[ 2258.604993][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:03 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x4f0a2000)

[ 2258.621827][   T27] audit: type=1804 audit(1686885543.737:1202): pid=10869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1323/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0
03:19:03 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x40afc}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044004}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400000000000000000000007e", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

03:19:03 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000001600)="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", 0xff7}], 0x1, 0x0, 0x0, 0x4000800}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="31ad3df04549b4c324ff1d60c5967fd05d5d5000b8da883c", 0x18}, {&(0x7f0000000a00)}], 0x3, 0x0, 0x0, 0x20000000}}], 0x3, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
write$binfmt_script(r5, 0x0, 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

[ 2258.821293][   T27] audit: type=1804 audit(1686885543.937:1203): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4294087422/syzkaller.YDhwBM/2022/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0
[ 2258.856769][T10860] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2258.876680][T10853] bond11 (unregistering): (slave batadv14): Releasing backup interface
[ 2258.929636][T10853] bond11 (unregistering): Released all slaves
[ 2258.996955][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:19:04 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000001600)="dd60e012adae21bf78dda921843b0258d0667cb117858e32205f138d171ccbecc0649766729de1918e2fa39ed07c65d8c576ab5d1209b93a61ae77fa9097731be5566dc0260537bd3ba7a3eec0f1f927c1308994fcbcd7815d1c0e74afd97a1792814d4aa1db274be7f6d612ad33f638336a7699fa71d9ab19a7b679b2589aea24cd9a291acdf547c4d28d88d10c2b6af5b204e8ac71b412e1211a90195f89731ad1b602d9a4a5f562f5dbe091a3ed83f0e6baee43e2bad6c2f2f0fe0c5fb2be538d45faf1a11a084979c5ee81e7a5955b4efead549598b0b4074855c586caa00c217383a1ecc57fb63aca3997829ea9dea63babaf82b12faf89af3f7553a09c89bb32e4ad528041b415605855ced64074d7a656df15f29785ff2b1778d03a6d4b31e346764dbbcedf33233d224538e3943a7555d3827ec6da37eea348fef530e89443a564ae86a67139964e0e691dcdd86abbc0e1b8b22459492c3bd501b4e473c7c62e42cc101c73ef2e510fa4203d90ae0da8b2b045b29594725151570ced63c3df88f26489c1a694595162bf8e1989e631cdeee3f778a55095d4cba9b884284009b5d5bb2008634d57f41cb43aceb8808fe2ec8215096573ea0715f8c741b0a81de3b54c1e680750b1cb22d0c15586269c04192ad9dd8b69c26c318ec2e8ca9c5a25abff7685bbf68b42901aac36976172c93ad75f99276da516624610f6a3bc2779a4a99f0a4c190a36b4996df109e8f0e464794ce28c9ee87770d16080f376e4a3a6e5e05692ce7312ddb3008bbb94ed7a497a7f1bf2c2a803ddc5e87fc8e2a8a4836d3332685aba5146a66854bd2528e5e71d69a90c04f58d638672fb2db97c696e03782b01036ab077d759844aef79ddb4d1ff307b867c466dda90e0a1281480469341d4e1383342cdb730d2630f20f191ac9eea6f1e8ee9e8d5da736ff7a657d225a13220493e56c5c4d179b4b1d50572ac3d7d2571c207ce97cbcd5006ca30bd14cdfd003b85983a0c31faac264118558ef7370fbdc96423bdbbe5232050b7d10f729db019f294795cf8b79bce840697601158a7d587a4a1198dc7074e644c6de0ccc18f024e36b950c901dc5dab6b5b5f8062fc3d1816966658c17e4ee3e1857e82965b528d695f1666bccef12338393f95945eda233899a8540dac2e188e670ffa3655bdfc3f867b6ec726038d5827349de3bb17992fa4e642f20ff00ad637685e1dbe6c5d4b5b3ac6e7d2d30f5b7e619afe2a2c1be380b144a4b62e36ef2b70a0de639fc39f8ca5bd241b167de802c4591b0bcfdb7c40c3e71967a7b5849f18521024056c9d5206a2b3dd2bb788108549fb7b4c85135879a945407be018d282c9b06d53c3d1abeed45c7b5dae7ce102c66391728dd7ef47f994bd8bae347cde509ecc690f2c23b2d744cc54ed3e9ac98718ed46edbe3e31e120f8a4845ac2b76875a5fec9a359dce84648973050cf82e93134790a642f819179a9fa4160b77ac788b2ae083be757bcdee81b53fd0b5f5c0eff1ebfbef721fe30582916cf38afc5518be91db45246deec6e1ff85265c6a821a4fbd35e85967212844d7d3201c73ee9fcc64e4dc911d74bdbffd46e50844aebbca7e4cd1cbcbab95db777b6415eb72ccd9d3ff896813d0039a4a98069ab8b93a10ba2a16575258606c3bb005536f6c276c6202222a917a53e908c9da109c25e141992cf23c502d06c5a95268b88b04afee6fdfcebb1fef334ba5895ead1b24437ea9a30ab3ccf768490def41023d6a79cc5b45b8e20195da4de7c40e01ac9bfbc5b53f701fe25473c73abc0633cfca7612c9db38310aa96d2cdaaf607ff348ee76706983a25a9384c12c8ee649d7fea6dba114470607b3ea0eb1396efafb2d7457c122cf8a23ddfff38d2240c7efc0c27f2b2381bf0d99affdd2fad2f4a086c26128ebecee00de63ad26c653232873724f3318dae4f974f702fb9d89182293b2614dce4b422d2569abee05aedd21aa63e4a1144e3837989aa81efb1f6d7f31607f1d6d8a0eb8ee92f5132109064e1e0509e4b281dd33c4b8a941be334f219b2d90ff5c508649b27964967c405002781ca7165ee0ae9acd4a37cb613872687db7719c97eae3056b5216ba984058ab016e3fb8926d66961ea8c0178e0b96a3ee2777841f51e7539810459621c58322aedc529f8a6fea4b10372f3fbbb46ac3777f4e740f52c2c55eb11b3e57c78d0afa2e1ab39b2860f812596fb8fa9f12b00115cfa91018b69f539ca4f1f8f743f4d7e4054a835ded0e70934ec766dee9496ea5315b0f16afd10d13f8338f16598c0ad6bf0b5e89bb726557e6b233be71c63bcb12e57610e40c94149b1907052580adbe92f50c33c7000ba72edbcecb949e11ac4fd090866e2b4d1b2c1502861bb287eff24a5291e7fd7fc0927a498d6388586db24fcd1bf8fe6c09907c61daa73dc1678285dbfd6e0b076276bb8b7494fece428af3f81aac4a30a8c1b33f7723f535478b61260ffeb309059cbeb132f911e5221869cee9bfbef67ae4802ce17b02cb5a8989a649e351b781191f604251a903f0757f91b6b00741d5e08198744f6f7365ef1e32ba72b1f89a66a48cf4e2b15e68c7bdbe5ee568505b574f09fccc8d29cd611552022a5c79918478f00aa3dff09d9934ca9330417237cdfaddaa9ea3cf816f0c933011493e29fea793ff19a26a7157188f00d44f07368465987d86707d177c372c7c18a7f692c5d487f1f042f5057fb5c4865795000f34512c86bb656090d773525f83f7cb3afe26f807269274f918ee3730a2c6612cf758cd7ca5e70a9790db1ab2057de56f052df58a0d4ae032b550c11e1a9374a3408c5a58a64f52a2e39f32205234e4e8b7bcd29ce66555b454f8fb34b8ed460e28cdb7b7711716ef06cafb9c2d84779fcc92b37c1316306c49e5da2c8395db1c27855fc054c9b5bb16c46030517d5189a141ba0adcbd16f4f276f915bfee041f450ee4e5afe41f8e116a2b24e4f4112072e55aa090bab4a14180774965b26cbf37b63e832d52bc433d1394b4ee5088a16789bf386e16230df57e6f5605600a5958566f210a03c08534e230fff8e6a866ff7ef4bb2d97864cc09c4fd31b6c449b94cecbcbf6c8370a500313b194d8384ec69b2005d02a0a91ebe689f220911bc37e7d4d4183317923f47767e2b3182e47df2b174f42e1b22d7d16ec0ece998280880c332b0abb097337b194882e264a938f0f57fef6b7fba2737425a05b9f5000fdca42ee4f7e5557fea79ae33238bde878625b1b4fd974d93ed3e6e49a999e180c3e6d6aa9d47db2e225d348279af841c7a309e4cf130c30bf0eef1c8a9216134cd0c8ee0001f4a2662886f7c8c8e3a0ce0631edf7850627f7e053dad3eb7ef5a0afc6d5a36c053e3ae7ca5aab1d4375cea7f8902c315321c2ceda44cc202669230ffdfea7e17c022c3828d217fdfa710de55b51d2587c8832e34116684941ffb6097bc1385754f762229e6a3f850dc90494c97fabe765c03f2aa653f307000649a435ceb99fab79ae7f269b4b6ecb1a6b127c56e3edb2c04c83783c31ba5ea2ad77a89dcfb0092e54998304b6b53c5865000e337e0fb08938fc47fc2d2e257ee4ab9603545748c325d5c3b99826da5e37f5c17970b4676e3635e83db99355a54145df01025a6115b45985ec528008934601b87aa58a173313a333fdeb9c3e48ce11fbb03411c5ffdff13f31516f7addd01f6daf4355b649ab515d4fd51ed70c7e85bdb2f50e741cf2e38c815f5b8b3b98641bd9ebd3c85f2415145df076296b0b1e685d69d1fc69e622ff2bc22da9c7aadd1adabbced67e89154de8b02c1d4f7ff2cafb35e1e69df26e08361a7979b4e510aa1c7bed08a677d96bf42c9c34357f4317f6c2583a92d3c3df84a47ba8778ff8dca3e4ecada0f80dd52c0b55b82360da43866ab462e7b27d837122da214e21a222d62545fcc9baa47cae70fb50d12720dbf4fba50a108c4caddcc4557cfc1a14b1762d6ef934b9afd7f44ab3ea58db754744aaf9e85bd59e289b45d7eb34c0589511f2b477de3c90585485e510809f793cc325af0d4ee4a83b6224363fbd581610f2782fc43973f5918ad0a1707898230dad2d98bdb4f136448f7893074f6ec9a0fd8c79e7a2e0e9c8171aed63976a05deb5be5996aa75075d4be8e8c7f11e150327606612ab68d54f89bde840e6a863cb1aecb0713c97100d16b193cceb45a1d0b2804c19de7e4638ec11897f1a54abe65d78812b439e42240711701202dd77d344381579fd61be189ba4dae4cb778df7849560fec9d910dffd2a05c6c608bc2c15dee73ca5caf393ebba64d9e7579d636b3d8a3d5efc590eac237ec46565f09077ec6175393b2290a0d3c45bb6904fe37b15d8e8a7b3d04b135305ce557b47cc2b325dca24ef5dda5a55948a98ac68e654d1fbe2cc77bfa50f09c24d7590adacaac2e638363b3c94589059b52468fe296549c0f2ea1f47af39a1bb0fa86e599c7e6184f6e3fad963fe12de3848954dcaa347fd9f9c0c76c62aa71380a9a92270844fc58caa5db8f548e82731861309c537493665e2ac981690e938b6210606130e70a2fa1c9de45fe23588a03b710364d5c104591cb1fac79847acc5078e6085c22130d04f58b2a0148d3adb2d2135c53d16248f602050e9eab95ea28fa88258b3437bdf77ef27099019374536b8d3b76207c5753f03d329be653429cef7f1a9df583630b528584d3b4867a443a88de762d01704590d1aa7352c8c3bebbf7cf3d857c379d0a598fc56791b392f2fbede26efa5358ca262cefd3476e2ac3adf4f1baaceb5ad60f46e160a5a9374a66c92a85fdcf6b472e90958be0d45cf492a6456c442f5ac99e73bf9ed9c03db1da5ae477859e0cc821374b9c60e0308912a5fbd57cfcbcc3c54cb5c1fb7942022d5e596334d047142892b297f17e489ac240c4d670d7fd9e83e22e74269a15e4403a340972e57eb52e273c8753cd81f0511f0f14fb8b739f68a11d285ab443f1d5d26342bc7db5556b5fe890d453be942245d35a338dff8456fea97c30a454af363ad3563b4b87687fc3dcb33e6229ae8898637ae2193f3754ccf4b37e44e8e6aee4f22608379cef75c6f5eab5a6a81bb8bc22f885a04660725a65c100147b369a7018939468d52f18586165c4fd131eb5bd4bd0e2c5b0070365e89521e5e3a499e3a7c95d82da1f67fa08184cecff96536e47f19c51631d70389ed1d19c3e61f2c958a2fbceab97ce50a9effbbe17f22e9d0e095327ec02a6c6dca4e5096af71878f21a93a8c438be153d51e5d2d34cdcf80b88c6b734fadd6e1bb73344c5d87d599460e59f78f118767c49242121fb7d08204c59e0252c4c6d08696bd856d5cdfb548eeef54b3b0ccb4b8e61654fd518dd165f9b862391e5bfed6b04ecb4ef3176ba66c192b7c905c00d3d0892b4b4116621dd85dd1466ad7ee7343d411939e5d5f574c073e55fe3ce506f80cebdceef0a0705330d2d2719770ec9986878bc780c8e84407ba34c6e1006fbab290f035c25a44f518ce7c79fb25af5da1768a1592bddc72835b6ee3a9e4b3bd8bdd562bf37d92b2d68d560a43bae8f9390268775ca9b4961e1e134c8e48a66958f5736302f4ed4da98d8052693b73aa38db013df110b085dabf2132e959a241210cc17eb09329f06ee7fd37e9f75e3fa1c1d3916077d085731ff638b73fafb8c8f38577fc2c6d8903f691665d714560a61d3fc55627fa5ea66a94664970a694a9b61697bc8d1d08aaa", 0xff7}], 0x1, 0x0, 0x0, 0x4000800}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="31ad3df04549b4c324ff1d60c5967fd05d5d5000b8da883c", 0x18}, {&(0x7f0000000a00)}], 0x3, 0x0, 0x0, 0x20000000}}], 0x3, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
write$binfmt_script(r5, 0x0, 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

03:19:04 executing program 3:
pipe(&(0x7f0000004440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000004440)={<r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, &(0x7f0000000440), 0x9, 0x0)

03:19:04 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x81}, 0x1c, 0x0}}], 0x1, 0x0)

03:19:04 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c93429b0df00000500000008000300", @ANYRES32=r0], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:04 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf23}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x8, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000180), &(0x7f0000000280)=@udp6=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r1, &(0x7f0000000840), &(0x7f0000000880)=""/174}, 0x20)

03:19:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000002280)=""/4077, &(0x7f0000000100)=0xfed)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

03:19:04 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syztnl2\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62000200)
pipe(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10)

[ 2259.524920][   T27] audit: type=1804 audit(1686885544.637:1204): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1536797831/syzkaller.GhrrxV/1945/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
[ 2259.591453][T10898] netlink: 1066 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2259.668917][   T27] audit: type=1804 audit(1686885544.677:1205): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4294087422/syzkaller.YDhwBM/2023/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0
03:19:04 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
unshare(0x40000000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x4004)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040))
r3 = accept(r1, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000a40))
sendto$x25(r3, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb)
recvmsg(r3, &(0x7f0000000000)={0x0, 0xfff4, &(0x7f000000b600)=[{&(0x7f00000012c0)=""/16, 0xffffffaf}, {&(0x7f000000b500)=""/153, 0xfffffdbf}], 0x2, 0x0, 0x400d, 0x40000000}, 0x0)
socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x7, 'batadv_slave_0\x00', {}, 0x400})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0)

03:19:04 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0x8, 0x0, 0x0)

03:19:04 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff})
gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
ioctl$FITRIM(r4, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000001600)="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", 0xff7}], 0x1, 0x0, 0x0, 0x4000800}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)}, {&(0x7f0000000980)="31ad3df04549b4c324ff1d60c5967fd05d5d5000b8da883c", 0x18}, {&(0x7f0000000a00)}], 0x3, 0x0, 0x0, 0x20000000}}], 0x3, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
write$binfmt_script(r5, 0x0, 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

03:19:04 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[ 2259.860704][   T27] audit: type=1804 audit(1686885544.757:1206): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1324/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0
03:19:05 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[ 2259.940696][T10909] xfrm0 speed is unknown, defaulting to 1000
03:19:05 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

[ 2260.178626][   T27] audit: type=1804 audit(1686885545.287:1207): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1536797831/syzkaller.GhrrxV/1946/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
[ 2260.317675][   T27] audit: type=1804 audit(1686885545.317:1208): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1325/cgroup.controllers" dev="sda1" ino=1983 res=1 errno=0
[ 2260.431664][T10929] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 2260.588746][T10912] xfrm0 speed is unknown, defaulting to 1000
[ 2260.607059][T10909] bond0 speed is unknown, defaulting to 1000
[ 2261.109105][T10912] bond0 speed is unknown, defaulting to 1000
03:19:06 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

03:19:06 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="100029bd7000fbdbdf2513000000080001007063690011000200303030303a30df6d00002e3000000000080003000200000008000b00376500000600110004af042462dc0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000ffff00000800303a30302a31302e300000000008000300020b000800000006001100020000000e0001006e657464657673696d000000fc0002006e657464657673696d300000080003000000000008000b00010000000600110000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000000000006001100ff0f00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000ff000000000000000006001100700b00"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:19:06 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

03:19:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/12, 0xc}], 0x2, 0x1, 0xffffff52)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socket(0x26, 0x5, 0x5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc623a1d6c8d46c61}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6, @ANYBLOB="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"/325], 0x158}}, 0x7ff92c2033014d74)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r9)
ioctl$FITRIM(r9, 0x40305839, &(0x7f0000000240)={0x4000, 0x0, 0x2be20000})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r11, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

[ 2261.476284][   T27] audit: type=1804 audit(1686885546.587:1209): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1326/cgroup.controllers" dev="sda1" ino=1986 res=1 errno=0
[ 2261.763685][T10948] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
03:19:07 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

[ 2261.928694][T10961] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
03:19:09 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syztnl2\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62000200)
pipe(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10)

[ 2262.620453][T10972] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 2264.564590][T10981] xfrm0 speed is unknown, defaulting to 1000
03:19:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

03:19:09 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x838df88, 0xe3, &(0x7f00000003c0)=""/227, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_kthread_work_execute_start\x00', r0}, 0x10)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x400)
unshare(0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
connect$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530203a2b5c20206370752e737461740020752e7374617400205c5c2f7d3a2a23202bde40206370754373746174000a0166697ee3a5435666aad1cccc7a6b00"/83], 0x53)

03:19:09 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000001700)={{0x2d, 0x30, 0x58, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

03:19:09 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

03:19:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

03:19:09 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

03:19:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

03:19:09 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x1b, 0x0, &(0x7f0000000180))

03:19:10 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

03:19:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x8, 0x4)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040))

03:19:10 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

[ 2265.037117][T10989] xfrm0 speed is unknown, defaulting to 1000
[ 2265.045891][T10981] bond0 speed is unknown, defaulting to 1000
[ 2265.086934][T11005] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
03:19:10 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syztnl2\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62000200)
pipe(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10)

03:19:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xffffd, 0x1, 0x1010, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

[ 2265.116815][T11006] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 2265.896715][T11017] xfrm0 speed is unknown, defaulting to 1000
[ 2265.915495][T10989] bond0 speed is unknown, defaulting to 1000
[ 2266.154774][T11017] bond0 speed is unknown, defaulting to 1000
03:19:11 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x838df88, 0xe3, &(0x7f00000003c0)=""/227, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_kthread_work_execute_start\x00', r0}, 0x10)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x400)
unshare(0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
connect$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530203a2b5c20206370752e737461740020752e7374617400205c5c2f7d3a2a23202bde40206370754373746174000a0166697ee3a5435666aad1cccc7a6b00"/83], 0x53)

03:19:11 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r4, @ANYBLOB="45070200000000001c0012800b000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0)

03:19:11 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000090eff95"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendfile(r2, r0, 0x0, 0x7fffffff)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00)
sendto$inet6(r2, &(0x7f0000000280)="b753390926abd8d8ca598e8d0858cd4bd264372e23fefc50c2645d0641e8d06d8ccc2775f60d67fdc6d6b23df4c147b4968b31bb973e59c73b59453cb8c4935645cccd7ee96dfda7cb61cccdbf1ff1c74f64da438cdc9ed81884a72c78ca58d27e41017518328805a4e48c6d3647ba", 0x6f, 0x5, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x1, 0x20, 0x5, 0xc00}, &(0x7f00000005c0)=0x18)
r5 = socket(0x15, 0x80005, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000000b00)=""/102385, &(0x7f0000000000)=0x18ff1)
sendmsg$802154_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)="d877143fd240c6dc685bbe662b846ac4a373ef7b71eafc90e975714304eb0461827a414614e0c7bc5658fe386af5679640b21008c8c78d34aa593228e9a2dc75c39ffc86b494d0d43dbea52b970c4d7853deabe61ae0f85580c9aaadf54cc3de6dee3c058c66ae857e1cd6b6fc53d268c97a8bfb2eeaf0f1d4457c8d172fabb4547ef58cee588b6709156f904e26b147c2388af4002df09ace7c737d8a51688717e0b398d76c2d1762428c04e63cf666989b8c9ccc5187da3f87fe6d7a8beb06", 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008805)
socket$kcm(0x29, 0x5, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6)
accept$inet6(r1, 0x0, &(0x7f0000000400))
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xba5, @remote, 0x8}, 0x1c)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

03:19:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

03:19:11 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="23000000760300000000000000b000b99e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03afffe)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r0}, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0xf000)
sendfile(r6, r5, 0x0, 0xf03afffe)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, r3, 0x0, 0xf03afffe)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68d90000000000000000", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="9b37d7ff08"], 0x20000600}}, 0x40)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x904, 0x2, {}, {r10, r11/1000+10000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f0b6d0bc664c97a9"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000088}, 0x40)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'})

03:19:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x18}]}, 0x28}}, 0x0)

[ 2266.417156][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2266.476220][T11029] bridge14: entered promiscuous mode
03:19:11 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syztnl2\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62000200)
pipe(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10)

[ 2266.502024][T11029] bridge14: entered allmulticast mode
03:19:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

03:19:11 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_vlan\x00', 0x7f})

[ 2266.596454][T11032] xfrm0 speed is unknown, defaulting to 1000
03:19:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

03:19:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0)

03:19:12 executing program 1:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x16}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x16}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xe1, &(0x7f0000000340)=""/225, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

[ 2266.979081][T11041] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 2267.386197][T11045] xfrm0 speed is unknown, defaulting to 1000
[ 2267.406263][T11032] bond0 speed is unknown, defaulting to 1000
[ 2267.842699][T11045] bond0 speed is unknown, defaulting to 1000
[ 2268.132076][  T623] Bluetooth: hci3: link tx timeout
[ 2268.138453][  T623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
03:19:13 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x838df88, 0xe3, &(0x7f00000003c0)=""/227, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_kthread_work_execute_start\x00', r0}, 0x10)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x400)
unshare(0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
connect$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530203a2b5c20206370752e737461740020752e7374617400205c5c2f7d3a2a23202bde40206370754373746174000a0166697ee3a5435666aad1cccc7a6b00"/83], 0x53)

03:19:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

03:19:13 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, &(0x7f0000000100)={0x40000})

03:19:13 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000090eff95"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendfile(r2, r0, 0x0, 0x7fffffff)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00)
sendto$inet6(r2, &(0x7f0000000280)="b753390926abd8d8ca598e8d0858cd4bd264372e23fefc50c2645d0641e8d06d8ccc2775f60d67fdc6d6b23df4c147b4968b31bb973e59c73b59453cb8c4935645cccd7ee96dfda7cb61cccdbf1ff1c74f64da438cdc9ed81884a72c78ca58d27e41017518328805a4e48c6d3647ba", 0x6f, 0x5, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x1, 0x20, 0x5, 0xc00}, &(0x7f00000005c0)=0x18)
r5 = socket(0x15, 0x80005, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000000b00)=""/102385, &(0x7f0000000000)=0x18ff1)
sendmsg$802154_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)="d877143fd240c6dc685bbe662b846ac4a373ef7b71eafc90e975714304eb0461827a414614e0c7bc5658fe386af5679640b21008c8c78d34aa593228e9a2dc75c39ffc86b494d0d43dbea52b970c4d7853deabe61ae0f85580c9aaadf54cc3de6dee3c058c66ae857e1cd6b6fc53d268c97a8bfb2eeaf0f1d4457c8d172fabb4547ef58cee588b6709156f904e26b147c2388af4002df09ace7c737d8a51688717e0b398d76c2d1762428c04e63cf666989b8c9ccc5187da3f87fe6d7a8beb06", 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008805)
socket$kcm(0x29, 0x5, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6)
accept$inet6(r1, 0x0, &(0x7f0000000400))
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xba5, @remote, 0x8}, 0x1c)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

03:19:13 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x201}, 0x14}}, 0x0)

03:19:13 executing program 0:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006880)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000000180)=@deltfilter={0x11c, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xf0, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xe4, 0x4, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "5205757cb90cedcfec98fb171befcca0fe4e1ca06ec2426f90af6021b093ae35145c189a5125f3da7d2a3cb5d98b4207998f63e2d4b10feff374682c3181aa30d3959d5db6578c11f7202b8da1f403cb2d1a33d9ea8af69bed6cd334b81c3492d4b814a239dcfb4f4784824cee6c277a2696eb3e77a06e26637d20ca9f4cc3fd8efe141d86def7e47e8c11679e19f3677a6fbfdb4ddcad4370796a599082a32c3101e4de1838db82e5ebdf3360"}, {0xc}, {0xc}}}]}]}}]}, 0x11c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25100000000c000f0003000000000000000c00040000000000000000000c0002000900000000000000080001"], 0x78}}, 0x0)

[ 2268.611497][T11073] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[ 2268.640522][T11073] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[ 2268.670546][T11073] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2268.672437][T11069] xfrm0 speed is unknown, defaulting to 1000
[ 2269.196483][T11069] bond0 speed is unknown, defaulting to 1000
[ 2269.857096][  T623] Bluetooth: hci3: link tx timeout
[ 2269.862454][  T623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2270.171288][  T623] Bluetooth: hci3: command 0x0406 tx timeout
03:19:16 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000200), &(0x7f0000000180)='GPL\x00', 0x838df88, 0xe3, &(0x7f00000003c0)=""/227, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_kthread_work_execute_start\x00', r0}, 0x10)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x400)
unshare(0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
connect$bt_l2cap(r2, &(0x7f0000000780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530203a2b5c20206370752e737461740020752e7374617400205c5c2f7d3a2a23202bde40206370754373746174000a0166697ee3a5435666aad1cccc7a6b00"/83], 0x53)

03:19:16 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/4041], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

03:19:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

03:19:16 executing program 0:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006880)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000000180)=@deltfilter={0x11c, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xf0, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xe4, 0x4, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "5205757cb90cedcfec98fb171befcca0fe4e1ca06ec2426f90af6021b093ae35145c189a5125f3da7d2a3cb5d98b4207998f63e2d4b10feff374682c3181aa30d3959d5db6578c11f7202b8da1f403cb2d1a33d9ea8af69bed6cd334b81c3492d4b814a239dcfb4f4784824cee6c277a2696eb3e77a06e26637d20ca9f4cc3fd8efe141d86def7e47e8c11679e19f3677a6fbfdb4ddcad4370796a599082a32c3101e4de1838db82e5ebdf3360"}, {0xc}, {0xc}}}]}]}}]}, 0x11c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25100000000c000f0003000000000000000c00040000000000000000000c0002000900000000000000080001"], 0x78}}, 0x0)

03:19:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000090eff95"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendfile(r2, r0, 0x0, 0x7fffffff)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00)
sendto$inet6(r2, &(0x7f0000000280)="b753390926abd8d8ca598e8d0858cd4bd264372e23fefc50c2645d0641e8d06d8ccc2775f60d67fdc6d6b23df4c147b4968b31bb973e59c73b59453cb8c4935645cccd7ee96dfda7cb61cccdbf1ff1c74f64da438cdc9ed81884a72c78ca58d27e41017518328805a4e48c6d3647ba", 0x6f, 0x5, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x1, 0x20, 0x5, 0xc00}, &(0x7f00000005c0)=0x18)
r5 = socket(0x15, 0x80005, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000000b00)=""/102385, &(0x7f0000000000)=0x18ff1)
sendmsg$802154_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)="d877143fd240c6dc685bbe662b846ac4a373ef7b71eafc90e975714304eb0461827a414614e0c7bc5658fe386af5679640b21008c8c78d34aa593228e9a2dc75c39ffc86b494d0d43dbea52b970c4d7853deabe61ae0f85580c9aaadf54cc3de6dee3c058c66ae857e1cd6b6fc53d268c97a8bfb2eeaf0f1d4457c8d172fabb4547ef58cee588b6709156f904e26b147c2388af4002df09ace7c737d8a51688717e0b398d76c2d1762428c04e63cf666989b8c9ccc5187da3f87fe6d7a8beb06", 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008805)
socket$kcm(0x29, 0x5, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6)
accept$inet6(r1, 0x0, &(0x7f0000000400))
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xba5, @remote, 0x8}, 0x1c)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

03:19:16 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r1 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r1}, 0x90)
close(r0)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)

03:19:16 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x840)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x0, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3a8680}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendfile(0xffffffffffffffff, r5, 0x0, 0x100000002)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
sendfile(r3, r2, 0x0, 0x80000000002)

[ 2271.073633][T11086] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[ 2271.104679][T11086] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
03:19:16 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x2, 0xddf, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000002c0)="cf", &(0x7f00000003c0)=""/197}, 0x20)

[ 2271.143477][T11086] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
03:19:16 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r1 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r1}, 0x90)
close(r0)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)

03:19:16 executing program 0:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006880)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000000180)=@deltfilter={0x11c, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xf0, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xe4, 0x4, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "5205757cb90cedcfec98fb171befcca0fe4e1ca06ec2426f90af6021b093ae35145c189a5125f3da7d2a3cb5d98b4207998f63e2d4b10feff374682c3181aa30d3959d5db6578c11f7202b8da1f403cb2d1a33d9ea8af69bed6cd334b81c3492d4b814a239dcfb4f4784824cee6c277a2696eb3e77a06e26637d20ca9f4cc3fd8efe141d86def7e47e8c11679e19f3677a6fbfdb4ddcad4370796a599082a32c3101e4de1838db82e5ebdf3360"}, {0xc}, {0xc}}}]}]}}]}, 0x11c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25100000000c000f0003000000000000000c00040000000000000000000c0002000900000000000000080001"], 0x78}}, 0x0)

[ 2271.203679][T11085] xfrm0 speed is unknown, defaulting to 1000
03:19:16 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r1 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r1}, 0x90)
close(r0)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)

[ 2271.372683][   T27] kauditd_printk_skb: 1 callbacks suppressed
[ 2271.372713][   T27] audit: type=1804 audit(1686885556.487:1211): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1338/cgroup.controllers" dev="sda1" ino=1979 res=1 errno=0
[ 2271.378555][T11105] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[ 2271.425823][   T27] audit: type=1804 audit(1686885556.537:1212): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1338/cgroup.controllers" dev="sda1" ino=1979 res=1 errno=0
[ 2271.502145][T11105] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
03:19:16 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x2, 0xddf, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000002c0)="cf", &(0x7f00000003c0)=""/197}, 0x20)

[ 2271.554870][T11105] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2272.022541][T11085] bond0 speed is unknown, defaulting to 1000
[ 2272.543852][ T5058] Bluetooth: hci3: link tx timeout
[ 2272.549033][ T5058] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
03:19:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000090eff95"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendfile(r2, r0, 0x0, 0x7fffffff)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00)
sendto$inet6(r2, &(0x7f0000000280)="b753390926abd8d8ca598e8d0858cd4bd264372e23fefc50c2645d0641e8d06d8ccc2775f60d67fdc6d6b23df4c147b4968b31bb973e59c73b59453cb8c4935645cccd7ee96dfda7cb61cccdbf1ff1c74f64da438cdc9ed81884a72c78ca58d27e41017518328805a4e48c6d3647ba", 0x6f, 0x5, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x1, 0x20, 0x5, 0xc00}, &(0x7f00000005c0)=0x18)
r5 = socket(0x15, 0x80005, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000000b00)=""/102385, &(0x7f0000000000)=0x18ff1)
sendmsg$802154_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)="d877143fd240c6dc685bbe662b846ac4a373ef7b71eafc90e975714304eb0461827a414614e0c7bc5658fe386af5679640b21008c8c78d34aa593228e9a2dc75c39ffc86b494d0d43dbea52b970c4d7853deabe61ae0f85580c9aaadf54cc3de6dee3c058c66ae857e1cd6b6fc53d268c97a8bfb2eeaf0f1d4457c8d172fabb4547ef58cee588b6709156f904e26b147c2388af4002df09ace7c737d8a51688717e0b398d76c2d1762428c04e63cf666989b8c9ccc5187da3f87fe6d7a8beb06", 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x24008805)
socket$kcm(0x29, 0x5, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6)
accept$inet6(r1, 0x0, &(0x7f0000000400))
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xba5, @remote, 0x8}, 0x1c)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

03:19:17 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r1 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r1}, 0x90)
close(r0)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r1)

03:19:17 executing program 0:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006880)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000000180)=@deltfilter={0x11c, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xf0, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_ACT={0xe4, 0x4, [@m_mirred={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xb1, 0x6, "5205757cb90cedcfec98fb171befcca0fe4e1ca06ec2426f90af6021b093ae35145c189a5125f3da7d2a3cb5d98b4207998f63e2d4b10feff374682c3181aa30d3959d5db6578c11f7202b8da1f403cb2d1a33d9ea8af69bed6cd334b81c3492d4b814a239dcfb4f4784824cee6c277a2696eb3e77a06e26637d20ca9f4cc3fd8efe141d86def7e47e8c11679e19f3677a6fbfdb4ddcad4370796a599082a32c3101e4de1838db82e5ebdf3360"}, {0xc}, {0xc}}}]}]}}]}, 0x11c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25100000000c000f0003000000000000000c00040000000000000000000c0002000900000000000000080001"], 0x78}}, 0x0)

03:19:17 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x2, 0xddf, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000002c0)="cf", &(0x7f00000003c0)=""/197}, 0x20)

03:19:17 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x106, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

03:19:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x300}, 0x0)

[ 2272.875832][T11119] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
03:19:18 executing program 3:
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)

[ 2272.934161][T11119] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
03:19:18 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r4, 0x1}, 0x18)
bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2}, 0x18)

[ 2272.976445][T11119] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
03:19:18 executing program 3:
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380), 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000002800))
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x840)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003400)=@bpf_lsm={0x1d, 0x4, &(0x7f0000003200)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @btf_id={0x18, 0x3}], &(0x7f0000003240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000003380)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000035c0), 0xffffffffffffffff)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)

03:19:18 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)

03:19:18 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

03:19:18 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f00000000c0)={0x2, @short}, 0x14)

03:19:18 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x80)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x200006d26, 0x4)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

03:19:18 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x2, 0xddf, 0x84}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000002c0)="cf", &(0x7f00000003c0)=""/197}, 0x20)

03:19:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001d00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x14}, 0x14}}, 0x0)

03:19:18 executing program 1:
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004540)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0)

03:19:18 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @remote}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0xf00, 0x0, 0x0)

03:19:19 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x8)
connect$vsock_stream(r1, &(0x7f0000000280), 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/102400, 0x19000}], 0x1}}], 0x2, 0x40000162, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000022540)=[{0x0, 0x0, &(0x7f0000019500)=[{&(0x7f0000000100)="f3", 0x1}], 0x1}], 0x1, 0x0)

03:19:19 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}}, 0x0)

03:19:19 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
write$binfmt_script(r2, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8800000})

03:19:19 executing program 1:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg$alg(r0, &(0x7f0000005900)=[{0x29a17b63816, 0x0, 0x0}], 0xc40c, 0x0)
bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)

03:19:19 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}}, 0x0)

03:19:19 executing program 1:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg$alg(r0, &(0x7f0000005900)=[{0x29a17b63816, 0x0, 0x0}], 0xc40c, 0x0)
bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)

03:19:19 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xf001}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x4131e}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9f}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xd6}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b6f}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6b}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0)

03:19:19 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}}}, 0x0)

03:19:19 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}}, 0x0)

03:19:19 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

03:19:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}]}, 0x30}}, 0x0)

03:19:19 executing program 1:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg$alg(r0, &(0x7f0000005900)=[{0x29a17b63816, 0x0, 0x0}], 0xc40c, 0x0)
bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)

03:19:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

03:19:19 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}}, 0x0)

03:19:20 executing program 1:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg$alg(r0, &(0x7f0000005900)=[{0x29a17b63816, 0x0, 0x0}], 0xc40c, 0x0)
bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)

03:19:20 executing program 2:
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r0=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r0, 0x0, 0x0, 0xfffffff9, 0x1, 0x831}, &(0x7f0000002f80)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000200), 0x4)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socketpair(0x0, 0x5, 0x2, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "cfb02bc262a5ef0b", "1df741a8ed5a189e0962ed8df4602b31c12f2c241652c1d9e17def4c45fbea34", "468c0879", "5c4d60b3d10d0ea8"}, 0x38)
sendto$inet6(r1, 0x0, 0x0, 0x2204c001, &(0x7f0000000340)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x80, 0x4)
recvfrom$inet6(r1, &(0x7f0000000100)=""/105, 0x69, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x0, 0x6b)
r4 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00'})
bind$packet(r4, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockname$packet(r4, &(0x7f00000001c0), &(0x7f00000000c0)=0x14)
sendto$inet6(r4, &(0x7f0000000200)="c244867491a062b0759d62f72aa9c86851da254b47c4f5b3588a4d1bd3a438a779f1c2adea97f866fd8a1c599df6f3eb9ef5abe96c9790976a85da3f7884edff35fca9bcc3", 0x45, 0x2040, 0x0, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f00000001c0))
unshare(0x20000000)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
sendto$inet6(r1, &(0x7f0000000440)='9', 0x1, 0x0, 0x0, 0x0)
unshare(0x20000)

03:19:20 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
write$binfmt_script(r2, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8800000})

03:19:20 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:19:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x1, 0x7}, 0x8)

03:19:20 executing program 5:
r0 = socket(0x23, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0)

[ 2275.385086][T11191] xfrm0 speed is unknown, defaulting to 1000
03:19:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x5, 0x16, 0x1, 0x0, [0x0]}]}, 0x6c}}, 0x0)

03:19:20 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}]}}, 0x0, 0x3e}, 0x20)

03:19:20 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x78, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x78}}, 0x40000)

03:19:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x5, 0x16, 0x1, 0x0, [0x0]}]}, 0x6c}}, 0x0)

03:19:20 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
write$binfmt_script(r2, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8800000})

03:19:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x5, 0x16, 0x1, 0x0, [0x0]}]}, 0x6c}}, 0x0)

03:19:21 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x44, &(0x7f0000000600)=""/68, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2276.186165][T11191] bond0 speed is unknown, defaulting to 1000
03:19:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0)

03:19:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="7000000000000000000000000700000000863300000003010b12917ff4bd850506da050efbce4a7b2441268086e30a230603f601111dc1c40eef9f6144550e481b5b7c87442cef03e000000100000004ffffffffffffffffac14142affff85ae64010100fffffffa0a010102fffffffd11000000000000000000000001000000d1000000000000001400000000000000010000000100000003000000000000001c0000000000000000000000085beff0", @ANYRES32, @ANYBLOB="00000000ac1414aa0000000011000000000000000000000001000000020000000000000014"], 0xf0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}, 0x0)

03:19:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x5, 0x16, 0x1, 0x0, [0x0]}]}, 0x6c}}, 0x0)

03:19:21 executing program 5:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_misc(r1, 0x0, 0x4)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000200)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x0, r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000600)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0xffffffea}, 0x0)

03:19:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x1, 0x7}, 0x8)

03:19:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x0)

03:19:22 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x46, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)

[ 2276.908188][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
03:19:22 executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
close(r2)

[ 2277.071790][T11231] veth15: entered promiscuous mode
[ 2277.100212][T11231] veth15: entered allmulticast mode
03:19:22 executing program 2:
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460e0500000000ff0100000000", @ANYRES32, @ANYBLOB="01dfb3ffcc2200001c0012000c000100626f6e64"], 0x3c}}, 0x0)

[ 2277.145436][   T27] audit: type=1804 audit(1686885562.257:1213): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/44/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0
[ 2277.257472][   T27] audit: type=1804 audit(1686885562.257:1214): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/44/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0
[ 2277.268682][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2277.355199][T11245] bond5 (uninitialized): Released all slaves
03:19:22 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
write$binfmt_script(r2, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8800000})

03:19:22 executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
close(r2)

03:19:22 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0)

03:19:22 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x46, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)

03:19:22 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e2ad)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004050000000000000000850000000e000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_handle_stats\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r4, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r6, r5, 0x0, 0x80000000003)

03:19:22 executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
close(r2)

[ 2277.901842][   T27] audit: type=1804 audit(1686885563.017:1215): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/45/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0
[ 2277.990184][   T27] audit: type=1804 audit(1686885563.047:1216): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/45/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0
[ 2278.073766][   T27] audit: type=1804 audit(1686885563.187:1217): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/347/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0
03:19:23 executing program 5:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_misc(r1, 0x0, 0x4)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000200)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x0, r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000600)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0xffffffea}, 0x0)

03:19:23 executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10)
close(r2)

03:19:23 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x1, 0x7}, 0x8)

03:19:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
r1 = accept4(r0, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80, 0x180000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r4=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="0000000004490000280012800a000100801400010000002a3e00"/36, @ANYRES32=0x0, @ANYBLOB="000000000000000008010000"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x804)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d8000000550010002bbd7000fddbdf2507000000b9d15d91aeef07ee5ce9dea18f71b1ed2bbe42a1e1bd0e692254b619483437cb8105cd7156850f5920ec4e28e0806797a78d6698076e55e6a91647fa18bd1592977e0fd31de4db23b38af08daac0d7b81a75d49d2afad9298fdd02c1a85d81b64bb3814caff2a65ac2c41eaf13bed3172f84a5bb", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="00010200fc0200000000000000000000000000008edd000020000100", @ANYBLOB="000102000a0101010000000000000000000000004b6e000020000100", @ANYRES32=0x0, @ANYBLOB="01000100ac1414bb0000000000000000000000000000000020000100", @ANYBLOB="00020300fc0200000000000000000000000000010800000020000100", @ANYRES32=0x0, @ANYBLOB="010304000000000000000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="86010400640101000000000000000000000000008edd0000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
recvmsg(r2, &(0x7f0000000640)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x4, &(0x7f00000005c0)=""/71, 0x47}, 0x142)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
write$tun(r7, &(0x7f0000000440)=ANY=[], 0x1a7)

03:19:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e2ad)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004050000000000000000850000000e000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_handle_stats\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r4, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r6, r5, 0x0, 0x80000000003)

03:19:23 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x46, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)

[ 2278.322386][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2278.569097][T11272] veth15: entered promiscuous mode
[ 2278.582688][T11272] veth15: entered allmulticast mode
[ 2278.588366][   T27] audit: type=1804 audit(1686885563.697:1218): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/46/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0
03:19:23 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x98, 0x4, 0x7, 0x3, 0x0, 0x0, {}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @generic="e9", @nested={0x75, 0x2b, 0x0, 0x1, [@typed={0x4, 0x70}, @generic="f0b68a56ed893017d23e7b7d351195e3a9faf7c3bbe25bea17a7012f03f8eb9360e213f2e213ebcac8dd68cb9c58ac6325bdf3da35c03cfce5bf56375a97ab4a64768150f93cb70ec73696f17366f74b43c12cd1270ac04fff35773ee08a927acafa2ef8445dcc7de29a2aa3a6"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

[ 2278.657320][   T27] audit: type=1804 audit(1686885563.727:1219): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/46/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0
[ 2278.731016][T11284] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x10}, 0x10}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004013a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa}, @TCA_FLOWER_KEY_CVLAN_ID={0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}]}, 0x5c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:19:23 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x98, 0x4, 0x7, 0x3, 0x0, 0x0, {}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @generic="e9", @nested={0x75, 0x2b, 0x0, 0x1, [@typed={0x4, 0x70}, @generic="f0b68a56ed893017d23e7b7d351195e3a9faf7c3bbe25bea17a7012f03f8eb9360e213f2e213ebcac8dd68cb9c58ac6325bdf3da35c03cfce5bf56375a97ab4a64768150f93cb70ec73696f17366f74b43c12cd1270ac04fff35773ee08a927acafa2ef8445dcc7de29a2aa3a6"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

03:19:24 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x46, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)

[ 2278.869299][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2278.897092][T11288] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:24 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x98, 0x4, 0x7, 0x3, 0x0, 0x0, {}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @generic="e9", @nested={0x75, 0x2b, 0x0, 0x1, [@typed={0x4, 0x70}, @generic="f0b68a56ed893017d23e7b7d351195e3a9faf7c3bbe25bea17a7012f03f8eb9360e213f2e213ebcac8dd68cb9c58ac6325bdf3da35c03cfce5bf56375a97ab4a64768150f93cb70ec73696f17366f74b43c12cd1270ac04fff35773ee08a927acafa2ef8445dcc7de29a2aa3a6"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

03:19:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

[ 2279.025711][   T27] audit: type=1804 audit(1686885564.127:1220): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/348/cgroup.controllers" dev="sda1" ino=1994 res=1 errno=0
[ 2279.077774][T11292] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2279.245285][   T27] audit: type=1804 audit(1686885564.357:1221): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/47/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
[ 2279.325369][   T27] audit: type=1804 audit(1686885564.387:1222): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4101634314/syzkaller.vq3F37/47/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
03:19:24 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e2ad)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004050000000000000000850000000e000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_handle_stats\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r4, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r6, r5, 0x0, 0x80000000003)

03:19:24 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x1, 0x7}, 0x8)

03:19:24 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x98, 0x4, 0x7, 0x3, 0x0, 0x0, {}, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @generic="e9", @nested={0x75, 0x2b, 0x0, 0x1, [@typed={0x4, 0x70}, @generic="f0b68a56ed893017d23e7b7d351195e3a9faf7c3bbe25bea17a7012f03f8eb9360e213f2e213ebcac8dd68cb9c58ac6325bdf3da35c03cfce5bf56375a97ab4a64768150f93cb70ec73696f17366f74b43c12cd1270ac04fff35773ee08a927acafa2ef8445dcc7de29a2aa3a6"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

03:19:24 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080), 0x8)

03:19:24 executing program 5:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_misc(r1, 0x0, 0x4)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000200)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x0, r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000600)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0xffffffea}, 0x0)

03:19:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x6, 0x0, 0xcb)

[ 2279.791910][T11309] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:25 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xca502, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="8b3dfa6a3896765459802f930f12", 0xe}, {&(0x7f00000001c0)="9e8d88ca", 0xa}], 0x2)

[ 2279.872846][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2280.012406][T11314] veth15: entered promiscuous mode
[ 2280.033251][T11314] veth15: entered allmulticast mode
03:19:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e2ad)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004050000000000000000850000000e000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='jbd2_handle_stats\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r4, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r6, r5, 0x0, 0x80000000003)

03:19:25 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x6, 0x0, 0xcb)

[ 2280.450041][T11319] syzkaller1: entered promiscuous mode
[ 2280.459381][T11319] syzkaller1: entered allmulticast mode
03:19:25 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000001900)=""/4097, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)
getsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4)

03:19:25 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003600)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0)

03:19:25 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180))

03:19:25 executing program 0:
epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0xfdee, 0x0, &(0x7f0000000040), 0x8)

03:19:25 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180))

03:19:26 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180))

03:19:26 executing program 0:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

03:19:26 executing program 5:
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_misc(r1, 0x0, 0x4)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0043000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000200)=0x14)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x0, r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000600)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0xffffffea}, 0x0)

03:19:26 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x6, 0x0, 0xcb)

03:19:26 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x98, 0x138, 0x0, 0xb, 0x98, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580)

03:19:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3d)
sendto$inet(r0, 0x0, 0x0, 0x24003084, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x178)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x100)

03:19:26 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180))

[ 2281.493705][T11355] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
03:19:26 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000001900)=""/4097, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)
getsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4)

03:19:26 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x2, 0x0, 0x1}}, 0x26)

03:19:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff80}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)

03:19:26 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000300))
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2281.568607][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
03:19:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x2880008, r1, 0x2})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0)

03:19:26 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1409, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x0)

[ 2281.721312][T11358] veth15: entered promiscuous mode
[ 2281.779780][T11358] veth15: entered allmulticast mode
[ 2281.807939][T11372] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
03:19:27 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

03:19:27 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000001900)=""/4097, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)
getsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4)

03:19:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0)

03:19:27 executing program 0:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d42ee5", 0xc, 0x21, 0x0, @dev, @local, {[], "f25b22ff657ded44d092447e"}}}}}, 0x0)

03:19:27 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x6, 0x0, 0xcb)

03:19:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x2880008, r1, 0x2})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0)

03:19:27 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='ext4_request_blocks\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0xb7ff, 0x0, 0x0, 0x20040006, 0x17800, 0x137ff})

03:19:27 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000000)={@val={0x6803}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x2b, 0x0, [@multicast1, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @remote, @multicast2, @loopback, @multicast1, @dev={0xac, 0x2b}]}, @noop, @generic={0x0, 0x2}, @rr={0x7, 0x7, 0x0, [@local]}]}}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}, 0x7a)

03:19:28 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0)

03:19:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='ext4_request_blocks\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0xb7ff, 0x0, 0x0, 0x20040006, 0x17800, 0x137ff})

[ 2282.994504][T11400] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[ 2283.271143][T11400] bridge0: port 2(erspan0) entered blocking state
[ 2283.277775][T11400] bridge0: port 2(erspan0) entered forwarding state
[ 2283.341600][T11400] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2283.392685][T11400] 8021q: adding VLAN 0 to HW filter on device team0
[ 2283.427211][T11400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:19:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x2880008, r1, 0x2})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0)

03:19:28 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:19:28 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='ext4_request_blocks\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0xb7ff, 0x0, 0x0, 0x20040006, 0x17800, 0x137ff})

03:19:28 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000001900)=""/4097, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)
getsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r4}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4)

03:19:28 executing program 2:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)

03:19:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006880)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x4}, @TCA_U32_FLAGS={0x8}]}}]}, 0x4c}}, 0x0)

03:19:29 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='ext4_request_blocks\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0xb7ff, 0x0, 0x0, 0x20040006, 0x17800, 0x137ff})

03:19:29 executing program 2:
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB='!46']}, @subvolid})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x26, 0x0, "8de4376f2424d2ec4f1ee6060b56a4923473a7655397b00fd13331887468f4d12a7844179af4f4ec080faccbb0247ba7031ac48720a526ec1eae2894ceaee3ba7b6080a02958b7efd28d3f6a354174cb"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x12, 0x0, "d177e5bae17499ddb1997b4752b229f8d3d51d92361cdade02d894c36d3a76da7c3270d07a225d5f698c0bdf85a014d6505d536d9e8772cb306867397eab6dd651637fcdf0b05032e931e9df0e1baa68"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

03:19:29 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000000)={@val={0x6803}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x2b, 0x0, [@multicast1, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @remote, @multicast2, @loopback, @multicast1, @dev={0xac, 0x2b}]}, @noop, @generic={0x0, 0x2}, @rr={0x7, 0x7, 0x0, [@local]}]}}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}, 0x7a)

[ 2284.021268][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:19:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

03:19:29 executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000001740)={0x3, 0x0, @private}, 0x10, 0x0}}], 0x2, 0x0)

03:19:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x2880008, r1, 0x2})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0)

03:19:29 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @rand_addr=' \x01\x00', @private0, 0x0, 0x0, 0x0, 0x400}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', 0x0})

03:19:29 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0)

[ 2284.387918][T11441] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[ 2284.482072][T11441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:19:29 executing program 3:
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@gettaction={0x1c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x40800)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0)

03:19:30 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000000)={@val={0x6803}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x2b, 0x0, [@multicast1, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @remote, @multicast2, @loopback, @multicast1, @dev={0xac, 0x2b}]}, @noop, @generic={0x0, 0x2}, @rr={0x7, 0x7, 0x0, [@local]}]}}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}, 0x7a)

03:19:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

03:19:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000340))

03:19:30 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

03:19:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/211, 0xd3}], 0x3, 0x6, 0x1)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x10, 0x0, r6}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20)
socket$pptp(0x18, 0x1, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)

03:19:30 executing program 3:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:30 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/130, 0x82}], 0x1}, 0x1)

03:19:30 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x1407, 0xe069fe9d8424d6d9}, 0x10}}, 0x0)

[ 2285.004070][T11465] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
03:19:30 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

[ 2285.071963][T11465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:19:30 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

03:19:30 executing program 2:
syz_emit_ethernet(0x72, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430083", 0x3c, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x88, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], "71ed2de7f1f45a03ff4c3d58"}}}}}}}, 0x0)

03:19:30 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)

[ 2285.217674][   T27] kauditd_printk_skb: 2 callbacks suppressed
[ 2285.217695][   T27] audit: type=1804 audit(1686885570.327:1225): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1362/cgroup.controllers" dev="sda1" ino=1994 res=1 errno=0
[ 2285.228564][T11478] xfrm0 speed is unknown, defaulting to 1000
03:19:30 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000000)={@val={0x6803}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@udp={{0x15, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @multicast1, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @rr={0x7, 0x2b, 0x0, [@multicast1, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @remote, @multicast2, @loopback, @multicast1, @dev={0xac, 0x2b}]}, @noop, @generic={0x0, 0x2}, @rr={0x7, 0x7, 0x0, [@local]}]}}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}, 0x7a)

03:19:30 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x9})

03:19:30 executing program 2:
pipe(&(0x7f0000000000))

03:19:30 executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
connect$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2285.433365][T11491] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 9 (only 8 groups)
03:19:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/211, 0xd3}], 0x3, 0x6, 0x1)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x10, 0x0, r6}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20)
socket$pptp(0x18, 0x1, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)

[ 2285.559776][T11495] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[ 2285.597780][T11495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2285.875303][T11478] bond0 speed is unknown, defaulting to 1000
[ 2286.039120][   T27] audit: type=1804 audit(1686885571.147:1226): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1363/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0
03:19:33 executing program 3:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:33 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x9})

03:19:33 executing program 0:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000044c0), 0x2, 0x0)

03:19:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r2, 0x1ca2606e6a851a8f, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0xff00000000000000}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0)

03:19:33 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)

03:19:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/211, 0xd3}], 0x3, 0x6, 0x1)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x10, 0x0, r6}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20)
socket$pptp(0x18, 0x1, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)

03:19:33 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:33 executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

[ 2287.983715][T11517] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 9 (only 8 groups)
[ 2288.102536][T11523] xfrm0 speed is unknown, defaulting to 1000
03:19:33 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x9})

[ 2288.148054][T11519] (null): rxe_set_mtu: Set mtu to 256
[ 2288.265064][T11531] (null): rxe_set_mtu: Set mtu to 256
[ 2288.272596][   T27] audit: type=1804 audit(1686885573.387:1227): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1364/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
[ 2288.315170][T11532] (null): rxe_set_mtu: Set mtu to 256
[ 2288.336765][T11534] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 9 (only 8 groups)
03:19:33 executing program 4:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0x9})

[ 2288.542667][T11546] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 9 (only 8 groups)
03:19:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/211, 0xd3}], 0x3, 0x6, 0x1)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0cea83171800000060537200be5e4536a42717e980ef8f66270e166d69788ca329797ff419783d999844302f3868c1b5125461bd984ca15ee38acf7877ef8eb4bb"], 0x28}, 0x1, 0x0, 0x0, 0xe6b999d9fef7c409}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x10, 0x0, r6}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x100000002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20)
socket$pptp(0x18, 0x1, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)

03:19:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="8b3dfab9d63aa7c7fa7f61930f12", 0xe}, {&(0x7f00000001c0)="000608ff", 0x4}], 0x2)

[ 2288.814114][T11552] syzkaller1: entered promiscuous mode
[ 2288.837326][T11552] syzkaller1: entered allmulticast mode
[ 2288.998872][T11523] bond0 speed is unknown, defaulting to 1000
[ 2289.069520][   T27] audit: type=1804 audit(1686885574.177:1228): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1365/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0
[ 2289.079607][T11531] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2289.079607][T11531] 
[ 2289.105906][T11528] xfrm0 speed is unknown, defaulting to 1000
[ 2289.410820][T11529] xfrm0 speed is unknown, defaulting to 1000
[ 2289.421059][T11528] bond0 speed is unknown, defaulting to 1000
[ 2289.653404][T11529] bond0 speed is unknown, defaulting to 1000
[ 2289.664299][T11532] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2289.664299][T11532] 
[ 2289.675870][T11519] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2289.675870][T11519] 
03:19:37 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)

03:19:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000200)=0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)

03:19:37 executing program 3:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:37 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18}}, @flowinfo={{0x14}}], 0x30}, 0x0)

03:19:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4111, 0x100f, 0x0, 0x0}, &(0x7f0000000280)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40)

03:19:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
ppoll(&(0x7f0000000300)=[{r0, 0x10, 0xb00}, {r2, 0x4b57, 0x64}, {r3}, {0xffffffffffffffff, 0x400}], 0x4, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0)

[ 2292.668311][T11576] xfrm0 speed is unknown, defaulting to 1000
[ 2292.710791][T11573] (null): rxe_set_mtu: Set mtu to 256
[ 2293.395936][T11576] bond0 speed is unknown, defaulting to 1000
03:19:38 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

[ 2293.441247][T11573] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2293.441247][T11573] 
03:19:38 executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:38 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)

03:19:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4111, 0x100f, 0x0, 0x0}, &(0x7f0000000280)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40)

03:19:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4111, 0x100f, 0x0, 0x0}, &(0x7f0000000280)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40)

[ 2293.743256][T11595] (null): rxe_set_mtu: Set mtu to 256
[ 2293.743525][T11595] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2293.743525][T11595] 
03:19:39 executing program 3:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

[ 2293.833289][T11601] xfrm0 speed is unknown, defaulting to 1000
03:19:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4111, 0x100f, 0x0, 0x0}, &(0x7f0000000280)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40)

03:19:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)

[ 2293.915938][T11599] (null): rxe_set_mtu: Set mtu to 256
03:19:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)

03:19:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000600b58d7ec884b"], &(0x7f00000006c0)=""/200, 0x2e, 0xc8, 0x1}, 0x20)

03:19:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)

[ 2294.207341][T11616] (null): rxe_set_mtu: Set mtu to 256
[ 2294.985651][T11597] xfrm0 speed is unknown, defaulting to 1000
[ 2294.985713][T11601] bond0 speed is unknown, defaulting to 1000
[ 2295.202404][T11597] bond0 speed is unknown, defaulting to 1000
[ 2295.239507][T11612] xfrm0 speed is unknown, defaulting to 1000
03:19:40 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x28}}, 0x0)

[ 2295.405909][T11636] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[ 2295.488988][T11612] bond0 speed is unknown, defaulting to 1000
[ 2295.499172][T11599] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2295.499172][T11599] 
[ 2295.508444][T11616] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2295.508444][T11616] 
03:19:44 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r0, &(0x7f0000002680)={&(0x7f0000000140)={0xa, 0x0, 0x7, @loopback}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000000180)="2c8e3b06a00d51a255c0a321f06810eae57c68e52a51c027c9424c17c3e22068d6fd83d6a506eaeef8fc9e830a450419e2d1a3d75d6067293a746a", 0x3b}, {&(0x7f00000003c0)="aa48a92a5112020779ace3456e74be847430deb8e46223687a17609622bb621b0283ecdd3cb3b097a78b3e61acb0c957f921cdaf81e929052cf55db07a4b6fc6f8e64ee4723360c6db3c22d80dc54539fcd3095c42251b9e11dfc3ea84b5d8a514c41252b8aab77021ddd4da14b766f9489faa2eef889b883b900918cfd1b0ee0cd589585ddd056c95239c172435e963bf8714e0410faaf3d6f1d11d1a102481f912b75df8299b03dcd58c80971cdbe035509d5e", 0xb4}, {&(0x7f0000000480)="6ac797c925ed339c3e0e36a3ee1f3b501f32fcc7c9eb5fb7b8d92ccb700ad7c0ff61023ff04adf45851c544d48af0b11e3279ced0bc66f3ea02a4804a2b33b69180291bfc2f705c77da6eff09231eeb350fd462f0f3aba3d93a6b41f100009530a87fd52b0b90090583304e7eb85bc79c8cdfff81d5511625b65cf22ef1f0234808a7c6741f4bbe2555ce6b6ff1a28ac88e0bd6f6a091853dbbf62ba4cb1c8c1033a1aa512b057ddd4ce42eeb608f9560116fa2e70c1a963335a9728a5189f7b5cf35fdb0e700a7f29f2f948433b52fb2bc8e80fe86cb34870b1953de07185177beeb184a14e5fa375d3d0f63913b4c44bb0f89f649bb0ec3ff9c068f2df2a90087242518ed7808643e9bdf60dcc770c56f7aab05c119940550729061fd219ac39cc0750b9c76cd2ac075e34e5f30e9351229e50a0d4ca87af5f54af27a6dc13e8125b1c72d669e4e280fe91670718c996407ea0240330655e06bd847b4297717e28c8d4bc81aaf2ffced2425b16a117a5acdcbdf6d2a969a04218804fd0b00e39ef9641443518f483c43ccca5c5c4091f6f827905c4fe00e66f3fb759d6788814b11b31daae30cdfe24698d0c5fb4cf3aaf1d6014866fdb5104adfbd2192c62d1187790502b24c466b647746459c83723e832c088bf3962794bc0a9c92d6557282025988a33dc7a4056ff7aaf13d14bf2b7118a92679399a049dc2d395f2f52d62a73e32319745600030c13219d979ab2e6471d65463e79cee394ebe69568ff47e700c37f2ec2874c2a908263fdd785415d691e75efb1d092341b3e76f49d026943f4bb6bb1f94b80c117b2a75042dff0bd9edbb48eb1491a321d5c3299af82912d0aa38d579f6f7495aaaba4b793b6a37bf092c01c3862cc2c9a434d32d7a178a7eccd07d5182f85f59061305be29435d6dda207b473b91eccc8de80e12edd0cb12f44700b8b7ba6d660d1e9488ac8865ae02a6c94ecc373b244798d15b2be563702cd191517c70f56ec98818f92f42fd01194e6618e7f2a35d93794678e49c19f4f73b543a18fbe5f01bfc3f2d9ed38e58f90a2a287b83aa3114c2b78d4d4850d5d233be9446867e237923633b63068d058e4a4cd7da8b1982cb22bc118f38e12c1568e70c6676cc82cd827389193c730f7e93033763238e26871f3e9145374f3e20b6dd59327a3622b55522ab9e9b262e258571c9e3945412a0991d1e14a52330f2db33415f533d7292b28a9a6067a3bde66b52698f5769d9bc97ebe63cd83aacbaa5a2deee56a2a6180375bc529c316f88da2d25cc78fd9a4b8080c6ecaa691f34f78709955391c5d2fe698abc51d8a515348a171ea82645adc1480b908f14e2f9dab1687eb9245f59f902e2c586a33f5f9a0c37eb80a28d63b69329ecce4c61155c9fe56124366027ffd5871adb843195537b34488fefe175a963c7aed9f5317693fd26f85dca3301dabdf470f84a36e71aaaac5956c14de0aac62958749e061a910c892e35ff80d900bf4f83bdcc0d24916c8d33fb22c71f6068c8fb9b3edc8811d0caeb789385c1884c534070b857e7472006e3371809064b5817d8f1326450671cc729e3c51544ba6286c943199517573f1aee3d9c8c30fc090a9eeed7bff5e9478ade5200720ffc65643a52becc941990bfe81198668d875d45d2f6cb8d2643e9b1ddd89a68b4c084aeb5f88456ca7de2abab388577990c9951b3cf2282edeabe811e57f2c10ff93a8375d84e2e1efb9e37853182d8843d267d0a5ff5700fdceb8f304ad9b8907974bc6d3a3c16819093db875de0c4582602c357d5fe8888a60c32feb5e5ecf01a3200501487f7d84fe2b96e338201cbe335e9e9e4687708887c172d4ec59ad609a3f57c5575a74470a9e48bc193830a1f8993eb9db2b33888db757929fb3ec35e8df7ac89f437e6a24a4c4e85b9a848890599aba1468a9b95eb668d616a812c6976bb2e65f6c0aead3ee7424376804800cbf1cfaa6f3f0dfe639581aac05a1ea475223711ee5642f910baae6c7887813e8daa9b7990df736162c33a1e444dbbb032ebd10914f102980dcd4621eb3b01d1de9943e92977320dbf320ee8ab182a13a709b9578d08fe40443dd88831bf68ebdf776ba08508c3b1ca8c9e37e79adbf9f989093bcf8e4a2cf2b7f82dd5253911305156d659611e18aa392f2923c3c2b1a0cf15308b03bd12cd2adb150b93ae4815c29f64f781c289a861729282ec0aded60b608d23c80104b06797dfcc3951692380b3b8c69b03e4661b18c221bb72dfa6a47f7fdf5806b3bd1405590b60e827163cd191bb6adbd3c942aa18b8cb82f68d8681f5d82da5463234cd5ebf4b3bf282df2fcc6c0151ab366d2d31d44f90f7505fbf8bb793c06a7b9790b471efba776d70cd65ee666813b40c2341e24a1fdd91de1b43d17826a378460a42174a9913d80bdd137d65582f5f37b11b473fe57458a7dc6d7e40de61189d7f9b74dc04331e35f8910772e235cb228fd90a31abce5019ca1a6d29126471b29e269e7512294fdc7fd4c8e5c223eec080928699e5bdbff659eb2d13def0c45561b4a0bcc06c13648e37b378ee6b93db72dde60b9ce8db9baadd83167d60c13da2f57b1729314bd05b65fd2394fc93e0a271886ca2c61580caefcf583ba7bfed68f98689d18592fe7a6df867fe12e6bbd9fb460b7b1a376641699983bace8d37763c2a84aeb8e0677afa7ce0b6216d6f8382e98544dfe7ff24a573a0720b9fb22eb0b4de5f2a9b3bed624ee01cabefe4b18bf3453e486f09fab1adc518b2600281ecfa3ac325774d8f61de7d1e0209f5b764d343b40fdef661d3d41c029706a17b279b8f40b16628523b9c8c3f3206aa484ff5837089554547d6e75a6c02f0799f08609b703968eb836af9e09a8537abc0e2644a25451520d594c5cb8ddfe134f27bcd886bc45703df73625f118e22c34e1ccccac06765dcbc1b40b1b932a97c63a48d4ef77c50373c2fe656c847ed5f658a90471112ca551c1ae4375087a48c1e8796c18dd3277c671440dd60e5d0ef168ccd493b8244a83f0571b57acb3dc1d0d58ef44390ecc6db48eb6c1d632fffca0918355384c440f49eb27df56689053f5fbc4aee7860abb7eb407784e816b884507c27adf5cf1aabbcca55a3d9cfe54dbcecdb6c547540aba62c89a8d1f50a2b3aa87d2150bbf933679f83c34046c74466a00f4636df0eb2cdd535c748f433d34f673c86a10115b409cf6ce6bac9a75eba2fbffaedfa22bb364d5f6e200f23bb814280690207843f64d3108402db31fde82d0d6dfd40e24442fa1deaed07a24049bbb2fcc46c33715dc430c03a1ba26eb2e8d10ddead5e7dc39e32f7846529456dd6391d47862a51a958f8bb49fa8b85f3ffa27060ef4a29d500b66b3f58352e95118c8f4dc9715784381fde253b4293b7398da55ee6d2eff27e50210e96b0afb6e12bdd2f2c97a46e5f58ccee90d2f535203176af651fa6e1c2577a89572b86c7cc5f00f4092b8b77337c1f44c58fa21ada5dad40f44988a424b8689a8599d083b867f5a3cab6aa3539e74826197b3645cf573611b826f3a04845a520bfda5a3debf4ef2e3603a4267e573166fb22e4882dc65721dcfe87f2f9ec08c6af7b2341ff6df869f7f4e4590b5601ce329100a5bc05a5d04f96e61de1e1229e088296c13bd10d3ce3b2b6286f0cb4f18e82c9ebc90c6462fcbe7f0dda0362d6d453e26436695a6313e535551e0a45e7fdf421b5f95662863319954b89e37de2f5cb6dfa4e14f79581c4deffa08e864c645ab0ec2d8d50d65198f4c9e359adf0f8795f507209f51b3ba2ee30a43792ca7b0a653d05d8983d5668c78ab527a0ba4e065d858c315430f4712a9b2912ef1f1565a32d894a322870604fdc54a461f023ec0c6f5415dfe1f9234efa599f73a65c567f6f880c08d27aa60f8591574a7825d3745e8b22dbfa52acc5b62e3dbc2e35ef3a1678ca6d5fd9edfef4ae033f581f8f7360bfdbcc263c88bb42589db5c8bbfd38102d6bb27daa939b10d2a43806d85dcba922ed5651d982fe8591a53179655ce936d08217ec3ba6809b5e3655b92551d231185fad6588a0b83e6ac0be3c7e331e021431475485df1b82b48c2a450ba985743662587a0a728e786c1de64914e3b39af7bc123877d617d90d9b7b8dfeb4947c9f2a51bd09c2e6b90ab383b9a3573c38318fd89279a9767c639bbbf7f3c0784b6613202e67a80210837061ab35d40a4d380c92437b2e563b4184523754340ac4aa0887fba9d7f477fc22d99d32b79345fd0974c6b4d915cd5a8aae1a670c1d509b552b356a2f045eee5e35db4b1b18949ff1c2311a099e880d98c70349bca6f66589ce768b65653270cd4804d7c19a5dbe5d1cb06fb53cd00ac1283b529c70e078131f8d3444c8d4f82aca41721ea39b0068ff1e88cd3336cb36d5f153bf8ac53bcfb05dffefdcfef28f9d40dc19e9fff77f718a6410a3b22a63876da7a1751d601c9b4f496a3816d8b65a6ce61c5f4189dc32a810f08060699eabeedbabb4ff7c04f8f5fb3dfe76e5c28d0a10b8906d78f38d4e7b78c0c0bc7d9a681d85bb72a18be2fc77af0e9486a973a9fc25766191d89963480cf39bf401536776a3ce58622f9224085a1df6c9d7d0c692051028520aeee9949e91e7d19a23c2168218154fe224a079a319ba04fd451924cc3913293392819e21b9c9768f1883e198a0a4d5f432c6b24494c7aaecb7dc78fcda304097a23ed6cb31c9e6d2cd6be0d430fe639e4f15e3bebf866f8e678491c20c08fc80f58a2333da6a2c3292f024f66d2ebddc6351cb4e73517487550bd08dc6039fa91f8a3beed48af231e7bcd04f7a99dbb395ae031f52fc4fd02c435aefb19289229a45d2e47b0abb10cd22bab1c5822ed03e1c2b0f7612059b18113bb4e2957193e124ac7bc94cbd3b7bb25be2e9b8bd166915ff33b73b817aaa189b3b87dfa3e8e068cb9331b310b0fe8f538199bcd3ea52a3d5c6756fa9ea5a785b2a4eb60474681a0a20232b823565df7b2671bf52a3b7f8ac7b579c9b5553c71942ca499528849e49f02f7d55b0e548e99d079f3659520a3990423d39e83a5e57ebe5d8b17837bdf5087fe65c0d240c0073c18438d8935c06cb433dfcb06ff023842a2e07d86503eef97c0a110d98de80af22975e27c65fa93782b8c8520dee1b4d9b0d10701d7d5b59d670fa3b8aaec887843b8d6e1f9aefa12155484a46bf7e6aad28f6e873f5634fef6dbd681b8edfdbc039b598afce9aabb9633585523f315e4cc5eb2dfeb6d96e464148db8c6bc0c68a2e6521e1e114897acbdc4a8c47dc45d2e1282e90cd2692e5e19f08d851ba0048f7ec4f2839d2f3ba0a797b1de49ba2c31399069263946626defe55d926240029babafd7a5347f89708fe1f3f76881b93eab2efe233717d4c040a35bd715cd4b56bd578150c4d4884a626c96ae16e600ea977cfbc9a073d2c463e9d4fa0f2164447f853ac3008130f39be3cc3b60120ac138f17b227eaa8a314c8208286823b997a102c78deb708b370f75626bd9ab9c24bcaf0a9548152f10947d0e5ff76bbe270f15346dfb1f021816da21803aba2b7c4d33f9cf666116b082805a63793af5900c745fe57a412d64eec24fcad50dbd4ccbaab12c2f26505e595c8758735ae7cfaa25e8fba055ccfbac8ade76cf996da19d774ac2dcff9047cfdb3f75c9756efae94cdcca3dc899f35b1cb5c33316ba2d21a76850b1e4e0e652b369dc8966134f1f3c722cd631a782c7a066714db16a59b4eac2226df11455", 0x1000}, {&(0x7f0000001480)="19b5971c441012bf5d17728a8cd8eb44e48bcd4a46954b5e0e09f7f0ba5572558be63081cd293ca6392507c9cd6208905aadb30dc58cc606da6503b3e917f140c4eec82d00eb747005ea332454e7a2bf79bc94c852e9294bac2dee6860931ecaf105aa258f8a51cfae2f4d3903af1722f3deb6c9493e929013bd831d67d9e81be28776d26e09d668ba3b1a95f67b89805c9bbbddd60e92c59ed41202ce", 0x9d}, {&(0x7f00000001c0)="37d4c737332e4810acbfa751dce47a3a680c4c0bb9d7acfcbdb13ebddb9f6534cafe48dc25777f71f9bdef14e5cb7347375c7348fe69708c33ff3cbe74c9dcd5a3c0f0195586aba451fa6d7b133fa8", 0x4f}, {&(0x7f0000001540)="6d327101ff28e0c2ba96bc108067237eb65450acd308d46a049dd119ec0b1ade13c52fc6fa1f92c745d1a47d66706085905dc90a88cefb3e4498975107509f461262ba5e9263e07f8874b8b2c09bf39aaf4fb974636b3b59ef7342ca0be8a945a707d92eea98a71cbef464f7437ad44708ea85aa6b7a1081b538cbcd2acde0d70595bc0c851b702102119cec8412311542fb49ce79569094ee77b94ba5247cf492370b6084f9e765c64ce27883b1e88054527fd8d620b00f604a1243d73429e271ecf3e239dd59c2efb8e659f2da32d4cb731ace0c19f8ddb457d3b6c0e56e842ac42a59714ed75bd39f976626d7c07252045472c95507752ca0ad3718a7abb07e3ce5ff38d8d3784acbd470c7004ab8d93ddd97e9fac8358eb64246eef636bceb57f1c8f796e5d3fb4b6dad5961d4904c0eaf7ba3c55d5a60392cc13229a3763fbd7e7172d880df1f2bea4abbe3da055a6181f6d0bf3a11260b3c591932e9a4050904a43786d92d6d45b78968249e4062eb18ebed48af1aa74acc503c2805a2914e80d1087a830771708e3d23b6b41158d2bef9b3be4177ead074a57ddebfe52207870fd553bc9348d78eaa8b6a124422922380d18ae31b891a348437fd6d7d48a73ca924834d9e77c1de310dc839d408007745b2e80da6fbf267fd7be6b8e89d14b2ad5f1fd77cfb1c30bcd2a26de55798ce00c12c8af2f0ca1b20e682727b502813e638682a1a78fa157587507c72e8b16b2d0fe5977ac927b04fab300d97c393158993a7ac07f36a55a87ab8f57e9910cf7039f053d5e8e017e1f491bd48d84a772008d7c49919d5020996d5e9949095432a15c4d3ee5a326a922219d54738cc63801fb081f4a7e21bbcc03cb09ff855b6d7ad0bf0ddca3f5ea4948303b10591b2120a7f0ff5eb4bc832c09cad95ff5b58089f03b8c89f08c1968ec2fdc6731330515d933dc9eca382354070796e34dc7ceb7b10adac078ba29a9334b0b94cfbc00d1878a6a20fee1277ff0b457668cd51a823340403d7428f08feeea03e6ac50dfc60220910b798deeb0fadfbfbe3e7e32b04efb4c5f3b467d6e04e97ff1d62f953faa992503fd2429fd1cf03c7cecf00e906e9778b648a3eedaab033ed5fdb94a40b68a78633b080a229dd04d80bde6221a28c84605ec721168de93d1f43c36a41be114b26747f473db8b4030f4d2dbd41760f4cf139c60c1bb0418668d076947c02e83c1dba2fa332936dd1af8515634d7be8e510abea2809b2f7f99bf7e91ead6d92dfec2938edb80569134fbfb40d56d867da702e180cfa5c6412ed527dcccbe020e2d7f38a537d7968c85728f50a001097a564d428fc9c6729147e783880b471543d1bf1bf140abf317513a564e6ae56c8934eeddc3e4e9f04add6c4e89e5922a73b75736680b2beb200f81028bec0bba29af4e02c3e5bc9cf931d026bf6b97fc183fc9d825ff341f393b99240e3caddddc41b6b7357799c3f4c4b6e0a79246c5488ef4d42bc4cb6e3853beed620478c190fa3789aadfc88e1c6a2ecbe8cc1417908807c8f83f3b9face94b811c42b6e48043bf08f9f2dc02b3054376013f5aaa129c4eb4f3c936c2db46e193ba4a461996306456a7e4e62a00595439a9ef7f428efd97a0192a3c2a87692acc75a579ec067c7cc4019e14ac3b2eb9a37d5162d9d00f3453122a3d046f8a38296a7e290b30e3d0a5e1d75964fb000238c7629b0918c4d47efe4bcd817c90dd42e102dbf6232085a5063a98dc2e37aa55877f12e65be7f99b50ffeea4d9aac321cf03e5cdb6fdb7d35fc0f75bb79730c41791c54f96b879763617fcb423ec7fa7f5672c92c6d8b873f1cf328f1acdfb5534efb438480d40a7deb5685e1b5b419c0b39d5871576031dc4aba3b5622ef00fbd3816a9629c63c5785bdaa84dcaa89d0e991b1f53ffc34e465644150faebf7b265bed40099430e332f71fdc3f2fe24384a1ade212c8e4f2a3de6449f1a144aaee0b00d092096b7c50da82c66781073a5bb418379894ea09c17208cffc8b95616081869e9e7dc47137ed2964dd3ff1858784b267a8e3aba514dd2e457aec81a1713a9cbccd1c86cae90b1e367ff351586d9f21196a2373770f997b4d1b3c0f7f2dc7dc09f4e5b4148096912a012a22fb3af4f5808d5ec97a5b06b63fd3bed2affe8d05f3fb36366d1b276783d12a268164189b3f95d40b093ffc8a9e0c0b6007a33c8c607475f4a9c4adb259d0452449c01a4c4d6d26db048cc8a5b33b8799cb81ad54494e6cbc6b28f096d3b4f3218bfbb8f23058a09f37ab24f8d3da2df168089685234f1dc7e94d7a657d50a8c2bda7c429c991b04b665adccb0490e61099d5cb76f661179d10b76f4c9cada08eb6bf56dc91cad993164c2958af30965ce0067fcba8cf905dd248fd01a5b9380cb1b4276616d25d86ce6413efdc6a20b602c4d23ec503e798af6e5b9ff99c5c704bebb75432ed31632ebfdf251e8fd42d0b47dce1a016f1d38ca13bb402a646087514a7a3e28661b9c5b2a532cc48cacda04c9ddec58fc1b1eb94980b15ba1bd83d1e178846d7dbdc1834749c6283d352edf40f21b3f46a4309550d7e072ed95e511a7f32af810a2b0ae45d79d0818a9abbb8d300a82566b23c047b6d8f5dfeb968df777b0b36f6300c3c105c4e7ae5c7392db0f888f8c216d54fa7e92cb059c5f6df35395c0c0791c9a87ff9804b5c0e07ad6bfc71c6d2682a1bc32ad66fe2822bc3ab528c6c642561bc5b14becb9db03bfec6003f3e3eaf0b7226d1a679e9336b89118f2fa882eea4288d12115468a3330da1777fab1340b9b573e01f0c5c643aa472c4418de8da4c7dd2a591aae1076e56ec97f64c58adc40942959caf870e78bf50148a34f10b950eaa0bb08e4bb778f6ab3642604ad2f1a2dc0a1ffc4a5045350ef577b93b66d6b8c2ed75f24bbd5977bac455536ea6c52352ab0c55e53bc08d15189be777e14292d04a99432e487c18f6892785451eab9175878afab475c5a0be639e06fed11d32caab413e20aea7e5d56b76316d535b33a3942d6891772b51c8f09e6d03cb56c1da35e538206169235b95adc1f0a156675ac9c9d57f95ce21e9a96998a1e6e4e2c176566e09be03c927e490e928df4e62433ed9b1ed29abe4e10658efcd665a306b0aabc46b414bf21e44de3d706c2c1e9dfa62ba27265af7377b192ff689ab96708881051cf63a062b6935592af991abca7f43422997b6b5238e52cfdf6ef9fd61e1d6330c7714e88b08d42a92c34482105fb4e89afd6ba06cb218afe719470582b87430a24d252763c3f96f51dad53258cc79d27297a910cbfdb186c69d669458612ae072e0739d7eb52f9dbb04828e56d2e0df4b936d13ccd90f993f1ac140d441d055b854c2637f83e35fb8da75b54de0655d166dcccf6e2c43421d8597cfc00627f0cb8f7b2a737ce4f8b00d10544fe154ce86717be8560b26a7fd0b95a3e13b4b44602b5ea12281ded05addeb605050d45527628d7b34332b8729351b6ebe91a9cf7926476ced6a0f1b06a2b5f21987bb058a5210712b6a40d5cf3a14ac181e45ceb82ec3c6f3a931eb8810956eb156e8738738c9e558b7d5a98e9cb5fcc0793ae0f265868cb562bc816eead120cf085bbf6668003677baa1570936fbc1a421a42d9bce0b1d27dc5d2be0a0cecaf5a1b4d094ecf197ebb551e2499e58a7d7ea676ad9e0ee85a8b24a1a349a96a929e510b1fefbafc3a1f8fa109940133c8a07613c96c49a085a0f395a7c30bd9d5ae44e1aa60d89c158f73d2ec68f934892c3e2a11a6fd57783b38fb1e8d2a8ea6adc5c1d3c8c1c80431f646ce9f2afe0aed9248316f28a62618d807bc6a89d0b3b7c25ffca35dc0d04b098cdb17810b61b918ef4f3cf5862d6ba6488ea7478cf02dbfa4b469488005d7bc702d65d6480280ebfdb76f3857c16d93c418725916f65e1e3b5648640bd606d41e3c27cf366e517c4e2218b01e1c9e9a0fe88dd0f092b9a2b280aae5a77930e4289e7b92b4c3b7accc6f0a25a1e7b45e811c3354599cc16ebdb43f6c54288310c43a59c374f4386a6c1c6dee32d01211e7cdbdb3a13171b3c910290a61203fb8219793e87f88af0181d3903d43acc86138ce3ddd2238c4efffc39f26506ba72bf2063b3364045cf24f067db24ed9552568ef99bb1ec051ca65538b3709175454a464f4f66f15b85bcdefda0298b4562ad1f617c8106c39fb870267416474b6116cf8687f9615d0bc1ee449ca95b80f8104198272d5e9670fe9552b08ec68f29fc821e823438c53adcc5dab1cf0b8d4274771ff6b1a4618cdd364ce2dbeb773d81394d1cc9829ab13653e0b327734f3f3d9cc1bded53b7b97cec54aef64614f570ca33943bbd9ad569a45e521b37d19229592c9dbb44d3e670571911138588cc1bb74bd7d16db811d5a40a17bdc8ebca1c94644afaf8963bfa3e0a90b43bd4d6ca9d1991c80a9c420c2ef6991d6b74c08cf1045a6f4700e6bf8e75393a5be57ded2cb3efaf7655306c9bca351f8ce317ae9fc1327e3be1faafb9dd69631092e734a01d424399d67c77704617492953bf5f8ee0e5e890e66c47abcaad73db743f83365f74a91b1e24cc4f34c07c705684cb82f0442544559b2677ebde6e0242ce16e", 0xcd6}], 0x6, &(0x7f0000002600)=[@tclass={{0x14}}, @tclass={{0x14}}], 0x30}, 0x40)

03:19:44 executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:44 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x28}}, 0x0)

03:19:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)

03:19:44 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
sendfile(r3, r1, 0x0, 0x800000000000c)
r4 = epoll_create1(0x80000)
socket(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0)
r5 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
pread64(r5, &(0x7f0000000280)=""/228, 0xe4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010008500000000000000000000040000a0f70b6b4a767dab736a2ec1f7c4793d874dbf5ade7d2bed69cd54caaacea39eabfd9a7459c437c26e713e61a03a2b7484dc5cd5ae1abc8c30ca82c3e4ecddf2e0166ab2fa27ee0c770f810037f0c247df03d635cae08adde494b45d5f422b4d091a3e840199bed9cca4cf2910fa10fde130c8a1c978fc5b7e3ad6af1dae712d9971f38bd567a886e209bc56add24d7d1f32cf787cf8153a06c5ae471c02f2ec87e3621d3a0000000000", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000bc1fff00"/21, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB="000e00000000000008000a00", @ANYRES32], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001140)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffff9}}, 0xffffffff, 0x2, 0x2, 0x200, 0x0, 0x4, 0x3}, 0x9c)

03:19:44 executing program 5:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x541b, 0x0)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

03:19:44 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000001340)='ns/net\x00')

03:19:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

[ 2299.382557][T11647] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
03:19:44 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x28}}, 0x0)

03:19:44 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000400000084)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000380)="f5", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x14)

[ 2299.466583][T11653] xfrm0 speed is unknown, defaulting to 1000
03:19:44 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000b00), 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000180)=""/66, 0x41100, 0x0, '\x00', r3, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x6, 0x7}, 0x10, 0x0, r4, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10)

[ 2299.491225][T11648] (null): rxe_set_mtu: Set mtu to 256
[ 2299.569041][T11664] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
03:19:44 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000003e0461"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x28}}, 0x0)

[ 2299.603885][T11667] (null): rxe_set_mtu: Set mtu to 256
[ 2299.693443][   T27] audit: type=1804 audit(1686885584.807:1229): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/244/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0
[ 2299.892491][T11679] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
03:19:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

[ 2300.457081][   T27] audit: type=1804 audit(1686885585.567:1230): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/245/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0
[ 2300.609161][T11653] bond0 speed is unknown, defaulting to 1000
[ 2300.637756][T11661] xfrm0 speed is unknown, defaulting to 1000
[ 2300.824506][T11661] bond0 speed is unknown, defaulting to 1000
[ 2300.835809][T11648] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2300.835809][T11648] 
[ 2300.849569][T11667] rdma_rxe: rxe_newlink: failed to add vcan0
[ 2300.849569][T11667] 
03:19:48 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xfea7)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xd001})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xfa64})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r3, r2, 0x0, 0x10000a006)

03:19:48 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

03:19:48 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000b00), 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000180)=""/66, 0x41100, 0x0, '\x00', r3, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x6, 0x7}, 0x10, 0x0, r4, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10)

03:19:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

03:19:48 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

03:19:48 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0xffff, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:19:48 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')

[ 2303.515083][   T27] audit: type=1804 audit(1686885588.627:1231): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1376/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0
03:19:48 executing program 2:
r0 = socket$kcm(0xa, 0x3, 0x11)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)

[ 2303.715053][   T27] audit: type=1804 audit(1686885588.827:1232): pid=11694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1536797831/syzkaller.GhrrxV/1987/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0
03:19:48 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0xffff, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

03:19:48 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')

[ 2303.757535][   T27] audit: type=1804 audit(1686885588.867:1233): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/246/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0
03:19:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

03:19:49 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')

03:19:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

03:19:49 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0xffff, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2304.321345][   T27] audit: type=1804 audit(1686885589.437:1234): pid=11722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1536797831/syzkaller.GhrrxV/1988/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0
03:19:49 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000b00), 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000180)=""/66, 0x41100, 0x0, '\x00', r3, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x6, 0x7}, 0x10, 0x0, r4, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10)

03:19:49 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')

03:19:49 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0xffff, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2304.391337][   T27] audit: type=1804 audit(1686885589.477:1235): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/247/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0
03:19:49 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xb}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

03:19:49 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='B'], 0x6)

03:19:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40018401)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x10000a006)

03:19:49 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:49 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)}, 0x20)

03:19:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xbc}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)

03:19:49 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80000001)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x4c060000)
unshare(0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000})
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5ffffe})
openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
socket(0x28, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@udp6}, 0x20)
r4 = socket(0x28, 0x5, 0x0)
connect$packet(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000180))
unshare(0x30010500)

03:19:49 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)}, 0x20)

[ 2304.799730][T11741] xt_socket: unknown flags 0xbc
[ 2304.809482][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:19:49 executing program 0:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000015c0)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x44}}, 0x0)

[ 2304.895684][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2305.157291][T11744] xfrm0 speed is unknown, defaulting to 1000
[ 2305.199157][   T27] audit: type=1804 audit(1686885590.307:1236): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1536797831/syzkaller.GhrrxV/1989/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0
03:19:50 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000b00), 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000180)=""/66, 0x41100, 0x0, '\x00', r3, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x6, 0x7}, 0x10, 0x0, r4, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10)

03:19:50 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)}, 0x20)

03:19:50 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2}, 0x8)

03:19:50 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:50 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

[ 2305.541393][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:19:50 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2}, 0x8)

03:19:50 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000000c0)}, 0x20)

[ 2305.686741][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2305.715976][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0xc)

[ 2305.794555][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2305.983959][T11744] bond0 speed is unknown, defaulting to 1000
03:19:51 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0xfffc, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x4f, 0x0, 0x0, 0x0, 0xffffffff}]}, 0x80}}, 0x8010)

03:19:51 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2}, 0x8)

03:19:51 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:51 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c840)={0x0, 0x0, &(0x7f000000c800)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}], {0x14}}, 0x50}}, 0x0)

[ 2306.183628][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2306.299258][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:19:51 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005680)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001980)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x10, &(0x7f0000001bc0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev}}}], 0x28}}], 0x2, 0x0)

03:19:51 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:51 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2}, 0x8)

03:19:51 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040))

03:19:51 executing program 3:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4a8, 0x0, 0x61, 0x148, 0x310, 0x148, 0x410, 0x223, 0x230, 0x410, 0x205, 0x3, 0x0, {[{{@ip={@local={0xac, 0x9}, @rand_addr, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0xf202, 0x2c8, 0x310, 0x24, {0x34000000f0030000, 0x2b0}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wlan1\x00', 'syz_tun\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4277fb832e532a165de314c910a6dfd13ea22b37fc2f5700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

03:19:51 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="4105092c1409480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b028777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

03:19:51 executing program 5:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/122, 0x1626000, 0x800}, 0x20)

[ 2306.502534][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:19:51 executing program 4:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:51 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r1, 0x0, 0x8000000000004)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
sendfile(0xffffffffffffffff, r1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)
writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)="f1e7cf5484dafbb0dae95d0d11050392b046a2386791b75111e04ab81e9e", 0x1e}, {&(0x7f00000005c0)="06c5155862887e18654dff0bca0a9accf75b0206101149168e023686c7859a9a5380c4083958091e4476056ab8b3e12dd0dd57368f03e7201d3cca918ef9fb5436fa2aa8759e4158741e533b51a9605af26e4285e76718239a61b07dba21ae92957460fdc0a7ace56a57f0502eab07ab1ba268d3ee2b8e9a4da7776ab249448c3b99095106c3ec0cd2440d9d2145692409c4c787f0353036fa73f40a28af58fc2842efadb63091f2ecfc5e71c1", 0xad}], 0x3)

[ 2306.584426][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:19:51 executing program 3:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4a8, 0x0, 0x61, 0x148, 0x310, 0x148, 0x410, 0x223, 0x230, 0x410, 0x205, 0x3, 0x0, {[{{@ip={@local={0xac, 0x9}, @rand_addr, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0xf202, 0x2c8, 0x310, 0x24, {0x34000000f0030000, 0x2b0}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wlan1\x00', 'syz_tun\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4277fb832e532a165de314c910a6dfd13ea22b37fc2f5700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

03:19:51 executing program 2:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000))

03:19:51 executing program 5:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:19:51 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e3ff000000000000ea1c"], 0x3c}}, 0x0)

03:19:52 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x11, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0)

03:19:52 executing program 3:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4a8, 0x0, 0x61, 0x148, 0x310, 0x148, 0x410, 0x223, 0x230, 0x410, 0x205, 0x3, 0x0, {[{{@ip={@local={0xac, 0x9}, @rand_addr, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0xf202, 0x2c8, 0x310, 0x24, {0x34000000f0030000, 0x2b0}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wlan1\x00', 'syz_tun\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4277fb832e532a165de314c910a6dfd13ea22b37fc2f5700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

03:19:52 executing program 3:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4a8, 0x0, 0x61, 0x148, 0x310, 0x148, 0x410, 0x223, 0x230, 0x410, 0x205, 0x3, 0x0, {[{{@ip={@local={0xac, 0x9}, @rand_addr, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0xf202, 0x2c8, 0x310, 0x24, {0x34000000f0030000, 0x2b0}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x6}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wlan1\x00', 'syz_tun\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4277fb832e532a165de314c910a6dfd13ea22b37fc2f5700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)

03:19:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_FRAME={0xe8a, 0x33, @data_frame={@qos_no_ht={{@type01={{}, {}, @device_b}}, {@type11={{}, {}, @device_b, @device_b, @from_mac=@broadcast, {}, @device_b}}}, @a_msdu=[{@broadcast, @device_b, 0x4f, "c3e901dd9d7501abd0a0fb42ad5aa737fa4a52a7351576002b8d936ac5b4d155d179b32880dfc0c2ad854e0c1257729d629e2da92cc14fdb13370c6edebe0ca7367216d399e9fc7efeae32db9c9203"}, {@device_a, @device_b, 0x6f, "5291d8b3b747f7bb633dc67fb6c0ac3cf7b81595e2f9674f51b9b44024c0181824dd0e42a5b4fd85f75f4bf4ef01ea282902aa44c3f6158ddc1c5131c20b79dabf5443fe8447c1a0a2254fc9000aa4f406f6f2023cf19da79d74f1c3e75ca2413cedb39a9a70b2e5a343bb598108e9"}, {@device_b, @device_a, 0xe7, "78ca9a58864c3e962ae7bcd59e3adaa95ea37db2e0dfde6f8c9f070b7fe30755902e086c97a2d257e42a9a57cd6ef3f2ca24c4e3009c9806697cfe58f8afb4201b510df78a5d56f47ee1d2b37793c05d92079a0c4dc9dc9fd11ffde51394753fec50d4763df378e04d084e2e3bd03d5ec067457d8af8a21a87f6b33dcb5a79710c2a1c6baacd0e7daf59047080b60b6e014f0d4c9bd0a82ccebc2c6b81f6e79d115f546c52f1c12e4fe8d4277a3770ad024d84d0e39b05f6ff892cd43865ce2b34a5cb2011a4b5979b938e91d7484f3f43085ada8f468e790592b4bc5e214e6ae1d76a73f99003"}, {@device_a, @broadcast, 0x2f, "3c5ea1184629d59f4513981a6b32c7bcd9c88c6cfa7240801e709b5c359b0e783668ae50465d3b5bb581fc3a03cf72"}, {@device_b, @device_b, 0x77, "52e0bd19a43412f14df2bc7ba75bb2521c400d1375e6a83465379eb04bd173957d9f3bfae4f05afbe45608787f7621d121db22db0b77bd1b40c759c839bac913a13143fdc5f2cb52d8407ed129fe452362a9981dfbaf8c95731e0a21476c49475de6e5ae7ea300d35637350d816d18a5d9f5837e75451e"}, {@device_a, @device_b, 0xb9b, "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"}]}}]}, 0xec4}}, 0x0)

[ 2307.091810][T11806] xfrm0 speed is unknown, defaulting to 1000
03:19:52 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}})

03:19:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x0)

03:19:52 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x18, 0x0, &(0x7f0000000100))

[ 2307.568977][T11806] bond0 speed is unknown, defaulting to 1000
[ 2307.576153][T11811] xfrm0 speed is unknown, defaulting to 1000
[ 2307.748903][T11811] bond0 speed is unknown, defaulting to 1000
03:19:55 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0xffffffff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}}, 0x0)

03:19:55 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

03:19:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0xa4e26c199ea3b221, 0x0, 0x0, {{0x7e}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

[ 2310.672172][T11838] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 2310.711841][T11838] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
03:19:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x200100, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0)

03:19:55 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1feffc, 0x81, 0x7f, 0x1}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000001f000000000000f10095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f00000003c0))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)

03:19:55 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)

03:19:55 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:19:55 executing program 5:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:19:56 executing program 2:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:19:56 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)

[ 2311.091755][T11852] xfrm0 speed is unknown, defaulting to 1000
[ 2311.098025][T11860] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
03:19:56 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)

03:19:56 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)

03:19:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0)

03:19:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)

03:19:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0)

03:19:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x21, 0x7e2881d4b0058761, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

03:19:57 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0)

[ 2311.851782][   T27] audit: type=1804 audit(1686885596.967:1237): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2797059662/syzkaller.5KNiKw/1391/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0
03:19:57 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="53311455776e2f667a698cb36e07", 0xe}], 0x2)

[ 2312.089932][T11860] bridge0: port 2(erspan0) entered disabled state
[ 2312.948847][T11886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2312.967045][T11858] xfrm0 speed is unknown, defaulting to 1000
[ 2312.974376][T11852] bond0 speed is unknown, defaulting to 1000
[ 2313.187133][T11867] xfrm0 speed is unknown, defaulting to 1000
[ 2313.196154][T11858] bond0 speed is unknown, defaulting to 1000
[ 2313.391961][T11867] bond0 speed is unknown, defaulting to 1000
03:20:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x21, 0x7e2881d4b0058761, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

03:20:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r0, 0x11a, 0x4, 0x0, 0x0)

03:20:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="53311455776e2f667a698cb36e07", 0xe}], 0x2)

03:20:01 executing program 5:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:20:01 executing program 2:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9662ce3ae356538dda120000010000801b10fb39a8cb72b58d82de5ac54e32ad5504e19a5183d769676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0000000d604000000000000008aff66d6b3181ffced5d8a774c11c27839dc007c4d296e7359ea79a75d810000aebf3183fe803abbf5024b52dc265b36fc9dae00a0d0956d252bd8b6464ef3c6a7352ce743905fd6def839a1febad3ca6e3abdb2dfc63296e340bb8e2a093adc57196b40def3858ef569347fa4108328392d322ab4df10a2f69a6bdf758dc44c070e42410f57466f59aea2544047d6d800442e0000000000ee16c729300d23008000000000000028a0b36754ed5290a8cd8470e776d6b80630d6cbde49b29a6cb5f4fc0001000000004b588c745c380e5fe57238aeada5acf3209a08439fc6310386597760525bfe5fe1f697bc114cd1778e97a3f0295f946974cdb458be3234cf924dc36b22eb297125fd60c5558fbf17a76f3547497aba5086e30ec8a57c814382ffab045ca077a9d15251875432e74b54efaf4985672a1c7b3c200021de95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d62b1e6ffcaab0200000006335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc70bcb975f97ed7b0300000000000000e54eda17999291744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c73dc63f04af77c9721459abfcfa1e9773b2b7130eae67e0ebe380d0f648603e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e399b6bf7e7b0374814d63000000000000004049cb79aa3f0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ab7983bc90770bbd26a82b9d99d17c02a97b5230487782ca00edf8e47a71bcc738ef636d32b0b93355679afe772cd45af0a401f6900100000000000006cb78aeffe275308a90acb1a210b22453b05ed4c638a043c07aff7d352dcf72be83e7c4c27104ac2126bb2bfc216856e46c60cba054e5dc5c09515d43fc76d1d831deea41f01970b134d21ef4f42fc63d39b94a7f838e04ba77f1367c1a28c73a699ee4769950bc8b3bbd078610200000000000000e3c13f7d3a43315827e2a4bc4744ef9d64fdfad91c7760ba4aa9f3850dba7ca42e0072cc0b346dcebe064422f08073812ec5e7cdcc264998b4a6994efd9f6b7a9b5d15247bf4fabcff7c890c238f873e6f52adfcc7e0b0c24a8197d36e58b9f77cce15068c6eda3c05d560630b9f8844be77e8a764fe4e3929ea4c0dc89a6352fe5ad1a104003d89bd9bfc59e68a6bb5e0912f19673d1bc421072f3198b31d381a1df1b97e393409d42718c20d4150017033c4f7045c793dfaed00ed705d7ef8aa7dffdeec680c3bbad5595da7049034e7f51cc4078c580f8c97396b26b2d017c274560cc7df0de244d72009d23d838320ac687bb14c34d175980aafbb2efbab230e00002c0736cd7a531b8b0d64679afb87ff2cb1541aa72e1bad332583589f2b306ae0e593f8c37ac711bfd39f8a6a6f2a71281ad082a2fe767a9052fb5cbfbb20a90583cbf8218883acb06d8d9831c98922e15d5f01c3cfc29186553d8b8a546bbfb5eff92d3c5c5c0d222704ace9b6a076692313d50750f8380f72d51e35bb75586f6ef8e5bd3b413cdefde148ff9dd0b6ba58029199e042fffb7e18933e5389c5f885ac1f3dc02d3dde39d3c270e51983f5be990b412f7cba4c9c288e52fc26d6210bdcc64c2cb39b9f02bc2a841d921981a2c3538c9da7c9b1bcc9044059ea50d452e2e3d55467ac90fd5f76feb0d0c5b971a6692f7e817d0e0c9876b3d9b0b951cdcc8e538b4928c89d8e4b2406f2a5fb7e7417f20f7f5e48db7994fc888e44f899ef75401dceca004e54625091daf26aa20e96b5ec98fd9d4728da77615411782c76daff4406c54da65107526f8d8f66f3fc3ebddb30b2fee8d1dd2b2aaa7d66e7b526da78daab732b4e00575b245f56474c111ade6fd75d9aadf677a13bef4616af417d04f150069461e2d457239ca8db5638e290af426a057ac7b9f6c97c8498f1c29fd9ae8a11237bc0ad4aa2cd1b3191d703b3f2"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:20:01 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:01 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

[ 2316.513338][T11896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:20:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x21, 0x7e2881d4b0058761, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

[ 2316.629320][T11899] xfrm0 speed is unknown, defaulting to 1000
[ 2316.708966][T11911] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
03:20:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="53311455776e2f667a698cb36e07", 0xe}], 0x2)

[ 2316.782466][T11912] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
03:20:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x21, 0x7e2881d4b0058761, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

03:20:02 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:04 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="53311455776e2f667a698cb36e07", 0xe}], 0x2)

[ 2318.861124][T11921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2318.893676][T11929] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[ 2318.977423][T11899] bond0 speed is unknown, defaulting to 1000
[ 2318.983833][T11901] xfrm0 speed is unknown, defaulting to 1000
[ 2319.042454][T11936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2319.178123][T11901] bond0 speed is unknown, defaulting to 1000
[ 2319.178172][T11914] xfrm0 speed is unknown, defaulting to 1000
03:20:04 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0)

[ 2319.430795][T11914] bond0 speed is unknown, defaulting to 1000
[ 2319.431491][T11916] xfrm0 speed is unknown, defaulting to 1000
[ 2319.727864][T11930] xfrm0 speed is unknown, defaulting to 1000
03:20:04 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0)

03:20:04 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0)

[ 2319.906657][T11916] bond0 speed is unknown, defaulting to 1000
[ 2319.941483][T11930] bond0 speed is unknown, defaulting to 1000
03:20:08 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@empty}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0)

03:20:08 executing program 5:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

[ 2323.696445][T11954] xfrm0 speed is unknown, defaulting to 1000
03:20:09 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:09 executing program 2:
unshare(0x40000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10)
unshare(0x4000000)
r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000100)=""/126, 0x2e, 0x7e}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf0ad27c29697"], 0x20000600}}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000000), 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25110000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000380001800800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000064000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="1400022067723df8df8d4b1b56ed", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020069703665727370616e30000000000000180001801400020076657468305f746f5f626f6e64000000"], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x1a, @inherit={0x48, &(0x7f0000001880)=ANY=[@ANYBLOB="010000000000000000000000000000000500000000000000ffffffffff"]}, @subvolid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000580)={"4a921c1532c454bfef2f1c08f6106e82", r8, 0x0, {}, {0x80000001, 0xc0}, 0x0, [0x3b, 0x10001, 0x7, 0x4, 0x6, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x8000000000000000, 0x2, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002400)={{r5}, r8, 0x8, @inherit={0x68, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x0, {0x37, 0x2, 0x100000000, 0x8, 0x3bd}, [0x40, 0x1f, 0x8, 0x8000000000000001]}}, @subvolid=0x4})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0}, 0x8)

03:20:09 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:09 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x6, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, 0x0, &(0x7f0000000500)=@udp6}, 0x20)

03:20:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0)

[ 2324.265860][T11965] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[ 2324.358395][T11971] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
[ 2324.536055][T11960] xfrm0 speed is unknown, defaulting to 1000
[ 2324.536054][T11954] bond0 speed is unknown, defaulting to 1000
03:20:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:10 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffff57, &(0x7f0000000000)='/proc/thread-self/attr/\xd0\x1bW\x1b\xf3\xe9>}'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

03:20:10 executing program 1:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000b16c50d0000fbbc6e56e0006000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001007072696f000000001800020004"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0)

[ 2325.448683][T11983] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[ 2325.568226][T11960] bond0 speed is unknown, defaulting to 1000
[ 2325.575236][T11970] xfrm0 speed is unknown, defaulting to 1000
[ 2326.043515][T11971] xfrm0 speed is unknown, defaulting to 1000
[ 2326.324993][T11982] xfrm0 speed is unknown, defaulting to 1000
[ 2326.555543][T11986] xfrm0 speed is unknown, defaulting to 1000
[ 2326.721285][T11982] bond0 speed is unknown, defaulting to 1000
[ 2326.761505][T11970] bond0 speed is unknown, defaulting to 1000
[ 2326.803254][T11986] bond0 speed is unknown, defaulting to 1000
[ 2326.863771][T11971] bond0 speed is unknown, defaulting to 1000
03:20:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'})
mmap(&(0x7f000046d000/0x2000)=nil, 0x2000, 0x1, 0x50, r3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x100000001)
socket$inet(0x2, 0x800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x0, 0x803, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

03:20:15 executing program 2:
pipe(&(0x7f00000018c0))

03:20:16 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000eeffffffffffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="01002000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}]}}]}, 0x48}}, 0x0)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3}, 0x14)
recvmsg$can_j1939(r2, &(0x7f0000000440)={&(0x7f0000000280)=@ax25={{0x3, @default}, [@null, @remote, @remote, @bcast, @default, @netrom, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000500)=""/224, 0xe0}], 0x2, &(0x7f0000000400)=""/43, 0x2b}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001200)={0x2c, r5, 0x1, 0x0, 0x0, {0x21}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x44}}, 0x0)

[ 2331.020834][   T27] audit: type=1804 audit(1686885616.137:1238): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/260/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
03:20:16 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@rights={{0x10, 0x1, 0x2}}], 0x10}}], 0x2, 0x0)

03:20:17 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:17 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000020000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r2, 0xf21, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

03:20:17 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

03:20:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'})
mmap(&(0x7f000046d000/0x2000)=nil, 0x2000, 0x1, 0x50, r3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x100000001)
socket$inet(0x2, 0x800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x0, 0x803, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

03:20:17 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_dellink={0x34, 0x11, 0x800, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x10088, 0x13602}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c0}, 0x1)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
unshare(0x20020000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r3, 0x70b, 0x0, 0x0, {0x13}}, 0x14}}, 0x0)
r4 = socket(0x18, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x840)
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x244, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf6ee}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x884}, {0x6, 0x11, 0xec7}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffff8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x78f}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x10003}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0xfa96}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x274}, {0x6}, {0x8, 0x15, 0x63df}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xa}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xe055}, {0x8, 0x15, 0x1ff}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
unshare(0x42050d80)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x2400c0c0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)={0xec, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x29bd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x4}}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}]}, 0x3c}}, 0x0)

[ 2332.490961][T12013] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[ 2332.638447][T12017] xfrm0 speed is unknown, defaulting to 1000
03:20:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private0, @empty, 0x20, 0xc}})

03:20:17 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="1839e2f6a4b348e9595a74438fab72f725870fb60fb3fd2db9f36ad7ff864e72eec268b9ef71abafca01b5fde905cc4b92202b03d5bc50ddd1fb3f713ad81e2995cb45ca5deba111d915089a34e684919ab38d91653e9a6356f887f7a0b2c1e90eb491d263e0ac0268e27371adf5341545014de2b21cabbade6c7d3ce5104f6c3cbc1cdf4df80b27b5d3a34f0fb5db14f9e1183821efb236fdd032502d09184b103d611131319cfcc10523a29d2d388e", @ANYRES32=<r3=>0x0], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000)
sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000100000000000000f9ff5d000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176dc2eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180))
unshare(0x6c060000)
r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00)
sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x250)
socket$inet_smc(0x2b, 0x1, 0x0)

[ 2332.753894][T12025] netlink: 'syz-executor.4': attribute type 27 has an invalid length.
[ 2332.824888][   T27] audit: type=1804 audit(1686885617.937:1239): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/261/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
03:20:18 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0)

[ 2332.918716][T12032] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
03:20:18 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

[ 2333.172629][   T27] audit: type=1804 audit(1686885618.287:1240): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/261/memory.events" dev="sda1" ino=1988 res=1 errno=0
[ 2333.222014][T12038] __nla_validate_parse: 5 callbacks suppressed
[ 2333.222040][T12038] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2333.339026][T12038] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2333.390427][T12038] CPU: 0 PID: 12038 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2333.400937][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2333.411059][T12038] Call Trace:
[ 2333.414381][T12038]  <TASK>
[ 2333.417363][T12038]  dump_stack_lvl+0x136/0x150
[ 2333.422122][T12038]  sysfs_warn_dup+0x80/0xa0
[ 2333.426724][T12038]  sysfs_do_create_link_sd+0x11e/0x140
[ 2333.432257][T12038]  sysfs_create_link+0x63/0xc0
[ 2333.437093][T12038]  device_add+0x585/0x1a40
[ 2333.441607][T12038]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2333.448536][T12038]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2333.454520][T12038]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2333.460606][T12038]  wiphy_register+0x1f92/0x2b00
[ 2333.465549][T12038]  ? wiphy_unregister+0xb40/0xb40
[ 2333.470654][T12038]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2333.475851][T12038]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2333.481903][T12038]  ieee80211_register_hw+0x23c1/0x40e0
[ 2333.487458][T12038]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2333.493252][T12038]  ? mark_held_locks+0x9f/0xe0
[ 2333.498102][T12038]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2333.503995][T12038]  ? __hrtimer_init+0x145/0x280
[ 2333.508914][T12038]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2333.514738][T12038]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2333.521505][T12038]  hwsim_new_radio_nl+0xacf/0x1210
[ 2333.526702][T12038]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2333.532704][T12038]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2333.540135][T12038]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2333.547592][T12038]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2333.553853][T12038]  ? genl_start+0x660/0x660
[ 2333.558438][T12038]  ? ns_capable+0xe0/0x110
[ 2333.562934][T12038]  genl_rcv_msg+0x4ff/0x7e0
[ 2333.567524][T12038]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2333.573929][T12038]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2333.579989][T12038]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2333.585963][T12038]  ? ___slab_alloc+0x9df/0x1400
[ 2333.590926][T12038]  netlink_rcv_skb+0x165/0x440
[ 2333.595761][T12038]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2333.602187][T12038]  ? netlink_ack+0x1360/0x1360
[ 2333.607038][T12038]  ? down_write_killable+0x250/0x250
[ 2333.612394][T12038]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2333.617749][T12038]  genl_rcv+0x28/0x40
[ 2333.621794][T12038]  netlink_unicast+0x547/0x7f0
[ 2333.626630][T12038]  ? netlink_attachskb+0x890/0x890
[ 2333.637614][T12038]  ? __virt_addr_valid+0x61/0x2e0
[ 2333.642731][T12038]  ? __phys_addr_symbol+0x30/0x70
[ 2333.647830][T12038]  ? __check_object_size+0x323/0x730
[ 2333.653193][T12038]  netlink_sendmsg+0x925/0xe30
[ 2333.658042][T12038]  ? netlink_unicast+0x7f0/0x7f0
[ 2333.663054][T12038]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2333.668410][T12038]  ? netlink_unicast+0x7f0/0x7f0
[ 2333.673416][T12038]  sock_sendmsg+0xde/0x190
[ 2333.677901][T12038]  ____sys_sendmsg+0x733/0x920
[ 2333.682734][T12038]  ? copy_msghdr_from_user+0xfc/0x150
[ 2333.688174][T12038]  ? kernel_sendmsg+0x50/0x50
[ 2333.692929][T12038]  ___sys_sendmsg+0x110/0x1b0
[ 2333.697677][T12038]  ? do_recvmmsg+0x6f0/0x6f0
[ 2333.702345][T12038]  ? __fget_files+0x248/0x480
[ 2333.707097][T12038]  ? lock_downgrade+0x690/0x690
[ 2333.712030][T12038]  ? futex_wake_mark+0x1a0/0x1a0
[ 2333.717046][T12038]  ? __fget_files+0x26a/0x480
[ 2333.721815][T12038]  ? __fget_light+0xe5/0x270
[ 2333.726600][T12038]  __sys_sendmsg+0xf7/0x1c0
[ 2333.731182][T12038]  ? __sys_sendmsg_sock+0x40/0x40
[ 2333.736287][T12038]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2333.742286][T12038]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2333.748248][T12038]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2333.753520][T12038]  do_syscall_64+0x39/0xb0
[ 2333.758082][T12038]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2333.764062][T12038] RIP: 0033:0x7f7896a8c389
[ 2333.768522][T12038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2333.788203][T12038] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2333.796691][T12038] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2333.804721][T12038] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2333.812751][T12038] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2333.820777][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2333.828800][T12038] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2333.836846][T12038]  </TASK>
[ 2333.974939][T12013] xfrm0 speed is unknown, defaulting to 1000
[ 2333.997436][T12017] bond0 speed is unknown, defaulting to 1000
03:20:19 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

[ 2334.152130][T12045] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2334.265998][T12045] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2334.278508][T12045] CPU: 1 PID: 12045 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2334.289001][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2334.299106][T12045] Call Trace:
[ 2334.302420][T12045]  <TASK>
[ 2334.305393][T12045]  dump_stack_lvl+0x136/0x150
[ 2334.310135][T12045]  sysfs_warn_dup+0x80/0xa0
[ 2334.314721][T12045]  sysfs_do_create_link_sd+0x11e/0x140
[ 2334.320245][T12045]  sysfs_create_link+0x63/0xc0
[ 2334.325064][T12045]  device_add+0x585/0x1a40
[ 2334.329548][T12045]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2334.336464][T12045]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2334.342424][T12045]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2334.348484][T12045]  wiphy_register+0x1f92/0x2b00
[ 2334.353422][T12045]  ? wiphy_unregister+0xb40/0xb40
[ 2334.358501][T12045]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2334.363694][T12045]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2334.369743][T12045]  ieee80211_register_hw+0x23c1/0x40e0
[ 2334.375278][T12045]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2334.380889][T12045]  ? mark_held_locks+0x9f/0xe0
[ 2334.385722][T12045]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2334.391605][T12045]  ? __hrtimer_init+0x145/0x280
[ 2334.396519][T12045]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2334.402330][T12045]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2334.409089][T12045]  hwsim_new_radio_nl+0xacf/0x1210
[ 2334.414280][T12045]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2334.420255][T12045]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2334.427692][T12045]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2334.435048][T12045]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2334.441264][T12045]  ? genl_start+0x660/0x660
[ 2334.445851][T12045]  ? ns_capable+0xe0/0x110
[ 2334.450342][T12045]  genl_rcv_msg+0x4ff/0x7e0
[ 2334.454911][T12045]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2334.461296][T12045]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2334.467503][T12045]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2334.473480][T12045]  netlink_rcv_skb+0x165/0x440
[ 2334.478307][T12045]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2334.484700][T12045]  ? netlink_ack+0x1360/0x1360
[ 2334.489549][T12045]  ? down_write_killable+0x250/0x250
[ 2334.494902][T12045]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2334.500254][T12045]  genl_rcv+0x28/0x40
[ 2334.504303][T12045]  netlink_unicast+0x547/0x7f0
[ 2334.509132][T12045]  ? netlink_attachskb+0x890/0x890
[ 2334.514300][T12045]  ? __virt_addr_valid+0x61/0x2e0
[ 2334.519400][T12045]  ? __phys_addr_symbol+0x30/0x70
[ 2334.524491][T12045]  ? __check_object_size+0x323/0x730
[ 2334.529845][T12045]  netlink_sendmsg+0x925/0xe30
[ 2334.534676][T12045]  ? netlink_unicast+0x7f0/0x7f0
[ 2334.539690][T12045]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2334.545031][T12045]  ? netlink_unicast+0x7f0/0x7f0
[ 2334.550034][T12045]  sock_sendmsg+0xde/0x190
[ 2334.554505][T12045]  ____sys_sendmsg+0x733/0x920
[ 2334.559329][T12045]  ? copy_msghdr_from_user+0xfc/0x150
[ 2334.564768][T12045]  ? kernel_sendmsg+0x50/0x50
[ 2334.569524][T12045]  ___sys_sendmsg+0x110/0x1b0
[ 2334.574267][T12045]  ? do_recvmmsg+0x6f0/0x6f0
[ 2334.578942][T12045]  ? __fget_files+0x248/0x480
[ 2334.583689][T12045]  ? lock_downgrade+0x690/0x690
[ 2334.588609][T12045]  ? futex_wake_mark+0x1a0/0x1a0
[ 2334.593611][T12045]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2334.598885][T12045]  ? __fget_files+0x26a/0x480
[ 2334.603674][T12045]  ? __fget_light+0xe5/0x270
[ 2334.608346][T12045]  __sys_sendmsg+0xf7/0x1c0
[ 2334.612908][T12045]  ? __sys_sendmsg_sock+0x40/0x40
[ 2334.617998][T12045]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2334.623981][T12045]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2334.629937][T12045]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2334.635202][T12045]  do_syscall_64+0x39/0xb0
[ 2334.639675][T12045]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2334.645637][T12045] RIP: 0033:0x7f7896a8c389
[ 2334.650096][T12045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2334.669761][T12045] RSP: 002b:00007f789784d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2334.678229][T12045] RAX: ffffffffffffffda RBX: 00007f7896bac050 RCX: 00007f7896a8c389
[ 2334.686243][T12045] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2334.694256][T12045] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2334.702276][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2334.710296][T12045] R13: 00007ffe63cf77df R14: 00007f789784d300 R15: 0000000000022000
[ 2334.718339][T12045]  </TASK>
03:20:19 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

[ 2334.823891][T12013] bond0 speed is unknown, defaulting to 1000
[ 2334.823905][T12025] xfrm0 speed is unknown, defaulting to 1000
03:20:20 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

[ 2335.329365][T12056] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2335.341396][T12033] xfrm0 speed is unknown, defaulting to 1000
[ 2335.351620][T12025] bond0 speed is unknown, defaulting to 1000
[ 2335.388798][T12056] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2335.412009][T12056] CPU: 1 PID: 12056 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2335.422525][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2335.432631][T12056] Call Trace:
[ 2335.435954][T12056]  <TASK>
[ 2335.438939][T12056]  dump_stack_lvl+0x136/0x150
[ 2335.443687][T12056]  sysfs_warn_dup+0x80/0xa0
[ 2335.448358][T12056]  sysfs_do_create_link_sd+0x11e/0x140
[ 2335.453877][T12056]  sysfs_create_link+0x63/0xc0
[ 2335.458699][T12056]  device_add+0x585/0x1a40
[ 2335.463193][T12056]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2335.470117][T12056]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2335.476080][T12056]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2335.482160][T12056]  wiphy_register+0x1f92/0x2b00
[ 2335.487096][T12056]  ? wiphy_unregister+0xb40/0xb40
[ 2335.492195][T12056]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2335.497380][T12056]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2335.503441][T12056]  ieee80211_register_hw+0x23c1/0x40e0
[ 2335.508984][T12056]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2335.514588][T12056]  ? mark_held_locks+0x9f/0xe0
[ 2335.519404][T12056]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2335.525266][T12056]  ? __hrtimer_init+0x145/0x280
[ 2335.530158][T12056]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2335.535938][T12056]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2335.542668][T12056]  hwsim_new_radio_nl+0xacf/0x1210
[ 2335.547821][T12056]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2335.553764][T12056]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2335.561174][T12056]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2335.568502][T12056]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2335.574695][T12056]  ? genl_start+0x660/0x660
[ 2335.579250][T12056]  ? ns_capable+0xe0/0x110
[ 2335.583714][T12056]  genl_rcv_msg+0x4ff/0x7e0
[ 2335.588260][T12056]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2335.594629][T12056]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2335.600649][T12056]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2335.606593][T12056]  netlink_rcv_skb+0x165/0x440
[ 2335.611392][T12056]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2335.617768][T12056]  ? netlink_ack+0x1360/0x1360
[ 2335.622598][T12056]  ? down_write_killable+0x250/0x250
[ 2335.627930][T12056]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2335.633255][T12056]  genl_rcv+0x28/0x40
[ 2335.637271][T12056]  netlink_unicast+0x547/0x7f0
[ 2335.642074][T12056]  ? netlink_attachskb+0x890/0x890
[ 2335.647218][T12056]  ? __virt_addr_valid+0x61/0x2e0
[ 2335.652286][T12056]  ? __phys_addr_symbol+0x30/0x70
[ 2335.657351][T12056]  ? __check_object_size+0x323/0x730
[ 2335.662675][T12056]  netlink_sendmsg+0x925/0xe30
[ 2335.667477][T12056]  ? netlink_unicast+0x7f0/0x7f0
[ 2335.672453][T12056]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2335.677780][T12056]  ? netlink_unicast+0x7f0/0x7f0
[ 2335.682748][T12056]  sock_sendmsg+0xde/0x190
[ 2335.687205][T12056]  ____sys_sendmsg+0x733/0x920
[ 2335.692000][T12056]  ? copy_msghdr_from_user+0xfc/0x150
[ 2335.697406][T12056]  ? kernel_sendmsg+0x50/0x50
[ 2335.702125][T12056]  ? futex_unqueue+0xb7/0x120
[ 2335.706834][T12056]  ? futex_wait+0x503/0x680
[ 2335.711467][T12056]  ___sys_sendmsg+0x110/0x1b0
[ 2335.716192][T12056]  ? do_recvmmsg+0x6f0/0x6f0
[ 2335.720838][T12056]  ? __fget_files+0x248/0x480
[ 2335.725561][T12056]  ? lock_downgrade+0x690/0x690
[ 2335.730472][T12056]  ? __fget_files+0x26a/0x480
[ 2335.735207][T12056]  ? __fget_light+0xe5/0x270
[ 2335.739858][T12056]  __sys_sendmsg+0xf7/0x1c0
[ 2335.744405][T12056]  ? __sys_sendmsg_sock+0x40/0x40
[ 2335.749467][T12056]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2335.755426][T12056]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2335.761362][T12056]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2335.766598][T12056]  do_syscall_64+0x39/0xb0
[ 2335.771044][T12056]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2335.776986][T12056] RIP: 0033:0x7f7896a8c389
[ 2335.781425][T12056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2335.801060][T12056] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2335.809504][T12056] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2335.817499][T12056] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2335.825489][T12056] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2335.833480][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2335.841471][T12056] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2335.849483][T12056]  </TASK>
[ 2335.892588][T12033] bond0 speed is unknown, defaulting to 1000
03:20:24 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'})
mmap(&(0x7f000046d000/0x2000)=nil, 0x2000, 0x1, 0x50, r3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x100000001)
socket$inet(0x2, 0x800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x0, 0x803, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

03:20:24 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
accept$alg(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000340)={0x0, r4, 0x2, 0x33070381, 0x7, 0x7})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f0000000680)="57222f4e008c101fb6e58e047fe2085c4d7244549ea0fbc957f237ae195d05f6ba2d696f1776ad2ab806a7b0ab21d5bc608a0cb681d346bcce0817f57d80fcbc56ac618132f3cb4bd0811ef37a032c7188de571dab9d8155684653b39dc519fa1d67e8a19267c3d5ff9844b6d016ae0e7cf6d0200b661996625687fb3facc2584e025501ec4fdbeaf2111f40c25d53954a0827f6f7b2ebb3eed1f230eeaf77efaf4e8d0062831361bea667126e135837bd0729857d33ef161a4b85be88f2b0cfd36addd1b3f93c0f9f9f128ab30aed06ad0391db", 0xd4)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f00000008c0)={0x1, 'netpci0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70000000000"], 0x2c}}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb4b130ee9e9c01c3}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000406010800000000000000000100000205000100070000000500010007000000050001000700000005000100070000000900020073797a320000000005000100070000005deb60b7273d21f5528a4ed2632981e04aef9b8fa200523275012af1dddf48fe"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40)

03:20:24 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48)

03:20:24 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @local}, 0x1c)

[ 2339.806859][T12064] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:24 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1fffefff}, 0x0)

[ 2339.862470][T12064] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2339.880686][T12064] CPU: 1 PID: 12064 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2339.891206][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2339.901335][T12064] Call Trace:
[ 2339.904636][T12064]  <TASK>
[ 2339.907597][T12064]  dump_stack_lvl+0x136/0x150
[ 2339.912317][T12064]  sysfs_warn_dup+0x80/0xa0
[ 2339.916873][T12064]  sysfs_do_create_link_sd+0x11e/0x140
[ 2339.922370][T12064]  sysfs_create_link+0x63/0xc0
[ 2339.927166][T12064]  device_add+0x585/0x1a40
[ 2339.931630][T12064]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2339.938537][T12064]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2339.944490][T12064]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2339.950537][T12064]  wiphy_register+0x1f92/0x2b00
[ 2339.955446][T12064]  ? wiphy_unregister+0xb40/0xb40
[ 2339.960507][T12064]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2339.965668][T12064]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2339.971701][T12064]  ieee80211_register_hw+0x23c1/0x40e0
[ 2339.977291][T12064]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2339.982881][T12064]  ? mark_held_locks+0x9f/0xe0
[ 2339.987712][T12064]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2339.993568][T12064]  ? __hrtimer_init+0x145/0x280
[ 2339.998453][T12064]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2340.004234][T12064]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2340.010965][T12064]  hwsim_new_radio_nl+0xacf/0x1210
[ 2340.016118][T12064]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2340.022075][T12064]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2340.029482][T12064]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2340.036807][T12064]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2340.042999][T12064]  ? genl_start+0x660/0x660
[ 2340.047553][T12064]  ? ns_capable+0xe0/0x110
[ 2340.052023][T12064]  genl_rcv_msg+0x4ff/0x7e0
[ 2340.056564][T12064]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2340.062942][T12064]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2340.068959][T12064]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2340.074895][T12064]  ? ___slab_alloc+0x9df/0x1400
[ 2340.079800][T12064]  netlink_rcv_skb+0x165/0x440
[ 2340.084646][T12064]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2340.091017][T12064]  ? netlink_ack+0x1360/0x1360
[ 2340.095830][T12064]  ? down_write_killable+0x250/0x250
[ 2340.101154][T12064]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2340.106582][T12064]  genl_rcv+0x28/0x40
[ 2340.110594][T12064]  netlink_unicast+0x547/0x7f0
[ 2340.115401][T12064]  ? netlink_attachskb+0x890/0x890
[ 2340.120544][T12064]  ? __virt_addr_valid+0x61/0x2e0
[ 2340.125613][T12064]  ? __phys_addr_symbol+0x30/0x70
[ 2340.130769][T12064]  ? __check_object_size+0x323/0x730
[ 2340.136096][T12064]  netlink_sendmsg+0x925/0xe30
[ 2340.140909][T12064]  ? netlink_unicast+0x7f0/0x7f0
[ 2340.145887][T12064]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2340.151205][T12064]  ? netlink_unicast+0x7f0/0x7f0
[ 2340.156197][T12064]  sock_sendmsg+0xde/0x190
[ 2340.160660][T12064]  ____sys_sendmsg+0x733/0x920
[ 2340.165562][T12064]  ? copy_msghdr_from_user+0xfc/0x150
[ 2340.170980][T12064]  ? kernel_sendmsg+0x50/0x50
[ 2340.175712][T12064]  ? futex_unqueue+0xb7/0x120
[ 2340.180426][T12064]  ? futex_wait+0x503/0x680
[ 2340.184970][T12064]  ___sys_sendmsg+0x110/0x1b0
[ 2340.189700][T12064]  ? do_recvmmsg+0x6f0/0x6f0
[ 2340.194347][T12064]  ? __fget_files+0x248/0x480
[ 2340.199085][T12064]  ? lock_downgrade+0x690/0x690
[ 2340.204005][T12064]  ? __fget_files+0x26a/0x480
[ 2340.208743][T12064]  ? __fget_light+0xe5/0x270
[ 2340.213388][T12064]  __sys_sendmsg+0xf7/0x1c0
[ 2340.217928][T12064]  ? __sys_sendmsg_sock+0x40/0x40
[ 2340.222993][T12064]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2340.228946][T12064]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2340.234877][T12064]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2340.240117][T12064]  do_syscall_64+0x39/0xb0
[ 2340.244563][T12064]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2340.250519][T12064] RIP: 0033:0x7f7896a8c389
[ 2340.254964][T12064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2340.274598][T12064] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2340.283039][T12064] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2340.291035][T12064] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2340.299026][T12064] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2340.307018][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2340.315009][T12064] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2340.323026][T12064]  </TASK>
[ 2340.336545][   T27] audit: type=1804 audit(1686885625.447:1241): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/387/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
[ 2340.425348][   T27] audit: type=1804 audit(1686885625.477:1242): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/387/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
[ 2340.500007][   T27] audit: type=1804 audit(1686885625.597:1243): pid=12066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/262/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0
[ 2340.763200][   T27] audit: type=1804 audit(1686885625.877:1244): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/262/memory.events" dev="sda1" ino=1985 res=1 errno=0
03:20:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:26 executing program 0:
socket(0x29, 0x5, 0x8)

03:20:26 executing program 4:
clock_gettime(0x111a5651de274e59, 0x0)

03:20:26 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async)
accept$alg(r2, 0x0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000340)={0x0, r4, 0x2, 0x33070381, 0x7, 0x7})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f0000000680)="57222f4e008c101fb6e58e047fe2085c4d7244549ea0fbc957f237ae195d05f6ba2d696f1776ad2ab806a7b0ab21d5bc608a0cb681d346bcce0817f57d80fcbc56ac618132f3cb4bd0811ef37a032c7188de571dab9d8155684653b39dc519fa1d67e8a19267c3d5ff9844b6d016ae0e7cf6d0200b661996625687fb3facc2584e025501ec4fdbeaf2111f40c25d53954a0827f6f7b2ebb3eed1f230eeaf77efaf4e8d0062831361bea667126e135837bd0729857d33ef161a4b85be88f2b0cfd36addd1b3f93c0f9f9f128ab30aed06ad0391db", 0xd4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0}) (rerun: 64)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f00000008c0)={0x1, 'netpci0\x00'}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70000000000"], 0x2c}}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb4b130ee9e9c01c3}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000406010800000000000000000100000205000100070000000500010007000000050001000700000005000100070000000900020073797a320000000005000100070000005deb60b7273d21f5528a4ed2632981e04aef9b8fa200523275012af1dddf48fe"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40)

03:20:26 executing program 3:
r0 = socket(0xa, 0x5, 0x0)
bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)

03:20:26 executing program 4:
r0 = socket(0x2c, 0x3, 0x0)
accept$phonet_pipe(r0, 0x0, 0x0)

03:20:26 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4, 0x0, @private1, 0x6}]}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x24, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10)
socket(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0xc89f, 0x700}, 0x1700)

[ 2341.028097][T12086] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2341.072041][   T27] audit: type=1804 audit(1686885626.187:1245): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/388/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0
[ 2341.127259][T12086] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2341.164185][T12086] CPU: 1 PID: 12086 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2341.174697][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2341.184802][T12086] Call Trace:
[ 2341.188127][T12086]  <TASK>
[ 2341.191110][T12086]  dump_stack_lvl+0x136/0x150
[ 2341.195859][T12086]  sysfs_warn_dup+0x80/0xa0
[ 2341.200455][T12086]  sysfs_do_create_link_sd+0x11e/0x140
[ 2341.205973][T12086]  sysfs_create_link+0x63/0xc0
[ 2341.210794][T12086]  device_add+0x585/0x1a40
[ 2341.215296][T12086]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2341.222246][T12086]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2341.228225][T12086]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2341.234313][T12086]  wiphy_register+0x1f92/0x2b00
[ 2341.239254][T12086]  ? wiphy_unregister+0xb40/0xb40
[ 2341.244362][T12086]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2341.249554][T12086]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2341.255620][T12086]  ieee80211_register_hw+0x23c1/0x40e0
[ 2341.261157][T12086]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2341.266749][T12086]  ? mark_held_locks+0x9f/0xe0
[ 2341.271558][T12086]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2341.277420][T12086]  ? __hrtimer_init+0x145/0x280
[ 2341.282321][T12086]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2341.288114][T12086]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2341.294843][T12086]  hwsim_new_radio_nl+0xacf/0x1210
[ 2341.299999][T12086]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2341.305940][T12086]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2341.313348][T12086]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2341.320680][T12086]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2341.326874][T12086]  ? genl_start+0x660/0x660
[ 2341.331431][T12086]  ? ns_capable+0xe0/0x110
[ 2341.335894][T12086]  genl_rcv_msg+0x4ff/0x7e0
[ 2341.340439][T12086]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2341.346805][T12086]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2341.352838][T12086]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2341.358786][T12086]  ? ___slab_alloc+0x9df/0x1400
[ 2341.363691][T12086]  netlink_rcv_skb+0x165/0x440
[ 2341.368488][T12086]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2341.374855][T12086]  ? netlink_ack+0x1360/0x1360
[ 2341.379684][T12086]  ? down_write_killable+0x250/0x250
[ 2341.385099][T12086]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2341.390426][T12086]  genl_rcv+0x28/0x40
[ 2341.394440][T12086]  netlink_unicast+0x547/0x7f0
[ 2341.399263][T12086]  ? netlink_attachskb+0x890/0x890
[ 2341.404513][T12086]  ? __virt_addr_valid+0x61/0x2e0
[ 2341.409692][T12086]  ? __phys_addr_symbol+0x30/0x70
[ 2341.414769][T12086]  ? __check_object_size+0x323/0x730
[ 2341.420103][T12086]  netlink_sendmsg+0x925/0xe30
[ 2341.424924][T12086]  ? netlink_unicast+0x7f0/0x7f0
[ 2341.430087][T12086]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2341.435410][T12086]  ? netlink_unicast+0x7f0/0x7f0
[ 2341.440393][T12086]  sock_sendmsg+0xde/0x190
[ 2341.444847][T12086]  ____sys_sendmsg+0x733/0x920
[ 2341.449641][T12086]  ? copy_msghdr_from_user+0xfc/0x150
[ 2341.455074][T12086]  ? kernel_sendmsg+0x50/0x50
[ 2341.459888][T12086]  ? futex_unqueue+0xb7/0x120
[ 2341.464594][T12086]  ? futex_wait+0x503/0x680
[ 2341.469136][T12086]  ___sys_sendmsg+0x110/0x1b0
[ 2341.473851][T12086]  ? do_recvmmsg+0x6f0/0x6f0
[ 2341.478481][T12086]  ? __fget_files+0x248/0x480
[ 2341.483205][T12086]  ? lock_downgrade+0x690/0x690
[ 2341.488110][T12086]  ? __fget_files+0x26a/0x480
[ 2341.493059][T12086]  ? __fget_light+0xe5/0x270
[ 2341.497704][T12086]  __sys_sendmsg+0xf7/0x1c0
[ 2341.502261][T12086]  ? __sys_sendmsg_sock+0x40/0x40
[ 2341.507322][T12086]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2341.513274][T12086]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2341.519206][T12086]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2341.524447][T12086]  do_syscall_64+0x39/0xb0
[ 2341.528891][T12086]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2341.534832][T12086] RIP: 0033:0x7f7896a8c389
[ 2341.539268][T12086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2341.558902][T12086] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2341.567345][T12086] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2341.575346][T12086] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2341.583361][T12086] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2341.591394][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2341.599386][T12086] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2341.607403][T12086]  </TASK>
03:20:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'})
mmap(&(0x7f000046d000/0x2000)=nil, 0x2000, 0x1, 0x50, r3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
sendfile(r3, r1, 0x0, 0x100000001)
socket$inet(0x2, 0x800, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x0, 0x803, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

03:20:26 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
accept$alg(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000340)={0x0, r4, 0x2, 0x33070381, 0x7, 0x7})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f0000000680)="57222f4e008c101fb6e58e047fe2085c4d7244549ea0fbc957f237ae195d05f6ba2d696f1776ad2ab806a7b0ab21d5bc608a0cb681d346bcce0817f57d80fcbc56ac618132f3cb4bd0811ef37a032c7188de571dab9d8155684653b39dc519fa1d67e8a19267c3d5ff9844b6d016ae0e7cf6d0200b661996625687fb3facc2584e025501ec4fdbeaf2111f40c25d53954a0827f6f7b2ebb3eed1f230eeaf77efaf4e8d0062831361bea667126e135837bd0729857d33ef161a4b85be88f2b0cfd36addd1b3f93c0f9f9f128ab30aed06ad0391db", 0xd4)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f00000008c0)={0x1, 'netpci0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70000000000"], 0x2c}}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70000000000"], 0x2c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb4b130ee9e9c01c3}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000406010800000000000000000100000205000100070000000500010007000000050001000700000005000100070000000900020073797a320000000005000100070000005deb60b7273d21f5528a4ed2632981e04aef9b8fa200523275012af1dddf48fe"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40)

03:20:26 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00$\x00\v\tm\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001"], 0x4c}}, 0x0)

03:20:26 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001580)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)

03:20:26 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32=r5], 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83"], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)

03:20:27 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:27 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="a9", 0x1}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1}, 0x0)

[ 2341.894884][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:27 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30"], 0xdc}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
sendfile(r0, r1, 0x0, 0x100000001)

[ 2341.986267][   T27] audit: type=1804 audit(1686885627.097:1246): pid=12109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/389/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
03:20:27 executing program 4:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001240), 0x4)

[ 2342.039763][T12117] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2342.073642][T12117] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2342.089529][   T27] audit: type=1804 audit(1686885627.097:1247): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4294087422/syzkaller.YDhwBM/2080/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0
[ 2342.122487][T12117] CPU: 0 PID: 12117 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2342.132989][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2342.135954][T12123] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2342.143065][T12117] Call Trace:
[ 2342.155772][T12117]  <TASK>
[ 2342.158744][T12117]  dump_stack_lvl+0x136/0x150
[ 2342.163490][T12117]  sysfs_warn_dup+0x80/0xa0
[ 2342.168071][T12117]  sysfs_do_create_link_sd+0x11e/0x140
[ 2342.173594][T12117]  sysfs_create_link+0x63/0xc0
[ 2342.178423][T12117]  device_add+0x585/0x1a40
[ 2342.182913][T12117]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2342.189816][T12117]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2342.195766][T12117]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2342.201808][T12117]  wiphy_register+0x1f92/0x2b00
[ 2342.206710][T12117]  ? wiphy_unregister+0xb40/0xb40
[ 2342.211783][T12117]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2342.216955][T12117]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2342.222982][T12117]  ieee80211_register_hw+0x23c1/0x40e0
[ 2342.228489][T12117]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2342.234076][T12117]  ? mark_held_locks+0x9f/0xe0
[ 2342.238882][T12117]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2342.244733][T12117]  ? __hrtimer_init+0x145/0x280
[ 2342.249634][T12117]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2342.255425][T12117]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2342.262160][T12117]  hwsim_new_radio_nl+0xacf/0x1210
[ 2342.267330][T12117]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2342.273282][T12117]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2342.280704][T12117]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2342.288052][T12117]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2342.294254][T12117]  ? genl_start+0x660/0x660
[ 2342.298805][T12117]  ? ns_capable+0xe0/0x110
[ 2342.303267][T12117]  genl_rcv_msg+0x4ff/0x7e0
[ 2342.307815][T12117]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2342.314182][T12117]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2342.320202][T12117]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2342.326137][T12117]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2342.332184][T12117]  netlink_rcv_skb+0x165/0x440
[ 2342.336979][T12117]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2342.343344][T12117]  ? netlink_ack+0x1360/0x1360
[ 2342.348156][T12117]  ? down_write_killable+0x250/0x250
[ 2342.353499][T12117]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2342.358822][T12117]  genl_rcv+0x28/0x40
[ 2342.362835][T12117]  netlink_unicast+0x547/0x7f0
[ 2342.367639][T12117]  ? netlink_attachskb+0x890/0x890
[ 2342.372783][T12117]  ? __virt_addr_valid+0x61/0x2e0
[ 2342.377852][T12117]  ? __phys_addr_symbol+0x30/0x70
[ 2342.382917][T12117]  ? __check_object_size+0x323/0x730
[ 2342.388238][T12117]  netlink_sendmsg+0x925/0xe30
[ 2342.393040][T12117]  ? netlink_unicast+0x7f0/0x7f0
[ 2342.398028][T12117]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2342.403345][T12117]  ? netlink_unicast+0x7f0/0x7f0
[ 2342.408315][T12117]  sock_sendmsg+0xde/0x190
[ 2342.412767][T12117]  ____sys_sendmsg+0x733/0x920
[ 2342.417561][T12117]  ? copy_msghdr_from_user+0xfc/0x150
[ 2342.423009][T12117]  ? kernel_sendmsg+0x50/0x50
[ 2342.427784][T12117]  ___sys_sendmsg+0x110/0x1b0
[ 2342.432519][T12117]  ? do_recvmmsg+0x6f0/0x6f0
[ 2342.437162][T12117]  ? __fget_files+0x248/0x480
[ 2342.441889][T12117]  ? lock_downgrade+0x690/0x690
[ 2342.446783][T12117]  ? futex_wake_mark+0x1a0/0x1a0
[ 2342.451766][T12117]  ? __fget_files+0x26a/0x480
[ 2342.456498][T12117]  ? __fget_light+0xe5/0x270
[ 2342.461153][T12117]  __sys_sendmsg+0xf7/0x1c0
[ 2342.465704][T12117]  ? __sys_sendmsg_sock+0x40/0x40
[ 2342.470783][T12117]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2342.476771][T12117]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2342.482715][T12117]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2342.487955][T12117]  do_syscall_64+0x39/0xb0
[ 2342.492428][T12117]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2342.498373][T12117] RIP: 0033:0x7f7896a8c389
[ 2342.502819][T12117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2342.522461][T12117] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2342.530907][T12117] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2342.538897][T12117] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2342.546886][T12117] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2342.554876][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2342.562863][T12117] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2342.570878][T12117]  </TASK>
03:20:27 executing program 2:
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000001140)={'ah\x00'}, &(0x7f0000001180)=0x1e)

[ 2342.636461][   T27] audit: type=1804 audit(1686885627.147:1248): pid=12108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/389/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
[ 2342.666112][   T27] audit: type=1804 audit(1686885627.147:1249): pid=12109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3754830195/syzkaller.Bvwuq6/389/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0
03:20:27 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0)

03:20:27 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2342.718121][   T27] audit: type=1804 audit(1686885627.827:1250): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3113668403/syzkaller.ERM75u/263/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0
03:20:28 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:28 executing program 0:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x0, 0xfe, '\x00', [@hao={0xc9, 0x10, @private1}, @jumbo, @pad1, @generic={0x0, 0x95, "3a988ae915cb283b98d791707db35ea374e23fd5dcef77d775990b4434e6cafc5407c0878fba421f4493571db67e5f80630712d9671673ec62c513c985c3f02cb5c8580fdd57e55ad77cb2ba2fec704b2d827156e31da8633a47f3635b4b6d27dd42f55d514418140994aa58d55b9dd058bfc3c7237079af6b46402d05aaea87380ae87d80238d87118e59c97fe47a560611377fbb"}, @pad1, @generic={0x0, 0x73a, "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"}]}, 0x800)

03:20:28 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

03:20:28 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:28 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30"], 0xdc}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
sendfile(r0, r1, 0x0, 0x100000001)

03:20:28 executing program 5:
socketpair(0x1, 0x5, 0x1, &(0x7f00000010c0))

03:20:28 executing program 0:
syz_emit_ethernet(0x23bf, &(0x7f0000002a40)={@broadcast, @random="772d2558dc22", @val, {@ipv6}}, 0x0)

03:20:28 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:28 executing program 4:
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0)

03:20:28 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2343.557618][T12146] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:28 executing program 5:
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @val, {@ipv6}}, 0x0)

03:20:28 executing program 0:
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0)

03:20:28 executing program 4:
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @val, {@ipv4}}, 0x0)

03:20:28 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:28 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)

03:20:28 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:29 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='1E'], 0x6a)

03:20:29 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='io.stat\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

03:20:29 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/3995], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(r1)

03:20:29 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:29 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/user\x00')

03:20:29 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:29 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x6a)

[ 2344.412665][T12176] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:29 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x90)

03:20:29 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2344.463234][T12176] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2344.500361][T12176] CPU: 0 PID: 12176 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2344.510878][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2344.521003][T12176] Call Trace:
[ 2344.524321][T12176]  <TASK>
[ 2344.527303][T12176]  dump_stack_lvl+0x136/0x150
[ 2344.532091][T12176]  sysfs_warn_dup+0x80/0xa0
[ 2344.536687][T12176]  sysfs_do_create_link_sd+0x11e/0x140
[ 2344.542219][T12176]  sysfs_create_link+0x63/0xc0
[ 2344.547045][T12176]  device_add+0x585/0x1a40
[ 2344.551539][T12176]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2344.558466][T12176]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2344.564446][T12176]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2344.570521][T12176]  wiphy_register+0x1f92/0x2b00
[ 2344.575465][T12176]  ? wiphy_unregister+0xb40/0xb40
[ 2344.580554][T12176]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2344.585755][T12176]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2344.591819][T12176]  ieee80211_register_hw+0x23c1/0x40e0
[ 2344.597384][T12176]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2344.603011][T12176]  ? mark_held_locks+0x9f/0xe0
[ 2344.607861][T12176]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2344.613755][T12176]  ? __hrtimer_init+0x145/0x280
[ 2344.618653][T12176]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2344.624437][T12176]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2344.631171][T12176]  hwsim_new_radio_nl+0xacf/0x1210
[ 2344.636333][T12176]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2344.642284][T12176]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2344.649705][T12176]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2344.657036][T12176]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2344.663233][T12176]  ? genl_start+0x660/0x660
[ 2344.667790][T12176]  ? ns_capable+0xe0/0x110
[ 2344.672271][T12176]  genl_rcv_msg+0x4ff/0x7e0
[ 2344.676813][T12176]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2344.683190][T12176]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2344.689208][T12176]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2344.695148][T12176]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2344.701182][T12176]  netlink_rcv_skb+0x165/0x440
[ 2344.705981][T12176]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2344.712349][T12176]  ? netlink_ack+0x1360/0x1360
[ 2344.717163][T12176]  ? down_write_killable+0x250/0x250
[ 2344.722493][T12176]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2344.727815][T12176]  genl_rcv+0x28/0x40
[ 2344.731830][T12176]  netlink_unicast+0x547/0x7f0
[ 2344.736665][T12176]  ? netlink_attachskb+0x890/0x890
[ 2344.741820][T12176]  ? __virt_addr_valid+0x61/0x2e0
[ 2344.746899][T12176]  ? __phys_addr_symbol+0x30/0x70
[ 2344.751974][T12176]  ? __check_object_size+0x323/0x730
[ 2344.757307][T12176]  netlink_sendmsg+0x925/0xe30
[ 2344.762115][T12176]  ? netlink_unicast+0x7f0/0x7f0
[ 2344.767092][T12176]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2344.772405][T12176]  ? netlink_unicast+0x7f0/0x7f0
[ 2344.777372][T12176]  sock_sendmsg+0xde/0x190
[ 2344.781819][T12176]  ____sys_sendmsg+0x733/0x920
[ 2344.786614][T12176]  ? copy_msghdr_from_user+0xfc/0x150
[ 2344.792026][T12176]  ? kernel_sendmsg+0x50/0x50
[ 2344.796754][T12176]  ___sys_sendmsg+0x110/0x1b0
[ 2344.801478][T12176]  ? do_recvmmsg+0x6f0/0x6f0
[ 2344.806111][T12176]  ? __fget_files+0x248/0x480
[ 2344.810843][T12176]  ? lock_downgrade+0x690/0x690
[ 2344.815744][T12176]  ? futex_wake_mark+0x1a0/0x1a0
[ 2344.820727][T12176]  ? __fget_files+0x26a/0x480
[ 2344.825455][T12176]  ? __fget_light+0xe5/0x270
[ 2344.830100][T12176]  __sys_sendmsg+0xf7/0x1c0
[ 2344.834637][T12176]  ? __sys_sendmsg_sock+0x40/0x40
[ 2344.839696][T12176]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2344.845651][T12176]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2344.851592][T12176]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2344.856832][T12176]  do_syscall_64+0x39/0xb0
[ 2344.861284][T12176]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2344.867226][T12176] RIP: 0033:0x7f7896a8c389
[ 2344.871665][T12176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2344.891308][T12176] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2344.899749][T12176] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
03:20:29 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000440)={0x10, 0x2}, 0x10)

[ 2344.907755][T12176] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000007
[ 2344.915753][T12176] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2344.923769][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2344.931932][T12176] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2344.939957][T12176]  </TASK>
03:20:30 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="f6", 0x1}], 0x1, &(0x7f0000000580)=[@sndinfo={0x1c}], 0x1c}, 0x0)

03:20:30 executing program 0:
syz_emit_ethernet(0x32, 0x0, 0x0)

03:20:30 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

03:20:30 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='z', 0x1}], 0x1}, 0x0)

03:20:30 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x2}, 0x98)

03:20:30 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:30 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:30 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000600000b0"], 0x0, 0x7f}, 0x20)

03:20:30 executing program 0:
socketpair(0x10, 0x3, 0x2, &(0x7f0000000080))

03:20:30 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008800)={'wlan1\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000037c0)="c10c8acf7de4bb95187725f10806", 0x5ea, 0x0, 0x0, 0x0)

03:20:30 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000140)=""/246, &(0x7f0000000000)=0xf6)

03:20:30 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}})

03:20:30 executing program 0:
bpf$PROG_LOAD(0x3, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:30 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008800)={'vlan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000008840)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$packet(r0, &(0x7f00000037c0)="c10c8acf7de4bb95187725f18847", 0xe, 0x0, 0x0, 0x0)

03:20:30 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

03:20:30 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}})

[ 2345.645117][T12218] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2345.700211][T12218] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[ 2345.814918][T12226] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2345.879038][T12226] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2345.910108][T12226] CPU: 0 PID: 12226 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2345.920613][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2345.930711][T12226] Call Trace:
[ 2345.934042][T12226]  <TASK>
[ 2345.937009][T12226]  dump_stack_lvl+0x136/0x150
[ 2345.941746][T12226]  sysfs_warn_dup+0x80/0xa0
[ 2345.946412][T12226]  sysfs_do_create_link_sd+0x11e/0x140
[ 2345.951967][T12226]  sysfs_create_link+0x63/0xc0
[ 2345.956796][T12226]  device_add+0x585/0x1a40
[ 2345.961294][T12226]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2345.968215][T12226]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2345.974191][T12226]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2345.980342][T12226]  wiphy_register+0x1f92/0x2b00
[ 2345.985269][T12226]  ? wiphy_unregister+0xb40/0xb40
[ 2345.990354][T12226]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2345.995544][T12226]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2346.001611][T12226]  ieee80211_register_hw+0x23c1/0x40e0
[ 2346.007170][T12226]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2346.012783][T12226]  ? mark_held_locks+0x9f/0xe0
[ 2346.017613][T12226]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2346.023506][T12226]  ? __hrtimer_init+0x145/0x280
[ 2346.028433][T12226]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2346.034245][T12226]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2346.041007][T12226]  hwsim_new_radio_nl+0xacf/0x1210
[ 2346.046188][T12226]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2346.052159][T12226]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2346.059593][T12226]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2346.066949][T12226]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2346.073188][T12226]  ? genl_start+0x660/0x660
[ 2346.077802][T12226]  ? ns_capable+0xe0/0x110
[ 2346.082306][T12226]  genl_rcv_msg+0x4ff/0x7e0
[ 2346.086897][T12226]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2346.093288][T12226]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2346.099331][T12226]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2346.105304][T12226]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2346.111366][T12226]  netlink_rcv_skb+0x165/0x440
[ 2346.116192][T12226]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2346.122586][T12226]  ? netlink_ack+0x1360/0x1360
[ 2346.127436][T12226]  ? down_write_killable+0x250/0x250
[ 2346.132786][T12226]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2346.138153][T12226]  genl_rcv+0x28/0x40
[ 2346.142196][T12226]  netlink_unicast+0x547/0x7f0
[ 2346.147034][T12226]  ? netlink_attachskb+0x890/0x890
[ 2346.152217][T12226]  ? __virt_addr_valid+0x61/0x2e0
[ 2346.157312][T12226]  ? __phys_addr_symbol+0x30/0x70
[ 2346.162409][T12226]  ? __check_object_size+0x323/0x730
[ 2346.167766][T12226]  netlink_sendmsg+0x925/0xe30
[ 2346.172603][T12226]  ? netlink_unicast+0x7f0/0x7f0
[ 2346.177603][T12226]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2346.182944][T12226]  ? netlink_unicast+0x7f0/0x7f0
[ 2346.187936][T12226]  sock_sendmsg+0xde/0x190
[ 2346.192411][T12226]  ____sys_sendmsg+0x733/0x920
[ 2346.197227][T12226]  ? copy_msghdr_from_user+0xfc/0x150
[ 2346.202659][T12226]  ? kernel_sendmsg+0x50/0x50
[ 2346.207400][T12226]  ? futex_unqueue+0xb7/0x120
[ 2346.212130][T12226]  ? futex_wait+0x503/0x680
[ 2346.216689][T12226]  ___sys_sendmsg+0x110/0x1b0
[ 2346.221423][T12226]  ? do_recvmmsg+0x6f0/0x6f0
[ 2346.226177][T12226]  ? __fget_files+0x248/0x480
[ 2346.230926][T12226]  ? lock_downgrade+0x690/0x690
[ 2346.235871][T12226]  ? __fget_files+0x26a/0x480
[ 2346.240629][T12226]  ? __fget_light+0xe5/0x270
[ 2346.245297][T12226]  __sys_sendmsg+0xf7/0x1c0
[ 2346.249861][T12226]  ? __sys_sendmsg_sock+0x40/0x40
[ 2346.254972][T12226]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2346.260959][T12226]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2346.266916][T12226]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2346.272184][T12226]  do_syscall_64+0x39/0xb0
[ 2346.276649][T12226]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2346.282614][T12226] RIP: 0033:0x7f7896a8c389
[ 2346.287073][T12226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2346.306729][T12226] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2346.315188][T12226] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2346.323209][T12226] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006
[ 2346.331225][T12226] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2346.339251][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2346.347261][T12226] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2346.355302][T12226]  </TASK>
03:20:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:31 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:31 executing program 5:
bpf$BPF_PROG_GET_FD_BY_ID(0x19, 0x0, 0x0)

03:20:31 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

03:20:31 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1b, 0x0, 0x0, 0x0, 0x1c00, 0x1}, 0x48)

03:20:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:31 executing program 5:
bpf$PROG_LOAD(0x1d, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:31 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x48)

03:20:31 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

[ 2346.474386][T12235] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2346.500813][T12235] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
03:20:31 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2346.533522][T12238] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

[ 2346.593196][T12238] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2346.626373][T12238] CPU: 1 PID: 12238 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
03:20:31 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)

[ 2346.636889][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2346.647028][T12238] Call Trace:
[ 2346.650347][T12238]  <TASK>
[ 2346.653318][T12238]  dump_stack_lvl+0x136/0x150
[ 2346.658070][T12238]  sysfs_warn_dup+0x80/0xa0
[ 2346.662663][T12238]  sysfs_do_create_link_sd+0x11e/0x140
[ 2346.668202][T12238]  sysfs_create_link+0x63/0xc0
[ 2346.673031][T12238]  device_add+0x585/0x1a40
[ 2346.677532][T12238]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2346.684469][T12238]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2346.690439][T12238]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2346.696513][T12238]  wiphy_register+0x1f92/0x2b00
[ 2346.701445][T12238]  ? wiphy_unregister+0xb40/0xb40
[ 2346.706530][T12238]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2346.711716][T12238]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2346.717796][T12238]  ieee80211_register_hw+0x23c1/0x40e0
[ 2346.723336][T12238]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2346.728957][T12238]  ? mark_held_locks+0x9f/0xe0
[ 2346.733795][T12238]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2346.739684][T12238]  ? __hrtimer_init+0x145/0x280
[ 2346.744604][T12238]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2346.750424][T12238]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2346.757204][T12238]  hwsim_new_radio_nl+0xacf/0x1210
[ 2346.762394][T12238]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2346.768389][T12238]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2346.775829][T12238]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2346.783198][T12238]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2346.789432][T12238]  ? genl_start+0x660/0x660
[ 2346.794025][T12238]  ? ns_capable+0xe0/0x110
[ 2346.798526][T12238]  genl_rcv_msg+0x4ff/0x7e0
[ 2346.803101][T12238]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2346.809492][T12238]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2346.815565][T12238]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2346.821532][T12238]  ? ___slab_alloc+0x9df/0x1400
[ 2346.826460][T12238]  netlink_rcv_skb+0x165/0x440
[ 2346.831285][T12238]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2346.837680][T12238]  ? netlink_ack+0x1360/0x1360
[ 2346.842544][T12238]  ? down_write_killable+0x250/0x250
[ 2346.847989][T12238]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2346.853349][T12238]  genl_rcv+0x28/0x40
[ 2346.857392][T12238]  netlink_unicast+0x547/0x7f0
[ 2346.862233][T12238]  ? netlink_attachskb+0x890/0x890
[ 2346.867410][T12238]  ? __virt_addr_valid+0x61/0x2e0
[ 2346.872518][T12238]  ? __phys_addr_symbol+0x30/0x70
[ 2346.877620][T12238]  ? __check_object_size+0x323/0x730
[ 2346.882993][T12238]  netlink_sendmsg+0x925/0xe30
[ 2346.887840][T12238]  ? netlink_unicast+0x7f0/0x7f0
[ 2346.892865][T12238]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2346.898210][T12238]  ? netlink_unicast+0x7f0/0x7f0
[ 2346.903209][T12238]  sock_sendmsg+0xde/0x190
[ 2346.907709][T12238]  ____sys_sendmsg+0x733/0x920
[ 2346.912537][T12238]  ? copy_msghdr_from_user+0xfc/0x150
[ 2346.917981][T12238]  ? kernel_sendmsg+0x50/0x50
[ 2346.922746][T12238]  ___sys_sendmsg+0x110/0x1b0
[ 2346.927497][T12238]  ? do_recvmmsg+0x6f0/0x6f0
[ 2346.932161][T12238]  ? __fget_files+0x248/0x480
[ 2346.936917][T12238]  ? lock_downgrade+0x690/0x690
[ 2346.941841][T12238]  ? futex_wake_mark+0x1a0/0x1a0
[ 2346.946859][T12238]  ? __fget_files+0x26a/0x480
[ 2346.951639][T12238]  ? __fget_light+0xe5/0x270
[ 2346.956325][T12238]  __sys_sendmsg+0xf7/0x1c0
[ 2346.960906][T12238]  ? __sys_sendmsg_sock+0x40/0x40
[ 2346.966004][T12238]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2346.972017][T12238]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2346.977982][T12238]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2346.983251][T12238]  do_syscall_64+0x39/0xb0
[ 2346.987727][T12238]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2346.993702][T12238] RIP: 0033:0x7f7896a8c389
[ 2346.998168][T12238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2347.017834][T12238] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2347.026316][T12238] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2347.034351][T12238] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000005
[ 2347.042379][T12238] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2347.050400][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2347.058423][T12238] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2347.066483][T12238]  </TASK>
[ 2347.083072][T12251] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2347.105521][T12251] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
03:20:32 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:32 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008800)={'vlan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000008840)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$packet(r0, &(0x7f00000037c0)="c10c8acf7de4bb95187725f18906", 0xe, 0x0, 0x0, 0x0)

03:20:32 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

03:20:32 executing program 5:
bpf$PROG_LOAD(0x16, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:32 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:32 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

03:20:32 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001bc0), 0x4)

[ 2347.281281][T12262] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2347.308025][T12266] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
03:20:32 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2347.328273][T12266] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[ 2347.338136][T12262] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2347.355499][T12262] CPU: 1 PID: 12262 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2347.365992][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2347.376102][T12262] Call Trace:
[ 2347.379420][T12262]  <TASK>
[ 2347.382401][T12262]  dump_stack_lvl+0x136/0x150
[ 2347.387145][T12262]  sysfs_warn_dup+0x80/0xa0
[ 2347.391758][T12262]  sysfs_do_create_link_sd+0x11e/0x140
[ 2347.397295][T12262]  sysfs_create_link+0x63/0xc0
[ 2347.402120][T12262]  device_add+0x585/0x1a40
[ 2347.406608][T12262]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2347.413551][T12262]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2347.419528][T12262]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2347.425601][T12262]  wiphy_register+0x1f92/0x2b00
[ 2347.430531][T12262]  ? wiphy_unregister+0xb40/0xb40
[ 2347.435612][T12262]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2347.440800][T12262]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2347.446882][T12262]  ieee80211_register_hw+0x23c1/0x40e0
[ 2347.452420][T12262]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2347.458026][T12262]  ? mark_held_locks+0x9f/0xe0
[ 2347.462859][T12262]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2347.468848][T12262]  ? __hrtimer_init+0x145/0x280
[ 2347.473761][T12262]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2347.479577][T12262]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2347.486356][T12262]  hwsim_new_radio_nl+0xacf/0x1210
[ 2347.491542][T12262]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2347.497520][T12262]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2347.504970][T12262]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2347.512341][T12262]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2347.518566][T12262]  ? genl_start+0x660/0x660
[ 2347.523156][T12262]  ? ns_capable+0xe0/0x110
[ 2347.527650][T12262]  genl_rcv_msg+0x4ff/0x7e0
[ 2347.532224][T12262]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2347.538625][T12262]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2347.544673][T12262]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2347.550645][T12262]  ? ___slab_alloc+0x9df/0x1400
[ 2347.555577][T12262]  netlink_rcv_skb+0x165/0x440
[ 2347.560495][T12262]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2347.566901][T12262]  ? netlink_ack+0x1360/0x1360
[ 2347.571775][T12262]  ? down_write_killable+0x250/0x250
[ 2347.577136][T12262]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2347.582503][T12262]  genl_rcv+0x28/0x40
[ 2347.586554][T12262]  netlink_unicast+0x547/0x7f0
[ 2347.591475][T12262]  ? netlink_attachskb+0x890/0x890
[ 2347.596647][T12262]  ? __virt_addr_valid+0x61/0x2e0
[ 2347.601758][T12262]  ? __phys_addr_symbol+0x30/0x70
[ 2347.606877][T12262]  ? __check_object_size+0x323/0x730
[ 2347.612235][T12262]  netlink_sendmsg+0x925/0xe30
[ 2347.617087][T12262]  ? netlink_unicast+0x7f0/0x7f0
[ 2347.622116][T12262]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2347.627465][T12262]  ? netlink_unicast+0x7f0/0x7f0
[ 2347.632472][T12262]  sock_sendmsg+0xde/0x190
[ 2347.636955][T12262]  ____sys_sendmsg+0x733/0x920
[ 2347.641783][T12262]  ? copy_msghdr_from_user+0xfc/0x150
[ 2347.647216][T12262]  ? kernel_sendmsg+0x50/0x50
[ 2347.651981][T12262]  ___sys_sendmsg+0x110/0x1b0
[ 2347.656728][T12262]  ? do_recvmmsg+0x6f0/0x6f0
[ 2347.661394][T12262]  ? __fget_files+0x248/0x480
[ 2347.666156][T12262]  ? lock_downgrade+0x690/0x690
[ 2347.671101][T12262]  ? futex_wake_mark+0x1a0/0x1a0
[ 2347.676108][T12262]  ? __fget_files+0x26a/0x480
[ 2347.680876][T12262]  ? __fget_light+0xe5/0x270
[ 2347.685555][T12262]  __sys_sendmsg+0xf7/0x1c0
[ 2347.690117][T12262]  ? __sys_sendmsg_sock+0x40/0x40
[ 2347.695208][T12262]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2347.701219][T12262]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2347.707191][T12262]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2347.712468][T12262]  do_syscall_64+0x39/0xb0
[ 2347.716938][T12262]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2347.722911][T12262] RIP: 0033:0x7f7896a8c389
[ 2347.727380][T12262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2347.747049][T12262] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2347.755525][T12262] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2347.763551][T12262] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000005
[ 2347.771568][T12262] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
03:20:32 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

[ 2347.779589][T12262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2347.787611][T12262] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2347.795662][T12262]  </TASK>
03:20:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0xc}, {0x4}}]}, 0x30}}, 0x0)

03:20:32 executing program 4:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

[ 2347.964330][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:20:33 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', 0x0})

03:20:33 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

03:20:33 executing program 4:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:33 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:33 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "c44fee", 0x10, 0x21, 0x0, @local, @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f14260", 0x0, "f385b9"}}}}}}}, 0x0)

03:20:33 executing program 4:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:33 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={0x0, 0x0}, 0x20)

03:20:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000002430b9"], 0x50}}, 0x0)

[ 2348.125180][T12291] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2348.155681][T12291] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2348.172395][T12291] CPU: 0 PID: 12291 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2348.182897][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2348.193007][T12291] Call Trace:
[ 2348.196335][T12291]  <TASK>
[ 2348.199317][T12291]  dump_stack_lvl+0x136/0x150
[ 2348.204065][T12291]  sysfs_warn_dup+0x80/0xa0
[ 2348.208649][T12291]  sysfs_do_create_link_sd+0x11e/0x140
[ 2348.214174][T12291]  sysfs_create_link+0x63/0xc0
[ 2348.219002][T12291]  device_add+0x585/0x1a40
[ 2348.223504][T12291]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2348.230432][T12291]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2348.236420][T12291]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2348.242502][T12291]  wiphy_register+0x1f92/0x2b00
[ 2348.247448][T12291]  ? wiphy_unregister+0xb40/0xb40
[ 2348.252553][T12291]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2348.257767][T12291]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2348.263835][T12291]  ieee80211_register_hw+0x23c1/0x40e0
[ 2348.269380][T12291]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2348.275009][T12291]  ? mark_held_locks+0x9f/0xe0
[ 2348.279854][T12291]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2348.285737][T12291]  ? __hrtimer_init+0x145/0x280
[ 2348.290637][T12291]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2348.296425][T12291]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2348.303163][T12291]  hwsim_new_radio_nl+0xacf/0x1210
[ 2348.308322][T12291]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2348.314274][T12291]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2348.321697][T12291]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2348.329036][T12291]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2348.335233][T12291]  ? genl_start+0x660/0x660
[ 2348.339789][T12291]  ? ns_capable+0xe0/0x110
[ 2348.344257][T12291]  genl_rcv_msg+0x4ff/0x7e0
[ 2348.348802][T12291]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2348.355175][T12291]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2348.361198][T12291]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2348.367129][T12291]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2348.373169][T12291]  netlink_rcv_skb+0x165/0x440
[ 2348.377987][T12291]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2348.384380][T12291]  ? netlink_ack+0x1360/0x1360
[ 2348.389206][T12291]  ? down_write_killable+0x250/0x250
[ 2348.394540][T12291]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2348.399885][T12291]  genl_rcv+0x28/0x40
[ 2348.403912][T12291]  netlink_unicast+0x547/0x7f0
[ 2348.408757][T12291]  ? netlink_attachskb+0x890/0x890
[ 2348.413918][T12291]  ? __virt_addr_valid+0x61/0x2e0
[ 2348.418997][T12291]  ? __phys_addr_symbol+0x30/0x70
[ 2348.424065][T12291]  ? __check_object_size+0x323/0x730
[ 2348.429412][T12291]  netlink_sendmsg+0x925/0xe30
[ 2348.434240][T12291]  ? netlink_unicast+0x7f0/0x7f0
[ 2348.439228][T12291]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2348.444548][T12291]  ? netlink_unicast+0x7f0/0x7f0
[ 2348.449534][T12291]  sock_sendmsg+0xde/0x190
[ 2348.453991][T12291]  ____sys_sendmsg+0x733/0x920
[ 2348.458792][T12291]  ? copy_msghdr_from_user+0xfc/0x150
[ 2348.464204][T12291]  ? kernel_sendmsg+0x50/0x50
[ 2348.468948][T12291]  ___sys_sendmsg+0x110/0x1b0
[ 2348.473665][T12291]  ? do_recvmmsg+0x6f0/0x6f0
[ 2348.478296][T12291]  ? __fget_files+0x248/0x480
[ 2348.483018][T12291]  ? lock_downgrade+0x690/0x690
[ 2348.487914][T12291]  ? futex_wake_mark+0x1a0/0x1a0
[ 2348.492892][T12291]  ? __fget_files+0x26a/0x480
[ 2348.497623][T12291]  ? __fget_light+0xe5/0x270
[ 2348.502268][T12291]  __sys_sendmsg+0xf7/0x1c0
[ 2348.506806][T12291]  ? __sys_sendmsg_sock+0x40/0x40
[ 2348.511873][T12291]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2348.517833][T12291]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2348.523770][T12291]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2348.529009][T12291]  do_syscall_64+0x39/0xb0
[ 2348.533455][T12291]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2348.539392][T12291] RIP: 0033:0x7f7896a8c389
[ 2348.543833][T12291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2348.563479][T12291] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
03:20:33 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:33 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={0x0, 0x0}, 0x20)

03:20:33 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0)

[ 2348.571925][T12291] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2348.579922][T12291] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000005
[ 2348.587917][T12291] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2348.595910][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2348.603910][T12291] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2348.611925][T12291]  </TASK>
03:20:33 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:33 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:33 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:33 executing program 0:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700008000000001fffffe004c"]})

03:20:33 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)={0x3, '\x00\x00\x00'}, 0x4)

03:20:33 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={0x0, 0x0}, 0x20)

03:20:33 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:33 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:34 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

[ 2348.851290][T12318] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:34 executing program 5:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}})

03:20:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

[ 2348.907587][T12318] sysfs: cannot create duplicate filename '/class/ieee80211/!'
03:20:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

[ 2349.070368][T12318] CPU: 1 PID: 12318 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2349.080880][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2349.090995][T12318] Call Trace:
[ 2349.094310][T12318]  <TASK>
[ 2349.097281][T12318]  dump_stack_lvl+0x136/0x150
[ 2349.102033][T12318]  sysfs_warn_dup+0x80/0xa0
[ 2349.106709][T12318]  sysfs_do_create_link_sd+0x11e/0x140
[ 2349.112226][T12318]  sysfs_create_link+0x63/0xc0
[ 2349.117051][T12318]  device_add+0x585/0x1a40
[ 2349.121547][T12318]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2349.128466][T12318]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2349.134432][T12318]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2349.140495][T12318]  wiphy_register+0x1f92/0x2b00
[ 2349.145425][T12318]  ? wiphy_unregister+0xb40/0xb40
[ 2349.150511][T12318]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2349.155706][T12318]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2349.161763][T12318]  ieee80211_register_hw+0x23c1/0x40e0
[ 2349.167300][T12318]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2349.172910][T12318]  ? mark_held_locks+0x9f/0xe0
[ 2349.177741][T12318]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2349.183624][T12318]  ? __hrtimer_init+0x145/0x280
[ 2349.188550][T12318]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2349.194372][T12318]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2349.201138][T12318]  hwsim_new_radio_nl+0xacf/0x1210
[ 2349.206329][T12318]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2349.212311][T12318]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2349.219759][T12318]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2349.227128][T12318]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2349.233367][T12318]  ? genl_start+0x660/0x660
[ 2349.237954][T12318]  ? ns_capable+0xe0/0x110
[ 2349.242458][T12318]  genl_rcv_msg+0x4ff/0x7e0
[ 2349.247036][T12318]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2349.253429][T12318]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2349.259474][T12318]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2349.265436][T12318]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2349.271506][T12318]  netlink_rcv_skb+0x165/0x440
[ 2349.276350][T12318]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2349.282742][T12318]  ? netlink_ack+0x1360/0x1360
[ 2349.287591][T12318]  ? down_write_killable+0x250/0x250
[ 2349.292941][T12318]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2349.298293][T12318]  genl_rcv+0x28/0x40
[ 2349.302334][T12318]  netlink_unicast+0x547/0x7f0
[ 2349.307164][T12318]  ? netlink_attachskb+0x890/0x890
[ 2349.312327][T12318]  ? __virt_addr_valid+0x61/0x2e0
[ 2349.317422][T12318]  ? __phys_addr_symbol+0x30/0x70
[ 2349.322508][T12318]  ? __check_object_size+0x323/0x730
[ 2349.327872][T12318]  netlink_sendmsg+0x925/0xe30
[ 2349.332699][T12318]  ? netlink_unicast+0x7f0/0x7f0
[ 2349.337705][T12318]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2349.343050][T12318]  ? netlink_unicast+0x7f0/0x7f0
[ 2349.348053][T12318]  sock_sendmsg+0xde/0x190
[ 2349.352526][T12318]  ____sys_sendmsg+0x733/0x920
[ 2349.357343][T12318]  ? copy_msghdr_from_user+0xfc/0x150
[ 2349.362774][T12318]  ? kernel_sendmsg+0x50/0x50
[ 2349.367513][T12318]  ? futex_unqueue+0xb7/0x120
[ 2349.372244][T12318]  ? futex_wait+0x503/0x680
[ 2349.376817][T12318]  ___sys_sendmsg+0x110/0x1b0
[ 2349.381557][T12318]  ? do_recvmmsg+0x6f0/0x6f0
[ 2349.386220][T12318]  ? __fget_files+0x248/0x480
[ 2349.390964][T12318]  ? lock_downgrade+0x690/0x690
[ 2349.395898][T12318]  ? __fget_files+0x26a/0x480
[ 2349.400652][T12318]  ? __fget_light+0xe5/0x270
[ 2349.405320][T12318]  __sys_sendmsg+0xf7/0x1c0
[ 2349.409882][T12318]  ? __sys_sendmsg_sock+0x40/0x40
[ 2349.414986][T12318]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2349.420989][T12318]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2349.426952][T12318]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2349.432224][T12318]  do_syscall_64+0x39/0xb0
[ 2349.436701][T12318]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2349.442674][T12318] RIP: 0033:0x7f7896a8c389
[ 2349.447142][T12318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2349.466812][T12318] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2349.475291][T12318] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2349.483312][T12318] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2349.491323][T12318] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2349.499330][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2349.507343][T12318] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2349.515390][T12318]  </TASK>
03:20:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

03:20:34 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

03:20:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000001240), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

03:20:34 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:34 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:34 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

03:20:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)

03:20:34 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:34 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0)

[ 2349.725125][T12343] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)

03:20:34 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80108906, 0x0)

[ 2349.792272][T12343] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2349.824601][T12343] CPU: 1 PID: 12343 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2349.835115][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2349.845230][T12343] Call Trace:
[ 2349.848551][T12343]  <TASK>
[ 2349.851524][T12343]  dump_stack_lvl+0x136/0x150
[ 2349.856286][T12343]  sysfs_warn_dup+0x80/0xa0
[ 2349.860871][T12343]  sysfs_do_create_link_sd+0x11e/0x140
[ 2349.866387][T12343]  sysfs_create_link+0x63/0xc0
[ 2349.871186][T12343]  device_add+0x585/0x1a40
[ 2349.875655][T12343]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2349.882547][T12343]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2349.888483][T12343]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2349.894513][T12343]  wiphy_register+0x1f92/0x2b00
[ 2349.899409][T12343]  ? wiphy_unregister+0xb40/0xb40
[ 2349.904468][T12343]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2349.909627][T12343]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2349.915653][T12343]  ieee80211_register_hw+0x23c1/0x40e0
[ 2349.921163][T12343]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2349.926747][T12343]  ? mark_held_locks+0x9f/0xe0
[ 2349.931644][T12343]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2349.937505][T12343]  ? __hrtimer_init+0x145/0x280
[ 2349.942395][T12343]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2349.948176][T12343]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2349.954912][T12343]  hwsim_new_radio_nl+0xacf/0x1210
[ 2349.960082][T12343]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2349.966037][T12343]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2349.973453][T12343]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2349.980781][T12343]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2349.986993][T12343]  ? genl_start+0x660/0x660
[ 2349.991567][T12343]  ? ns_capable+0xe0/0x110
[ 2349.996030][T12343]  genl_rcv_msg+0x4ff/0x7e0
[ 2350.000580][T12343]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2350.006944][T12343]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2350.012974][T12343]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2350.018914][T12343]  ? find_held_lock+0x2d/0x110
[ 2350.023723][T12343]  netlink_rcv_skb+0x165/0x440
[ 2350.028523][T12343]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2350.034897][T12343]  ? netlink_ack+0x1360/0x1360
[ 2350.039711][T12343]  ? down_write_killable+0x250/0x250
[ 2350.045037][T12343]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2350.050366][T12343]  genl_rcv+0x28/0x40
[ 2350.054379][T12343]  netlink_unicast+0x547/0x7f0
[ 2350.059179][T12343]  ? netlink_attachskb+0x890/0x890
[ 2350.064318][T12343]  ? __virt_addr_valid+0x61/0x2e0
[ 2350.069382][T12343]  ? __phys_addr_symbol+0x30/0x70
[ 2350.074442][T12343]  ? __check_object_size+0x323/0x730
[ 2350.079769][T12343]  netlink_sendmsg+0x925/0xe30
[ 2350.084572][T12343]  ? netlink_unicast+0x7f0/0x7f0
[ 2350.089544][T12343]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2350.094858][T12343]  ? netlink_unicast+0x7f0/0x7f0
[ 2350.099824][T12343]  sock_sendmsg+0xde/0x190
[ 2350.104280][T12343]  ____sys_sendmsg+0x733/0x920
[ 2350.109076][T12343]  ? copy_msghdr_from_user+0xfc/0x150
[ 2350.114480][T12343]  ? kernel_sendmsg+0x50/0x50
[ 2350.119189][T12343]  ? futex_unqueue+0xb7/0x120
[ 2350.123897][T12343]  ? futex_wait+0x503/0x680
[ 2350.128444][T12343]  ___sys_sendmsg+0x110/0x1b0
[ 2350.133160][T12343]  ? do_recvmmsg+0x6f0/0x6f0
[ 2350.137789][T12343]  ? __fget_files+0x248/0x480
[ 2350.142514][T12343]  ? lock_downgrade+0x690/0x690
[ 2350.147417][T12343]  ? __fget_files+0x26a/0x480
[ 2350.152155][T12343]  ? __fget_light+0xe5/0x270
[ 2350.156792][T12343]  __sys_sendmsg+0xf7/0x1c0
[ 2350.161331][T12343]  ? __sys_sendmsg_sock+0x40/0x40
[ 2350.166399][T12343]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2350.172352][T12343]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2350.178283][T12343]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2350.183544][T12343]  do_syscall_64+0x39/0xb0
[ 2350.187997][T12343]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2350.193946][T12343] RIP: 0033:0x7f7896a8c389
[ 2350.198384][T12343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2350.218014][T12343] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2350.226459][T12343] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2350.234454][T12343] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2350.242445][T12343] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2350.250436][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2350.258432][T12343] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2350.266441][T12343]  </TASK>
03:20:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)

03:20:35 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
syz_emit_ethernet(0x3f1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c"], 0x54}}, 0x0)

03:20:35 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(0xffffffffffffffff, 0x0, 0x0)

03:20:35 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), r0)

03:20:35 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x10)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:35 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
socket(0x11, 0x800000003, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

03:20:35 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

[ 2350.468049][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:35 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0)

03:20:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[ 2350.566841][T12370] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:35 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x704, 0x4, 0x900}, 0x48)

03:20:35 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
socket(0x11, 0x800000003, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2350.645077][T12377] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[ 2350.697503][T12377] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2350.723435][T12377] CPU: 1 PID: 12377 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2350.733950][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2350.744072][T12377] Call Trace:
[ 2350.747399][T12377]  <TASK>
[ 2350.750383][T12377]  dump_stack_lvl+0x136/0x150
[ 2350.755141][T12377]  sysfs_warn_dup+0x80/0xa0
[ 2350.759735][T12377]  sysfs_do_create_link_sd+0x11e/0x140
[ 2350.765263][T12377]  sysfs_create_link+0x63/0xc0
[ 2350.770096][T12377]  device_add+0x585/0x1a40
[ 2350.774590][T12377]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2350.781533][T12377]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2350.787519][T12377]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2350.793593][T12377]  wiphy_register+0x1f92/0x2b00
[ 2350.798542][T12377]  ? wiphy_unregister+0xb40/0xb40
[ 2350.803633][T12377]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2350.808827][T12377]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2350.814887][T12377]  ieee80211_register_hw+0x23c1/0x40e0
[ 2350.820439][T12377]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2350.826058][T12377]  ? mark_held_locks+0x9f/0xe0
[ 2350.830901][T12377]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2350.836784][T12377]  ? __hrtimer_init+0x145/0x280
[ 2350.841681][T12377]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2350.847469][T12377]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2350.854216][T12377]  hwsim_new_radio_nl+0xacf/0x1210
[ 2350.859382][T12377]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2350.865419][T12377]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2350.872835][T12377]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2350.880184][T12377]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2350.886387][T12377]  ? genl_start+0x660/0x660
[ 2350.890942][T12377]  ? ns_capable+0xe0/0x110
[ 2350.895414][T12377]  genl_rcv_msg+0x4ff/0x7e0
[ 2350.900043][T12377]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2350.906406][T12377]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2350.912421][T12377]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2350.918349][T12377]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2350.924378][T12377]  netlink_rcv_skb+0x165/0x440
[ 2350.929174][T12377]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2350.935542][T12377]  ? netlink_ack+0x1360/0x1360
[ 2350.940370][T12377]  ? down_write_killable+0x250/0x250
[ 2350.945703][T12377]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2350.951034][T12377]  genl_rcv+0x28/0x40
[ 2350.955057][T12377]  netlink_unicast+0x547/0x7f0
[ 2350.959876][T12377]  ? netlink_attachskb+0x890/0x890
[ 2350.965042][T12377]  ? __virt_addr_valid+0x61/0x2e0
[ 2350.970124][T12377]  ? __phys_addr_symbol+0x30/0x70
[ 2350.975207][T12377]  ? __check_object_size+0x323/0x730
[ 2350.980549][T12377]  netlink_sendmsg+0x925/0xe30
[ 2350.985369][T12377]  ? netlink_unicast+0x7f0/0x7f0
[ 2350.990359][T12377]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2350.995683][T12377]  ? netlink_unicast+0x7f0/0x7f0
[ 2351.000656][T12377]  sock_sendmsg+0xde/0x190
[ 2351.005104][T12377]  ____sys_sendmsg+0x733/0x920
[ 2351.009900][T12377]  ? copy_msghdr_from_user+0xfc/0x150
[ 2351.015317][T12377]  ? kernel_sendmsg+0x50/0x50
[ 2351.020039][T12377]  ? futex_unqueue+0xb7/0x120
[ 2351.024753][T12377]  ? futex_wait+0x503/0x680
[ 2351.029290][T12377]  ___sys_sendmsg+0x110/0x1b0
[ 2351.034007][T12377]  ? do_recvmmsg+0x6f0/0x6f0
[ 2351.038645][T12377]  ? __fget_files+0x248/0x480
[ 2351.043369][T12377]  ? lock_downgrade+0x690/0x690
[ 2351.048278][T12377]  ? __fget_files+0x26a/0x480
[ 2351.053007][T12377]  ? __fget_light+0xe5/0x270
[ 2351.057652][T12377]  __sys_sendmsg+0xf7/0x1c0
[ 2351.062201][T12377]  ? __sys_sendmsg_sock+0x40/0x40
[ 2351.067265][T12377]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2351.073219][T12377]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2351.079169][T12377]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2351.084410][T12377]  do_syscall_64+0x39/0xb0
[ 2351.088854][T12377]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2351.094797][T12377] RIP: 0033:0x7f7896a8c389
[ 2351.099235][T12377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2351.119133][T12377] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2351.127575][T12377] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2351.135571][T12377] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2351.143565][T12377] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2351.151562][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2351.159556][T12377] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2351.167568][T12377]  </TASK>
03:20:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="65727370613000d491b11c4677", @ANYRES32]})

03:20:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

03:20:36 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:36 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
syz_emit_ethernet(0x3f1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c"], 0x54}}, 0x0)

03:20:36 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4(r0, 0x0, 0x0, 0x0)

03:20:36 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
socket(0x11, 0x800000003, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

03:20:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x2, &(0x7f0000000040)={'gre0\x00', 0x0})

03:20:36 executing program 0:
syz_genetlink_get_family_id$wireguard(&(0x7f00000010c0), 0xffffffffffffffff)

[ 2351.382237][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:36 executing program 5:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000400))

03:20:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

[ 2351.476079][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
03:20:36 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:36 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000033c0)={0xf, 0x3, &(0x7f0000003280)=@framed, &(0x7f00000032c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

[ 2351.744467][T12420] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2351.768593][T12420] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2351.786698][T12420] CPU: 0 PID: 12420 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2351.797190][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2351.807291][T12420] Call Trace:
[ 2351.810603][T12420]  <TASK>
[ 2351.813572][T12420]  dump_stack_lvl+0x136/0x150
[ 2351.818312][T12420]  sysfs_warn_dup+0x80/0xa0
[ 2351.822893][T12420]  sysfs_do_create_link_sd+0x11e/0x140
[ 2351.828407][T12420]  sysfs_create_link+0x63/0xc0
[ 2351.833255][T12420]  device_add+0x585/0x1a40
[ 2351.837739][T12420]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2351.844663][T12420]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2351.850629][T12420]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2351.856696][T12420]  wiphy_register+0x1f92/0x2b00
[ 2351.861636][T12420]  ? wiphy_unregister+0xb40/0xb40
[ 2351.866719][T12420]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2351.871921][T12420]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2351.877987][T12420]  ieee80211_register_hw+0x23c1/0x40e0
[ 2351.884311][T12420]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2351.889924][T12420]  ? mark_held_locks+0x9f/0xe0
[ 2351.894759][T12420]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2351.900657][T12420]  ? __hrtimer_init+0x145/0x280
[ 2351.905572][T12420]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2351.911380][T12420]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2351.918151][T12420]  hwsim_new_radio_nl+0xacf/0x1210
[ 2351.923323][T12420]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2351.929300][T12420]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2351.936754][T12420]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2351.944124][T12420]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2351.950343][T12420]  ? genl_start+0x660/0x660
[ 2351.954923][T12420]  ? ns_capable+0xe0/0x110
[ 2351.959420][T12420]  genl_rcv_msg+0x4ff/0x7e0
[ 2351.964022][T12420]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2351.970424][T12420]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2351.976480][T12420]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2351.982447][T12420]  ? ___slab_alloc+0x9df/0x1400
[ 2351.987384][T12420]  netlink_rcv_skb+0x165/0x440
[ 2351.992219][T12420]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2351.998614][T12420]  ? netlink_ack+0x1360/0x1360
[ 2352.003458][T12420]  ? down_write_killable+0x250/0x250
[ 2352.008825][T12420]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2352.014174][T12420]  genl_rcv+0x28/0x40
[ 2352.018210][T12420]  netlink_unicast+0x547/0x7f0
[ 2352.023033][T12420]  ? netlink_attachskb+0x890/0x890
[ 2352.028200][T12420]  ? __virt_addr_valid+0x61/0x2e0
[ 2352.033298][T12420]  ? __phys_addr_symbol+0x30/0x70
[ 2352.038385][T12420]  ? __check_object_size+0x323/0x730
[ 2352.043757][T12420]  netlink_sendmsg+0x925/0xe30
[ 2352.048589][T12420]  ? netlink_unicast+0x7f0/0x7f0
[ 2352.053591][T12420]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2352.058925][T12420]  ? netlink_unicast+0x7f0/0x7f0
[ 2352.063922][T12420]  sock_sendmsg+0xde/0x190
[ 2352.068396][T12420]  ____sys_sendmsg+0x733/0x920
[ 2352.073220][T12420]  ? copy_msghdr_from_user+0xfc/0x150
[ 2352.078650][T12420]  ? kernel_sendmsg+0x50/0x50
[ 2352.083400][T12420]  ___sys_sendmsg+0x110/0x1b0
[ 2352.088138][T12420]  ? do_recvmmsg+0x6f0/0x6f0
[ 2352.092794][T12420]  ? __fget_files+0x248/0x480
[ 2352.097540][T12420]  ? lock_downgrade+0x690/0x690
[ 2352.102464][T12420]  ? futex_wake_mark+0x1a0/0x1a0
[ 2352.107473][T12420]  ? __fget_files+0x26a/0x480
[ 2352.112229][T12420]  ? __fget_light+0xe5/0x270
[ 2352.116909][T12420]  __sys_sendmsg+0xf7/0x1c0
[ 2352.121474][T12420]  ? __sys_sendmsg_sock+0x40/0x40
[ 2352.126561][T12420]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2352.132543][T12420]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2352.138498][T12420]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2352.143762][T12420]  do_syscall_64+0x39/0xb0
[ 2352.148317][T12420]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2352.154286][T12420] RIP: 0033:0x7f7896a8c389
[ 2352.158743][T12420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2352.178420][T12420] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2352.186910][T12420] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2352.194933][T12420] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2352.202949][T12420] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2352.210962][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2352.218971][T12420] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2352.227014][T12420]  </TASK>
03:20:37 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:37 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}, 0x21c2)

03:20:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:37 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:37 executing program 5:
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00'})

03:20:37 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

03:20:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

03:20:37 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))

03:20:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)

03:20:37 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2352.416649][T12434] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:37 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000017c0)={0x6, 'ip_vti0\x00'})

03:20:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x5, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0)

[ 2352.463417][T12434] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2352.501338][T12434] CPU: 1 PID: 12434 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2352.511842][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2352.521966][T12434] Call Trace:
[ 2352.525298][T12434]  <TASK>
[ 2352.528274][T12434]  dump_stack_lvl+0x136/0x150
[ 2352.533024][T12434]  sysfs_warn_dup+0x80/0xa0
[ 2352.537621][T12434]  sysfs_do_create_link_sd+0x11e/0x140
[ 2352.543157][T12434]  sysfs_create_link+0x63/0xc0
[ 2352.547980][T12434]  device_add+0x585/0x1a40
[ 2352.552486][T12434]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2352.559419][T12434]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2352.565390][T12434]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2352.571434][T12434]  wiphy_register+0x1f92/0x2b00
[ 2352.576337][T12434]  ? wiphy_unregister+0xb40/0xb40
[ 2352.581398][T12434]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2352.586557][T12434]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2352.592580][T12434]  ieee80211_register_hw+0x23c1/0x40e0
[ 2352.598085][T12434]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2352.603670][T12434]  ? mark_held_locks+0x9f/0xe0
[ 2352.608476][T12434]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2352.614335][T12434]  ? __hrtimer_init+0x145/0x280
[ 2352.619230][T12434]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2352.625015][T12434]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2352.631747][T12434]  hwsim_new_radio_nl+0xacf/0x1210
[ 2352.636902][T12434]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2352.642848][T12434]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2352.650260][T12434]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2352.657589][T12434]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2352.663783][T12434]  ? genl_start+0x660/0x660
[ 2352.668339][T12434]  ? ns_capable+0xe0/0x110
[ 2352.672805][T12434]  genl_rcv_msg+0x4ff/0x7e0
[ 2352.677352][T12434]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2352.683722][T12434]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2352.689740][T12434]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2352.695671][T12434]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2352.701699][T12434]  netlink_rcv_skb+0x165/0x440
[ 2352.706497][T12434]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2352.712867][T12434]  ? netlink_ack+0x1360/0x1360
[ 2352.717686][T12434]  ? down_write_killable+0x250/0x250
[ 2352.723011][T12434]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2352.728333][T12434]  genl_rcv+0x28/0x40
[ 2352.732351][T12434]  netlink_unicast+0x547/0x7f0
[ 2352.737159][T12434]  ? netlink_attachskb+0x890/0x890
[ 2352.742300][T12434]  ? __virt_addr_valid+0x61/0x2e0
[ 2352.747367][T12434]  ? __phys_addr_symbol+0x30/0x70
[ 2352.752435][T12434]  ? __check_object_size+0x323/0x730
[ 2352.757762][T12434]  netlink_sendmsg+0x925/0xe30
[ 2352.762572][T12434]  ? netlink_unicast+0x7f0/0x7f0
[ 2352.767553][T12434]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2352.772870][T12434]  ? netlink_unicast+0x7f0/0x7f0
[ 2352.777848][T12434]  sock_sendmsg+0xde/0x190
[ 2352.782303][T12434]  ____sys_sendmsg+0x733/0x920
[ 2352.787104][T12434]  ? copy_msghdr_from_user+0xfc/0x150
[ 2352.792515][T12434]  ? kernel_sendmsg+0x50/0x50
[ 2352.797245][T12434]  ? futex_unqueue+0xb7/0x120
[ 2352.801964][T12434]  ? futex_wait+0x503/0x680
[ 2352.806509][T12434]  ___sys_sendmsg+0x110/0x1b0
[ 2352.811235][T12434]  ? do_recvmmsg+0x6f0/0x6f0
[ 2352.815870][T12434]  ? __fget_files+0x248/0x480
[ 2352.820593][T12434]  ? lock_downgrade+0x690/0x690
[ 2352.825524][T12434]  ? __fget_files+0x26a/0x480
[ 2352.830261][T12434]  ? __fget_light+0xe5/0x270
[ 2352.834930][T12434]  __sys_sendmsg+0xf7/0x1c0
[ 2352.839475][T12434]  ? __sys_sendmsg_sock+0x40/0x40
[ 2352.844541][T12434]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2352.850495][T12434]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2352.856431][T12434]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2352.861673][T12434]  do_syscall_64+0x39/0xb0
[ 2352.866116][T12434]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2352.872052][T12434] RIP: 0033:0x7f7896a8c389
[ 2352.876489][T12434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2352.896123][T12434] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2352.904567][T12434] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2352.913080][T12434] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2352.921070][T12434] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2352.929081][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2352.937095][T12434] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2352.945117][T12434]  </TASK>
03:20:38 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc)

03:20:38 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000001580)=0x4)

03:20:38 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2353.055700][T12446] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2353.090973][T12446] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
03:20:38 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x18)

03:20:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0xb, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)

03:20:38 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/249, 0xf9}, 0x400c1)

03:20:38 executing program 0:
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x26, 0x0, &(0x7f0000000180))

[ 2353.205254][T12454] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:38 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2353.263125][T12454] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2353.271762][T12457] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2353.301087][T12454] CPU: 0 PID: 12454 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
03:20:38 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x8)

[ 2353.311595][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2353.321699][T12454] Call Trace:
[ 2353.325024][T12454]  <TASK>
[ 2353.328003][T12454]  dump_stack_lvl+0x136/0x150
[ 2353.332752][T12454]  sysfs_warn_dup+0x80/0xa0
[ 2353.337348][T12454]  sysfs_do_create_link_sd+0x11e/0x140
[ 2353.342863][T12454]  sysfs_create_link+0x63/0xc0
[ 2353.347693][T12454]  device_add+0x585/0x1a40
[ 2353.352180][T12454]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2353.359104][T12454]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2353.365098][T12454]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2353.371170][T12454]  wiphy_register+0x1f92/0x2b00
[ 2353.376110][T12454]  ? wiphy_unregister+0xb40/0xb40
[ 2353.381205][T12454]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2353.386403][T12454]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2353.392481][T12454]  ieee80211_register_hw+0x23c1/0x40e0
[ 2353.398030][T12454]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2353.403666][T12454]  ? mark_held_locks+0x9f/0xe0
[ 2353.408497][T12454]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2353.414412][T12454]  ? __hrtimer_init+0x145/0x280
[ 2353.419306][T12454]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2353.425115][T12454]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2353.431841][T12454]  hwsim_new_radio_nl+0xacf/0x1210
[ 2353.437003][T12454]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2353.442962][T12454]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2353.450368][T12454]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2353.457708][T12454]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2353.463911][T12454]  ? genl_start+0x660/0x660
[ 2353.468467][T12454]  ? ns_capable+0xe0/0x110
[ 2353.472929][T12454]  genl_rcv_msg+0x4ff/0x7e0
[ 2353.477480][T12454]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2353.483848][T12454]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2353.489871][T12454]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2353.495807][T12454]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2353.501849][T12454]  netlink_rcv_skb+0x165/0x440
[ 2353.506650][T12454]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2353.513017][T12454]  ? netlink_ack+0x1360/0x1360
[ 2353.517836][T12454]  ? down_write_killable+0x250/0x250
[ 2353.523161][T12454]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2353.528485][T12454]  genl_rcv+0x28/0x40
[ 2353.532506][T12454]  netlink_unicast+0x547/0x7f0
[ 2353.537326][T12454]  ? netlink_attachskb+0x890/0x890
[ 2353.542471][T12454]  ? __virt_addr_valid+0x61/0x2e0
[ 2353.547536][T12454]  ? __phys_addr_symbol+0x30/0x70
[ 2353.552599][T12454]  ? __check_object_size+0x323/0x730
[ 2353.557921][T12454]  netlink_sendmsg+0x925/0xe30
[ 2353.562729][T12454]  ? netlink_unicast+0x7f0/0x7f0
[ 2353.567719][T12454]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2353.573035][T12454]  ? netlink_unicast+0x7f0/0x7f0
[ 2353.578006][T12454]  sock_sendmsg+0xde/0x190
[ 2353.582459][T12454]  ____sys_sendmsg+0x733/0x920
[ 2353.587256][T12454]  ? copy_msghdr_from_user+0xfc/0x150
[ 2353.592664][T12454]  ? kernel_sendmsg+0x50/0x50
[ 2353.597377][T12454]  ? futex_unqueue+0xb7/0x120
[ 2353.602083][T12454]  ? futex_wait+0x503/0x680
[ 2353.606620][T12454]  ___sys_sendmsg+0x110/0x1b0
[ 2353.611346][T12454]  ? do_recvmmsg+0x6f0/0x6f0
[ 2353.615979][T12454]  ? __fget_files+0x248/0x480
[ 2353.620695][T12454]  ? lock_downgrade+0x690/0x690
[ 2353.625597][T12454]  ? __fget_files+0x26a/0x480
[ 2353.630328][T12454]  ? __fget_light+0xe5/0x270
[ 2353.634979][T12454]  __sys_sendmsg+0xf7/0x1c0
[ 2353.639518][T12454]  ? __sys_sendmsg_sock+0x40/0x40
[ 2353.644584][T12454]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2353.650547][T12454]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2353.656475][T12454]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2353.661716][T12454]  do_syscall_64+0x39/0xb0
[ 2353.666174][T12454]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2353.672114][T12454] RIP: 0033:0x7f7896a8c389
[ 2353.676556][T12454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2353.696189][T12454] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2353.704636][T12454] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
03:20:38 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x0, 0x0, 0xb13d, 0x0, 0x1}, 0x48)

[ 2353.712721][T12454] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2353.720714][T12454] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2353.728713][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2353.736705][T12454] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2353.744815][T12454]  </TASK>
03:20:38 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x18, 0x0, 0x0)

03:20:39 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

03:20:39 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)='a', 0x1}], 0x2}, 0x20004050)

03:20:39 executing program 3:
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001240)}, 0x0)
pipe(&(0x7f0000001580))

03:20:39 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:39 executing program 0:
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

03:20:39 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x17, 0x0, 0x0)

03:20:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:20:39 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)='a', 0x1}], 0x2}, 0x20004050)

03:20:39 executing program 0:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

03:20:39 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

[ 2354.202435][T12486] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2354.248552][T12486] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2354.275256][T12486] CPU: 1 PID: 12486 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2354.285761][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2354.295867][T12486] Call Trace:
[ 2354.299195][T12486]  <TASK>
[ 2354.302162][T12486]  dump_stack_lvl+0x136/0x150
[ 2354.306899][T12486]  sysfs_warn_dup+0x80/0xa0
[ 2354.311480][T12486]  sysfs_do_create_link_sd+0x11e/0x140
[ 2354.317004][T12486]  sysfs_create_link+0x63/0xc0
[ 2354.321825][T12486]  device_add+0x585/0x1a40
[ 2354.326310][T12486]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2354.333232][T12486]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2354.339187][T12486]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2354.345249][T12486]  wiphy_register+0x1f92/0x2b00
[ 2354.350167][T12486]  ? wiphy_unregister+0xb40/0xb40
[ 2354.355224][T12486]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2354.360393][T12486]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2354.366414][T12486]  ieee80211_register_hw+0x23c1/0x40e0
[ 2354.371917][T12486]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2354.377514][T12486]  ? mark_held_locks+0x9f/0xe0
[ 2354.382320][T12486]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2354.388195][T12486]  ? __hrtimer_init+0x145/0x280
[ 2354.393198][T12486]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2354.398982][T12486]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2354.405712][T12486]  hwsim_new_radio_nl+0xacf/0x1210
[ 2354.410870][T12486]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2354.416816][T12486]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2354.424227][T12486]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2354.431558][T12486]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2354.437758][T12486]  ? genl_start+0x660/0x660
[ 2354.442314][T12486]  ? ns_capable+0xe0/0x110
[ 2354.446783][T12486]  genl_rcv_msg+0x4ff/0x7e0
[ 2354.451342][T12486]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2354.457707][T12486]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2354.463729][T12486]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2354.469662][T12486]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2354.475781][T12486]  netlink_rcv_skb+0x165/0x440
[ 2354.480581][T12486]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2354.486950][T12486]  ? netlink_ack+0x1360/0x1360
[ 2354.491768][T12486]  ? down_write_killable+0x250/0x250
[ 2354.497091][T12486]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2354.502418][T12486]  genl_rcv+0x28/0x40
[ 2354.506435][T12486]  netlink_unicast+0x547/0x7f0
[ 2354.511239][T12486]  ? netlink_attachskb+0x890/0x890
[ 2354.516393][T12486]  ? __virt_addr_valid+0x61/0x2e0
[ 2354.521462][T12486]  ? __phys_addr_symbol+0x30/0x70
[ 2354.526525][T12486]  ? __check_object_size+0x323/0x730
[ 2354.531847][T12486]  netlink_sendmsg+0x925/0xe30
[ 2354.536654][T12486]  ? netlink_unicast+0x7f0/0x7f0
[ 2354.541634][T12486]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2354.546948][T12486]  ? netlink_unicast+0x7f0/0x7f0
[ 2354.551920][T12486]  sock_sendmsg+0xde/0x190
[ 2354.556372][T12486]  ____sys_sendmsg+0x733/0x920
[ 2354.561167][T12486]  ? copy_msghdr_from_user+0xfc/0x150
[ 2354.566666][T12486]  ? kernel_sendmsg+0x50/0x50
[ 2354.571393][T12486]  ___sys_sendmsg+0x110/0x1b0
[ 2354.576120][T12486]  ? do_recvmmsg+0x6f0/0x6f0
[ 2354.580753][T12486]  ? __fget_files+0x248/0x480
[ 2354.585483][T12486]  ? lock_downgrade+0x690/0x690
[ 2354.590375][T12486]  ? futex_wake_mark+0x1a0/0x1a0
[ 2354.595358][T12486]  ? __fget_files+0x26a/0x480
[ 2354.600086][T12486]  ? __fget_light+0xe5/0x270
[ 2354.604729][T12486]  __sys_sendmsg+0xf7/0x1c0
[ 2354.609268][T12486]  ? __sys_sendmsg_sock+0x40/0x40
[ 2354.614341][T12486]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2354.620298][T12486]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2354.626234][T12486]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2354.631472][T12486]  do_syscall_64+0x39/0xb0
[ 2354.635915][T12486]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2354.641853][T12486] RIP: 0033:0x7f7896a8c389
[ 2354.646289][T12486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2354.665932][T12486] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2354.674377][T12486] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2354.682373][T12486] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2354.690363][T12486] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2354.698356][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2354.706354][T12486] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2354.714375][T12486]  </TASK>
03:20:39 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:39 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f00000000c0))

03:20:39 executing program 0:
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)

03:20:39 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)='a', 0x1}], 0x2}, 0x20004050)

03:20:39 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:20:39 executing program 3:
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, 0x0, 0x0)

03:20:39 executing program 0:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xd}, 0x0, 0x0)

03:20:40 executing program 4:
pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0)

03:20:40 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:40 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}})

03:20:40 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf0, &(0x7f0000000180)=""/240, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2355.069180][T12522] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2355.092746][T12522] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2355.100978][T12522] CPU: 0 PID: 12522 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2355.111454][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2355.121547][T12522] Call Trace:
[ 2355.124863][T12522]  <TASK>
[ 2355.127825][T12522]  dump_stack_lvl+0x136/0x150
[ 2355.132555][T12522]  sysfs_warn_dup+0x80/0xa0
[ 2355.137123][T12522]  sysfs_do_create_link_sd+0x11e/0x140
[ 2355.142634][T12522]  sysfs_create_link+0x63/0xc0
[ 2355.147446][T12522]  device_add+0x585/0x1a40
[ 2355.151933][T12522]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2355.158846][T12522]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2355.164814][T12522]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2355.170880][T12522]  wiphy_register+0x1f92/0x2b00
[ 2355.175807][T12522]  ? wiphy_unregister+0xb40/0xb40
[ 2355.180895][T12522]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2355.186085][T12522]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2355.192132][T12522]  ieee80211_register_hw+0x23c1/0x40e0
[ 2355.197665][T12522]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2355.203272][T12522]  ? mark_held_locks+0x9f/0xe0
[ 2355.208103][T12522]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2355.213993][T12522]  ? __hrtimer_init+0x145/0x280
[ 2355.218904][T12522]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2355.224710][T12522]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2355.231465][T12522]  hwsim_new_radio_nl+0xacf/0x1210
[ 2355.236641][T12522]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2355.242611][T12522]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2355.250042][T12522]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2355.257393][T12522]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2355.263615][T12522]  ? genl_start+0x660/0x660
[ 2355.268196][T12522]  ? ns_capable+0xe0/0x110
[ 2355.272683][T12522]  genl_rcv_msg+0x4ff/0x7e0
[ 2355.277253][T12522]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2355.283650][T12522]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2355.289698][T12522]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2355.295659][T12522]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2355.301720][T12522]  netlink_rcv_skb+0x165/0x440
[ 2355.306551][T12522]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2355.312944][T12522]  ? netlink_ack+0x1360/0x1360
[ 2355.317797][T12522]  ? down_write_killable+0x250/0x250
[ 2355.323146][T12522]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2355.328496][T12522]  genl_rcv+0x28/0x40
[ 2355.332533][T12522]  netlink_unicast+0x547/0x7f0
[ 2355.337359][T12522]  ? netlink_attachskb+0x890/0x890
[ 2355.342522][T12522]  ? __virt_addr_valid+0x61/0x2e0
[ 2355.347608][T12522]  ? __phys_addr_symbol+0x30/0x70
[ 2355.352696][T12522]  ? __check_object_size+0x323/0x730
[ 2355.358052][T12522]  netlink_sendmsg+0x925/0xe30
[ 2355.362884][T12522]  ? netlink_unicast+0x7f0/0x7f0
[ 2355.367893][T12522]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2355.373228][T12522]  ? netlink_unicast+0x7f0/0x7f0
[ 2355.378220][T12522]  sock_sendmsg+0xde/0x190
[ 2355.382694][T12522]  ____sys_sendmsg+0x733/0x920
[ 2355.387517][T12522]  ? copy_msghdr_from_user+0xfc/0x150
[ 2355.392954][T12522]  ? kernel_sendmsg+0x50/0x50
[ 2355.397712][T12522]  ___sys_sendmsg+0x110/0x1b0
[ 2355.402458][T12522]  ? do_recvmmsg+0x6f0/0x6f0
[ 2355.407111][T12522]  ? __fget_files+0x248/0x480
[ 2355.411895][T12522]  ? lock_downgrade+0x690/0x690
[ 2355.416816][T12522]  ? futex_wake_mark+0x1a0/0x1a0
[ 2355.421818][T12522]  ? __fget_files+0x26a/0x480
[ 2355.426577][T12522]  ? __fget_light+0xe5/0x270
[ 2355.431270][T12522]  __sys_sendmsg+0xf7/0x1c0
[ 2355.435846][T12522]  ? __sys_sendmsg_sock+0x40/0x40
[ 2355.440940][T12522]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2355.446917][T12522]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2355.452874][T12522]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2355.458148][T12522]  do_syscall_64+0x39/0xb0
[ 2355.462621][T12522]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2355.468588][T12522] RIP: 0033:0x7f7896a8c389
[ 2355.473044][T12522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2355.492703][T12522] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2355.501171][T12522] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2355.509180][T12522] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2355.517198][T12522] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2355.525220][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2355.533230][T12522] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2355.541270][T12522]  </TASK>
03:20:40 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:40 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf0, &(0x7f0000000180)=""/240, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:40 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1954, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48)

03:20:40 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:40 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xe4, &(0x7f0000000180)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:40 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f00000000c0)={0x0}, 0x10)

03:20:40 executing program 5:
socket$packet(0x11, 0xadd04879dc721913, 0x300)

03:20:40 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0})

03:20:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004b40)={0x0, 0x3938700})

03:20:40 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48)

03:20:40 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2355.718041][T12534] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2355.772716][T12534] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2355.803120][T12534] CPU: 0 PID: 12534 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
03:20:40 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x1, 0x0, 0x7}, 0x48)

[ 2355.813635][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2355.823755][T12534] Call Trace:
[ 2355.827080][T12534]  <TASK>
[ 2355.830054][T12534]  dump_stack_lvl+0x136/0x150
[ 2355.834803][T12534]  sysfs_warn_dup+0x80/0xa0
[ 2355.839395][T12534]  sysfs_do_create_link_sd+0x11e/0x140
[ 2355.844927][T12534]  sysfs_create_link+0x63/0xc0
[ 2355.849761][T12534]  device_add+0x585/0x1a40
[ 2355.854262][T12534]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2355.861188][T12534]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2355.867163][T12534]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2355.873241][T12534]  wiphy_register+0x1f92/0x2b00
[ 2355.878182][T12534]  ? wiphy_unregister+0xb40/0xb40
[ 2355.883281][T12534]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2355.888480][T12534]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2355.894545][T12534]  ieee80211_register_hw+0x23c1/0x40e0
[ 2355.900095][T12534]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2355.905719][T12534]  ? mark_held_locks+0x9f/0xe0
[ 2355.910565][T12534]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2355.916463][T12534]  ? __hrtimer_init+0x145/0x280
[ 2355.921391][T12534]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2355.927218][T12534]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2355.933989][T12534]  hwsim_new_radio_nl+0xacf/0x1210
[ 2355.939173][T12534]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2355.945150][T12534]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2355.952733][T12534]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2355.960108][T12534]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2355.966337][T12534]  ? genl_start+0x660/0x660
[ 2355.970921][T12534]  ? ns_capable+0xe0/0x110
[ 2355.975410][T12534]  genl_rcv_msg+0x4ff/0x7e0
[ 2355.979981][T12534]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2355.986383][T12534]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2355.992439][T12534]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2355.998406][T12534]  ? ___slab_alloc+0x9df/0x1400
[ 2356.003348][T12534]  netlink_rcv_skb+0x165/0x440
[ 2356.008180][T12534]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2356.014602][T12534]  ? netlink_ack+0x1360/0x1360
[ 2356.019454][T12534]  ? down_write_killable+0x250/0x250
[ 2356.024815][T12534]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2356.030179][T12534]  genl_rcv+0x28/0x40
[ 2356.034243][T12534]  netlink_unicast+0x547/0x7f0
[ 2356.039082][T12534]  ? netlink_attachskb+0x890/0x890
[ 2356.044263][T12534]  ? __virt_addr_valid+0x61/0x2e0
[ 2356.049560][T12534]  ? __phys_addr_symbol+0x30/0x70
[ 2356.054659][T12534]  ? __check_object_size+0x323/0x730
[ 2356.060013][T12534]  netlink_sendmsg+0x925/0xe30
[ 2356.064858][T12534]  ? netlink_unicast+0x7f0/0x7f0
[ 2356.069875][T12534]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2356.075244][T12534]  ? netlink_unicast+0x7f0/0x7f0
[ 2356.080250][T12534]  sock_sendmsg+0xde/0x190
[ 2356.084726][T12534]  ____sys_sendmsg+0x733/0x920
[ 2356.089550][T12534]  ? copy_msghdr_from_user+0xfc/0x150
[ 2356.094986][T12534]  ? kernel_sendmsg+0x50/0x50
[ 2356.099747][T12534]  ___sys_sendmsg+0x110/0x1b0
[ 2356.104497][T12534]  ? do_recvmmsg+0x6f0/0x6f0
[ 2356.109154][T12534]  ? __fget_files+0x248/0x480
[ 2356.113912][T12534]  ? lock_downgrade+0x690/0x690
[ 2356.118839][T12534]  ? futex_wake_mark+0x1a0/0x1a0
[ 2356.123845][T12534]  ? __fget_files+0x26a/0x480
[ 2356.128605][T12534]  ? __fget_light+0xe5/0x270
[ 2356.133285][T12534]  __sys_sendmsg+0xf7/0x1c0
[ 2356.137853][T12534]  ? __sys_sendmsg_sock+0x40/0x40
[ 2356.142943][T12534]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2356.148931][T12534]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2356.154894][T12534]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2356.160162][T12534]  do_syscall_64+0x39/0xb0
[ 2356.164635][T12534]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2356.170605][T12534] RIP: 0033:0x7f7896a8c389
[ 2356.175061][T12534] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2356.194723][T12534] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2356.203198][T12534] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2356.211234][T12534] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2356.219254][T12534] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2356.227278][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2356.235299][T12534] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2356.243345][T12534]  </TASK>
03:20:41 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:41 executing program 0:
bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@bloom_filter, 0x48)

03:20:41 executing program 5:
socketpair(0x29, 0x5, 0x7fff, &(0x7f0000000080))

03:20:41 executing program 4:
bpf$BPF_BTF_GET_NEXT_ID(0xc, 0x0, 0x0)

03:20:41 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:41 executing program 0:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f0000000080)={'vxcan0\x00'})

03:20:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "957af8efc16eb48cbed3399a59"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}}, 0x0)

03:20:41 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0xc0189436, 0x0)

[ 2356.432924][T12556] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2356.473537][T12556] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2356.497215][T12556] CPU: 1 PID: 12556 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2356.507715][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2356.517817][T12556] Call Trace:
[ 2356.521138][T12556]  <TASK>
[ 2356.524114][T12556]  dump_stack_lvl+0x136/0x150
[ 2356.528852][T12556]  sysfs_warn_dup+0x80/0xa0
[ 2356.533598][T12556]  sysfs_do_create_link_sd+0x11e/0x140
[ 2356.539121][T12556]  sysfs_create_link+0x63/0xc0
[ 2356.543952][T12556]  device_add+0x585/0x1a40
[ 2356.548438][T12556]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2356.555378][T12556]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2356.561362][T12556]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2356.567425][T12556]  wiphy_register+0x1f92/0x2b00
[ 2356.572353][T12556]  ? wiphy_unregister+0xb40/0xb40
[ 2356.577428][T12556]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2356.582609][T12556]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2356.588671][T12556]  ieee80211_register_hw+0x23c1/0x40e0
[ 2356.594205][T12556]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2356.599812][T12556]  ? mark_held_locks+0x9f/0xe0
[ 2356.604640][T12556]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2356.610527][T12556]  ? __hrtimer_init+0x145/0x280
[ 2356.615444][T12556]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2356.621258][T12556]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2356.628026][T12556]  hwsim_new_radio_nl+0xacf/0x1210
[ 2356.633213][T12556]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2356.639196][T12556]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2356.646662][T12556]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2356.654034][T12556]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2356.660258][T12556]  ? genl_start+0x660/0x660
[ 2356.664830][T12556]  ? ns_capable+0xe0/0x110
[ 2356.669320][T12556]  genl_rcv_msg+0x4ff/0x7e0
[ 2356.673893][T12556]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2356.680286][T12556]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2356.686339][T12556]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2356.692302][T12556]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2356.698372][T12556]  netlink_rcv_skb+0x165/0x440
[ 2356.703202][T12556]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2356.709613][T12556]  ? netlink_ack+0x1360/0x1360
[ 2356.714470][T12556]  ? down_write_killable+0x250/0x250
[ 2356.719827][T12556]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2356.725181][T12556]  genl_rcv+0x28/0x40
[ 2356.729224][T12556]  netlink_unicast+0x547/0x7f0
[ 2356.734055][T12556]  ? netlink_attachskb+0x890/0x890
[ 2356.739220][T12556]  ? __virt_addr_valid+0x61/0x2e0
[ 2356.744319][T12556]  ? __phys_addr_symbol+0x30/0x70
[ 2356.749410][T12556]  ? __check_object_size+0x323/0x730
[ 2356.754764][T12556]  netlink_sendmsg+0x925/0xe30
[ 2356.759601][T12556]  ? netlink_unicast+0x7f0/0x7f0
[ 2356.764622][T12556]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2356.769975][T12556]  ? netlink_unicast+0x7f0/0x7f0
[ 2356.774977][T12556]  sock_sendmsg+0xde/0x190
[ 2356.779471][T12556]  ____sys_sendmsg+0x733/0x920
[ 2356.784290][T12556]  ? copy_msghdr_from_user+0xfc/0x150
[ 2356.789721][T12556]  ? kernel_sendmsg+0x50/0x50
[ 2356.794460][T12556]  ? futex_unqueue+0xb7/0x120
[ 2356.799193][T12556]  ? futex_wait+0x503/0x680
[ 2356.803756][T12556]  ___sys_sendmsg+0x110/0x1b0
[ 2356.808498][T12556]  ? do_recvmmsg+0x6f0/0x6f0
[ 2356.813169][T12556]  ? __fget_files+0x248/0x480
[ 2356.817922][T12556]  ? lock_downgrade+0x690/0x690
[ 2356.822856][T12556]  ? __fget_files+0x26a/0x480
[ 2356.827618][T12556]  ? __fget_light+0xe5/0x270
[ 2356.832287][T12556]  __sys_sendmsg+0xf7/0x1c0
[ 2356.836849][T12556]  ? __sys_sendmsg_sock+0x40/0x40
[ 2356.841940][T12556]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2356.847924][T12556]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2356.853891][T12556]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2356.859165][T12556]  do_syscall_64+0x39/0xb0
[ 2356.863638][T12556]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2356.869609][T12556] RIP: 0033:0x7f7896a8c389
[ 2356.874067][T12556] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2356.895642][T12556] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2356.904110][T12556] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2356.912136][T12556] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2356.920156][T12556] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2356.928175][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2356.936192][T12556] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2356.944236][T12556]  </TASK>
03:20:42 executing program 3:
epoll_create(0xffff)

03:20:42 executing program 2:
socket(0x11, 0x800000003, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:42 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)

03:20:42 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48)

03:20:42 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000740))
ioctl$PPPIOCSACTIVE(r0, 0x4004743b, &(0x7f0000000040)={0x0, 0x0})

03:20:42 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:42 executing program 0:
pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x7}, &(0x7f00000003c0), 0x0)

03:20:42 executing program 2:
socket(0x11, 0x800000003, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:42 executing program 4:
pselect6(0x76, &(0x7f0000000000)={0xca9a3b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200), 0x8})

03:20:42 executing program 3:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000300)={0xb0000002})

03:20:42 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0x0, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:42 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x1, &(0x7f0000002000)=@raw=[@func], &(0x7f0000002040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:42 executing program 2:
socket(0x11, 0x800000003, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:42 executing program 3:
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

03:20:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004240)=@security={'security\x00', 0xe, 0x4, 0x518, 0xffffffff, 0x0, 0x228, 0x150, 0xffffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@set4={{0x50}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00', @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @local, @dev, @mcast2, @mcast2]}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "a584fa1e3fc97ab831240b0bec3297ba64951b753ffe2e0c26a4e6ad0f10"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)

03:20:42 executing program 5:
r0 = socket(0x2, 0x3, 0x6)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0xa, 0x600}, 0x200001cc, &(0x7f0000000240)={0x0}}, 0x0)

03:20:42 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008800)={'wg2\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000008840)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$packet(r0, &(0x7f00000037c0)="c1", 0x1, 0x0, 0x0, 0x0)

[ 2357.419275][T12594] x_tables: duplicate underflow at hook 2
[ 2357.455271][T12598] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it!
[ 2357.489819][T12599] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2357.503997][T12599] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2357.512224][T12599] CPU: 0 PID: 12599 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2357.522701][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2357.532800][T12599] Call Trace:
[ 2357.536145][T12599]  <TASK>
[ 2357.539114][T12599]  dump_stack_lvl+0x136/0x150
[ 2357.543850][T12599]  sysfs_warn_dup+0x80/0xa0
[ 2357.548433][T12599]  sysfs_do_create_link_sd+0x11e/0x140
[ 2357.553951][T12599]  sysfs_create_link+0x63/0xc0
[ 2357.558768][T12599]  device_add+0x585/0x1a40
[ 2357.563257][T12599]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2357.570184][T12599]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2357.576148][T12599]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2357.582213][T12599]  wiphy_register+0x1f92/0x2b00
[ 2357.587147][T12599]  ? wiphy_unregister+0xb40/0xb40
[ 2357.592229][T12599]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2357.597420][T12599]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2357.603472][T12599]  ieee80211_register_hw+0x23c1/0x40e0
[ 2357.609010][T12599]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2357.614623][T12599]  ? mark_held_locks+0x9f/0xe0
[ 2357.619452][T12599]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2357.625332][T12599]  ? __hrtimer_init+0x145/0x280
[ 2357.630317][T12599]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2357.636106][T12599]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2357.642836][T12599]  hwsim_new_radio_nl+0xacf/0x1210
[ 2357.648013][T12599]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2357.653960][T12599]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2357.661371][T12599]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2357.668698][T12599]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2357.674892][T12599]  ? genl_start+0x660/0x660
[ 2357.679442][T12599]  ? ns_capable+0xe0/0x110
[ 2357.683909][T12599]  genl_rcv_msg+0x4ff/0x7e0
[ 2357.688468][T12599]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2357.694834][T12599]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2357.700854][T12599]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2357.706788][T12599]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2357.712821][T12599]  netlink_rcv_skb+0x165/0x440
[ 2357.717621][T12599]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2357.724008][T12599]  ? netlink_ack+0x1360/0x1360
[ 2357.728822][T12599]  ? down_write_killable+0x250/0x250
[ 2357.734151][T12599]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2357.739483][T12599]  genl_rcv+0x28/0x40
[ 2357.743500][T12599]  netlink_unicast+0x547/0x7f0
[ 2357.748300][T12599]  ? netlink_attachskb+0x890/0x890
[ 2357.753446][T12599]  ? __virt_addr_valid+0x61/0x2e0
[ 2357.758512][T12599]  ? __phys_addr_symbol+0x30/0x70
[ 2357.763576][T12599]  ? __check_object_size+0x323/0x730
[ 2357.768901][T12599]  netlink_sendmsg+0x925/0xe30
[ 2357.773709][T12599]  ? netlink_unicast+0x7f0/0x7f0
[ 2357.778687][T12599]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2357.784000][T12599]  ? netlink_unicast+0x7f0/0x7f0
[ 2357.788973][T12599]  sock_sendmsg+0xde/0x190
[ 2357.793427][T12599]  ____sys_sendmsg+0x733/0x920
[ 2357.798228][T12599]  ? copy_msghdr_from_user+0xfc/0x150
[ 2357.803635][T12599]  ? kernel_sendmsg+0x50/0x50
[ 2357.808347][T12599]  ? futex_unqueue+0xb7/0x120
[ 2357.813058][T12599]  ? futex_wait+0x503/0x680
[ 2357.817608][T12599]  ___sys_sendmsg+0x110/0x1b0
[ 2357.822322][T12599]  ? do_recvmmsg+0x6f0/0x6f0
[ 2357.826956][T12599]  ? __fget_files+0x248/0x480
[ 2357.831680][T12599]  ? lock_downgrade+0x690/0x690
[ 2357.836584][T12599]  ? __fget_files+0x26a/0x480
[ 2357.841313][T12599]  ? __fget_light+0xe5/0x270
[ 2357.845954][T12599]  __sys_sendmsg+0xf7/0x1c0
[ 2357.850494][T12599]  ? __sys_sendmsg_sock+0x40/0x40
[ 2357.855557][T12599]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2357.861516][T12599]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2357.867537][T12599]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2357.872775][T12599]  do_syscall_64+0x39/0xb0
[ 2357.877219][T12599]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2357.883160][T12599] RIP: 0033:0x7f7896a8c389
[ 2357.887598][T12599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2357.907231][T12599] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2357.916026][T12599] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2357.924024][T12599] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2357.932021][T12599] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2357.940017][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2357.948008][T12599] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2357.956028][T12599]  </TASK>
03:20:43 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:43 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

03:20:43 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:43 executing program 5:
r0 = socket(0x2, 0x3, 0x6)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0xa, 0x600}, 0x200001cc, &(0x7f0000000240)={0x0}}, 0x0)

03:20:43 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @random="f87573dab34d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3fd3", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "5ee65dba1d7c750900000000000000f7"}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @mss={0x2, 0x4}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0)

03:20:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @random="f87573dab34d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3fd3", 0x54, 0x6, 0x0, @remote={0x6}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "5ee65dba1d7c750900000000000000f7"}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa}, @window={0x3, 0x3}, @mss={0x2, 0x4}, @sack={0x5, 0x6, [0x0]}]}}}}}}}}, 0x0)

03:20:43 executing program 5:
r0 = socket(0x2, 0x3, 0x6)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0xa, 0x600}, 0x200001cc, &(0x7f0000000240)={0x0}}, 0x0)

03:20:43 executing program 4:
syz_emit_ethernet(0x262, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60000000022c2100fe8000000000000000000000000000aafe8000000000000000000000000000aa000000006800000033"], 0x0)

03:20:43 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x28}]}}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0)

03:20:43 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000740))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3}]})

[ 2358.130583][T12611] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:43 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2358.183365][T12611] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2358.236590][T12611] CPU: 1 PID: 12611 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2358.247103][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2358.257215][T12611] Call Trace:
[ 2358.260532][T12611]  <TASK>
[ 2358.263504][T12611]  dump_stack_lvl+0x136/0x150
[ 2358.268256][T12611]  sysfs_warn_dup+0x80/0xa0
[ 2358.272844][T12611]  sysfs_do_create_link_sd+0x11e/0x140
[ 2358.278377][T12611]  sysfs_create_link+0x63/0xc0
03:20:43 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000740))

[ 2358.283200][T12611]  device_add+0x585/0x1a40
[ 2358.287698][T12611]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2358.294631][T12611]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2358.300612][T12611]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2358.306765][T12611]  wiphy_register+0x1f92/0x2b00
[ 2358.312020][T12611]  ? wiphy_unregister+0xb40/0xb40
[ 2358.317078][T12611]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2358.322237][T12611]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2358.328262][T12611]  ieee80211_register_hw+0x23c1/0x40e0
[ 2358.333765][T12611]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2358.339345][T12611]  ? mark_held_locks+0x9f/0xe0
[ 2358.344147][T12611]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2358.350015][T12611]  ? __hrtimer_init+0x145/0x280
[ 2358.354907][T12611]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2358.360687][T12611]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2358.367410][T12611]  hwsim_new_radio_nl+0xacf/0x1210
[ 2358.372565][T12611]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2358.378508][T12611]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2358.385918][T12611]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2358.393246][T12611]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2358.399437][T12611]  ? genl_start+0x660/0x660
[ 2358.403983][T12611]  ? ns_capable+0xe0/0x110
[ 2358.408443][T12611]  genl_rcv_msg+0x4ff/0x7e0
[ 2358.412985][T12611]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2358.419349][T12611]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2358.425364][T12611]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2358.431305][T12611]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2358.437335][T12611]  netlink_rcv_skb+0x165/0x440
[ 2358.442137][T12611]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2358.448517][T12611]  ? netlink_ack+0x1360/0x1360
[ 2358.453330][T12611]  ? down_write_killable+0x250/0x250
[ 2358.458661][T12611]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2358.463985][T12611]  genl_rcv+0x28/0x40
[ 2358.467997][T12611]  netlink_unicast+0x547/0x7f0
[ 2358.472800][T12611]  ? netlink_attachskb+0x890/0x890
[ 2358.477942][T12611]  ? __virt_addr_valid+0x61/0x2e0
[ 2358.483007][T12611]  ? __phys_addr_symbol+0x30/0x70
[ 2358.488075][T12611]  ? __check_object_size+0x323/0x730
[ 2358.493398][T12611]  netlink_sendmsg+0x925/0xe30
[ 2358.498199][T12611]  ? netlink_unicast+0x7f0/0x7f0
[ 2358.503181][T12611]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2358.508499][T12611]  ? netlink_unicast+0x7f0/0x7f0
[ 2358.513474][T12611]  sock_sendmsg+0xde/0x190
[ 2358.517924][T12611]  ____sys_sendmsg+0x733/0x920
[ 2358.522720][T12611]  ? copy_msghdr_from_user+0xfc/0x150
[ 2358.528218][T12611]  ? kernel_sendmsg+0x50/0x50
[ 2358.532936][T12611]  ? futex_unqueue+0xb7/0x120
[ 2358.537651][T12611]  ? futex_wait+0x503/0x680
[ 2358.542194][T12611]  ___sys_sendmsg+0x110/0x1b0
[ 2358.546908][T12611]  ? do_recvmmsg+0x6f0/0x6f0
[ 2358.551538][T12611]  ? __fget_files+0x248/0x480
[ 2358.556260][T12611]  ? lock_downgrade+0x690/0x690
[ 2358.561166][T12611]  ? __fget_files+0x26a/0x480
[ 2358.565892][T12611]  ? __fget_light+0xe5/0x270
[ 2358.570534][T12611]  __sys_sendmsg+0xf7/0x1c0
[ 2358.575075][T12611]  ? __sys_sendmsg_sock+0x40/0x40
[ 2358.580139][T12611]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2358.586097][T12611]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2358.592030][T12611]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2358.597264][T12611]  do_syscall_64+0x39/0xb0
[ 2358.601714][T12611]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2358.607655][T12611] RIP: 0033:0x7f7896a8c389
[ 2358.612184][T12611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2358.631820][T12611] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2358.640261][T12611] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2358.648252][T12611] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2358.656244][T12611] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2358.664233][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2358.672223][T12611] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2358.680235][T12611]  </TASK>
03:20:43 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:43 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x28}]}}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0)

03:20:43 executing program 5:
r0 = socket(0x2, 0x3, 0x6)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0xa, 0x600}, 0x200001cc, &(0x7f0000000240)={0x0}}, 0x0)

03:20:43 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:44 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x0, 0x3}]}]}}, &(0x7f0000001240)=""/4100, 0x36, 0x1004, 0x1}, 0x20)

03:20:44 executing program 5:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bind$tipc(r0, &(0x7f0000000040)=@name, 0x10)

03:20:44 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x28}]}}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0)

[ 2358.905601][T12631] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2358.951839][T12631] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2358.980191][T12631] CPU: 0 PID: 12631 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2358.990707][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2359.000822][T12631] Call Trace:
[ 2359.004146][T12631]  <TASK>
[ 2359.007125][T12631]  dump_stack_lvl+0x136/0x150
[ 2359.011873][T12631]  sysfs_warn_dup+0x80/0xa0
[ 2359.016468][T12631]  sysfs_do_create_link_sd+0x11e/0x140
[ 2359.022041][T12631]  sysfs_create_link+0x63/0xc0
[ 2359.026874][T12631]  device_add+0x585/0x1a40
[ 2359.031379][T12631]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2359.038309][T12631]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2359.044281][T12631]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2359.050358][T12631]  wiphy_register+0x1f92/0x2b00
[ 2359.055302][T12631]  ? wiphy_unregister+0xb40/0xb40
[ 2359.060393][T12631]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2359.065591][T12631]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2359.071651][T12631]  ieee80211_register_hw+0x23c1/0x40e0
[ 2359.077204][T12631]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2359.082825][T12631]  ? mark_held_locks+0x9f/0xe0
[ 2359.087658][T12631]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2359.093558][T12631]  ? __hrtimer_init+0x145/0x280
03:20:44 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:44 executing program 4:
select(0x40, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x6}, 0x0, &(0x7f00000001c0)={0x77359400})

03:20:44 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x28}]}}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0)

03:20:44 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x3, &(0x7f0000000000), 0x4)

[ 2359.098480][T12631]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2359.104316][T12631]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2359.111100][T12631]  hwsim_new_radio_nl+0xacf/0x1210
[ 2359.116298][T12631]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2359.122285][T12631]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2359.129815][T12631]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2359.137202][T12631]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2359.143437][T12631]  ? genl_start+0x660/0x660
[ 2359.148031][T12631]  ? ns_capable+0xe0/0x110
03:20:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a3, &(0x7f00000000c0)={'ip_vti0\x00', 0x0})

[ 2359.152533][T12631]  genl_rcv_msg+0x4ff/0x7e0
[ 2359.157118][T12631]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2359.163525][T12631]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2359.169578][T12631]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2359.175542][T12631]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2359.181610][T12631]  netlink_rcv_skb+0x165/0x440
[ 2359.186448][T12631]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2359.192857][T12631]  ? netlink_ack+0x1360/0x1360
[ 2359.197711][T12631]  ? down_write_killable+0x250/0x250
[ 2359.203079][T12631]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2359.208439][T12631]  genl_rcv+0x28/0x40
[ 2359.212488][T12631]  netlink_unicast+0x547/0x7f0
[ 2359.217329][T12631]  ? netlink_attachskb+0x890/0x890
[ 2359.222508][T12631]  ? __virt_addr_valid+0x61/0x2e0
[ 2359.227615][T12631]  ? __phys_addr_symbol+0x30/0x70
[ 2359.232721][T12631]  ? __check_object_size+0x323/0x730
[ 2359.238084][T12631]  netlink_sendmsg+0x925/0xe30
[ 2359.242923][T12631]  ? netlink_unicast+0x7f0/0x7f0
[ 2359.247935][T12631]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2359.253293][T12631]  ? netlink_unicast+0x7f0/0x7f0
[ 2359.258300][T12631]  sock_sendmsg+0xde/0x190
[ 2359.262780][T12631]  ____sys_sendmsg+0x733/0x920
[ 2359.267607][T12631]  ? copy_msghdr_from_user+0xfc/0x150
[ 2359.273051][T12631]  ? kernel_sendmsg+0x50/0x50
[ 2359.277810][T12631]  ___sys_sendmsg+0x110/0x1b0
[ 2359.282550][T12631]  ? do_recvmmsg+0x6f0/0x6f0
[ 2359.287210][T12631]  ? __fget_files+0x248/0x480
[ 2359.291964][T12631]  ? lock_downgrade+0x690/0x690
[ 2359.296896][T12631]  ? futex_wake_mark+0x1a0/0x1a0
[ 2359.301901][T12631]  ? __fget_files+0x26a/0x480
[ 2359.306659][T12631]  ? __fget_light+0xe5/0x270
[ 2359.311346][T12631]  __sys_sendmsg+0xf7/0x1c0
[ 2359.315912][T12631]  ? __sys_sendmsg_sock+0x40/0x40
[ 2359.321043][T12631]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2359.327039][T12631]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2359.333002][T12631]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2359.338269][T12631]  do_syscall_64+0x39/0xb0
[ 2359.342741][T12631]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2359.348717][T12631] RIP: 0033:0x7f7896a8c389
[ 2359.353173][T12631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2359.372915][T12631] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2359.381387][T12631] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2359.389406][T12631] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2359.397423][T12631] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2359.405443][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2359.413462][T12631] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2359.421507][T12631]  </TASK>
03:20:44 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:44 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x7, &(0x7f0000000000), 0x4)

03:20:44 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe7", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf81bb9f1"], 0x20000600}}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

03:20:44 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0xa, 0x0, 0x0)

03:20:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x6, 0x9, &(0x7f0000000040), 0x4)

03:20:44 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:44 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x24}}, 0x0)

03:20:44 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), 0x4)

03:20:44 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x5, 0x0, 0x0)

03:20:44 executing program 3:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe7", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf81bb9f1"], 0x20000600}}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

[ 2359.642338][T12666] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:44 executing program 2:
r0 = socket(0x0, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2359.757120][T12666] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2359.778117][T12666] CPU: 0 PID: 12666 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2359.788628][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2359.798737][T12666] Call Trace:
[ 2359.802060][T12666]  <TASK>
[ 2359.805053][T12666]  dump_stack_lvl+0x136/0x150
[ 2359.809800][T12666]  sysfs_warn_dup+0x80/0xa0
[ 2359.814379][T12666]  sysfs_do_create_link_sd+0x11e/0x140
[ 2359.819901][T12666]  sysfs_create_link+0x63/0xc0
[ 2359.824722][T12666]  device_add+0x585/0x1a40
[ 2359.829205][T12666]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2359.836122][T12666]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2359.842102][T12666]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2359.848163][T12666]  wiphy_register+0x1f92/0x2b00
[ 2359.853099][T12666]  ? wiphy_unregister+0xb40/0xb40
[ 2359.858194][T12666]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2359.863397][T12666]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2359.869472][T12666]  ieee80211_register_hw+0x23c1/0x40e0
[ 2359.875006][T12666]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2359.880635][T12666]  ? mark_held_locks+0x9f/0xe0
[ 2359.885465][T12666]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2359.891353][T12666]  ? __hrtimer_init+0x145/0x280
[ 2359.896266][T12666]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2359.902093][T12666]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2359.908866][T12666]  hwsim_new_radio_nl+0xacf/0x1210
[ 2359.914047][T12666]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2359.920021][T12666]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2359.927458][T12666]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2359.934912][T12666]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2359.941138][T12666]  ? genl_start+0x660/0x660
[ 2359.945723][T12666]  ? ns_capable+0xe0/0x110
[ 2359.950217][T12666]  genl_rcv_msg+0x4ff/0x7e0
[ 2359.954791][T12666]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2359.961197][T12666]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2359.967255][T12666]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2359.973227][T12666]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2359.979297][T12666]  netlink_rcv_skb+0x165/0x440
[ 2359.984134][T12666]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2359.990552][T12666]  ? netlink_ack+0x1360/0x1360
[ 2359.995413][T12666]  ? down_write_killable+0x250/0x250
[ 2360.000773][T12666]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2360.006140][T12666]  genl_rcv+0x28/0x40
[ 2360.010184][T12666]  netlink_unicast+0x547/0x7f0
[ 2360.015019][T12666]  ? netlink_attachskb+0x890/0x890
[ 2360.020188][T12666]  ? __virt_addr_valid+0x61/0x2e0
[ 2360.025288][T12666]  ? __phys_addr_symbol+0x30/0x70
[ 2360.030383][T12666]  ? __check_object_size+0x323/0x730
[ 2360.035743][T12666]  netlink_sendmsg+0x925/0xe30
[ 2360.040584][T12666]  ? netlink_unicast+0x7f0/0x7f0
[ 2360.045612][T12666]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2360.051132][T12666]  ? netlink_unicast+0x7f0/0x7f0
[ 2360.056142][T12666]  sock_sendmsg+0xde/0x190
[ 2360.060625][T12666]  ____sys_sendmsg+0x733/0x920
[ 2360.065451][T12666]  ? copy_msghdr_from_user+0xfc/0x150
[ 2360.070913][T12666]  ? kernel_sendmsg+0x50/0x50
[ 2360.075673][T12666]  ? futex_unqueue+0xb7/0x120
[ 2360.080427][T12666]  ? futex_wait+0x503/0x680
[ 2360.085041][T12666]  ___sys_sendmsg+0x110/0x1b0
[ 2360.089802][T12666]  ? do_recvmmsg+0x6f0/0x6f0
[ 2360.094488][T12666]  ? __fget_files+0x248/0x480
[ 2360.099257][T12666]  ? lock_downgrade+0x690/0x690
03:20:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18)

[ 2360.104206][T12666]  ? __fget_files+0x26a/0x480
[ 2360.109006][T12666]  ? __fget_light+0xe5/0x270
[ 2360.113773][T12666]  __sys_sendmsg+0xf7/0x1c0
[ 2360.118344][T12666]  ? __sys_sendmsg_sock+0x40/0x40
[ 2360.123447][T12666]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2360.129458][T12666]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2360.135438][T12666]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2360.140720][T12666]  do_syscall_64+0x39/0xb0
[ 2360.145197][T12666]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2360.151176][T12666] RIP: 0033:0x7f7896a8c389
[ 2360.155640][T12666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2360.175308][T12666] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2360.183788][T12666] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2360.191812][T12666] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2360.199831][T12666] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2360.207854][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2360.215873][T12666] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2360.223924][T12666]  </TASK>
03:20:45 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

03:20:45 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

03:20:45 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e)

03:20:45 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c)

03:20:45 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:45 executing program 4:
socket(0x18, 0x0, 0x80000001)

03:20:45 executing program 3:
bpf$PROG_LOAD(0x23, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:45 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffd}}, @tclass={{0x14}}, @dstopts={{0x18}}], 0x48}}], 0x1, 0x0)

[ 2360.564405][T12699] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2360.597980][T12699] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2360.614997][T12699] CPU: 0 PID: 12699 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2360.625519][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2360.635628][T12699] Call Trace:
[ 2360.638946][T12699]  <TASK>
[ 2360.641920][T12699]  dump_stack_lvl+0x136/0x150
[ 2360.646669][T12699]  sysfs_warn_dup+0x80/0xa0
[ 2360.651259][T12699]  sysfs_do_create_link_sd+0x11e/0x140
[ 2360.656782][T12699]  sysfs_create_link+0x63/0xc0
[ 2360.661611][T12699]  device_add+0x585/0x1a40
[ 2360.666110][T12699]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2360.673038][T12699]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2360.679016][T12699]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2360.685093][T12699]  wiphy_register+0x1f92/0x2b00
[ 2360.690029][T12699]  ? wiphy_unregister+0xb40/0xb40
[ 2360.695110][T12699]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2360.700298][T12699]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2360.706350][T12699]  ieee80211_register_hw+0x23c1/0x40e0
[ 2360.711894][T12699]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2360.717503][T12699]  ? mark_held_locks+0x9f/0xe0
[ 2360.722335][T12699]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2360.728221][T12699]  ? __hrtimer_init+0x145/0x280
[ 2360.733144][T12699]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2360.739049][T12699]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2360.745809][T12699]  hwsim_new_radio_nl+0xacf/0x1210
[ 2360.750996][T12699]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2360.756975][T12699]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2360.764413][T12699]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2360.771774][T12699]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2360.778007][T12699]  ? genl_start+0x660/0x660
[ 2360.782596][T12699]  ? ns_capable+0xe0/0x110
[ 2360.787089][T12699]  genl_rcv_msg+0x4ff/0x7e0
[ 2360.791662][T12699]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2360.798063][T12699]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2360.807233][T12699]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2360.813197][T12699]  ? ___slab_alloc+0x9df/0x1400
[ 2360.818133][T12699]  netlink_rcv_skb+0x165/0x440
[ 2360.822965][T12699]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2360.829366][T12699]  ? netlink_ack+0x1360/0x1360
[ 2360.834224][T12699]  ? down_write_killable+0x250/0x250
[ 2360.839578][T12699]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2360.844929][T12699]  genl_rcv+0x28/0x40
[ 2360.848979][T12699]  netlink_unicast+0x547/0x7f0
[ 2360.853816][T12699]  ? netlink_attachskb+0x890/0x890
[ 2360.858993][T12699]  ? __virt_addr_valid+0x61/0x2e0
[ 2360.864090][T12699]  ? __phys_addr_symbol+0x30/0x70
[ 2360.869183][T12699]  ? __check_object_size+0x323/0x730
[ 2360.874549][T12699]  netlink_sendmsg+0x925/0xe30
[ 2360.879385][T12699]  ? netlink_unicast+0x7f0/0x7f0
[ 2360.884392][T12699]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2360.889733][T12699]  ? netlink_unicast+0x7f0/0x7f0
[ 2360.894730][T12699]  sock_sendmsg+0xde/0x190
[ 2360.899209][T12699]  ____sys_sendmsg+0x733/0x920
[ 2360.904030][T12699]  ? copy_msghdr_from_user+0xfc/0x150
[ 2360.909470][T12699]  ? kernel_sendmsg+0x50/0x50
[ 2360.914236][T12699]  ___sys_sendmsg+0x110/0x1b0
[ 2360.918979][T12699]  ? do_recvmmsg+0x6f0/0x6f0
[ 2360.923734][T12699]  ? __fget_files+0x248/0x480
[ 2360.928495][T12699]  ? lock_downgrade+0x690/0x690
[ 2360.933424][T12699]  ? futex_wake_mark+0x1a0/0x1a0
[ 2360.938435][T12699]  ? __fget_files+0x26a/0x480
[ 2360.943209][T12699]  ? __fget_light+0xe5/0x270
[ 2360.947888][T12699]  __sys_sendmsg+0xf7/0x1c0
[ 2360.952460][T12699]  ? __sys_sendmsg_sock+0x40/0x40
[ 2360.957557][T12699]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2360.963548][T12699]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2360.969508][T12699]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2360.974789][T12699]  do_syscall_64+0x39/0xb0
[ 2360.979265][T12699]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2360.985252][T12699] RIP: 0033:0x7f7896a8c389
[ 2360.989725][T12699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:20:46 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @loopback, @loopback, 0x0, 0x100})

[ 2361.009388][T12699] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2361.017865][T12699] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2361.025892][T12699] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2361.033911][T12699] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2361.041933][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2361.049949][T12699] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2361.058009][T12699]  </TASK>
03:20:46 executing program 3:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket(0x1d, 0x80000, 0x0)

03:20:46 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:46 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:46 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

[ 2361.202379][T12715] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2361.221729][T12715] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2361.229472][T12715] CPU: 1 PID: 12715 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2361.239947][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2361.250050][T12715] Call Trace:
[ 2361.253388][T12715]  <TASK>
[ 2361.256370][T12715]  dump_stack_lvl+0x136/0x150
[ 2361.261124][T12715]  sysfs_warn_dup+0x80/0xa0
[ 2361.265720][T12715]  sysfs_do_create_link_sd+0x11e/0x140
[ 2361.271251][T12715]  sysfs_create_link+0x63/0xc0
[ 2361.276078][T12715]  device_add+0x585/0x1a40
[ 2361.280581][T12715]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2361.287507][T12715]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2361.291853][T12708] can: request_module (can-proto-0) failed.
03:20:46 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="f1", 0x1}], 0x1e}, 0x0)

03:20:46 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x24, 0x0, 0x0)

03:20:46 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2361.293455][T12715]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2361.293528][T12715]  wiphy_register+0x1f92/0x2b00
[ 2361.310347][T12715]  ? wiphy_unregister+0xb40/0xb40
[ 2361.315445][T12715]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2361.320643][T12715]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2361.326700][T12715]  ieee80211_register_hw+0x23c1/0x40e0
[ 2361.332253][T12715]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2361.337888][T12715]  ? mark_held_locks+0x9f/0xe0
[ 2361.342729][T12715]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2361.348713][T12715]  ? __hrtimer_init+0x145/0x280
[ 2361.353632][T12715]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2361.359460][T12715]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2361.366231][T12715]  hwsim_new_radio_nl+0xacf/0x1210
[ 2361.371432][T12715]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2361.377424][T12715]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2361.384888][T12715]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2361.392266][T12715]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2361.398500][T12715]  ? genl_start+0x660/0x660
[ 2361.403095][T12715]  ? ns_capable+0xe0/0x110
[ 2361.407598][T12715]  genl_rcv_msg+0x4ff/0x7e0
[ 2361.412192][T12715]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2361.418584][T12715]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2361.424635][T12715]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2361.430600][T12715]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2361.436667][T12715]  netlink_rcv_skb+0x165/0x440
[ 2361.441507][T12715]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2361.447925][T12715]  ? netlink_ack+0x1360/0x1360
[ 2361.452784][T12715]  ? down_write_killable+0x250/0x250
[ 2361.458155][T12715]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2361.463516][T12715]  genl_rcv+0x28/0x40
[ 2361.467566][T12715]  netlink_unicast+0x547/0x7f0
[ 2361.472423][T12715]  ? netlink_attachskb+0x890/0x890
[ 2361.477592][T12715]  ? __virt_addr_valid+0x61/0x2e0
[ 2361.482690][T12715]  ? __phys_addr_symbol+0x30/0x70
[ 2361.487787][T12715]  ? __check_object_size+0x323/0x730
[ 2361.493144][T12715]  netlink_sendmsg+0x925/0xe30
[ 2361.497986][T12715]  ? netlink_unicast+0x7f0/0x7f0
[ 2361.503001][T12715]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2361.508343][T12715]  ? netlink_unicast+0x7f0/0x7f0
[ 2361.513348][T12715]  sock_sendmsg+0xde/0x190
[ 2361.517830][T12715]  ____sys_sendmsg+0x733/0x920
[ 2361.522655][T12715]  ? copy_msghdr_from_user+0xfc/0x150
[ 2361.528101][T12715]  ? kernel_sendmsg+0x50/0x50
[ 2361.532861][T12715]  ___sys_sendmsg+0x110/0x1b0
[ 2361.537600][T12715]  ? do_recvmmsg+0x6f0/0x6f0
[ 2361.542259][T12715]  ? __fget_files+0x248/0x480
[ 2361.547014][T12715]  ? lock_downgrade+0x690/0x690
03:20:46 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="f1", 0x1}], 0x1}, 0x0)

[ 2361.551955][T12715]  ? futex_wake_mark+0x1a0/0x1a0
[ 2361.556969][T12715]  ? __fget_files+0x26a/0x480
[ 2361.561734][T12715]  ? __fget_light+0xe5/0x270
[ 2361.566428][T12715]  __sys_sendmsg+0xf7/0x1c0
[ 2361.571001][T12715]  ? __sys_sendmsg_sock+0x40/0x40
[ 2361.576098][T12715]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2361.582093][T12715]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2361.588068][T12715]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2361.593442][T12715]  do_syscall_64+0x39/0xb0
[ 2361.598005][T12715]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2361.603978][T12715] RIP: 0033:0x7f7896a8c389
[ 2361.608444][T12715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2361.628110][T12715] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2361.636588][T12715] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2361.644617][T12715] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
03:20:46 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x2c)

03:20:46 executing program 5:
socketpair(0x15, 0x5, 0x0, &(0x7f00000009c0))

[ 2361.652636][T12715] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2361.660661][T12715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2361.668680][T12715] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2361.676737][T12715]  </TASK>
03:20:46 executing program 2:
socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:46 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x2c)

03:20:46 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:46 executing program 5:
socketpair(0x15, 0x5, 0x0, &(0x7f00000009c0))

03:20:47 executing program 2:
socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:47 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10)

[ 2362.042693][T12743] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2362.062463][T12743] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2362.070286][T12743] CPU: 1 PID: 12743 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2362.080779][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2362.090885][T12743] Call Trace:
[ 2362.094204][T12743]  <TASK>
[ 2362.097171][T12743]  dump_stack_lvl+0x136/0x150
[ 2362.101912][T12743]  sysfs_warn_dup+0x80/0xa0
[ 2362.106503][T12743]  sysfs_do_create_link_sd+0x11e/0x140
[ 2362.112029][T12743]  sysfs_create_link+0x63/0xc0
[ 2362.116893][T12743]  device_add+0x585/0x1a40
[ 2362.121395][T12743]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2362.128400][T12743]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2362.134364][T12743]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2362.140409][T12743]  wiphy_register+0x1f92/0x2b00
[ 2362.145340][T12743]  ? wiphy_unregister+0xb40/0xb40
[ 2362.150433][T12743]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2362.155601][T12743]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2362.161628][T12743]  ieee80211_register_hw+0x23c1/0x40e0
[ 2362.167146][T12743]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2362.172729][T12743]  ? mark_held_locks+0x9f/0xe0
[ 2362.177531][T12743]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2362.183388][T12743]  ? __hrtimer_init+0x145/0x280
[ 2362.188281][T12743]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2362.194060][T12743]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2362.200790][T12743]  hwsim_new_radio_nl+0xacf/0x1210
[ 2362.205949][T12743]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2362.211912][T12743]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2362.219325][T12743]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2362.226666][T12743]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2362.232864][T12743]  ? genl_start+0x660/0x660
[ 2362.237519][T12743]  ? ns_capable+0xe0/0x110
[ 2362.241998][T12743]  genl_rcv_msg+0x4ff/0x7e0
[ 2362.246556][T12743]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2362.253024][T12743]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2362.259056][T12743]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2362.264997][T12743]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2362.271031][T12743]  netlink_rcv_skb+0x165/0x440
[ 2362.275851][T12743]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2362.282246][T12743]  ? netlink_ack+0x1360/0x1360
[ 2362.287085][T12743]  ? down_write_killable+0x250/0x250
[ 2362.292419][T12743]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2362.297763][T12743]  genl_rcv+0x28/0x40
[ 2362.301791][T12743]  netlink_unicast+0x547/0x7f0
[ 2362.306599][T12743]  ? netlink_attachskb+0x890/0x890
[ 2362.311774][T12743]  ? __virt_addr_valid+0x61/0x2e0
[ 2362.316875][T12743]  ? __phys_addr_symbol+0x30/0x70
[ 2362.321953][T12743]  ? __check_object_size+0x323/0x730
[ 2362.327287][T12743]  netlink_sendmsg+0x925/0xe30
[ 2362.332109][T12743]  ? netlink_unicast+0x7f0/0x7f0
[ 2362.337096][T12743]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2362.342425][T12743]  ? netlink_unicast+0x7f0/0x7f0
[ 2362.347400][T12743]  sock_sendmsg+0xde/0x190
[ 2362.351853][T12743]  ____sys_sendmsg+0x733/0x920
[ 2362.356648][T12743]  ? copy_msghdr_from_user+0xfc/0x150
[ 2362.362056][T12743]  ? kernel_sendmsg+0x50/0x50
[ 2362.366869][T12743]  ___sys_sendmsg+0x110/0x1b0
[ 2362.371595][T12743]  ? do_recvmmsg+0x6f0/0x6f0
[ 2362.376223][T12743]  ? __fget_files+0x248/0x480
[ 2362.380947][T12743]  ? lock_downgrade+0x690/0x690
[ 2362.388710][T12743]  ? futex_wake_mark+0x1a0/0x1a0
[ 2362.393690][T12743]  ? __fget_files+0x26a/0x480
[ 2362.398420][T12743]  ? __fget_light+0xe5/0x270
[ 2362.403066][T12743]  __sys_sendmsg+0xf7/0x1c0
[ 2362.407603][T12743]  ? __sys_sendmsg_sock+0x40/0x40
[ 2362.412670][T12743]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2362.418624][T12743]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2362.424560][T12743]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2362.429804][T12743]  do_syscall_64+0x39/0xb0
[ 2362.434255][T12743]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2362.440195][T12743] RIP: 0033:0x7f7896a8c389
[ 2362.444638][T12743] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2362.464359][T12743] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2362.472895][T12743] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2362.480890][T12743] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2362.490707][T12743] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2362.498715][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2362.506706][T12743] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2362.514720][T12743]  </TASK>
03:20:47 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00')

03:20:47 executing program 5:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10)

03:20:47 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:47 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xc0001, 0x0)

03:20:47 executing program 2:
socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:47 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x23}, 0x48)

03:20:47 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x1, 0x3}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={r0, 0x58, &(0x7f0000001200)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x0, 0x8}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001180)={r2, 0x0, 0x0}, 0x20)

03:20:47 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x5f)

[ 2362.693019][T12753] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:47 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040)="0251676d", 0x4, 0x4000000, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)

03:20:47 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2362.774228][T12753] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2362.800816][T12753] CPU: 1 PID: 12753 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2362.811326][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
03:20:47 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

[ 2362.821439][T12753] Call Trace:
[ 2362.824763][T12753]  <TASK>
[ 2362.827738][T12753]  dump_stack_lvl+0x136/0x150
[ 2362.832485][T12753]  sysfs_warn_dup+0x80/0xa0
[ 2362.837078][T12753]  sysfs_do_create_link_sd+0x11e/0x140
[ 2362.842609][T12753]  sysfs_create_link+0x63/0xc0
[ 2362.847442][T12753]  device_add+0x585/0x1a40
[ 2362.851938][T12753]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2362.858867][T12753]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2362.864938][T12753]  ? ieee80211_set_bitrate_flags+0x222/0x660
03:20:48 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

[ 2362.871025][T12753]  wiphy_register+0x1f92/0x2b00
[ 2362.875969][T12753]  ? wiphy_unregister+0xb40/0xb40
[ 2362.881069][T12753]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2362.886272][T12753]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2362.892331][T12753]  ieee80211_register_hw+0x23c1/0x40e0
[ 2362.897869][T12753]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2362.903483][T12753]  ? mark_held_locks+0x9f/0xe0
[ 2362.908411][T12753]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2362.914301][T12753]  ? __hrtimer_init+0x145/0x280
[ 2362.919222][T12753]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2362.925037][T12753]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2362.931813][T12753]  hwsim_new_radio_nl+0xacf/0x1210
[ 2362.937002][T12753]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2362.942983][T12753]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2362.950512][T12753]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2362.958054][T12753]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2362.964281][T12753]  ? genl_start+0x660/0x660
[ 2362.968967][T12753]  ? ns_capable+0xe0/0x110
[ 2362.973471][T12753]  genl_rcv_msg+0x4ff/0x7e0
[ 2362.978045][T12753]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2362.984442][T12753]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2362.990506][T12753]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2362.996470][T12753]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2363.002535][T12753]  netlink_rcv_skb+0x165/0x440
[ 2363.007372][T12753]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2363.013777][T12753]  ? netlink_ack+0x1360/0x1360
[ 2363.018622][T12753]  ? down_write_killable+0x250/0x250
[ 2363.023979][T12753]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2363.029343][T12753]  genl_rcv+0x28/0x40
[ 2363.033389][T12753]  netlink_unicast+0x547/0x7f0
[ 2363.038221][T12753]  ? netlink_attachskb+0x890/0x890
[ 2363.043396][T12753]  ? __virt_addr_valid+0x61/0x2e0
[ 2363.049719][T12753]  ? __phys_addr_symbol+0x30/0x70
[ 2363.054819][T12753]  ? __check_object_size+0x323/0x730
[ 2363.060173][T12753]  netlink_sendmsg+0x925/0xe30
[ 2363.065012][T12753]  ? netlink_unicast+0x7f0/0x7f0
[ 2363.070025][T12753]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2363.075371][T12753]  ? netlink_unicast+0x7f0/0x7f0
[ 2363.080372][T12753]  sock_sendmsg+0xde/0x190
[ 2363.084849][T12753]  ____sys_sendmsg+0x733/0x920
[ 2363.089676][T12753]  ? copy_msghdr_from_user+0xfc/0x150
[ 2363.095127][T12753]  ? kernel_sendmsg+0x50/0x50
[ 2363.099869][T12753]  ? futex_unqueue+0xb7/0x120
[ 2363.104605][T12753]  ? futex_wait+0x503/0x680
[ 2363.109176][T12753]  ___sys_sendmsg+0x110/0x1b0
[ 2363.113918][T12753]  ? do_recvmmsg+0x6f0/0x6f0
[ 2363.118575][T12753]  ? __fget_files+0x248/0x480
03:20:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xfffffffffffffee2)

[ 2363.123324][T12753]  ? lock_downgrade+0x690/0x690
[ 2363.128270][T12753]  ? __fget_files+0x26a/0x480
[ 2363.133049][T12753]  ? __fget_light+0xe5/0x270
[ 2363.137728][T12753]  __sys_sendmsg+0xf7/0x1c0
[ 2363.142309][T12753]  ? __sys_sendmsg_sock+0x40/0x40
[ 2363.147414][T12753]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2363.153413][T12753]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2363.159386][T12753]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2363.164657][T12753]  do_syscall_64+0x39/0xb0
[ 2363.169137][T12753]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2363.175112][T12753] RIP: 0033:0x7f7896a8c389
[ 2363.179572][T12753] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2363.199234][T12753] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2363.207707][T12753] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2363.215759][T12753] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2363.223777][T12753] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2363.231800][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2363.239842][T12753] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2363.247884][T12753]  </TASK>
03:20:48 executing program 4:
r0 = socket(0x2, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0))

03:20:48 executing program 0:
r0 = socket(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @authinfo={0x10}], 0x2c}, 0x0)

03:20:48 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0x2}, 0x10)

03:20:48 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:48 executing program 3:
r0 = socket(0x2, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c)

03:20:48 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000240)='W', 0x1, 0x0, &(0x7f0000000340)={0x10, 0x2}, 0x10)

03:20:48 executing program 5:
r0 = socket(0x1c, 0x10000001, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000400), 0x8)

03:20:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, &(0x7f0000000040)=0xfffffffffffffdd8)

03:20:48 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:48 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000580), 0x4)

03:20:48 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000002c0), 0x90)

03:20:48 executing program 3:
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @remote, "9ade006e09f800"}}}}, 0x0)

03:20:48 executing program 5:
r0 = socket(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@authinfo={0x10}], 0x10}, 0x0)

03:20:48 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000140), 0x8)

03:20:48 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2363.739234][T12796] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2363.795860][T12796] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2363.814607][T12796] CPU: 0 PID: 12796 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2363.825113][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2363.835224][T12796] Call Trace:
[ 2363.838555][T12796]  <TASK>
[ 2363.841531][T12796]  dump_stack_lvl+0x136/0x150
[ 2363.846285][T12796]  sysfs_warn_dup+0x80/0xa0
[ 2363.850875][T12796]  sysfs_do_create_link_sd+0x11e/0x140
[ 2363.856402][T12796]  sysfs_create_link+0x63/0xc0
[ 2363.861224][T12796]  device_add+0x585/0x1a40
[ 2363.865721][T12796]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2363.872650][T12796]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2363.878625][T12796]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2363.884695][T12796]  wiphy_register+0x1f92/0x2b00
[ 2363.889629][T12796]  ? wiphy_unregister+0xb40/0xb40
[ 2363.894711][T12796]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2363.899919][T12796]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2363.905968][T12796]  ieee80211_register_hw+0x23c1/0x40e0
[ 2363.911505][T12796]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2363.917113][T12796]  ? mark_held_locks+0x9f/0xe0
[ 2363.921939][T12796]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2363.927814][T12796]  ? __hrtimer_init+0x145/0x280
[ 2363.932813][T12796]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2363.938605][T12796]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2363.945342][T12796]  hwsim_new_radio_nl+0xacf/0x1210
[ 2363.950514][T12796]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2363.956481][T12796]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2363.963896][T12796]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2363.971228][T12796]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2363.977440][T12796]  ? genl_start+0x660/0x660
[ 2363.981991][T12796]  ? ns_capable+0xe0/0x110
[ 2363.986460][T12796]  genl_rcv_msg+0x4ff/0x7e0
[ 2363.991005][T12796]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2363.997370][T12796]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2364.003389][T12796]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2364.009322][T12796]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2364.015354][T12796]  netlink_rcv_skb+0x165/0x440
[ 2364.020153][T12796]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2364.026516][T12796]  ? netlink_ack+0x1360/0x1360
[ 2364.031335][T12796]  ? down_write_killable+0x250/0x250
[ 2364.036663][T12796]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2364.041986][T12796]  genl_rcv+0x28/0x40
[ 2364.046010][T12796]  netlink_unicast+0x547/0x7f0
[ 2364.050819][T12796]  ? netlink_attachskb+0x890/0x890
[ 2364.055965][T12796]  ? __virt_addr_valid+0x61/0x2e0
[ 2364.061037][T12796]  ? __phys_addr_symbol+0x30/0x70
[ 2364.066103][T12796]  ? __check_object_size+0x323/0x730
[ 2364.071427][T12796]  netlink_sendmsg+0x925/0xe30
[ 2364.076230][T12796]  ? netlink_unicast+0x7f0/0x7f0
[ 2364.081211][T12796]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2364.086526][T12796]  ? netlink_unicast+0x7f0/0x7f0
[ 2364.091497][T12796]  sock_sendmsg+0xde/0x190
[ 2364.095945][T12796]  ____sys_sendmsg+0x733/0x920
[ 2364.100829][T12796]  ? copy_msghdr_from_user+0xfc/0x150
[ 2364.106237][T12796]  ? kernel_sendmsg+0x50/0x50
[ 2364.110966][T12796]  ___sys_sendmsg+0x110/0x1b0
[ 2364.115682][T12796]  ? do_recvmmsg+0x6f0/0x6f0
[ 2364.120401][T12796]  ? __fget_files+0x248/0x480
[ 2364.125120][T12796]  ? lock_downgrade+0x690/0x690
[ 2364.130025][T12796]  ? futex_wake_mark+0x1a0/0x1a0
[ 2364.135006][T12796]  ? __fget_files+0x26a/0x480
[ 2364.139735][T12796]  ? __fget_light+0xe5/0x270
[ 2364.144375][T12796]  __sys_sendmsg+0xf7/0x1c0
[ 2364.148928][T12796]  ? __sys_sendmsg_sock+0x40/0x40
[ 2364.154007][T12796]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2364.159989][T12796]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2364.165948][T12796]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2364.171206][T12796]  do_syscall_64+0x39/0xb0
[ 2364.175671][T12796]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2364.181635][T12796] RIP: 0033:0x7f7896a8c389
[ 2364.186091][T12796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2364.205750][T12796] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2364.214209][T12796] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2364.222228][T12796] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2364.230241][T12796] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2364.238273][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2364.246274][T12796] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2364.254297][T12796]  </TASK>
03:20:49 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:49 executing program 3:
r0 = socket(0x1c, 0x10000001, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

03:20:49 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006240)=ANY=[@ANYBLOB="1400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000e000000200000000100000000000000000000000070000001400000000000000000000000200000003000000000000001c"], 0x80}, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

03:20:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003800)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006240)=ANY=[@ANYBLOB="1400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000e0000002000000001000000000000000000000000700000014000000000000000100000002"], 0x80}, 0x0)

03:20:49 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003800)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x0)

03:20:49 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:49 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080fff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8)

03:20:49 executing program 5:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], &(0x7f0000000180)=""/181, 0x28, 0xb5, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}}, 0x10)

03:20:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, 0x0}, 0x10002)

03:20:49 executing program 3:
r0 = socket(0x1c, 0x10000001, 0x84)
sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000080)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000380)=[@rights, @rights], 0x20}, 0x0)

03:20:49 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2364.442621][T12816] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2364.479225][T12816] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2364.513069][T12816] CPU: 1 PID: 12816 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2364.523588][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2364.533701][T12816] Call Trace:
[ 2364.537025][T12816]  <TASK>
[ 2364.540001][T12816]  dump_stack_lvl+0x136/0x150
[ 2364.544751][T12816]  sysfs_warn_dup+0x80/0xa0
[ 2364.549336][T12816]  sysfs_do_create_link_sd+0x11e/0x140
[ 2364.554865][T12816]  sysfs_create_link+0x63/0xc0
[ 2364.559698][T12816]  device_add+0x585/0x1a40
[ 2364.564198][T12816]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2364.571128][T12816]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2364.577102][T12816]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2364.583173][T12816]  wiphy_register+0x1f92/0x2b00
[ 2364.588114][T12816]  ? wiphy_unregister+0xb40/0xb40
[ 2364.593205][T12816]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2364.598407][T12816]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2364.604478][T12816]  ieee80211_register_hw+0x23c1/0x40e0
[ 2364.610024][T12816]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2364.615640][T12816]  ? mark_held_locks+0x9f/0xe0
[ 2364.620506][T12816]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2364.626409][T12816]  ? __hrtimer_init+0x145/0x280
[ 2364.631337][T12816]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2364.637176][T12816]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2364.643942][T12816]  hwsim_new_radio_nl+0xacf/0x1210
[ 2364.649133][T12816]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2364.655127][T12816]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2364.662581][T12816]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2364.669944][T12816]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2364.676176][T12816]  ? genl_start+0x660/0x660
[ 2364.680772][T12816]  ? ns_capable+0xe0/0x110
[ 2364.685294][T12816]  genl_rcv_msg+0x4ff/0x7e0
[ 2364.689868][T12816]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2364.696265][T12816]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2364.702321][T12816]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2364.708298][T12816]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2364.714378][T12816]  netlink_rcv_skb+0x165/0x440
[ 2364.719210][T12816]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2364.725620][T12816]  ? netlink_ack+0x1360/0x1360
[ 2364.730471][T12816]  ? down_write_killable+0x250/0x250
[ 2364.735849][T12816]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2364.741206][T12816]  genl_rcv+0x28/0x40
[ 2364.745246][T12816]  netlink_unicast+0x547/0x7f0
[ 2364.750079][T12816]  ? netlink_attachskb+0x890/0x890
[ 2364.755250][T12816]  ? __virt_addr_valid+0x61/0x2e0
[ 2364.760346][T12816]  ? __phys_addr_symbol+0x30/0x70
[ 2364.765449][T12816]  ? __check_object_size+0x323/0x730
[ 2364.770814][T12816]  netlink_sendmsg+0x925/0xe30
[ 2364.775651][T12816]  ? netlink_unicast+0x7f0/0x7f0
[ 2364.780661][T12816]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2364.786007][T12816]  ? netlink_unicast+0x7f0/0x7f0
[ 2364.791024][T12816]  sock_sendmsg+0xde/0x190
[ 2364.795507][T12816]  ____sys_sendmsg+0x733/0x920
[ 2364.800328][T12816]  ? copy_msghdr_from_user+0xfc/0x150
[ 2364.805780][T12816]  ? kernel_sendmsg+0x50/0x50
[ 2364.810558][T12816]  ___sys_sendmsg+0x110/0x1b0
[ 2364.815340][T12816]  ? do_recvmmsg+0x6f0/0x6f0
[ 2364.819997][T12816]  ? __fget_files+0x248/0x480
[ 2364.824747][T12816]  ? lock_downgrade+0x690/0x690
[ 2364.829677][T12816]  ? futex_wake_mark+0x1a0/0x1a0
[ 2364.834686][T12816]  ? __fget_files+0x26a/0x480
[ 2364.839450][T12816]  ? __fget_light+0xe5/0x270
[ 2364.844139][T12816]  __sys_sendmsg+0xf7/0x1c0
[ 2364.848705][T12816]  ? __sys_sendmsg_sock+0x40/0x40
[ 2364.853799][T12816]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2364.859791][T12816]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2364.865749][T12816]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2364.871018][T12816]  do_syscall_64+0x39/0xb0
[ 2364.875469][T12816]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2364.881412][T12816] RIP: 0033:0x7f7896a8c389
[ 2364.885853][T12816] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2364.905493][T12816] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
03:20:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_int(r0, 0xffff, 0x400, &(0x7f0000000100), &(0x7f0000000140)=0x4)

[ 2364.913951][T12816] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2364.921952][T12816] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2364.929954][T12816] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2364.937952][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2364.946035][T12816] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2364.954155][T12816]  </TASK>
03:20:50 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:50 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1c, 0x1c, 0x2}, 0x1c)

03:20:50 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)

03:20:50 executing program 0:
r0 = socket(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000001c0), 0xc)

03:20:50 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="2c0000008400008fb4f038a8dc720000000006009a85df2a397afc1653d1102c0000ffff00", @ANYRES32=0x0, @ANYBLOB="140000008400000001"], 0xa4}, 0x0)

03:20:50 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:50 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x70}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2365.261765][T12844] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2365.319131][T12844] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2365.348603][T12844] CPU: 0 PID: 12844 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2365.359118][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2365.369255][T12844] Call Trace:
[ 2365.372589][T12844]  <TASK>
[ 2365.375569][T12844]  dump_stack_lvl+0x136/0x150
[ 2365.380322][T12844]  sysfs_warn_dup+0x80/0xa0
[ 2365.384923][T12844]  sysfs_do_create_link_sd+0x11e/0x140
[ 2365.390478][T12844]  sysfs_create_link+0x63/0xc0
[ 2365.395350][T12844]  device_add+0x585/0x1a40
[ 2365.399855][T12844]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2365.408272][T12844]  ? __sanitizer_cov_trace_switch+0x54/0x90
03:20:50 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2365.414257][T12844]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2365.420343][T12844]  wiphy_register+0x1f92/0x2b00
[ 2365.425307][T12844]  ? wiphy_unregister+0xb40/0xb40
[ 2365.430421][T12844]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2365.435625][T12844]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2365.441695][T12844]  ieee80211_register_hw+0x23c1/0x40e0
[ 2365.447240][T12844]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2365.452866][T12844]  ? mark_held_locks+0x9f/0xe0
[ 2365.457717][T12844]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2365.463615][T12844]  ? __hrtimer_init+0x145/0x280
[ 2365.468537][T12844]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2365.474446][T12844]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2365.481218][T12844]  hwsim_new_radio_nl+0xacf/0x1210
[ 2365.486414][T12844]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2365.492407][T12844]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2365.499850][T12844]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2365.507221][T12844]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2365.513459][T12844]  ? genl_start+0x660/0x660
[ 2365.518055][T12844]  ? ns_capable+0xe0/0x110
[ 2365.522566][T12844]  genl_rcv_msg+0x4ff/0x7e0
[ 2365.527160][T12844]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2365.533570][T12844]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2365.539627][T12844]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2365.545600][T12844]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2365.551718][T12844]  netlink_rcv_skb+0x165/0x440
[ 2365.556562][T12844]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2365.563131][T12844]  ? netlink_ack+0x1360/0x1360
03:20:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)

03:20:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000280)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2365.568007][T12844]  ? down_write_killable+0x250/0x250
[ 2365.573379][T12844]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2365.578747][T12844]  genl_rcv+0x28/0x40
[ 2365.582884][T12844]  netlink_unicast+0x547/0x7f0
[ 2365.587733][T12844]  ? netlink_attachskb+0x890/0x890
[ 2365.592914][T12844]  ? __virt_addr_valid+0x61/0x2e0
[ 2365.598029][T12844]  ? __phys_addr_symbol+0x30/0x70
[ 2365.603151][T12844]  ? __check_object_size+0x323/0x730
[ 2365.608516][T12844]  netlink_sendmsg+0x925/0xe30
[ 2365.613373][T12844]  ? netlink_unicast+0x7f0/0x7f0
[ 2365.618662][T12844]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2365.624195][T12844]  ? netlink_unicast+0x7f0/0x7f0
[ 2365.629215][T12844]  sock_sendmsg+0xde/0x190
[ 2365.633706][T12844]  ____sys_sendmsg+0x733/0x920
[ 2365.638549][T12844]  ? copy_msghdr_from_user+0xfc/0x150
[ 2365.643996][T12844]  ? kernel_sendmsg+0x50/0x50
[ 2365.649296][T12844]  ___sys_sendmsg+0x110/0x1b0
[ 2365.654058][T12844]  ? do_recvmmsg+0x6f0/0x6f0
[ 2365.658735][T12844]  ? __fget_files+0x248/0x480
[ 2365.663496][T12844]  ? lock_downgrade+0x690/0x690
[ 2365.668451][T12844]  ? futex_wake_mark+0x1a0/0x1a0
[ 2365.673478][T12844]  ? __fget_files+0x26a/0x480
[ 2365.678354][T12844]  ? __fget_light+0xe5/0x270
[ 2365.683046][T12844]  __sys_sendmsg+0xf7/0x1c0
[ 2365.687637][T12844]  ? __sys_sendmsg_sock+0x40/0x40
[ 2365.692759][T12844]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2365.698759][T12844]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2365.704741][T12844]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2365.710112][T12844]  do_syscall_64+0x39/0xb0
[ 2365.714596][T12844]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2365.720574][T12844] RIP: 0033:0x7f7896a8c389
[ 2365.725045][T12844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2365.744722][T12844] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2365.753201][T12844] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2365.761231][T12844] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2365.769275][T12844] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2365.777296][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2365.786442][T12844] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2365.794509][T12844]  </TASK>
03:20:51 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:51 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd7, &(0x7f0000000180)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:51 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x19, 0x1, &(0x7f0000001e80)=@raw=[@jmp], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:51 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:51 executing program 4:
bpf$PROG_LOAD_XDP(0xa, &(0x7f0000001fc0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:20:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x20)

03:20:51 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@empty, @local}, {0x0, @dev}, @sctp_ip4_spec={@private, @dev}, {0x0, @random="b5d00840d06f"}}}})

03:20:51 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev}}}})

03:20:51 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x15}, 0x48)

03:20:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x20)

[ 2365.989213][T12870] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:51 executing program 3:
socketpair(0xc0ae6342064ccb77, 0x0, 0x0, &(0x7f0000000000))

[ 2366.196365][T12870] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2366.205879][T12870] CPU: 1 PID: 12870 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2366.216372][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2366.226475][T12870] Call Trace:
[ 2366.229791][T12870]  <TASK>
[ 2366.232759][T12870]  dump_stack_lvl+0x136/0x150
[ 2366.237507][T12870]  sysfs_warn_dup+0x80/0xa0
[ 2366.242079][T12870]  sysfs_do_create_link_sd+0x11e/0x140
[ 2366.247571][T12870]  sysfs_create_link+0x63/0xc0
[ 2366.252366][T12870]  device_add+0x585/0x1a40
[ 2366.256826][T12870]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2366.263721][T12870]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2366.269660][T12870]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2366.275690][T12870]  wiphy_register+0x1f92/0x2b00
[ 2366.280594][T12870]  ? wiphy_unregister+0xb40/0xb40
[ 2366.285651][T12870]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2366.290811][T12870]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2366.296833][T12870]  ieee80211_register_hw+0x23c1/0x40e0
[ 2366.302338][T12870]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2366.307922][T12870]  ? mark_held_locks+0x9f/0xe0
[ 2366.312733][T12870]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2366.318590][T12870]  ? __hrtimer_init+0x145/0x280
[ 2366.323479][T12870]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2366.329266][T12870]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2366.336000][T12870]  hwsim_new_radio_nl+0xacf/0x1210
[ 2366.341165][T12870]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2366.347116][T12870]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2366.354528][T12870]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2366.361859][T12870]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2366.368054][T12870]  ? genl_start+0x660/0x660
[ 2366.372606][T12870]  ? ns_capable+0xe0/0x110
[ 2366.377070][T12870]  genl_rcv_msg+0x4ff/0x7e0
[ 2366.381616][T12870]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2366.387979][T12870]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2366.394018][T12870]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2366.399952][T12870]  ? ___slab_alloc+0x9df/0x1400
[ 2366.404856][T12870]  netlink_rcv_skb+0x165/0x440
[ 2366.409658][T12870]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2366.416047][T12870]  ? netlink_ack+0x1360/0x1360
[ 2366.420864][T12870]  ? down_write_killable+0x250/0x250
[ 2366.426190][T12870]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2366.431523][T12870]  genl_rcv+0x28/0x40
[ 2366.435546][T12870]  netlink_unicast+0x547/0x7f0
[ 2366.440351][T12870]  ? netlink_attachskb+0x890/0x890
[ 2366.445501][T12870]  ? __virt_addr_valid+0x61/0x2e0
[ 2366.450568][T12870]  ? __phys_addr_symbol+0x30/0x70
[ 2366.455636][T12870]  ? __check_object_size+0x323/0x730
[ 2366.460961][T12870]  netlink_sendmsg+0x925/0xe30
[ 2366.465765][T12870]  ? netlink_unicast+0x7f0/0x7f0
[ 2366.470746][T12870]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2366.476061][T12870]  ? netlink_unicast+0x7f0/0x7f0
[ 2366.481032][T12870]  sock_sendmsg+0xde/0x190
[ 2366.485489][T12870]  ____sys_sendmsg+0x733/0x920
[ 2366.490284][T12870]  ? copy_msghdr_from_user+0xfc/0x150
[ 2366.495691][T12870]  ? kernel_sendmsg+0x50/0x50
[ 2366.500420][T12870]  ___sys_sendmsg+0x110/0x1b0
[ 2366.505150][T12870]  ? do_recvmmsg+0x6f0/0x6f0
[ 2366.509799][T12870]  ? __fget_files+0x248/0x480
[ 2366.514555][T12870]  ? lock_downgrade+0x690/0x690
[ 2366.519449][T12870]  ? futex_wake_mark+0x1a0/0x1a0
[ 2366.524432][T12870]  ? __fget_files+0x26a/0x480
[ 2366.529167][T12870]  ? __fget_light+0xe5/0x270
[ 2366.533811][T12870]  __sys_sendmsg+0xf7/0x1c0
[ 2366.538356][T12870]  ? __sys_sendmsg_sock+0x40/0x40
[ 2366.543420][T12870]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2366.549379][T12870]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2366.555314][T12870]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2366.560557][T12870]  do_syscall_64+0x39/0xb0
[ 2366.565022][T12870]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2366.570963][T12870] RIP: 0033:0x7f7896a8c389
[ 2366.575404][T12870] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2366.595055][T12870] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2366.603501][T12870] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2366.611501][T12870] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2366.619500][T12870] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2366.627505][T12870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2366.635499][T12870] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2366.643516][T12870]  </TASK>
03:20:51 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:51 executing program 4:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/pid_for_children\x00')

03:20:51 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x0, 0x0, 0x0, 0x1000}, 0x48)

03:20:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x20)

03:20:51 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:51 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48)

03:20:51 executing program 4:
syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="05c1de2fc814", @local, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast, "3e6958d9bd36b7237de1ba0447818c05"}}}}, 0x0)

03:20:51 executing program 0:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10)

03:20:51 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast1}})

03:20:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x20)

03:20:51 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2366.792455][T12894] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2366.822835][T12894] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2366.870042][T12894] CPU: 1 PID: 12894 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2366.880668][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2366.890783][T12894] Call Trace:
[ 2366.894102][T12894]  <TASK>
[ 2366.897065][T12894]  dump_stack_lvl+0x136/0x150
[ 2366.901806][T12894]  sysfs_warn_dup+0x80/0xa0
[ 2366.906370][T12894]  sysfs_do_create_link_sd+0x11e/0x140
[ 2366.911870][T12894]  sysfs_create_link+0x63/0xc0
[ 2366.916668][T12894]  device_add+0x585/0x1a40
[ 2366.921132][T12894]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2366.928026][T12894]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2366.933982][T12894]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2366.940035][T12894]  wiphy_register+0x1f92/0x2b00
[ 2366.944981][T12894]  ? wiphy_unregister+0xb40/0xb40
[ 2366.950069][T12894]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2366.955241][T12894]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2366.961280][T12894]  ieee80211_register_hw+0x23c1/0x40e0
[ 2366.966790][T12894]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2366.972380][T12894]  ? mark_held_locks+0x9f/0xe0
[ 2366.977188][T12894]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2366.983044][T12894]  ? __hrtimer_init+0x145/0x280
[ 2366.987937][T12894]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2366.993721][T12894]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2367.000452][T12894]  hwsim_new_radio_nl+0xacf/0x1210
[ 2367.005614][T12894]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2367.011560][T12894]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2367.018968][T12894]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2367.026295][T12894]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2367.032519][T12894]  ? genl_start+0x660/0x660
[ 2367.037072][T12894]  ? ns_capable+0xe0/0x110
[ 2367.041536][T12894]  genl_rcv_msg+0x4ff/0x7e0
[ 2367.046076][T12894]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2367.052617][T12894]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2367.058636][T12894]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2367.064569][T12894]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2367.070602][T12894]  netlink_rcv_skb+0x165/0x440
[ 2367.075404][T12894]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2367.081779][T12894]  ? netlink_ack+0x1360/0x1360
[ 2367.086596][T12894]  ? down_write_killable+0x250/0x250
[ 2367.091923][T12894]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2367.097245][T12894]  genl_rcv+0x28/0x40
[ 2367.101257][T12894]  netlink_unicast+0x547/0x7f0
[ 2367.106056][T12894]  ? netlink_attachskb+0x890/0x890
[ 2367.111197][T12894]  ? __virt_addr_valid+0x61/0x2e0
[ 2367.116261][T12894]  ? __phys_addr_symbol+0x30/0x70
[ 2367.121322][T12894]  ? __check_object_size+0x323/0x730
[ 2367.126645][T12894]  netlink_sendmsg+0x925/0xe30
[ 2367.131452][T12894]  ? netlink_unicast+0x7f0/0x7f0
[ 2367.136432][T12894]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2367.141750][T12894]  ? netlink_unicast+0x7f0/0x7f0
[ 2367.146718][T12894]  sock_sendmsg+0xde/0x190
[ 2367.151169][T12894]  ____sys_sendmsg+0x733/0x920
[ 2367.155965][T12894]  ? copy_msghdr_from_user+0xfc/0x150
[ 2367.161374][T12894]  ? kernel_sendmsg+0x50/0x50
[ 2367.166104][T12894]  ___sys_sendmsg+0x110/0x1b0
[ 2367.170817][T12894]  ? do_recvmmsg+0x6f0/0x6f0
[ 2367.175473][T12894]  ? __fget_files+0x248/0x480
[ 2367.180193][T12894]  ? lock_downgrade+0x690/0x690
[ 2367.185171][T12894]  ? futex_wake_mark+0x1a0/0x1a0
[ 2367.190149][T12894]  ? __fget_files+0x26a/0x480
[ 2367.194883][T12894]  ? __fget_light+0xe5/0x270
[ 2367.199541][T12894]  __sys_sendmsg+0xf7/0x1c0
[ 2367.204115][T12894]  ? __sys_sendmsg_sock+0x40/0x40
[ 2367.209199][T12894]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2367.215163][T12894]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2367.221107][T12894]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2367.226350][T12894]  do_syscall_64+0x39/0xb0
[ 2367.230799][T12894]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2367.236745][T12894] RIP: 0033:0x7f7896a8c389
[ 2367.241186][T12894] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2367.260821][T12894] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
03:20:52 executing program 4:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000200))

[ 2367.269263][T12894] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2367.277256][T12894] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2367.285248][T12894] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2367.293273][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2367.301268][T12894] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2367.309281][T12894]  </TASK>
03:20:52 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:52 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000008840)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x6, 0x4)
sendto$packet(r0, &(0x7f0000000280)=';', 0x1, 0x0, 0x0, 0x0)

03:20:52 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}})

03:20:52 executing program 4:
socketpair(0xb, 0x0, 0x0, &(0x7f0000000140))

03:20:52 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x300}, 0x0)

03:20:52 executing program 5:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x68, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0)

03:20:52 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2367.564503][T12917] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2367.627086][T12917] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2367.663691][T12917] CPU: 0 PID: 12917 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2367.674190][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2367.684294][T12917] Call Trace:
[ 2367.687620][T12917]  <TASK>
[ 2367.690598][T12917]  dump_stack_lvl+0x136/0x150
[ 2367.695340][T12917]  sysfs_warn_dup+0x80/0xa0
[ 2367.699940][T12917]  sysfs_do_create_link_sd+0x11e/0x140
[ 2367.705470][T12917]  sysfs_create_link+0x63/0xc0
[ 2367.710297][T12917]  device_add+0x585/0x1a40
[ 2367.714806][T12917]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2367.721725][T12917]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2367.727700][T12917]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2367.733783][T12917]  wiphy_register+0x1f92/0x2b00
[ 2367.738710][T12917]  ? wiphy_unregister+0xb40/0xb40
[ 2367.743793][T12917]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2367.748985][T12917]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2367.755041][T12917]  ieee80211_register_hw+0x23c1/0x40e0
[ 2367.760576][T12917]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2367.766187][T12917]  ? mark_held_locks+0x9f/0xe0
[ 2367.771029][T12917]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2367.776951][T12917]  ? __hrtimer_init+0x145/0x280
[ 2367.781874][T12917]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2367.787699][T12917]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2367.794469][T12917]  hwsim_new_radio_nl+0xacf/0x1210
[ 2367.799659][T12917]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2367.805635][T12917]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2367.813080][T12917]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2367.820443][T12917]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2367.826666][T12917]  ? genl_start+0x660/0x660
[ 2367.831255][T12917]  ? ns_capable+0xe0/0x110
[ 2367.835749][T12917]  genl_rcv_msg+0x4ff/0x7e0
[ 2367.840322][T12917]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2367.846709][T12917]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2367.852779][T12917]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2367.858738][T12917]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2367.864802][T12917]  netlink_rcv_skb+0x165/0x440
[ 2367.869630][T12917]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2367.876041][T12917]  ? netlink_ack+0x1360/0x1360
[ 2367.881152][T12917]  ? down_write_killable+0x250/0x250
[ 2367.886599][T12917]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2367.891960][T12917]  genl_rcv+0x28/0x40
[ 2367.896003][T12917]  netlink_unicast+0x547/0x7f0
[ 2367.900839][T12917]  ? netlink_attachskb+0x890/0x890
[ 2367.906018][T12917]  ? __virt_addr_valid+0x61/0x2e0
[ 2367.911124][T12917]  ? __phys_addr_symbol+0x30/0x70
[ 2367.916223][T12917]  ? __check_object_size+0x323/0x730
[ 2367.921578][T12917]  netlink_sendmsg+0x925/0xe30
[ 2367.926414][T12917]  ? netlink_unicast+0x7f0/0x7f0
[ 2367.931435][T12917]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2367.936781][T12917]  ? netlink_unicast+0x7f0/0x7f0
[ 2367.941800][T12917]  sock_sendmsg+0xde/0x190
[ 2367.946286][T12917]  ____sys_sendmsg+0x733/0x920
[ 2367.951113][T12917]  ? copy_msghdr_from_user+0xfc/0x150
[ 2367.956550][T12917]  ? kernel_sendmsg+0x50/0x50
[ 2367.961311][T12917]  ___sys_sendmsg+0x110/0x1b0
[ 2367.966069][T12917]  ? do_recvmmsg+0x6f0/0x6f0
[ 2367.970741][T12917]  ? __fget_files+0x248/0x480
[ 2367.975497][T12917]  ? lock_downgrade+0x690/0x690
[ 2367.980442][T12917]  ? futex_wake_mark+0x1a0/0x1a0
[ 2367.985459][T12917]  ? __fget_files+0x26a/0x480
[ 2367.990254][T12917]  ? __fget_light+0xe5/0x270
[ 2367.994936][T12917]  __sys_sendmsg+0xf7/0x1c0
[ 2367.999525][T12917]  ? __sys_sendmsg_sock+0x40/0x40
[ 2368.004622][T12917]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2368.010612][T12917]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2368.016579][T12917]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2368.021855][T12917]  do_syscall_64+0x39/0xb0
[ 2368.026342][T12917]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2368.032331][T12917] RIP: 0033:0x7f7896a8c389
[ 2368.036810][T12917] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2368.056474][T12917] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2368.064925][T12917] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
03:20:53 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfff7}, 0xe)

03:20:53 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x14)

03:20:53 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10)

[ 2368.072938][T12917] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2368.080944][T12917] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2368.088941][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2368.096939][T12917] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2368.104961][T12917]  </TASK>
03:20:53 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000007d40))

03:20:53 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:53 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @none}, 0xe)

03:20:53 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:53 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x0)

03:20:53 executing program 3:
syz_emit_ethernet(0xe41, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "65c471", 0xe0b, 0x0, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x3f}, {[@dstopts={0x0, 0xb, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @ra, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, @hopopts={0x0, 0x19, '\x00', [@generic={0x0, 0x1, "96"}, @generic={0x0, 0x5d, "50157273ca39e5491142bb5a3a512bc0ff90141bb78366437659ddb40157de3d668c067a3a62d14cd4a8f6b2789582f2392e0f5290d7ec2277587cff6c3edc8194d8dcc7fa3e1363a38318fa3f08b40f6dc90644ab451d5580e02d1eb3"}, @generic={0x0, 0x32, "db17207cdb47c0da372d04b05efdfb97cb0d4b6d883e01a65f7546df4238d40f3cb95284ad9178b23c5f33c2d246461d4e9c"}, @generic={0x0, 0x2d, "e18cd3c0a9417979292d5f14dae28d326188bad78f026925e6b15383488f00002f12973a353c7e04703a422384"}, @ra]}, @hopopts={0x0, 0xe, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2a, "2b42a84ff36d57b84ef53cb1713fa0c5755540edc3d4e6d85339bc685d05ecdd4d93c4aa26302166ce09"}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, @hopopts={0x0, 0x0, '\x00', [@padn]}, @srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@private0, @dev, @private1, @private0]}, @srh={0x0, 0xc, 0x4, 0x6, 0x0, 0x0, 0x0, [@private2, @mcast1, @private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}, @hopopts={0x0, 0x47, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xd6, "fb08926ac5367f54db5b02a2721d45c7a2983094785a5e64c7aa137293ca99bf297df0a6a97557954919b7262900aa98dea495f0cd9d0b63c2bcf9844c08f0738a521c365d33b74665715024da663d250c7177ec53113461248bf2536a7ef96b1f2afa90c8c23fbb83b72ebbb219e816281c8b45813f0369cab7fabd59c7cee212ca6fad5c3729f8924ef8fc575ec180e105f39aec014e7d7ce1ba966b960733c1bde54330e9fa940157d3557628d8267094b739def7235da8ca3811bfc6d28f0849643351d77ce9c85bc5208b6d46728df3fa7a16ab"}, @generic={0x0, 0xbf, "2b07229590e7ac9337fa0a88d45e8277aefc049a0836c27582f63e198c4cac11b2c8de8357cbb6501e2de7702aff28fbeb96a2b60dc9824e9462ab9684abf60fcad694bdde4aa2d41820d4ba0897d64679a3ecf8e5e64eab9653a4290dc4dd574b6678a25a4be89ebb8f41b82b01ff05b9cac25bf14ec1af2420240dbf37039de957aba14e9b74929a33d93fce673f5527b4d0b4aced70d3e57244753cc42dcf7218606db02aca00ce8e4d99151eb99b8b97c7c4f7fce26412887e9133c21c"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, @hopopts={0x0, 0x119, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0x0, 0x892, "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"}]}], "ea42f1838bab16da527b96655506c1a7d5aecffedc49e60aa9dfb4244265d3e7df64e96313b74a475179aaff7143bc15b84fd3ac11aae4552f1d580b723ce4af6a73feab6018b70dbabf131ddd27b149c00291b2442b4527095ef81be0ffd21382b383c3dbf24d0f294bc2"}}}}}, 0x0)

03:20:53 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2368.366105][T12942] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2368.406288][T12942] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2368.426562][T12942] CPU: 1 PID: 12942 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2368.437067][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2368.447177][T12942] Call Trace:
[ 2368.450501][T12942]  <TASK>
[ 2368.453473][T12942]  dump_stack_lvl+0x136/0x150
[ 2368.458218][T12942]  sysfs_warn_dup+0x80/0xa0
[ 2368.462803][T12942]  sysfs_do_create_link_sd+0x11e/0x140
[ 2368.468321][T12942]  sysfs_create_link+0x63/0xc0
[ 2368.473153][T12942]  device_add+0x585/0x1a40
[ 2368.477638][T12942]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2368.484566][T12942]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2368.490536][T12942]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2368.496611][T12942]  wiphy_register+0x1f92/0x2b00
[ 2368.501551][T12942]  ? wiphy_unregister+0xb40/0xb40
[ 2368.506666][T12942]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2368.511863][T12942]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2368.517927][T12942]  ieee80211_register_hw+0x23c1/0x40e0
[ 2368.523481][T12942]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2368.529116][T12942]  ? mark_held_locks+0x9f/0xe0
[ 2368.533974][T12942]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2368.539859][T12942]  ? __hrtimer_init+0x145/0x280
[ 2368.544790][T12942]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2368.550610][T12942]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2368.557385][T12942]  hwsim_new_radio_nl+0xacf/0x1210
[ 2368.562597][T12942]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2368.568600][T12942]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2368.576047][T12942]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2368.585772][T12942]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2368.592001][T12942]  ? genl_start+0x660/0x660
[ 2368.596589][T12942]  ? ns_capable+0xe0/0x110
[ 2368.601088][T12942]  genl_rcv_msg+0x4ff/0x7e0
03:20:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}}, 0x0)

[ 2368.605661][T12942]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2368.612073][T12942]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2368.618125][T12942]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2368.624084][T12942]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2368.630149][T12942]  netlink_rcv_skb+0x165/0x440
[ 2368.634987][T12942]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2368.641399][T12942]  ? netlink_ack+0x1360/0x1360
[ 2368.646254][T12942]  ? down_write_killable+0x250/0x250
[ 2368.651622][T12942]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2368.656980][T12942]  genl_rcv+0x28/0x40
[ 2368.661027][T12942]  netlink_unicast+0x547/0x7f0
[ 2368.665864][T12942]  ? netlink_attachskb+0x890/0x890
[ 2368.671035][T12942]  ? __virt_addr_valid+0x61/0x2e0
[ 2368.676218][T12942]  ? __phys_addr_symbol+0x30/0x70
[ 2368.681308][T12942]  ? __check_object_size+0x323/0x730
[ 2368.686669][T12942]  netlink_sendmsg+0x925/0xe30
[ 2368.693500][T12942]  ? netlink_unicast+0x7f0/0x7f0
[ 2368.698514][T12942]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2368.703858][T12942]  ? netlink_unicast+0x7f0/0x7f0
[ 2368.708854][T12942]  sock_sendmsg+0xde/0x190
[ 2368.713330][T12942]  ____sys_sendmsg+0x733/0x920
[ 2368.718162][T12942]  ? copy_msghdr_from_user+0xfc/0x150
[ 2368.723593][T12942]  ? kernel_sendmsg+0x50/0x50
[ 2368.728375][T12942]  ___sys_sendmsg+0x110/0x1b0
[ 2368.733123][T12942]  ? do_recvmmsg+0x6f0/0x6f0
[ 2368.737788][T12942]  ? __fget_files+0x248/0x480
[ 2368.742542][T12942]  ? lock_downgrade+0x690/0x690
[ 2368.747466][T12942]  ? futex_wake_mark+0x1a0/0x1a0
[ 2368.752471][T12942]  ? __fget_files+0x26a/0x480
03:20:53 executing program 3:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0xb}, 0x10)

[ 2368.757231][T12942]  ? __fget_light+0xe5/0x270
[ 2368.761895][T12942]  __sys_sendmsg+0xf7/0x1c0
[ 2368.766461][T12942]  ? __sys_sendmsg_sock+0x40/0x40
[ 2368.771553][T12942]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2368.777538][T12942]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2368.783504][T12942]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2368.788769][T12942]  do_syscall_64+0x39/0xb0
[ 2368.793242][T12942]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2368.799222][T12942] RIP: 0033:0x7f7896a8c389
[ 2368.803694][T12942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2368.823364][T12942] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2368.831836][T12942] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2368.839852][T12942] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2368.847869][T12942] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2368.855890][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2368.863917][T12942] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2368.871976][T12942]  </TASK>
03:20:54 executing program 4:
bpf$MAP_CREATE(0x11, &(0x7f0000001600), 0x48)

03:20:54 executing program 3:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x38}, 0x10)

03:20:54 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:54 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x6, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x60}}}}}}}}}, 0xffbf)

03:20:54 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2369.039795][T12962] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:54 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @none}, 0xe)

03:20:54 executing program 4:
syz_emit_ethernet(0x1a, &(0x7f0000001440)={@remote, @empty, @val={@void}, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, '}', "c6fcac"}}}}}}, 0x0)

03:20:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x21, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xffbf)

[ 2369.114275][T12961] bridge0: port 2(erspan0) entered blocking state
[ 2369.121050][T12961] bridge0: port 2(erspan0) entered forwarding state
[ 2369.147246][T12961] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.156976][T12961] 8021q: adding VLAN 0 to HW filter on device team0
03:20:54 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="031001000000000008001b"], 0x28}}, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="243ef10e69000448077ee62086dd", 0xe}, {&(0x7f0000000240)="53311455776e2f667a2713dda81562698cb36e07d83d1200fd96ce564df758b787a000800000003580000000", 0x2c}], 0x2)

[ 2369.196120][T12961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2369.239159][T12962] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2369.258514][T12962] CPU: 0 PID: 12962 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2369.269027][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2369.279316][T12962] Call Trace:
[ 2369.282637][T12962]  <TASK>
[ 2369.285615][T12962]  dump_stack_lvl+0x136/0x150
[ 2369.290356][T12962]  sysfs_warn_dup+0x80/0xa0
[ 2369.294935][T12962]  sysfs_do_create_link_sd+0x11e/0x140
[ 2369.300453][T12962]  sysfs_create_link+0x63/0xc0
[ 2369.305270][T12962]  device_add+0x585/0x1a40
[ 2369.309764][T12962]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2369.316700][T12962]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2369.322672][T12962]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2369.328739][T12962]  wiphy_register+0x1f92/0x2b00
[ 2369.333677][T12962]  ? wiphy_unregister+0xb40/0xb40
[ 2369.338768][T12962]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2369.343963][T12962]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2369.350022][T12962]  ieee80211_register_hw+0x23c1/0x40e0
[ 2369.355566][T12962]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2369.361175][T12962]  ? mark_held_locks+0x9f/0xe0
[ 2369.366002][T12962]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2369.371874][T12962]  ? __hrtimer_init+0x145/0x280
[ 2369.376784][T12962]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2369.382569][T12962]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2369.389299][T12962]  hwsim_new_radio_nl+0xacf/0x1210
[ 2369.394456][T12962]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2369.400404][T12962]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2369.407816][T12962]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2369.415156][T12962]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2369.421368][T12962]  ? genl_start+0x660/0x660
[ 2369.425932][T12962]  ? ns_capable+0xe0/0x110
[ 2369.430404][T12962]  genl_rcv_msg+0x4ff/0x7e0
[ 2369.434950][T12962]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2369.441354][T12962]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2369.447370][T12962]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2369.453298][T12962]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2369.459334][T12962]  netlink_rcv_skb+0x165/0x440
[ 2369.464128][T12962]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2369.470500][T12962]  ? netlink_ack+0x1360/0x1360
[ 2369.475319][T12962]  ? down_write_killable+0x250/0x250
[ 2369.480666][T12962]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2369.485993][T12962]  genl_rcv+0x28/0x40
[ 2369.490006][T12962]  netlink_unicast+0x547/0x7f0
[ 2369.494812][T12962]  ? netlink_attachskb+0x890/0x890
[ 2369.499958][T12962]  ? __virt_addr_valid+0x61/0x2e0
[ 2369.505026][T12962]  ? __phys_addr_symbol+0x30/0x70
[ 2369.510088][T12962]  ? __check_object_size+0x323/0x730
[ 2369.515413][T12962]  netlink_sendmsg+0x925/0xe30
[ 2369.520220][T12962]  ? netlink_unicast+0x7f0/0x7f0
[ 2369.525197][T12962]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2369.530519][T12962]  ? netlink_unicast+0x7f0/0x7f0
[ 2369.535487][T12962]  sock_sendmsg+0xde/0x190
[ 2369.539933][T12962]  ____sys_sendmsg+0x733/0x920
[ 2369.544727][T12962]  ? copy_msghdr_from_user+0xfc/0x150
[ 2369.550139][T12962]  ? kernel_sendmsg+0x50/0x50
[ 2369.554870][T12962]  ___sys_sendmsg+0x110/0x1b0
[ 2369.559586][T12962]  ? do_recvmmsg+0x6f0/0x6f0
[ 2369.564229][T12962]  ? __fget_files+0x248/0x480
[ 2369.568949][T12962]  ? lock_downgrade+0x690/0x690
[ 2369.573845][T12962]  ? futex_wake_mark+0x1a0/0x1a0
[ 2369.578829][T12962]  ? __fget_files+0x26a/0x480
[ 2369.583566][T12962]  ? __fget_light+0xe5/0x270
[ 2369.588225][T12962]  __sys_sendmsg+0xf7/0x1c0
[ 2369.592768][T12962]  ? __sys_sendmsg_sock+0x40/0x40
[ 2369.597840][T12962]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2369.603812][T12962]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2369.609751][T12962]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2369.614990][T12962]  do_syscall_64+0x39/0xb0
[ 2369.619435][T12962]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2369.625373][T12962] RIP: 0033:0x7f7896a8c389
[ 2369.629815][T12962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2369.649467][T12962] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2369.657911][T12962] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2369.665906][T12962] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2369.673902][T12962] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2369.681894][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
03:20:54 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2369.689885][T12962] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2369.697898][T12962]  </TASK>
03:20:54 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x6, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x60}}}}}}}}}, 0xffbf)

[ 2369.853971][T12974] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2369.878123][T12974] 8021q: adding VLAN 0 to HW filter on device team0
[ 2369.895573][T12974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:20:55 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x21, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xffbf)

[ 2370.017666][T12980] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2370.031042][T12980] 8021q: adding VLAN 0 to HW filter on device team0
[ 2370.045804][T12980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:20:55 executing program 5:
socket$packet(0xa, 0x6, 0x16)

03:20:55 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2370.109017][T12985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:20:55 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="7515b3c31ea1ace3", 0x8}], 0x1)

03:20:55 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x6, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x60}}}}}}}}}, 0xffbf)

[ 2370.266010][T12989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
03:20:55 executing program 4:
r0 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)

03:20:55 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:55 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x17, 0xe}})

[ 2370.410196][ T5058] Bluetooth: hci3: command 0x0405 tx timeout
[ 2370.428812][T13000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2370.495319][T13004] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:55 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x28}})

03:20:55 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0xec4, r1, 0x315, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "092a7aea4b2f8d811dfc2f576dc15587cdc4c2e85e184ef0d0cecd2ef859190d363440d5c07bcf3164f49a097b"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe1d, 0x5, "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"}]}]}, 0xec4}}, 0x0)

[ 2370.573147][T13004] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2370.610694][T13004] CPU: 0 PID: 13004 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2370.621202][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2370.631396][T13004] Call Trace:
[ 2370.634729][T13004]  <TASK>
[ 2370.637710][T13004]  dump_stack_lvl+0x136/0x150
[ 2370.642456][T13004]  sysfs_warn_dup+0x80/0xa0
[ 2370.647041][T13004]  sysfs_do_create_link_sd+0x11e/0x140
[ 2370.652570][T13004]  sysfs_create_link+0x63/0xc0
[ 2370.657393][T13004]  device_add+0x585/0x1a40
[ 2370.661883][T13004]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2370.668805][T13004]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2370.674783][T13004]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2370.680865][T13004]  wiphy_register+0x1f92/0x2b00
[ 2370.685811][T13004]  ? wiphy_unregister+0xb40/0xb40
[ 2370.690916][T13004]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2370.696112][T13004]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2370.702176][T13004]  ieee80211_register_hw+0x23c1/0x40e0
[ 2370.707725][T13004]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2370.713338][T13004]  ? mark_held_locks+0x9f/0xe0
[ 2370.718179][T13004]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2370.724069][T13004]  ? __hrtimer_init+0x145/0x280
[ 2370.728968][T13004]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2370.734751][T13004]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2370.741482][T13004]  hwsim_new_radio_nl+0xacf/0x1210
[ 2370.746642][T13004]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2370.752591][T13004]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2370.760006][T13004]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2370.767359][T13004]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2370.773567][T13004]  ? genl_start+0x660/0x660
[ 2370.778126][T13004]  ? ns_capable+0xe0/0x110
[ 2370.782609][T13004]  genl_rcv_msg+0x4ff/0x7e0
[ 2370.787172][T13004]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2370.793549][T13004]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2370.799578][T13004]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2370.805520][T13004]  ? ___slab_alloc+0x9df/0x1400
[ 2370.810426][T13004]  netlink_rcv_skb+0x165/0x440
[ 2370.815229][T13004]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2370.821604][T13004]  ? netlink_ack+0x1360/0x1360
[ 2370.826421][T13004]  ? down_write_killable+0x250/0x250
[ 2370.831748][T13004]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2370.837077][T13004]  genl_rcv+0x28/0x40
[ 2370.841093][T13004]  netlink_unicast+0x547/0x7f0
[ 2370.845916][T13004]  ? netlink_attachskb+0x890/0x890
[ 2370.851070][T13004]  ? __virt_addr_valid+0x61/0x2e0
[ 2370.856144][T13004]  ? __phys_addr_symbol+0x30/0x70
[ 2370.861214][T13004]  ? __check_object_size+0x323/0x730
[ 2370.866547][T13004]  netlink_sendmsg+0x925/0xe30
[ 2370.871357][T13004]  ? netlink_unicast+0x7f0/0x7f0
[ 2370.876337][T13004]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2370.881652][T13004]  ? netlink_unicast+0x7f0/0x7f0
[ 2370.886626][T13004]  sock_sendmsg+0xde/0x190
[ 2370.891078][T13004]  ____sys_sendmsg+0x733/0x920
[ 2370.895873][T13004]  ? copy_msghdr_from_user+0xfc/0x150
[ 2370.901293][T13004]  ? kernel_sendmsg+0x50/0x50
[ 2370.906037][T13004]  ? futex_unqueue+0xb7/0x120
[ 2370.910762][T13004]  ? futex_wait+0x503/0x680
[ 2370.915312][T13004]  ___sys_sendmsg+0x110/0x1b0
[ 2370.920041][T13004]  ? do_recvmmsg+0x6f0/0x6f0
[ 2370.924682][T13004]  ? __fget_files+0x248/0x480
[ 2370.929414][T13004]  ? lock_downgrade+0x690/0x690
[ 2370.934323][T13004]  ? __fget_files+0x26a/0x480
[ 2370.939059][T13004]  ? __fget_light+0xe5/0x270
[ 2370.943696][T13004]  __sys_sendmsg+0xf7/0x1c0
[ 2370.948236][T13004]  ? __sys_sendmsg_sock+0x40/0x40
[ 2370.953296][T13004]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2370.959277][T13004]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2370.965217][T13004]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2370.970456][T13004]  do_syscall_64+0x39/0xb0
[ 2370.974924][T13004]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2370.980864][T13004] RIP: 0033:0x7f7896a8c389
[ 2370.985301][T13004] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2371.004935][T13004] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2371.013374][T13004] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2371.021366][T13004] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2371.029357][T13004] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2371.037354][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2371.045347][T13004] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2371.053361][T13004]  </TASK>
03:20:56 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab268500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:56 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0x50}})

03:20:56 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x16}})

03:20:56 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "931b50", 0x10, 0x6, 0x0, @rand_addr=' \x01\x00', @empty, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x60}}}}}}}}}, 0xffbf)

03:20:56 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:56 executing program 4:
r0 = socket(0x10, 0x80003, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)

03:20:56 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0xffffffffffffff66)

03:20:56 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x58)

[ 2371.325821][T13028] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2371.335316][T13018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2371.404107][T13028] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2371.431378][T13028] CPU: 1 PID: 13028 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2371.441948][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2371.452061][T13028] Call Trace:
[ 2371.455382][T13028]  <TASK>
[ 2371.458359][T13028]  dump_stack_lvl+0x136/0x150
[ 2371.463103][T13028]  sysfs_warn_dup+0x80/0xa0
[ 2371.467686][T13028]  sysfs_do_create_link_sd+0x11e/0x140
[ 2371.473232][T13028]  sysfs_create_link+0x63/0xc0
[ 2371.478074][T13028]  device_add+0x585/0x1a40
[ 2371.482572][T13028]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2371.489495][T13028]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2371.495468][T13028]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2371.501537][T13028]  wiphy_register+0x1f92/0x2b00
[ 2371.506464][T13028]  ? wiphy_unregister+0xb40/0xb40
[ 2371.511545][T13028]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2371.516736][T13028]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2371.522785][T13028]  ieee80211_register_hw+0x23c1/0x40e0
[ 2371.528323][T13028]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2371.533935][T13028]  ? mark_held_locks+0x9f/0xe0
[ 2371.538768][T13028]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2371.544662][T13028]  ? __hrtimer_init+0x145/0x280
[ 2371.549601][T13028]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2371.555414][T13028]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2371.562181][T13028]  hwsim_new_radio_nl+0xacf/0x1210
[ 2371.567373][T13028]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2371.573354][T13028]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2371.580802][T13028]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2371.588161][T13028]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2371.594386][T13028]  ? genl_start+0x660/0x660
[ 2371.598969][T13028]  ? ns_capable+0xe0/0x110
[ 2371.603463][T13028]  genl_rcv_msg+0x4ff/0x7e0
[ 2371.608045][T13028]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2371.614443][T13028]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2371.620497][T13028]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2371.626449][T13028]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2371.632484][T13028]  netlink_rcv_skb+0x165/0x440
[ 2371.637288][T13028]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2371.643659][T13028]  ? netlink_ack+0x1360/0x1360
[ 2371.648481][T13028]  ? down_write_killable+0x250/0x250
[ 2371.653808][T13028]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2371.659153][T13028]  genl_rcv+0x28/0x40
[ 2371.663173][T13028]  netlink_unicast+0x547/0x7f0
[ 2371.667980][T13028]  ? netlink_attachskb+0x890/0x890
[ 2371.673124][T13028]  ? __virt_addr_valid+0x61/0x2e0
[ 2371.678196][T13028]  ? __phys_addr_symbol+0x30/0x70
[ 2371.683267][T13028]  ? __check_object_size+0x323/0x730
[ 2371.688593][T13028]  netlink_sendmsg+0x925/0xe30
[ 2371.693401][T13028]  ? netlink_unicast+0x7f0/0x7f0
[ 2371.698376][T13028]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2371.703695][T13028]  ? netlink_unicast+0x7f0/0x7f0
[ 2371.708670][T13028]  sock_sendmsg+0xde/0x190
[ 2371.713126][T13028]  ____sys_sendmsg+0x733/0x920
[ 2371.717922][T13028]  ? copy_msghdr_from_user+0xfc/0x150
[ 2371.723331][T13028]  ? kernel_sendmsg+0x50/0x50
[ 2371.728058][T13028]  ___sys_sendmsg+0x110/0x1b0
[ 2371.732772][T13028]  ? do_recvmmsg+0x6f0/0x6f0
[ 2371.737404][T13028]  ? __fget_files+0x248/0x480
[ 2371.742125][T13028]  ? lock_downgrade+0x690/0x690
[ 2371.747023][T13028]  ? futex_wake_mark+0x1a0/0x1a0
[ 2371.752000][T13028]  ? __fget_files+0x26a/0x480
[ 2371.756736][T13028]  ? __fget_light+0xe5/0x270
[ 2371.761377][T13028]  __sys_sendmsg+0xf7/0x1c0
[ 2371.765917][T13028]  ? __sys_sendmsg_sock+0x40/0x40
[ 2371.770981][T13028]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2371.776938][T13028]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2371.782872][T13028]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2371.788110][T13028]  do_syscall_64+0x39/0xb0
[ 2371.792557][T13028]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2371.798495][T13028] RIP: 0033:0x7f7896a8c389
[ 2371.802935][T13028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2371.822573][T13028] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2371.831015][T13028] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2371.839009][T13028] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2371.847004][T13028] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
03:20:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

03:20:57 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

03:20:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2371.855003][T13028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2371.863000][T13028] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2371.871027][T13028]  </TASK>
03:20:57 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)

03:20:57 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab268500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:57 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x65, &(0x7f0000001180), 0x4)

03:20:57 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)

03:20:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:57 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@remote, @rand_addr=' \x01\x00', @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

03:20:57 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0xb, &(0x7f0000001180), 0x4)

03:20:57 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x43, 0x0, &(0x7f0000001140))

[ 2372.152643][T13048] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:57 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x21, 0x0, &(0x7f0000001140))

[ 2372.209306][T13048] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2372.264271][T13048] CPU: 0 PID: 13048 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2372.274802][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2372.284912][T13048] Call Trace:
[ 2372.288226][T13048]  <TASK>
[ 2372.291201][T13048]  dump_stack_lvl+0x136/0x150
[ 2372.295948][T13048]  sysfs_warn_dup+0x80/0xa0
[ 2372.300548][T13048]  sysfs_do_create_link_sd+0x11e/0x140
[ 2372.306079][T13048]  sysfs_create_link+0x63/0xc0
03:20:57 executing program 3:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc}})

[ 2372.310910][T13048]  device_add+0x585/0x1a40
[ 2372.315408][T13048]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2372.322425][T13048]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2372.328408][T13048]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2372.334490][T13048]  wiphy_register+0x1f92/0x2b00
[ 2372.339428][T13048]  ? wiphy_unregister+0xb40/0xb40
[ 2372.344523][T13048]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2372.349722][T13048]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2372.355789][T13048]  ieee80211_register_hw+0x23c1/0x40e0
[ 2372.361337][T13048]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2372.366955][T13048]  ? mark_held_locks+0x9f/0xe0
[ 2372.371798][T13048]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2372.377690][T13048]  ? __hrtimer_init+0x145/0x280
[ 2372.382607][T13048]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2372.388425][T13048]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2372.395182][T13048]  hwsim_new_radio_nl+0xacf/0x1210
[ 2372.400373][T13048]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2372.406351][T13048]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2372.413796][T13048]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2372.421166][T13048]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2372.427407][T13048]  ? genl_start+0x660/0x660
[ 2372.431992][T13048]  ? ns_capable+0xe0/0x110
[ 2372.436492][T13048]  genl_rcv_msg+0x4ff/0x7e0
[ 2372.441066][T13048]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2372.447466][T13048]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2372.453513][T13048]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2372.459457][T13048]  ? ___slab_alloc+0x9df/0x1400
[ 2372.464374][T13048]  netlink_rcv_skb+0x165/0x440
[ 2372.469190][T13048]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2372.476357][T13048]  ? netlink_ack+0x1360/0x1360
[ 2372.481184][T13048]  ? down_write_killable+0x250/0x250
[ 2372.486544][T13048]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2372.491879][T13048]  genl_rcv+0x28/0x40
[ 2372.496245][T13048]  netlink_unicast+0x547/0x7f0
[ 2372.501056][T13048]  ? netlink_attachskb+0x890/0x890
[ 2372.506202][T13048]  ? __virt_addr_valid+0x61/0x2e0
[ 2372.511272][T13048]  ? __phys_addr_symbol+0x30/0x70
[ 2372.516339][T13048]  ? __check_object_size+0x323/0x730
[ 2372.521669][T13048]  netlink_sendmsg+0x925/0xe30
[ 2372.526491][T13048]  ? netlink_unicast+0x7f0/0x7f0
[ 2372.531474][T13048]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2372.536790][T13048]  ? netlink_unicast+0x7f0/0x7f0
[ 2372.541761][T13048]  sock_sendmsg+0xde/0x190
[ 2372.546214][T13048]  ____sys_sendmsg+0x733/0x920
[ 2372.551009][T13048]  ? copy_msghdr_from_user+0xfc/0x150
[ 2372.556415][T13048]  ? kernel_sendmsg+0x50/0x50
[ 2372.561133][T13048]  ? futex_unqueue+0xb7/0x120
[ 2372.565845][T13048]  ? futex_wait+0x503/0x680
[ 2372.570416][T13048]  ___sys_sendmsg+0x110/0x1b0
[ 2372.575130][T13048]  ? do_recvmmsg+0x6f0/0x6f0
[ 2372.579758][T13048]  ? __fget_files+0x248/0x480
[ 2372.584486][T13048]  ? lock_downgrade+0x690/0x690
[ 2372.589395][T13048]  ? __fget_files+0x26a/0x480
[ 2372.594129][T13048]  ? __fget_light+0xe5/0x270
[ 2372.598775][T13048]  __sys_sendmsg+0xf7/0x1c0
[ 2372.603319][T13048]  ? __sys_sendmsg_sock+0x40/0x40
[ 2372.608400][T13048]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2372.614352][T13048]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2372.620292][T13048]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2372.625532][T13048]  do_syscall_64+0x39/0xb0
[ 2372.629976][T13048]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2372.635928][T13048] RIP: 0033:0x7f7896a8c389
[ 2372.640366][T13048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
03:20:57 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x34}, 0x48)

[ 2372.660004][T13048] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2372.668445][T13048] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2372.676443][T13048] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2372.684435][T13048] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2372.692431][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2372.700423][T13048] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2372.708521][T13048]  </TASK>
03:20:57 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0), 0x4)

03:20:58 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab268500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:58 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "8c"}]}}, 0x0, 0x2a}, 0x20)

03:20:58 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f00000001c0)="ca72ece5b091b45e922a4e5186b57e0f9e008c55c9124b01b69396c36be26b6d41316c10f990ca006ff9cff43ede99c8440c7a5d382593de497dc1a15e7fbbf86cd2145853bc4da5f057d575c07beb5c60632fb898b5e64b0dc6ef945c9ea9bf107e78b639d5acffececba1eba193d77c4ed474fe419e6c2a8ed9f8da149b997a3de539bf9d6f612591b2828b7d54aceb919153a2b7aa9de59489f0d37fc49e3574a53ff261deccc795eeae47c0699f0d32ee23a", 0xb4}, {&(0x7f0000000280)="bf8896dcb222ac5c6d8114f7a51ffbdd61de28d7584eab1c6d394f418c7b14c3a7790bd0a728c734c185af9fffaa53a5d56a5091e92fd7912c747a664b67ba61f0ae1dc193ea8c19835b2ff28b298dc55d7eb65df693555d968de6d2b13f87b7b34068b762979e578da06db670e6fe686e491a877618c8f4231dcc6de3dd5ecfff95d46110743fa9cdc6eb13de77d19f28782c46d9ec7939efd9dde91526a0d239afb4ca550c1ba2b0304c020184b109cc62364fe3bedd67b1a3200043f62b6ea0132aa9d74527e60e3bf353e3133389054ce7389aad3e78dd996f179b1d0f8e529426de6e6f6f5fcf1e9ec65b", 0xed}, {&(0x7f0000001100)="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", 0xe5f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000900)='-', 0x1}], 0x1}}], 0x2, 0x0)

03:20:58 executing program 4:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x7be7, 0x4)

03:20:58 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x40)

03:20:58 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:58 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

03:20:58 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x400448c9, 0x0)

03:20:58 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x100000, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="5800000014001923c98ad72f043f679a2cff00804824ca945f640094000555cd331f526a01641f7800008449bb06d383d537b300f0fffeff2c707f8f21ff200000000010000100090a00"/88, 0x58}], 0x1)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0}, 0x20)

03:20:58 executing program 3:
select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x40}, &(0x7f00000000c0)={0x0, 0xea60})

03:20:58 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:58 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x80108906, 0x0)

[ 2373.307477][T13079] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2373.334917][T13079] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2373.343240][T13079] CPU: 1 PID: 13079 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2373.353725][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2373.363833][T13079] Call Trace:
[ 2373.367153][T13079]  <TASK>
[ 2373.370143][T13079]  dump_stack_lvl+0x136/0x150
[ 2373.374888][T13079]  sysfs_warn_dup+0x80/0xa0
[ 2373.379483][T13079]  sysfs_do_create_link_sd+0x11e/0x140
[ 2373.385012][T13079]  sysfs_create_link+0x63/0xc0
[ 2373.389833][T13079]  device_add+0x585/0x1a40
[ 2373.394322][T13079]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2373.401252][T13079]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2373.407242][T13079]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2373.413325][T13079]  wiphy_register+0x1f92/0x2b00
[ 2373.418255][T13079]  ? wiphy_unregister+0xb40/0xb40
[ 2373.423422][T13079]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2373.428616][T13079]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2373.434673][T13079]  ieee80211_register_hw+0x23c1/0x40e0
[ 2373.440221][T13079]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2373.445850][T13079]  ? mark_held_locks+0x9f/0xe0
[ 2373.450691][T13079]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2373.456556][T13079]  ? __hrtimer_init+0x145/0x280
[ 2373.461451][T13079]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2373.467230][T13079]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2373.473987][T13079]  hwsim_new_radio_nl+0xacf/0x1210
[ 2373.479150][T13079]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2373.485095][T13079]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2373.492514][T13079]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2373.499853][T13079]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2373.506065][T13079]  ? genl_start+0x660/0x660
[ 2373.510640][T13079]  ? ns_capable+0xe0/0x110
[ 2373.515114][T13079]  genl_rcv_msg+0x4ff/0x7e0
[ 2373.519671][T13079]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2373.526038][T13079]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2373.532150][T13079]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2373.538086][T13079]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2373.544143][T13079]  netlink_rcv_skb+0x165/0x440
[ 2373.548937][T13079]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2373.555302][T13079]  ? netlink_ack+0x1360/0x1360
[ 2373.560124][T13079]  ? down_write_killable+0x250/0x250
[ 2373.565450][T13079]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2373.570774][T13079]  genl_rcv+0x28/0x40
[ 2373.574801][T13079]  netlink_unicast+0x547/0x7f0
[ 2373.579687][T13079]  ? netlink_attachskb+0x890/0x890
[ 2373.584830][T13079]  ? __virt_addr_valid+0x61/0x2e0
[ 2373.589890][T13079]  ? __phys_addr_symbol+0x30/0x70
[ 2373.594946][T13079]  ? __check_object_size+0x323/0x730
[ 2373.600292][T13079]  netlink_sendmsg+0x925/0xe30
[ 2373.605099][T13079]  ? netlink_unicast+0x7f0/0x7f0
[ 2373.610078][T13079]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2373.615397][T13079]  ? netlink_unicast+0x7f0/0x7f0
[ 2373.620459][T13079]  sock_sendmsg+0xde/0x190
[ 2373.624906][T13079]  ____sys_sendmsg+0x733/0x920
[ 2373.629703][T13079]  ? copy_msghdr_from_user+0xfc/0x150
[ 2373.635115][T13079]  ? kernel_sendmsg+0x50/0x50
[ 2373.639830][T13079]  ? futex_unqueue+0xb7/0x120
[ 2373.644557][T13079]  ? futex_wait+0x503/0x680
[ 2373.649094][T13079]  ___sys_sendmsg+0x110/0x1b0
[ 2373.653812][T13079]  ? do_recvmmsg+0x6f0/0x6f0
[ 2373.658443][T13079]  ? __fget_files+0x248/0x480
[ 2373.663162][T13079]  ? lock_downgrade+0x690/0x690
[ 2373.668063][T13079]  ? __fget_files+0x26a/0x480
[ 2373.672802][T13079]  ? __fget_light+0xe5/0x270
[ 2373.677531][T13079]  __sys_sendmsg+0xf7/0x1c0
[ 2373.682074][T13079]  ? __sys_sendmsg_sock+0x40/0x40
[ 2373.687145][T13079]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2373.693118][T13079]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2373.699053][T13079]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2373.704298][T13079]  do_syscall_64+0x39/0xb0
[ 2373.708739][T13079]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2373.714673][T13079] RIP: 0033:0x7f7896a8c389
[ 2373.719118][T13079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2373.738764][T13079] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2373.747210][T13079] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
03:20:58 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000002c0))

03:20:58 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2373.755207][T13079] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2373.763200][T13079] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2373.771205][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2373.779223][T13079] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2373.787240][T13079]  </TASK>
03:20:58 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:20:59 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x80108906, 0x0)

03:20:59 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:20:59 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x20000000}, 0x48)

[ 2373.952196][T13100] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:20:59 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

[ 2373.994667][T13100] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2374.032989][T13100] CPU: 1 PID: 13100 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2374.043510][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2374.053621][T13100] Call Trace:
[ 2374.056944][T13100]  <TASK>
[ 2374.059919][T13100]  dump_stack_lvl+0x136/0x150
[ 2374.064667][T13100]  sysfs_warn_dup+0x80/0xa0
[ 2374.069259][T13100]  sysfs_do_create_link_sd+0x11e/0x140
[ 2374.074785][T13100]  sysfs_create_link+0x63/0xc0
[ 2374.079617][T13100]  device_add+0x585/0x1a40
[ 2374.084113][T13100]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2374.091046][T13100]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2374.097016][T13100]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2374.103091][T13100]  wiphy_register+0x1f92/0x2b00
[ 2374.108021][T13100]  ? wiphy_unregister+0xb40/0xb40
[ 2374.113117][T13100]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2374.118310][T13100]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2374.124391][T13100]  ieee80211_register_hw+0x23c1/0x40e0
[ 2374.129905][T13100]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2374.135512][T13100]  ? mark_held_locks+0x9f/0xe0
[ 2374.140322][T13100]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2374.146181][T13100]  ? __hrtimer_init+0x145/0x280
[ 2374.151077][T13100]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2374.156856][T13100]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2374.163582][T13100]  hwsim_new_radio_nl+0xacf/0x1210
[ 2374.168737][T13100]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2374.174678][T13100]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2374.182085][T13100]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2374.189417][T13100]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2374.195612][T13100]  ? genl_start+0x660/0x660
[ 2374.200164][T13100]  ? ns_capable+0xe0/0x110
[ 2374.204628][T13100]  genl_rcv_msg+0x4ff/0x7e0
[ 2374.209173][T13100]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2374.215537][T13100]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2374.221556][T13100]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2374.227487][T13100]  ? ___slab_alloc+0x9df/0x1400
[ 2374.232388][T13100]  netlink_rcv_skb+0x165/0x440
[ 2374.237186][T13100]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2374.243558][T13100]  ? netlink_ack+0x1360/0x1360
[ 2374.248370][T13100]  ? down_write_killable+0x250/0x250
[ 2374.253698][T13100]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2374.259020][T13100]  genl_rcv+0x28/0x40
[ 2374.263040][T13100]  netlink_unicast+0x547/0x7f0
[ 2374.267846][T13100]  ? netlink_attachskb+0x890/0x890
[ 2374.272989][T13100]  ? __virt_addr_valid+0x61/0x2e0
[ 2374.278062][T13100]  ? __phys_addr_symbol+0x30/0x70
[ 2374.283124][T13100]  ? __check_object_size+0x323/0x730
[ 2374.288446][T13100]  netlink_sendmsg+0x925/0xe30
[ 2374.293254][T13100]  ? netlink_unicast+0x7f0/0x7f0
[ 2374.298230][T13100]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2374.303544][T13100]  ? netlink_unicast+0x7f0/0x7f0
[ 2374.308515][T13100]  sock_sendmsg+0xde/0x190
[ 2374.312967][T13100]  ____sys_sendmsg+0x733/0x920
[ 2374.317765][T13100]  ? copy_msghdr_from_user+0xfc/0x150
[ 2374.323175][T13100]  ? kernel_sendmsg+0x50/0x50
[ 2374.327892][T13100]  ? futex_unqueue+0xb7/0x120
[ 2374.332600][T13100]  ? futex_wait+0x503/0x680
[ 2374.337140][T13100]  ___sys_sendmsg+0x110/0x1b0
[ 2374.341853][T13100]  ? do_recvmmsg+0x6f0/0x6f0
[ 2374.346483][T13100]  ? __fget_files+0x248/0x480
[ 2374.351207][T13100]  ? lock_downgrade+0x690/0x690
[ 2374.356109][T13100]  ? __fget_files+0x26a/0x480
[ 2374.360837][T13100]  ? __fget_light+0xe5/0x270
[ 2374.365479][T13100]  __sys_sendmsg+0xf7/0x1c0
[ 2374.370024][T13100]  ? __sys_sendmsg_sock+0x40/0x40
[ 2374.375087][T13100]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2374.381046][T13100]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2374.386976][T13100]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2374.392222][T13100]  do_syscall_64+0x39/0xb0
[ 2374.396665][T13100]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2374.402601][T13100] RIP: 0033:0x7f7896a8c389
[ 2374.407042][T13100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2374.426675][T13100] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2374.435116][T13100] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
03:20:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

03:20:59 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="cb0811d9", 0x4}], 0x1}, 0x0)

03:20:59 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)

[ 2374.443108][T13100] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2374.451097][T13100] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2374.459083][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2374.467074][T13100] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2374.475090][T13100]  </TASK>
[ 2374.490824][T13087] Bluetooth: hci0: Opcode 0x c03 failed: -4
03:20:59 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040)

03:20:59 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8953, &(0x7f0000000240)={'veth1_to_bond\x00', 0x0})

03:20:59 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(r0, 0x541b, &(0x7f0000000240)={'veth1_to_bond\x00', 0x0})

03:20:59 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:21:00 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:21:00 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'macsec0\x00', {0x2, 0x0, @multicast2}})

03:21:00 executing program 5:
syz_emit_ethernet(0x1236, &(0x7f0000000000)={@random="05c1de2fc814", @local, @val, {@ipv6}}, 0x0)

[ 2375.374447][T13128] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2375.402863][T13128] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2375.429989][T13128] CPU: 1 PID: 13128 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2375.440493][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2375.450607][T13128] Call Trace:
[ 2375.453920][T13128]  <TASK>
[ 2375.456886][T13128]  dump_stack_lvl+0x136/0x150
[ 2375.461609][T13128]  sysfs_warn_dup+0x80/0xa0
[ 2375.466167][T13128]  sysfs_do_create_link_sd+0x11e/0x140
[ 2375.471660][T13128]  sysfs_create_link+0x63/0xc0
[ 2375.476462][T13128]  device_add+0x585/0x1a40
[ 2375.480930][T13128]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2375.487823][T13128]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2375.493766][T13128]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2375.499799][T13128]  wiphy_register+0x1f92/0x2b00
[ 2375.504718][T13128]  ? wiphy_unregister+0xb40/0xb40
[ 2375.509776][T13128]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2375.514945][T13128]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2375.520980][T13128]  ieee80211_register_hw+0x23c1/0x40e0
[ 2375.526488][T13128]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2375.532071][T13128]  ? mark_held_locks+0x9f/0xe0
[ 2375.536905][T13128]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2375.542793][T13128]  ? __hrtimer_init+0x145/0x280
[ 2375.547694][T13128]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2375.553484][T13128]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2375.560217][T13128]  hwsim_new_radio_nl+0xacf/0x1210
[ 2375.565376][T13128]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2375.571321][T13128]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2375.578740][T13128]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2375.586074][T13128]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2375.592268][T13128]  ? genl_start+0x660/0x660
[ 2375.596822][T13128]  ? ns_capable+0xe0/0x110
[ 2375.601289][T13128]  genl_rcv_msg+0x4ff/0x7e0
[ 2375.605828][T13128]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2375.612197][T13128]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2375.618219][T13128]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2375.624153][T13128]  ? ___slab_alloc+0x9df/0x1400
[ 2375.629056][T13128]  netlink_rcv_skb+0x165/0x440
[ 2375.633854][T13128]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2375.640242][T13128]  ? netlink_ack+0x1360/0x1360
[ 2375.645078][T13128]  ? down_write_killable+0x250/0x250
[ 2375.650435][T13128]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2375.655779][T13128]  genl_rcv+0x28/0x40
[ 2375.660409][T13128]  netlink_unicast+0x547/0x7f0
[ 2375.665214][T13128]  ? netlink_attachskb+0x890/0x890
[ 2375.670364][T13128]  ? __virt_addr_valid+0x61/0x2e0
[ 2375.675430][T13128]  ? __phys_addr_symbol+0x30/0x70
[ 2375.680581][T13128]  ? __check_object_size+0x323/0x730
[ 2375.685904][T13128]  netlink_sendmsg+0x925/0xe30
[ 2375.690709][T13128]  ? netlink_unicast+0x7f0/0x7f0
[ 2375.695685][T13128]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2375.701001][T13128]  ? netlink_unicast+0x7f0/0x7f0
[ 2375.705975][T13128]  sock_sendmsg+0xde/0x190
[ 2375.710425][T13128]  ____sys_sendmsg+0x733/0x920
[ 2375.715221][T13128]  ? copy_msghdr_from_user+0xfc/0x150
[ 2375.720628][T13128]  ? kernel_sendmsg+0x50/0x50
[ 2375.725345][T13128]  ? futex_unqueue+0xb7/0x120
[ 2375.730065][T13128]  ? futex_wait+0x503/0x680
[ 2375.734615][T13128]  ___sys_sendmsg+0x110/0x1b0
[ 2375.739334][T13128]  ? do_recvmmsg+0x6f0/0x6f0
[ 2375.743973][T13128]  ? __fget_files+0x248/0x480
[ 2375.748710][T13128]  ? lock_downgrade+0x690/0x690
[ 2375.754500][T13128]  ? __fget_files+0x26a/0x480
[ 2375.759249][T13128]  ? __fget_light+0xe5/0x270
[ 2375.763900][T13128]  __sys_sendmsg+0xf7/0x1c0
[ 2375.768449][T13128]  ? __sys_sendmsg_sock+0x40/0x40
[ 2375.773536][T13128]  ? __x64_sys_futex+0x1d3/0x4d0
[ 2375.778539][T13128]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2375.784486][T13128]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2375.789730][T13128]  do_syscall_64+0x39/0xb0
[ 2375.794182][T13128]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2375.800136][T13128] RIP: 0033:0x7f7896a8c389
[ 2375.804584][T13128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2375.824234][T13128] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2375.832686][T13128] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2375.840683][T13128] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2375.848677][T13128] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2375.856671][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2375.864667][T13128] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2375.872702][T13128]  </TASK>
03:21:03 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002011a})

03:21:03 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}})

03:21:03 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)

03:21:03 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000290001000000f30d0000000004010080080011002f"], 0x114}], 0x1}, 0x0)

03:21:03 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:21:03 executing program 5:
socket(0xa, 0x3, 0x101)

[ 2378.540655][T13134] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
03:21:03 executing program 0:
r0 = socket(0x29, 0x5, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x40000c0)

[ 2378.602066][T13134] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 2378.621062][T13134] CPU: 1 PID: 13134 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2378.631573][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2378.641681][T13134] Call Trace:
[ 2378.645008][T13134]  <TASK>
03:21:03 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac00000024000b0f000000000000000000001200", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007c00020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100002800c000180080004000100008008000a0001000000080005"], 0xac}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffdfffc}]}}]}, 0x40}}, 0x0)

03:21:03 executing program 5:
r0 = socket(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

03:21:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x300}, 0x0)

[ 2378.647985][T13134]  dump_stack_lvl+0x136/0x150
[ 2378.652742][T13134]  sysfs_warn_dup+0x80/0xa0
[ 2378.657336][T13134]  sysfs_do_create_link_sd+0x11e/0x140
[ 2378.662861][T13134]  sysfs_create_link+0x63/0xc0
[ 2378.667694][T13134]  device_add+0x585/0x1a40
[ 2378.672209][T13134]  ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270
[ 2378.679151][T13134]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2378.685131][T13134]  ? ieee80211_set_bitrate_flags+0x222/0x660
[ 2378.691215][T13134]  wiphy_register+0x1f92/0x2b00
[ 2378.696155][T13134]  ? wiphy_unregister+0xb40/0xb40
[ 2378.701264][T13134]  ? minstrel_ht_alloc+0x4a9/0x9b0
[ 2378.706474][T13134]  ? ieee80211_init_rate_ctrl_alg+0x83/0x640
[ 2378.712540][T13134]  ieee80211_register_hw+0x23c1/0x40e0
[ 2378.718092][T13134]  ? ieee80211_ifa6_changed+0x3f0/0x3f0
[ 2378.723720][T13134]  ? mark_held_locks+0x9f/0xe0
[ 2378.728563][T13134]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2378.734463][T13134]  ? __hrtimer_init+0x145/0x280
[ 2378.739383][T13134]  mac80211_hwsim_new_radio+0x26c1/0x4c10
[ 2378.745206][T13134]  ? mac80211_hwsim_unassign_vif_chanctx+0x350/0x350
[ 2378.751982][T13134]  hwsim_new_radio_nl+0xacf/0x1210
[ 2378.757172][T13134]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2378.763155][T13134]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 2378.770599][T13134]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2378.777976][T13134]  genl_family_rcv_msg_doit.isra.0+0x1e6/0x2d0
[ 2378.784221][T13134]  ? genl_start+0x660/0x660
[ 2378.788809][T13134]  ? ns_capable+0xe0/0x110
[ 2378.793311][T13134]  genl_rcv_msg+0x4ff/0x7e0
03:21:03 executing program 0:
r0 = socket(0x15, 0x5, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8800)

[ 2378.797899][T13134]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2378.804301][T13134]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2378.810349][T13134]  ? mac80211_hwsim_new_radio+0x4c10/0x4c10
[ 2378.816353][T13134]  ? ___slab_alloc+0x9df/0x1400
[ 2378.821310][T13134]  netlink_rcv_skb+0x165/0x440
[ 2378.826142][T13134]  ? genl_family_rcv_msg_doit.isra.0+0x2d0/0x2d0
[ 2378.832565][T13134]  ? netlink_ack+0x1360/0x1360
[ 2378.837421][T13134]  ? down_write_killable+0x250/0x250
[ 2378.842789][T13134]  ? netlink_deliver_tap+0x1b1/0xcf0
[ 2378.848162][T13134]  genl_rcv+0x28/0x40
[ 2378.852217][T13134]  netlink_unicast+0x547/0x7f0
[ 2378.857067][T13134]  ? netlink_attachskb+0x890/0x890
[ 2378.862253][T13134]  ? __virt_addr_valid+0x61/0x2e0
[ 2378.867358][T13134]  ? __phys_addr_symbol+0x30/0x70
[ 2378.872461][T13134]  ? __check_object_size+0x323/0x730
[ 2378.877824][T13134]  netlink_sendmsg+0x925/0xe30
[ 2378.882665][T13134]  ? netlink_unicast+0x7f0/0x7f0
[ 2378.887679][T13134]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2378.893031][T13134]  ? netlink_unicast+0x7f0/0x7f0
[ 2378.898037][T13134]  sock_sendmsg+0xde/0x190
03:21:04 executing program 0:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x9)

[ 2378.902540][T13134]  ____sys_sendmsg+0x733/0x920
[ 2378.907374][T13134]  ? copy_msghdr_from_user+0xfc/0x150
[ 2378.912821][T13134]  ? kernel_sendmsg+0x50/0x50
[ 2378.917587][T13134]  ___sys_sendmsg+0x110/0x1b0
[ 2378.922342][T13134]  ? do_recvmmsg+0x6f0/0x6f0
[ 2378.927006][T13134]  ? __fget_files+0x248/0x480
[ 2378.931755][T13134]  ? lock_downgrade+0x690/0x690
[ 2378.936688][T13134]  ? futex_wake_mark+0x1a0/0x1a0
[ 2378.941722][T13134]  ? __fget_files+0x26a/0x480
[ 2378.946483][T13134]  ? __fget_light+0xe5/0x270
[ 2378.951174][T13134]  __sys_sendmsg+0xf7/0x1c0
[ 2378.955756][T13134]  ? __sys_sendmsg_sock+0x40/0x40
[ 2378.960865][T13134]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 2378.966868][T13134]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2378.972848][T13134]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2378.978126][T13134]  do_syscall_64+0x39/0xb0
[ 2378.982601][T13134]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2378.988614][T13134] RIP: 0033:0x7f7896a8c389
[ 2378.993085][T13134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2379.012755][T13134] RSP: 002b:00007f789786e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2379.021229][T13134] RAX: ffffffffffffffda RBX: 00007f7896babf80 RCX: 00007f7896a8c389
[ 2379.029288][T13134] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000004
[ 2379.037306][T13134] RBP: 00007f7896ad7493 R08: 0000000000000000 R09: 0000000000000000
[ 2379.045328][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2379.053348][T13134] R13: 00007ffe63cf77df R14: 00007f789786e300 R15: 0000000000022000
[ 2379.061398][T13134]  </TASK>
03:21:04 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0)

[ 2379.103948][T13140] ------------[ cut here ]------------
[ 2379.109480][T13140] refcount_t: decrement hit 0; leaking memory.
[ 2379.116695][T13140] WARNING: CPU: 1 PID: 13140 at lib/refcount.c:31 refcount_warn_saturate+0x1d7/0x1f0
[ 2379.127406][T13140] Modules linked in:
[ 2379.131415][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2379.141920][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2379.152087][T13140] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0
[ 2379.158324][T13140] Code: 05 3b 8f 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 18 8f 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f
[ 2379.178060][T13140] RSP: 0018:ffffc9000539f6b8 EFLAGS: 00010282
[ 2379.184225][T13140] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005b59000
[ 2379.192311][T13140] RDX: 0000000000040000 RSI: ffffffff814c03b7 RDI: 0000000000000001
[ 2379.200392][T13140] RBP: ffff88804dbcc5fc R08: 0000000000000001 R09: 0000000000000000
[ 2379.208422][T13140] R10: 0000000000000001 R11: 000000000003fc28 R12: 1ffff92000a73edc
[ 2379.216591][T13140] R13: 00000000ffffffef R14: ffff88804dbcc5fc R15: ffff888033d1a5a8
[ 2379.224668][T13140] FS:  00007f2fa4c41700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 2379.233726][T13140] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2379.240399][T13140] CR2: 0000001b32121000 CR3: 0000000039b32000 CR4: 00000000003506e0
[ 2379.248423][T13140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2379.256501][T13140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2379.264557][T13140] Call Trace:
[ 2379.267875][T13140]  <TASK>
[ 2379.270895][T13140]  ? __warn+0xe6/0x390
[ 2379.275038][T13140]  ? preempt_schedule_notrace+0x5f/0xd0
[ 2379.280710][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.286334][T13140]  ? report_bug+0x2da/0x500
[ 2379.290954][T13140]  ? handle_bug+0x3c/0x70
[ 2379.295350][T13140]  ? exc_invalid_op+0x18/0x50
[ 2379.300131][T13140]  ? asm_exc_invalid_op+0x1a/0x20
[ 2379.305227][T13140]  ? __warn_printk+0x187/0x310
[ 2379.310117][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.315738][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.321394][T13140]  ref_tracker_free+0x539/0x820
[ 2379.326352][T13140]  ? ref_tracker_dir_exit+0x6a0/0x6a0
[ 2379.331862][T13140]  ? __ipv6_chk_addr_and_flags+0x519/0x7c0
[ 2379.337864][T13140]  fib6_nh_init+0xb96/0x1bd0
[ 2379.342635][T13140]  ? icmp6_dst_alloc+0x670/0x670
[ 2379.347667][T13140]  ? ip_fib_metrics_init+0x3ce/0x7f0
[ 2379.353106][T13140]  ? gre_gso_segment+0x1750/0x1750
[ 2379.358283][T13140]  ? kasan_set_track+0x25/0x30
[ 2379.363182][T13140]  ? __kasan_kmalloc+0xa2/0xb0
[ 2379.368033][T13140]  ip6_route_info_create+0x10f3/0x1980
[ 2379.373649][T13140]  ? fib6_nh_init+0x1bd0/0x1bd0
[ 2379.378617][T13140]  ip6_route_add+0x28/0x150
[ 2379.383259][T13140]  ipv6_route_ioctl+0x3fc/0x570
[ 2379.388186][T13140]  ? debug_check_no_obj_freed+0x210/0x420
[ 2379.394032][T13140]  ? lock_downgrade+0x690/0x690
[ 2379.398956][T13140]  ? rt6_purge_dflt_routers+0xe60/0xe60
[ 2379.404662][T13140]  ? find_held_lock+0x2d/0x110
[ 2379.409539][T13140]  inet6_ioctl+0x246/0x290
[ 2379.414129][T13140]  ? inet6_release+0x70/0x70
[ 2379.418910][T13140]  sock_do_ioctl+0xcc/0x230
[ 2379.423524][T13140]  ? get_user_ifreq+0x250/0x250
[ 2379.428446][T13140]  ? vfs_fileattr_set+0xc40/0xc40
[ 2379.433621][T13140]  sock_ioctl+0x1f8/0x680
[ 2379.438042][T13140]  ? br_ioctl_call+0xb0/0xb0
[ 2379.442757][T13140]  ? __fget_files+0x26a/0x480
[ 2379.447531][T13140]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 2379.452629][T13140]  ? br_ioctl_call+0xb0/0xb0
[ 2379.457286][T13140]  __x64_sys_ioctl+0x197/0x210
[ 2379.462183][T13140]  do_syscall_64+0x39/0xb0
[ 2379.466686][T13140]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2379.472735][T13140] RIP: 0033:0x7f2fa3e8c389
[ 2379.477205][T13140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2379.496916][T13140] RSP: 002b:00007f2fa4c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2379.505436][T13140] RAX: ffffffffffffffda RBX: 00007f2fa3fabf80 RCX: 00007f2fa3e8c389
[ 2379.513508][T13140] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000003
[ 2379.521568][T13140] RBP: 00007f2fa3ed7493 R08: 0000000000000000 R09: 0000000000000000
[ 2379.529596][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2379.537776][T13140] R13: 00007ffc418f610f R14: 00007f2fa4c41300 R15: 0000000000022000
[ 2379.545868][T13140]  </TASK>
[ 2379.548936][T13140] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2379.556257][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 6.4.0-rc5-syzkaller-01229-g97c5209b3d37 #0
[ 2379.566743][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 2379.576829][T13140] Call Trace:
[ 2379.580126][T13140]  <TASK>
[ 2379.583080][T13140]  dump_stack_lvl+0xd9/0x150
[ 2379.587709][T13140]  panic+0x686/0x730
[ 2379.591654][T13140]  ? panic_smp_self_stop+0xa0/0xa0
[ 2379.596809][T13140]  ? show_trace_log_lvl+0x284/0x390
[ 2379.602067][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.607674][T13140]  check_panic_on_warn+0xb1/0xc0
[ 2379.612676][T13140]  __warn+0xf2/0x390
[ 2379.616635][T13140]  ? preempt_schedule_notrace+0x5f/0xd0
[ 2379.622219][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.627815][T13140]  report_bug+0x2da/0x500
[ 2379.632184][T13140]  handle_bug+0x3c/0x70
[ 2379.636371][T13140]  exc_invalid_op+0x18/0x50
[ 2379.640908][T13140]  asm_exc_invalid_op+0x1a/0x20
[ 2379.645800][T13140] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0
[ 2379.652013][T13140] Code: 05 3b 8f 51 0a 01 e8 98 95 38 fd 0f 0b e9 d3 fe ff ff e8 ac d9 70 fd 48 c7 c7 00 d3 a6 8a c6 05 18 8f 51 0a 01 e8 79 95 38 fd <0f> 0b e9 b4 fe ff ff 48 89 ef e8 1a d7 c3 fd e9 5c fe ff ff 0f 1f
[ 2379.671655][T13140] RSP: 0018:ffffc9000539f6b8 EFLAGS: 00010282
[ 2379.677749][T13140] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90005b59000
[ 2379.685743][T13140] RDX: 0000000000040000 RSI: ffffffff814c03b7 RDI: 0000000000000001
[ 2379.693734][T13140] RBP: ffff88804dbcc5fc R08: 0000000000000001 R09: 0000000000000000
[ 2379.701745][T13140] R10: 0000000000000001 R11: 000000000003fc28 R12: 1ffff92000a73edc
[ 2379.709755][T13140] R13: 00000000ffffffef R14: ffff88804dbcc5fc R15: ffff888033d1a5a8
[ 2379.717770][T13140]  ? __warn_printk+0x187/0x310
[ 2379.722584][T13140]  ? refcount_warn_saturate+0x1d7/0x1f0
[ 2379.728168][T13140]  ref_tracker_free+0x539/0x820
[ 2379.733060][T13140]  ? ref_tracker_dir_exit+0x6a0/0x6a0
[ 2379.738523][T13140]  ? __ipv6_chk_addr_and_flags+0x519/0x7c0
[ 2379.744423][T13140]  fib6_nh_init+0xb96/0x1bd0
[ 2379.749073][T13140]  ? icmp6_dst_alloc+0x670/0x670
[ 2379.754057][T13140]  ? ip_fib_metrics_init+0x3ce/0x7f0
[ 2379.759380][T13140]  ? gre_gso_segment+0x1750/0x1750
[ 2379.764523][T13140]  ? kasan_set_track+0x25/0x30
[ 2379.769334][T13140]  ? __kasan_kmalloc+0xa2/0xb0
[ 2379.774149][T13140]  ip6_route_info_create+0x10f3/0x1980
[ 2379.779658][T13140]  ? fib6_nh_init+0x1bd0/0x1bd0
[ 2379.784573][T13140]  ip6_route_add+0x28/0x150
[ 2379.789126][T13140]  ipv6_route_ioctl+0x3fc/0x570
[ 2379.794014][T13140]  ? debug_check_no_obj_freed+0x210/0x420
[ 2379.799767][T13140]  ? lock_downgrade+0x690/0x690
[ 2379.804678][T13140]  ? rt6_purge_dflt_routers+0xe60/0xe60
[ 2379.810797][T13140]  ? find_held_lock+0x2d/0x110
[ 2379.815641][T13140]  inet6_ioctl+0x246/0x290
[ 2379.820107][T13140]  ? inet6_release+0x70/0x70
[ 2379.824757][T13140]  sock_do_ioctl+0xcc/0x230
[ 2379.829298][T13140]  ? get_user_ifreq+0x250/0x250
[ 2379.834238][T13140]  ? vfs_fileattr_set+0xc40/0xc40
[ 2379.839343][T13140]  sock_ioctl+0x1f8/0x680
[ 2379.843724][T13140]  ? br_ioctl_call+0xb0/0xb0
[ 2379.848357][T13140]  ? __fget_files+0x26a/0x480
[ 2379.853087][T13140]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 2379.858071][T13140]  ? br_ioctl_call+0xb0/0xb0
[ 2379.862713][T13140]  __x64_sys_ioctl+0x197/0x210
[ 2379.867551][T13140]  do_syscall_64+0x39/0xb0
[ 2379.872023][T13140]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2379.877990][T13140] RIP: 0033:0x7f2fa3e8c389
[ 2379.882524][T13140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2379.902163][T13140] RSP: 002b:00007f2fa4c41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2379.910604][T13140] RAX: ffffffffffffffda RBX: 00007f2fa3fabf80 RCX: 00007f2fa3e8c389
[ 2379.918598][T13140] RDX: 0000000020000080 RSI: 000000000000890b RDI: 0000000000000003
[ 2379.926591][T13140] RBP: 00007f2fa3ed7493 R08: 0000000000000000 R09: 0000000000000000
[ 2379.934605][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2379.942617][T13140] R13: 00007ffc418f610f R14: 00007f2fa4c41300 R15: 0000000000022000
[ 2379.950640][T13140]  </TASK>
[ 2379.953916][T13140] Kernel Offset: disabled
[ 2379.958259][T13140] Rebooting in 86400 seconds..