x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) [ 178.871651][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.887732][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.909316][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.926426][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.939434][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.953331][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.963939][ T6877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.978535][ T6877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.991521][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.010262][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.022341][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.054901][ T6797] Bluetooth: hci5: command 0x0419 tx timeout [ 179.071588][ T6877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.106745][ T6877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.143321][ T6877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.169512][ T6877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.194971][ T6875] device veth0_macvtap entered promiscuous mode [ 179.225999][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.234121][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.246211][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 22:07:06 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) [ 179.274272][ T6875] device veth1_macvtap entered promiscuous mode [ 179.315349][ T6879] device veth0_macvtap entered promiscuous mode [ 179.386728][ T6879] device veth1_macvtap entered promiscuous mode [ 179.470542][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.492179][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 22:07:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:07 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) [ 179.638265][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.690427][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.742648][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:07:07 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) [ 179.838190][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.872247][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.920513][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.969840][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.995811][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.033274][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.053307][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.063440][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.078505][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.093272][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.105181][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.116768][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.127613][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.138982][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.152448][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.161741][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.197413][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.214225][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.228881][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.253133][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.264009][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.274443][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.284928][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.297090][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.304469][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.323990][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.342408][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.360358][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.369960][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.379142][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.391132][ T6940] device veth0_vlan entered promiscuous mode [ 180.418303][ T6875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.431127][ T6875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.440212][ T6875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.449258][ T6875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.467216][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.488209][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.515049][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.535965][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.546741][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.561659][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.581792][ T6879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.593179][ T6879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.608027][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.630826][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.640457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.656161][ T6879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.664879][ T6879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.683464][ T6879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.701031][ T6879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.718300][ T6940] device veth1_vlan entered promiscuous mode [ 180.892614][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.906885][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 22:07:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 22:07:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendfile(r1, r1, 0x0, 0x24002da8) [ 180.942107][ T6940] device veth0_macvtap entered promiscuous mode [ 180.980022][ T6940] device veth1_macvtap entered promiscuous mode 22:07:08 executing program 4: mknod$loop(&(0x7f0000002380)='./file0\x00', 0xc000, 0x0) creat(&(0x7f0000001c40)='./file0\x00', 0x0) [ 181.049412][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.102356][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.136419][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.191003][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.227744][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.270332][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.301002][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.320750][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.334300][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.353943][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.379067][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.420749][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.434628][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.472406][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.510350][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.553552][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.590769][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.627422][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.638769][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.653426][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.664498][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.675546][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.691386][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.705453][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.723459][ T29] audit: type=1800 audit(1600207629.092:3): pid=8255 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15760 res=0 errno=0 [ 181.750402][ T8251] syz-executor.2 (8251) used greatest stack depth: 23096 bytes left [ 181.765204][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.797208][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.831521][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.852208][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.960991][ T6940] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.994129][ T6940] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.025919][ T6940] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.034658][ T6940] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 22:07:09 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) 22:07:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:09 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) 22:07:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendfile(r1, r1, 0x0, 0x24002da8) 22:07:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 22:07:09 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) 22:07:10 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:10 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) r5 = accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './bus', [{0x20, 'comm\x00'}], 0xa, "9858"}, 0x11) 22:07:10 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) 22:07:10 executing program 1: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4016093, r0, 0x0) 22:07:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) 22:07:10 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x1ff, 0x54}) 22:07:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={[{@size={'size', 0x3d, [0x6d]}}]}) 22:07:10 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, "1a784600349af8e0"}) 22:07:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045566, 0x0) 22:07:10 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) r5 = accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './bus', [{0x20, 'comm\x00'}], 0xa, "9858"}, 0x11) 22:07:10 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:10 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) r5 = accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './bus', [{0x20, 'comm\x00'}], 0xa, "9858"}, 0x11) 22:07:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:11 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 22:07:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:11 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:11 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) 22:07:12 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 22:07:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:12 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) [ 184.770592][ T8339] syz-executor.2 (8339) used greatest stack depth: 22464 bytes left 22:07:12 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:12 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:12 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 22:07:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:12 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:12 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:12 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:13 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:13 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:13 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:13 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:13 executing program 3: mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:14 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:14 executing program 3: mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:14 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:14 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:14 executing program 3: mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:14 executing program 4: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:14 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:15 executing program 4: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:15 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:15 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:15 executing program 4: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:16 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:16 executing program 3: mknod$loop(0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:16 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x8b, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210fcb1adf53c8157c1ff5769ffaf5e53a5e4b07d1e0d1f74b42641907dc9db2a010e6e"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:16 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:16 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:16 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:17 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @broadcast, @broadcast}, 0xc) 22:07:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:17 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:17 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000040)='bpf\x00', 0x2010807, 0x0) 22:07:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgid(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xfffff7ff}) 22:07:17 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:17 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:17 executing program 2: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) 22:07:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:18 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:18 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x2010807, 0x0) 22:07:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) 22:07:18 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:18 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="13", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)='{\x00', r1) 22:07:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:18 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x2010807, 0x0) 22:07:18 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:18 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x2010807, 0x0) 22:07:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 22:07:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:19 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, 0x0) 22:07:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:19 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:19 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="ad"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="7a34cd2f893e"}, 0x14) 22:07:19 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, 0x0) 22:07:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:19 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:20 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/4096) 22:07:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 22:07:20 executing program 3: mknod$loop(&(0x7f0000002380)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, 0x0) 22:07:20 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1100) 22:07:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:20 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x1100) 22:07:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(0x0, &(0x7f0000000100), 0x0) 22:07:20 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/4096) 22:07:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4) 22:07:20 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x1100) 22:07:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000005e40)={0x0, 0x0, 0x0}, 0x0) 22:07:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 22:07:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(0x0, &(0x7f0000000100), 0x0) 22:07:21 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x1100) 22:07:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(0x0, &(0x7f0000000100), 0x0) 22:07:21 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1100) 22:07:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 22:07:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), 0x0, 0x0) 22:07:21 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000005e40)={0x0, 0x0, 0x0}, 0x0) 22:07:22 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1100) 22:07:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), 0x0, 0x0) 22:07:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 22:07:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f00000000c0), 0x0, 0x0) 22:07:22 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1100) 22:07:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x6409}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x2a8, &(0x7f0000000700)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x0f\xab\xc3\t\fc\xd8m\x00\x00\x00U*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\n\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8802a00000000) 22:07:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1200, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 22:07:22 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) [ 195.387831][ T8774] device batadv0 entered promiscuous mode 22:07:22 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:23 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000140)=""/257, 0x101}, {&(0x7f0000000700)=""/60, 0x285e}, {0x0}, {0x0, 0xc3eeff7f}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000002640)=""/4087, 0xff7}], 0x7}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) 22:07:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:23 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) 22:07:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x6409}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x2a8, &(0x7f0000000700)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x0f\xab\xc3\t\fc\xd8m\x00\x00\x00U*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\n\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8802a00000000) 22:07:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) creat(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:23 executing program 4: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) 22:07:23 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 22:07:23 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5450, 0x0) 22:07:23 executing program 4: getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, &(0x7f0000000140)) getrusage(0x0, &(0x7f0000000180)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:07:23 executing program 2: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) 22:07:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:23 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:23 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r0, &(0x7f0000000900)=[{&(0x7f00000002c0)="9b", 0x1}], 0x1, 0x0, 0x0) fsync(r0) 22:07:23 executing program 3: r0 = socket(0x18, 0x1, 0x0) read(r0, 0x0, 0x0) 22:07:23 executing program 2: getitimer(0x1, &(0x7f0000000280)) 22:07:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1300000038490000001f000000002000"}) 22:07:24 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x749443, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 22:07:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) llistxattr(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) 22:07:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') r1 = inotify_init1(0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) futimesat(r0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}) 22:07:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 22:07:24 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x38641, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file2\x00') setxattr(&(0x7f0000000080)='./file2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x2) 22:07:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000003d80)='/dev/zero\x00', 0xc0001, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 22:07:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:07:24 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x4902, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 22:07:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffff78) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/213, 0xd5}], 0x1) 22:07:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000180)) 22:07:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) 22:07:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:07:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:07:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x5450, 0x0) 22:07:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) 22:07:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x10001]}, 0x8) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:07:25 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:07:25 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xa}, [@call={0xc, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:07:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:07:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') 22:07:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:07:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:07:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:07:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x722, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socket$kcm(0x2b, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x11, 0x800, 0x200, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 22:07:26 executing program 3: symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') [ 199.029460][ T8918] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 199.050884][ T8918] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.4'. 22:07:26 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:26 executing program 3: symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') 22:07:26 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) flock(r0, 0x5) 22:07:26 executing program 4: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 22:07:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x722, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socket$kcm(0x2b, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x11, 0x800, 0x200, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 22:07:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbaa5) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000006800001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000005100900000000000000000000007e00000000001100000000000000000000000100"/76], 0x98}, 0x0) 22:07:27 executing program 3: symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') 22:07:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x722, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socket$kcm(0x2b, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x11, 0x800, 0x200, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 22:07:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') 22:07:27 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 199.866501][ T8960] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 199.946554][ T8960] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.038857][ T8960] debugfs: Directory '!' with parent 'ieee80211' already present! 22:07:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') 22:07:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbaa5) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000006800001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000005100900000000000000000000007e00000000001100000000000000000000000100"/76], 0x98}, 0x0) 22:07:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x722, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socket$kcm(0x2b, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x11, 0x800, 0x200, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7ff}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 22:07:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:27 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 200.463996][ T8988] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 22:07:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') [ 200.510964][ T8988] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.564844][ T8988] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 200.640756][ T8988] CPU: 1 PID: 8988 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 200.650598][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.660661][ T8988] Call Trace: [ 200.663972][ T8988] dump_stack+0x198/0x1fb [ 200.668325][ T8988] sysfs_warn_dup.cold+0x1c/0x29 [ 200.673282][ T8988] sysfs_do_create_link_sd+0x11e/0x140 [ 200.678760][ T8988] sysfs_create_link+0x5f/0xc0 [ 200.683542][ T8988] device_add+0x6ff/0x1c40 [ 200.687983][ T8988] ? devlink_add_symlinks+0x450/0x450 [ 200.693380][ T8988] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 200.699382][ T8988] wiphy_register+0x1d66/0x2850 [ 200.704261][ T8988] ? wiphy_unregister+0xbb0/0xbb0 [ 200.709300][ T8988] ? generic_xdp_install+0x700/0x700 [ 200.714605][ T8988] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 200.720687][ T8988] ieee80211_register_hw+0x22c9/0x39a0 [ 200.726177][ T8988] ? ieee80211_restart_hw+0x290/0x290 [ 200.731569][ T8988] ? debug_object_destroy+0x210/0x210 [ 200.736952][ T8988] ? lock_downgrade+0x830/0x830 [ 200.741823][ T8988] ? memset+0x20/0x40 [ 200.745821][ T8988] ? __hrtimer_init+0x12c/0x260 [ 200.750715][ T8988] mac80211_hwsim_new_radio+0x2353/0x4540 [ 200.756467][ T8988] ? hwsim_virtio_rx_work+0x350/0x350 [ 200.761858][ T8988] ? memcpy+0x39/0x60 [ 200.765860][ T8988] hwsim_new_radio_nl+0x93e/0xf90 [ 200.770928][ T8988] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 200.776855][ T8988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 200.783801][ T8988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 200.790674][ T8988] genl_rcv_msg+0x61d/0x980 [ 200.795205][ T8988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 200.802167][ T8988] ? lock_release+0x890/0x890 [ 200.806866][ T8988] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 200.812168][ T8988] netlink_rcv_skb+0x15a/0x430 [ 200.816947][ T8988] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 200.823896][ T8988] ? netlink_ack+0xa10/0xa10 [ 200.828515][ T8988] genl_rcv+0x24/0x40 [ 200.832510][ T8988] netlink_unicast+0x533/0x7d0 [ 200.837289][ T8988] ? netlink_attachskb+0x810/0x810 [ 200.842414][ T8988] ? __phys_addr_symbol+0x2c/0x70 [ 200.847452][ T8988] ? __check_object_size+0x171/0x3f0 [ 200.852754][ T8988] netlink_sendmsg+0x856/0xd90 [ 200.857538][ T8988] ? netlink_unicast+0x7d0/0x7d0 [ 200.862498][ T8988] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 200.867839][ T8988] ? netlink_unicast+0x7d0/0x7d0 [ 200.872780][ T8988] sock_sendmsg+0xcf/0x120 [ 200.877200][ T8988] ____sys_sendmsg+0x6e8/0x810 [ 200.881966][ T8988] ? kernel_sendmsg+0x50/0x50 [ 200.886638][ T8988] ? do_recvmmsg+0x700/0x700 [ 200.891235][ T8988] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 200.897223][ T8988] ___sys_sendmsg+0xf3/0x170 [ 200.901822][ T8988] ? sendmsg_copy_msghdr+0x160/0x160 [ 200.907114][ T8988] ? lock_downgrade+0x830/0x830 [ 200.911979][ T8988] ? find_held_lock+0x2d/0x110 [ 200.916740][ T8988] ? __might_fault+0xd3/0x180 [ 200.921425][ T8988] ? __fget_files+0x294/0x400 [ 200.926111][ T8988] ? __fget_light+0xea/0x280 [ 200.930706][ T8988] __sys_sendmsg+0xe5/0x1b0 [ 200.935206][ T8988] ? __sys_sendmsg_sock+0xb0/0xb0 [ 200.940229][ T8988] ? __x64_sys_futex+0x382/0x4e0 [ 200.945178][ T8988] ? check_preemption_disabled+0x50/0x130 [ 200.950895][ T8988] ? syscall_enter_from_user_mode+0x1d/0x60 [ 200.956790][ T8988] do_syscall_64+0x2d/0x70 [ 200.961212][ T8988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 200.967100][ T8988] RIP: 0033:0x45d5f9 [ 200.970995][ T8988] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:07:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, &(0x7f0000d06ff8)='./file0\x00') [ 200.990592][ T8988] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.999005][ T8988] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 201.006988][ T8988] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 201.014953][ T8988] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 201.022919][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 201.030886][ T8988] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbaa5) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000006800001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000005100900000000000000000000007e00000000001100000000000000000000000100"/76], 0x98}, 0x0) 22:07:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, &(0x7f0000d06ff8)='./file0\x00') 22:07:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbaa5) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000006800001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000005100900000000000000000000007e00000000001100000000000000000000000100"/76], 0x98}, 0x0) 22:07:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbaa5) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000006800001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000000000090000000888f800", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000240000000000000000000000070000009404000005100900000000000000000000007e00000000001100000000000000000000000100"/76], 0x98}, 0x0) 22:07:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, &(0x7f0000d06ff8)='./file0\x00') 22:07:28 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18}}], 0x18}, 0x0) 22:07:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') 22:07:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:29 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x28, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:07:29 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x722, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socket$kcm(0x2b, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x180e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x11, 0x800, 0x200, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 22:07:29 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') [ 202.060631][ T9046] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 22:07:29 executing program 4: 22:07:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', 0xffffffffffffffff, &(0x7f0000d06ff8)='./file0\x00') [ 202.107118][ T9046] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.184996][ T9046] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 202.213712][ T9046] CPU: 1 PID: 9046 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 202.223533][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.233598][ T9046] Call Trace: [ 202.236933][ T9046] dump_stack+0x198/0x1fb [ 202.241286][ T9046] sysfs_warn_dup.cold+0x1c/0x29 [ 202.246252][ T9046] sysfs_do_create_link_sd+0x11e/0x140 [ 202.251726][ T9046] sysfs_create_link+0x5f/0xc0 [ 202.256592][ T9046] device_add+0x6ff/0x1c40 [ 202.261028][ T9046] ? devlink_add_symlinks+0x450/0x450 [ 202.266419][ T9046] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 202.272456][ T9046] wiphy_register+0x1d66/0x2850 [ 202.277376][ T9046] ? wiphy_unregister+0xbb0/0xbb0 [ 202.282421][ T9046] ? generic_xdp_install+0x700/0x700 [ 202.287762][ T9046] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 202.293849][ T9046] ieee80211_register_hw+0x22c9/0x39a0 [ 202.299342][ T9046] ? ieee80211_restart_hw+0x290/0x290 [ 202.304727][ T9046] ? debug_object_destroy+0x210/0x210 [ 202.310153][ T9046] ? lock_downgrade+0x830/0x830 [ 202.315020][ T9046] ? memset+0x20/0x40 [ 202.319017][ T9046] ? __hrtimer_init+0x12c/0x260 [ 202.323893][ T9046] mac80211_hwsim_new_radio+0x2353/0x4540 [ 202.329649][ T9046] ? hwsim_virtio_rx_work+0x350/0x350 [ 202.335033][ T9046] ? memcpy+0x39/0x60 [ 202.339031][ T9046] hwsim_new_radio_nl+0x93e/0xf90 [ 202.344100][ T9046] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 202.350031][ T9046] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 202.356980][ T9046] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 202.363859][ T9046] genl_rcv_msg+0x61d/0x980 [ 202.368404][ T9046] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 202.375362][ T9046] ? lock_release+0x890/0x890 [ 202.380079][ T9046] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 202.385406][ T9046] netlink_rcv_skb+0x15a/0x430 [ 202.390291][ T9046] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 202.397233][ T9046] ? netlink_ack+0xa10/0xa10 [ 202.401843][ T9046] genl_rcv+0x24/0x40 [ 202.405824][ T9046] netlink_unicast+0x533/0x7d0 [ 202.410592][ T9046] ? netlink_attachskb+0x810/0x810 [ 202.415718][ T9046] ? __phys_addr_symbol+0x2c/0x70 [ 202.420754][ T9046] ? __check_object_size+0x171/0x3f0 [ 202.426044][ T9046] netlink_sendmsg+0x856/0xd90 [ 202.430814][ T9046] ? netlink_unicast+0x7d0/0x7d0 [ 202.435755][ T9046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 202.441038][ T9046] ? netlink_unicast+0x7d0/0x7d0 [ 202.445973][ T9046] sock_sendmsg+0xcf/0x120 [ 202.450390][ T9046] ____sys_sendmsg+0x6e8/0x810 [ 202.455151][ T9046] ? kernel_sendmsg+0x50/0x50 [ 202.459824][ T9046] ? do_recvmmsg+0x700/0x700 [ 202.464425][ T9046] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 202.470412][ T9046] ___sys_sendmsg+0xf3/0x170 [ 202.475000][ T9046] ? sendmsg_copy_msghdr+0x160/0x160 [ 202.480293][ T9046] ? lock_downgrade+0x830/0x830 [ 202.485138][ T9046] ? find_held_lock+0x2d/0x110 [ 202.489901][ T9046] ? __might_fault+0xd3/0x180 [ 202.494601][ T9046] ? __fget_files+0x294/0x400 [ 202.499299][ T9046] ? __fget_light+0xea/0x280 [ 202.503939][ T9046] __sys_sendmsg+0xe5/0x1b0 [ 202.508443][ T9046] ? __sys_sendmsg_sock+0xb0/0xb0 [ 202.513478][ T9046] ? __x64_sys_futex+0x382/0x4e0 [ 202.518433][ T9046] ? check_preemption_disabled+0x50/0x130 [ 202.524165][ T9046] ? syscall_enter_from_user_mode+0x1d/0x60 [ 202.530082][ T9046] do_syscall_64+0x2d/0x70 [ 202.534513][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.540422][ T9046] RIP: 0033:0x45d5f9 [ 202.544340][ T9046] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.563952][ T9046] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.572381][ T9046] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 202.580346][ T9046] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 202.588344][ T9046] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 202.596311][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 202.604282][ T9046] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:30 executing program 4: 22:07:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, 0x0) 22:07:30 executing program 2: 22:07:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:30 executing program 2: 22:07:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, 0x0) [ 203.005452][ T9070] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 203.034182][ T9070] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, 0x0) 22:07:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:30 executing program 2: 22:07:30 executing program 3: 22:07:30 executing program 2: 22:07:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) [ 203.769326][ T9070] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 203.804042][ T9070] CPU: 0 PID: 9070 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 203.813909][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.823971][ T9070] Call Trace: [ 203.827291][ T9070] dump_stack+0x198/0x1fb [ 203.831635][ T9070] sysfs_warn_dup.cold+0x1c/0x29 [ 203.836574][ T9070] sysfs_do_create_link_sd+0x11e/0x140 [ 203.842036][ T9070] sysfs_create_link+0x5f/0xc0 [ 203.846808][ T9070] device_add+0x6ff/0x1c40 [ 203.851240][ T9070] ? devlink_add_symlinks+0x450/0x450 [ 203.856614][ T9070] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 203.862598][ T9070] wiphy_register+0x1d66/0x2850 [ 203.867475][ T9070] ? wiphy_unregister+0xbb0/0xbb0 [ 203.872515][ T9070] ? generic_xdp_install+0x700/0x700 [ 203.877825][ T9070] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 203.883899][ T9070] ieee80211_register_hw+0x22c9/0x39a0 [ 203.889386][ T9070] ? ieee80211_restart_hw+0x290/0x290 [ 203.894757][ T9070] ? debug_object_destroy+0x210/0x210 [ 203.900125][ T9070] ? lock_downgrade+0x830/0x830 [ 203.904968][ T9070] ? memset+0x20/0x40 [ 203.908932][ T9070] ? __hrtimer_init+0x12c/0x260 [ 203.913782][ T9070] mac80211_hwsim_new_radio+0x2353/0x4540 [ 203.919572][ T9070] ? hwsim_virtio_rx_work+0x350/0x350 [ 203.924962][ T9070] ? memcpy+0x39/0x60 [ 203.928958][ T9070] hwsim_new_radio_nl+0x93e/0xf90 [ 203.933982][ T9070] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 203.939896][ T9070] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 203.946839][ T9070] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 203.953689][ T9070] genl_rcv_msg+0x61d/0x980 [ 203.958184][ T9070] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 203.965141][ T9070] ? lock_release+0x890/0x890 [ 203.969815][ T9070] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 203.975085][ T9070] netlink_rcv_skb+0x15a/0x430 [ 203.979834][ T9070] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 203.986764][ T9070] ? netlink_ack+0xa10/0xa10 [ 203.991357][ T9070] genl_rcv+0x24/0x40 [ 203.995348][ T9070] netlink_unicast+0x533/0x7d0 [ 204.000122][ T9070] ? netlink_attachskb+0x810/0x810 [ 204.005255][ T9070] ? __phys_addr_symbol+0x2c/0x70 [ 204.010264][ T9070] ? __check_object_size+0x171/0x3f0 [ 204.015533][ T9070] netlink_sendmsg+0x856/0xd90 [ 204.020357][ T9070] ? netlink_unicast+0x7d0/0x7d0 [ 204.025291][ T9070] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 204.030574][ T9070] ? netlink_unicast+0x7d0/0x7d0 [ 204.035682][ T9070] sock_sendmsg+0xcf/0x120 [ 204.040082][ T9070] ____sys_sendmsg+0x6e8/0x810 [ 204.044871][ T9070] ? kernel_sendmsg+0x50/0x50 [ 204.049578][ T9070] ? do_recvmmsg+0x700/0x700 [ 204.054178][ T9070] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 204.060331][ T9070] ___sys_sendmsg+0xf3/0x170 [ 204.064976][ T9070] ? sendmsg_copy_msghdr+0x160/0x160 [ 204.070261][ T9070] ? lock_downgrade+0x830/0x830 [ 204.075145][ T9070] ? find_held_lock+0x2d/0x110 [ 204.079909][ T9070] ? __might_fault+0xd3/0x180 [ 204.084613][ T9070] ? __fget_files+0x294/0x400 [ 204.089290][ T9070] ? __fget_light+0xea/0x280 [ 204.093864][ T9070] __sys_sendmsg+0xe5/0x1b0 [ 204.098346][ T9070] ? __sys_sendmsg_sock+0xb0/0xb0 [ 204.103429][ T9070] ? check_preemption_disabled+0x50/0x130 [ 204.109144][ T9070] ? syscall_enter_from_user_mode+0x1d/0x60 [ 204.115069][ T9070] do_syscall_64+0x2d/0x70 [ 204.119575][ T9070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 204.125474][ T9070] RIP: 0033:0x45d5f9 [ 204.129368][ T9070] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.148985][ T9070] RSP: 002b:00007f843e8d7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.157427][ T9070] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 204.165382][ T9070] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 204.173361][ T9070] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 204.181335][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 204.189302][ T9070] R13: 00007ffd28caf8df R14: 00007f843e8d89c0 R15: 000000000118cfec [ 204.643154][ T21] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.248441][ T21] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.746884][ T21] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.020995][ T21] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.236789][ T21] tipc: TX() has been purged, node left! [ 208.150377][ T21] device hsr_slave_0 left promiscuous mode [ 208.170644][ T21] device hsr_slave_1 left promiscuous mode [ 208.187488][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.205405][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.262087][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.305983][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.349299][ T21] device bridge_slave_1 left promiscuous mode [ 208.356687][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.372451][ T21] device bridge_slave_0 left promiscuous mode [ 208.378656][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.400229][ T21] device veth1_macvtap left promiscuous mode [ 208.407673][ T21] device veth0_macvtap left promiscuous mode [ 208.413681][ T21] device veth1_vlan left promiscuous mode [ 208.420161][ T21] device veth0_vlan left promiscuous mode [ 210.245870][ T6797] Bluetooth: hci4: command 0x0409 tx timeout [ 212.325883][ T7084] Bluetooth: hci4: command 0x041b tx timeout [ 212.951145][ T21] team0 (unregistering): Port device team_slave_1 removed [ 212.965490][ T21] team0 (unregistering): Port device team_slave_0 removed [ 212.980296][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.993752][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.059190][ T21] bond0 (unregistering): Released all slaves [ 213.119086][ T9134] IPVS: ftp: loaded support on port[0] = 21 [ 213.285316][ T9134] chnl_net:caif_netlink_parms(): no params data found [ 213.412761][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.443296][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.451853][ T9134] device bridge_slave_0 entered promiscuous mode [ 213.472283][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.483636][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.492659][ T9134] device bridge_slave_1 entered promiscuous mode [ 213.544974][ T9134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.570652][ T9134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.614064][ T9134] team0: Port device team_slave_0 added [ 213.623127][ T9134] team0: Port device team_slave_1 added [ 213.649458][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.658241][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.687958][ T9134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.703537][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.712282][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.739436][ T9134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.781460][ T9134] device hsr_slave_0 entered promiscuous mode [ 213.790017][ T9134] device hsr_slave_1 entered promiscuous mode [ 213.799957][ T9134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.809065][ T9134] Cannot create hsr debugfs directory [ 213.953396][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.960724][ T9134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.968920][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.976048][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.108349][ T9134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.129719][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.139113][ T23] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.149685][ T23] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.173312][ T9134] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.188664][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.198605][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.208920][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.216063][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.238582][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.248276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.258261][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.265329][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.274736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.297384][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.308416][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.317459][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.339018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.347532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.357742][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.367946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.377677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.393195][ T9134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.405943][ T8244] Bluetooth: hci4: command 0x040f tx timeout [ 214.418310][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.437556][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.447692][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.474846][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.483276][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.505331][ T9134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.679603][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.696507][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.728485][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.738328][ T7084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.751205][ T9134] device veth0_vlan entered promiscuous mode [ 214.759960][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.777977][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.800877][ T9134] device veth1_vlan entered promiscuous mode [ 214.865124][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.874353][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.883470][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.893745][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.915000][ T9134] device veth0_macvtap entered promiscuous mode [ 214.929702][ T9134] device veth1_macvtap entered promiscuous mode [ 214.962504][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 214.974276][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.990168][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.001544][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.013437][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.024578][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.036372][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.050958][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.062732][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 215.075080][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.087697][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.096709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.104947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.115236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.124672][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.137413][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.149910][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.162883][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.173780][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.183860][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.194525][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.206249][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.216860][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.226966][ T9134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 215.237678][ T9134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.250070][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.260512][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.271227][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:07:42 executing program 4: 22:07:42 executing program 3: 22:07:42 executing program 2: 22:07:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:42 executing program 2: [ 215.545737][ T9360] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 215.592963][ T9360] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:43 executing program 3: [ 215.647885][ T9360] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 215.658218][ T9360] CPU: 1 PID: 9360 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 215.668032][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.678088][ T9360] Call Trace: [ 215.681399][ T9360] dump_stack+0x198/0x1fb [ 215.685750][ T9360] sysfs_warn_dup.cold+0x1c/0x29 [ 215.690708][ T9360] sysfs_do_create_link_sd+0x11e/0x140 [ 215.696183][ T9360] sysfs_create_link+0x5f/0xc0 [ 215.700962][ T9360] device_add+0x6ff/0x1c40 [ 215.705401][ T9360] ? devlink_add_symlinks+0x450/0x450 [ 215.710790][ T9360] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 215.716793][ T9360] wiphy_register+0x1d66/0x2850 [ 215.721684][ T9360] ? wiphy_unregister+0xbb0/0xbb0 [ 215.726723][ T9360] ? generic_xdp_install+0x700/0x700 [ 215.732038][ T9360] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 215.738124][ T9360] ieee80211_register_hw+0x22c9/0x39a0 [ 215.743618][ T9360] ? ieee80211_restart_hw+0x290/0x290 [ 215.749009][ T9360] ? debug_object_destroy+0x210/0x210 [ 215.754390][ T9360] ? lock_downgrade+0x830/0x830 [ 215.759258][ T9360] ? memset+0x20/0x40 [ 215.763248][ T9360] ? __hrtimer_init+0x12c/0x260 [ 215.768116][ T9360] mac80211_hwsim_new_radio+0x2353/0x4540 [ 215.773866][ T9360] ? hwsim_virtio_rx_work+0x350/0x350 [ 215.779248][ T9360] ? memcpy+0x39/0x60 [ 215.783250][ T9360] hwsim_new_radio_nl+0x93e/0xf90 [ 215.788291][ T9360] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 215.794211][ T9360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 215.801155][ T9360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 215.808021][ T9360] genl_rcv_msg+0x61d/0x980 [ 215.812546][ T9360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 215.819504][ T9360] ? lock_release+0x890/0x890 [ 215.824188][ T9360] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 215.829492][ T9360] netlink_rcv_skb+0x15a/0x430 [ 215.834296][ T9360] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 215.841241][ T9360] ? netlink_ack+0xa10/0xa10 22:07:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) tkill(r2, 0x3c) 22:07:43 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001100)=""/5, 0x5}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x10000000, 0x0) 22:07:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 215.845865][ T9360] genl_rcv+0x24/0x40 [ 215.849856][ T9360] netlink_unicast+0x533/0x7d0 [ 215.854641][ T9360] ? netlink_attachskb+0x810/0x810 [ 215.859773][ T9360] ? __phys_addr_symbol+0x2c/0x70 [ 215.864804][ T9360] ? __check_object_size+0x171/0x3f0 [ 215.870101][ T9360] netlink_sendmsg+0x856/0xd90 [ 215.874882][ T9360] ? netlink_unicast+0x7d0/0x7d0 [ 215.879839][ T9360] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 215.885135][ T9360] ? netlink_unicast+0x7d0/0x7d0 [ 215.890069][ T9360] sock_sendmsg+0xcf/0x120 [ 215.894488][ T9360] ____sys_sendmsg+0x6e8/0x810 [ 215.899252][ T9360] ? kernel_sendmsg+0x50/0x50 [ 215.903916][ T9360] ? do_recvmmsg+0x700/0x700 [ 215.908512][ T9360] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 215.914484][ T9360] ? lockdep_hardirqs_on+0x53/0x100 [ 215.919667][ T9360] ? _raw_spin_unlock_irq+0x55/0x80 [ 215.924852][ T9360] ? finish_task_switch+0x147/0x760 [ 215.930046][ T9360] ___sys_sendmsg+0xf3/0x170 [ 215.934650][ T9360] ? sendmsg_copy_msghdr+0x160/0x160 [ 215.939985][ T9360] ? lock_downgrade+0x830/0x830 [ 215.944828][ T9360] ? sched_clock_cpu+0x18/0x1b0 [ 215.949689][ T9360] ? preempt_schedule_irq+0x14d/0x1b0 [ 215.955047][ T9360] ? lockdep_hardirqs_off+0x96/0xd0 [ 215.960234][ T9360] ? __fget_files+0x294/0x400 [ 215.964986][ T9360] ? __fget_light+0xea/0x280 [ 215.969594][ T9360] __sys_sendmsg+0xe5/0x1b0 [ 215.974109][ T9360] ? __sys_sendmsg_sock+0xb0/0xb0 [ 215.979130][ T9360] ? __x64_sys_futex+0x382/0x4e0 [ 215.984058][ T9360] ? check_preemption_disabled+0x50/0x130 [ 215.989758][ T9360] ? syscall_enter_from_user_mode+0x1d/0x60 [ 215.995651][ T9360] do_syscall_64+0x2d/0x70 [ 216.000079][ T9360] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 216.005972][ T9360] RIP: 0033:0x45d5f9 [ 216.009852][ T9360] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.029447][ T9360] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.037895][ T9360] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 216.045847][ T9360] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 216.053801][ T9360] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 216.061793][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 216.069746][ T9360] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:43 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@ptr, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {0x0, 0x1}, {}]}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x100, [{0x10, 0x3}, {0xc}, {0xa, 0x1, 0x40004}, {}]}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x0, 0x2000000}, {0xc, 0x0, 0x1}, {0x3}, {}, {}, {0x1}, {0xe}, {0x0, 0x4}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x7}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x120}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:07:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 216.171325][ T9378] binder: 9375:9378 ioctl 40046205 0 returned -22 22:07:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) 22:07:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 216.229459][ T9378] binder: 9375:9378 ioctl 40046205 0 returned -22 22:07:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x18, 0x29, 0x37}}], 0x18}, 0x0) 22:07:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:43 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x10, 0x6, 0x0, @remote, @mcast2, {[], @ni}}}}}, 0x0) [ 216.334553][ T9386] ptrace attach of "/root/syz-executor.4"[9385] was attempted by "/root/syz-executor.4"[9386] [ 216.360752][ T9389] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 216.403877][ T9389] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.462857][ T9389] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 216.485947][ T8244] Bluetooth: hci4: command 0x0419 tx timeout [ 216.555715][ T9389] CPU: 0 PID: 9389 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 216.565561][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.575619][ T9389] Call Trace: [ 216.578925][ T9389] dump_stack+0x198/0x1fb [ 216.583269][ T9389] sysfs_warn_dup.cold+0x1c/0x29 [ 216.588225][ T9389] sysfs_do_create_link_sd+0x11e/0x140 [ 216.593700][ T9389] sysfs_create_link+0x5f/0xc0 [ 216.598480][ T9389] device_add+0x6ff/0x1c40 [ 216.602919][ T9389] ? devlink_add_symlinks+0x450/0x450 [ 216.608305][ T9389] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 216.614302][ T9389] wiphy_register+0x1d66/0x2850 [ 216.619183][ T9389] ? wiphy_unregister+0xbb0/0xbb0 [ 216.624219][ T9389] ? generic_xdp_install+0x700/0x700 [ 216.629524][ T9389] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 216.635600][ T9389] ieee80211_register_hw+0x22c9/0x39a0 [ 216.641084][ T9389] ? ieee80211_restart_hw+0x290/0x290 [ 216.646481][ T9389] ? debug_object_destroy+0x210/0x210 [ 216.651854][ T9389] ? lock_downgrade+0x830/0x830 [ 216.656721][ T9389] ? memset+0x20/0x40 [ 216.660714][ T9389] ? __hrtimer_init+0x12c/0x260 [ 216.665577][ T9389] mac80211_hwsim_new_radio+0x2353/0x4540 [ 216.671325][ T9389] ? hwsim_virtio_rx_work+0x350/0x350 [ 216.676725][ T9389] ? memcpy+0x39/0x60 [ 216.680718][ T9389] hwsim_new_radio_nl+0x93e/0xf90 [ 216.685755][ T9389] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 216.691700][ T9389] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 216.698646][ T9389] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 216.705509][ T9389] genl_rcv_msg+0x61d/0x980 [ 216.710029][ T9389] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 216.716986][ T9389] ? lock_release+0x890/0x890 [ 216.721710][ T9389] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 216.727008][ T9389] netlink_rcv_skb+0x15a/0x430 [ 216.731785][ T9389] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 216.738733][ T9389] ? netlink_ack+0xa10/0xa10 [ 216.743351][ T9389] genl_rcv+0x24/0x40 [ 216.747339][ T9389] netlink_unicast+0x533/0x7d0 [ 216.752121][ T9389] ? netlink_attachskb+0x810/0x810 [ 216.757247][ T9389] ? __phys_addr_symbol+0x2c/0x70 [ 216.762274][ T9389] ? __check_object_size+0x171/0x3f0 [ 216.767569][ T9389] netlink_sendmsg+0x856/0xd90 [ 216.772352][ T9389] ? netlink_unicast+0x7d0/0x7d0 [ 216.777308][ T9389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.782597][ T9389] ? netlink_unicast+0x7d0/0x7d0 [ 216.787541][ T9389] sock_sendmsg+0xcf/0x120 [ 216.791966][ T9389] ____sys_sendmsg+0x6e8/0x810 [ 216.796742][ T9389] ? kernel_sendmsg+0x50/0x50 [ 216.801421][ T9389] ? do_recvmmsg+0x700/0x700 [ 216.806025][ T9389] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 216.812022][ T9389] ___sys_sendmsg+0xf3/0x170 [ 216.816624][ T9389] ? sendmsg_copy_msghdr+0x160/0x160 [ 216.821921][ T9389] ? lock_downgrade+0x830/0x830 [ 216.826774][ T9389] ? find_held_lock+0x2d/0x110 [ 216.831543][ T9389] ? __might_fault+0xd3/0x180 [ 216.836241][ T9389] ? __fget_files+0x294/0x400 [ 216.840930][ T9389] ? __fget_light+0xea/0x280 [ 216.845533][ T9389] __sys_sendmsg+0xe5/0x1b0 [ 216.850046][ T9389] ? __sys_sendmsg_sock+0xb0/0xb0 [ 216.855076][ T9389] ? __x64_sys_futex+0x382/0x4e0 [ 216.860035][ T9389] ? check_preemption_disabled+0x50/0x130 [ 216.865760][ T9389] ? syscall_enter_from_user_mode+0x1d/0x60 [ 216.871663][ T9389] do_syscall_64+0x2d/0x70 [ 216.876122][ T9389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 216.882013][ T9389] RIP: 0033:0x45d5f9 [ 216.885911][ T9389] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:07:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47", 0x1b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 216.905516][ T9389] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.913939][ T9389] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 216.921917][ T9389] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 216.929891][ T9389] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 216.937869][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 216.945868][ T9389] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:44 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x8, 0x29, 0x0, @local={0xfe, 0x80, [0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @echo_reply}}}}}, 0x0) 22:07:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001100)=""/5, 0x5}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) [ 217.051340][ T9410] ptrace attach of "/root/syz-executor.2"[9409] was attempted by "/root/syz-executor.2"[9410] 22:07:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "c55315", 0x10, 0x21, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "91233c", 0x0, "4e08b8"}}}}}}}, 0x0) [ 217.296147][ T9426] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 217.406783][ T9426] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 217.501426][ T9426] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 217.506080][ T9432] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 217.536598][ T9426] CPU: 0 PID: 9426 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 217.546423][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.556484][ T9426] Call Trace: [ 217.559797][ T9426] dump_stack+0x198/0x1fb [ 217.564153][ T9426] sysfs_warn_dup.cold+0x1c/0x29 [ 217.569115][ T9426] sysfs_do_create_link_sd+0x11e/0x140 [ 217.574593][ T9426] sysfs_create_link+0x5f/0xc0 [ 217.579375][ T9426] device_add+0x6ff/0x1c40 [ 217.584236][ T9426] ? devlink_add_symlinks+0x450/0x450 [ 217.589630][ T9426] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 217.590242][ T9432] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 217.595660][ T9426] wiphy_register+0x1d66/0x2850 [ 217.609379][ T9426] ? wiphy_unregister+0xbb0/0xbb0 [ 217.614422][ T9426] ? generic_xdp_install+0x700/0x700 [ 217.619728][ T9426] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 217.625815][ T9426] ieee80211_register_hw+0x22c9/0x39a0 [ 217.631307][ T9426] ? ieee80211_restart_hw+0x290/0x290 [ 217.636701][ T9426] ? debug_object_destroy+0x210/0x210 [ 217.642093][ T9426] ? lock_downgrade+0x830/0x830 [ 217.647201][ T9426] ? memset+0x20/0x40 [ 217.651193][ T9426] ? __hrtimer_init+0x12c/0x260 [ 217.656062][ T9426] mac80211_hwsim_new_radio+0x2353/0x4540 [ 217.661809][ T9426] ? hwsim_virtio_rx_work+0x350/0x350 [ 217.667194][ T9426] ? memcpy+0x39/0x60 [ 217.671198][ T9426] hwsim_new_radio_nl+0x93e/0xf90 [ 217.676254][ T9426] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 217.682175][ T9426] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 217.689137][ T9426] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 217.696000][ T9426] genl_rcv_msg+0x61d/0x980 [ 217.700523][ T9426] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 217.707483][ T9426] ? lock_release+0x890/0x890 [ 217.712171][ T9426] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 217.717995][ T9426] netlink_rcv_skb+0x15a/0x430 [ 217.722763][ T9426] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 217.729699][ T9426] ? netlink_ack+0xa10/0xa10 [ 217.734319][ T9426] genl_rcv+0x24/0x40 [ 217.738306][ T9426] netlink_unicast+0x533/0x7d0 [ 217.743087][ T9426] ? netlink_attachskb+0x810/0x810 [ 217.748209][ T9426] ? __phys_addr_symbol+0x2c/0x70 [ 217.753239][ T9426] ? __check_object_size+0x171/0x3f0 [ 217.758539][ T9426] netlink_sendmsg+0x856/0xd90 [ 217.763317][ T9426] ? netlink_unicast+0x7d0/0x7d0 [ 217.768268][ T9426] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 217.773558][ T9426] ? netlink_unicast+0x7d0/0x7d0 [ 217.778499][ T9426] sock_sendmsg+0xcf/0x120 [ 217.782920][ T9426] ____sys_sendmsg+0x6e8/0x810 [ 217.787689][ T9426] ? kernel_sendmsg+0x50/0x50 [ 217.792365][ T9426] ? do_recvmmsg+0x700/0x700 [ 217.796965][ T9426] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 217.802961][ T9426] ___sys_sendmsg+0xf3/0x170 [ 217.807562][ T9426] ? sendmsg_copy_msghdr+0x160/0x160 [ 217.812865][ T9426] ? lock_downgrade+0x830/0x830 [ 217.817722][ T9426] ? find_held_lock+0x2d/0x110 [ 217.822491][ T9426] ? __might_fault+0xd3/0x180 [ 217.827182][ T9426] ? __fget_files+0x294/0x400 [ 217.831870][ T9426] ? __fget_light+0xea/0x280 [ 217.836465][ T9426] __sys_sendmsg+0xe5/0x1b0 [ 217.840992][ T9426] ? __sys_sendmsg_sock+0xb0/0xb0 [ 217.846009][ T9426] ? __x64_sys_futex+0x382/0x4e0 [ 217.850987][ T9426] ? check_preemption_disabled+0x50/0x130 [ 217.856714][ T9426] ? syscall_enter_from_user_mode+0x1d/0x60 [ 217.862630][ T9426] do_syscall_64+0x2d/0x70 [ 217.867043][ T9426] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 217.872927][ T9426] RIP: 0033:0x45d5f9 [ 217.876815][ T9426] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:07:45 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x10, 0x3a, 0x0, @remote, @mcast2={0x0}, {[], @ni={0x8b}}}}}}, 0x0) 22:07:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 22:07:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) [ 217.896419][ T9426] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.904828][ T9426] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 217.912780][ T9426] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 217.920745][ T9426] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 217.928708][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 217.936687][ T9426] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c [ 218.135284][ T9446] tmpfs: Unknown parameter ')' 22:07:45 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 218.167808][ T9446] tmpfs: Unknown parameter ')' 22:07:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) [ 218.331143][ T9456] tmpfs: Unknown parameter ')' 22:07:45 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:45 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:45 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x20}}, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 218.556900][ T9463] tmpfs: Unknown parameter ')' 22:07:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:46 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:46 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x59, 0x59, 0x3, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], '#'}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x77}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:07:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000002c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) 22:07:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:46 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "42bf00", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni={0x8b}}}}}}, 0x0) [ 218.860051][ T9478] ptrace attach of "/root/syz-executor.3"[9476] was attempted by "/root/syz-executor.3"[9478] [ 218.873277][ T9477] tmpfs: Unknown parameter ')' 22:07:46 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) [ 218.949791][ T9482] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 218.974001][ T9482] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.018138][ T9482] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 219.041201][ T9482] CPU: 1 PID: 9482 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 219.051016][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.061078][ T9482] Call Trace: 22:07:46 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001100)=""/5, 0x5}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x3c, 0x0) [ 219.064392][ T9482] dump_stack+0x198/0x1fb [ 219.068764][ T9482] sysfs_warn_dup.cold+0x1c/0x29 [ 219.073738][ T9482] sysfs_do_create_link_sd+0x11e/0x140 [ 219.079215][ T9482] sysfs_create_link+0x5f/0xc0 [ 219.084001][ T9482] device_add+0x6ff/0x1c40 [ 219.088456][ T9482] ? devlink_add_symlinks+0x450/0x450 [ 219.093853][ T9482] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 219.099871][ T9482] wiphy_register+0x1d66/0x2850 [ 219.104733][ T9482] ? wiphy_unregister+0xbb0/0xbb0 [ 219.109745][ T9482] ? generic_xdp_install+0x700/0x700 [ 219.115071][ T9482] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 219.121143][ T9482] ieee80211_register_hw+0x22c9/0x39a0 [ 219.126671][ T9482] ? ieee80211_restart_hw+0x290/0x290 [ 219.132082][ T9482] ? debug_object_destroy+0x210/0x210 [ 219.137455][ T9482] ? lock_downgrade+0x830/0x830 [ 219.142294][ T9482] ? memset+0x20/0x40 [ 219.146288][ T9482] ? __hrtimer_init+0x12c/0x260 [ 219.151160][ T9482] mac80211_hwsim_new_radio+0x2353/0x4540 [ 219.156884][ T9482] ? hwsim_virtio_rx_work+0x350/0x350 [ 219.162248][ T9482] ? memcpy+0x39/0x60 [ 219.166235][ T9482] hwsim_new_radio_nl+0x93e/0xf90 [ 219.171259][ T9482] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 219.177145][ T9482] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 219.184061][ T9482] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 219.190897][ T9482] genl_rcv_msg+0x61d/0x980 [ 219.195511][ T9482] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 219.202489][ T9482] ? lock_release+0x890/0x890 [ 219.207159][ T9482] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 219.212967][ T9482] netlink_rcv_skb+0x15a/0x430 [ 219.217733][ T9482] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 219.224649][ T9482] ? netlink_ack+0xa10/0xa10 [ 219.229247][ T9482] genl_rcv+0x24/0x40 [ 219.233227][ T9482] netlink_unicast+0x533/0x7d0 [ 219.237990][ T9482] ? netlink_attachskb+0x810/0x810 [ 219.243115][ T9482] ? __phys_addr_symbol+0x2c/0x70 [ 219.248150][ T9482] ? __check_object_size+0x171/0x3f0 [ 219.253437][ T9482] netlink_sendmsg+0x856/0xd90 [ 219.258194][ T9482] ? netlink_unicast+0x7d0/0x7d0 [ 219.263121][ T9482] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.268416][ T9482] ? netlink_unicast+0x7d0/0x7d0 [ 219.273356][ T9482] sock_sendmsg+0xcf/0x120 [ 219.277768][ T9482] ____sys_sendmsg+0x6e8/0x810 [ 219.282571][ T9482] ? kernel_sendmsg+0x50/0x50 [ 219.287226][ T9482] ? do_recvmmsg+0x700/0x700 [ 219.291803][ T9482] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 219.297779][ T9482] ___sys_sendmsg+0xf3/0x170 [ 219.302386][ T9482] ? sendmsg_copy_msghdr+0x160/0x160 [ 219.307676][ T9482] ? lock_downgrade+0x830/0x830 [ 219.312518][ T9482] ? find_held_lock+0x2d/0x110 [ 219.317276][ T9482] ? __might_fault+0xd3/0x180 [ 219.321941][ T9482] ? __fget_files+0x294/0x400 [ 219.326608][ T9482] ? __fget_light+0xea/0x280 [ 219.331200][ T9482] __sys_sendmsg+0xe5/0x1b0 [ 219.335688][ T9482] ? __sys_sendmsg_sock+0xb0/0xb0 [ 219.340724][ T9482] ? __x64_sys_futex+0x382/0x4e0 [ 219.345685][ T9482] ? check_preemption_disabled+0x50/0x130 [ 219.351416][ T9482] ? syscall_enter_from_user_mode+0x1d/0x60 [ 219.357317][ T9482] do_syscall_64+0x2d/0x70 [ 219.361722][ T9482] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 219.367596][ T9482] RIP: 0033:0x45d5f9 [ 219.371475][ T9482] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.391475][ T9482] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.399883][ T9482] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 219.407874][ T9482] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 219.415848][ T9482] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 219.423818][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 219.431771][ T9482] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:47 executing program 3: [ 219.600351][ T9502] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 219.608952][ T9502] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.622479][ T9502] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 219.632079][ T9502] CPU: 1 PID: 9502 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 22:07:47 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) [ 219.641893][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.651949][ T9502] Call Trace: [ 219.655259][ T9502] dump_stack+0x198/0x1fb [ 219.659713][ T9502] sysfs_warn_dup.cold+0x1c/0x29 [ 219.664671][ T9502] sysfs_do_create_link_sd+0x11e/0x140 [ 219.670178][ T9502] sysfs_create_link+0x5f/0xc0 [ 219.674970][ T9502] device_add+0x6ff/0x1c40 [ 219.679417][ T9502] ? devlink_add_symlinks+0x450/0x450 [ 219.684817][ T9502] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 219.690836][ T9502] wiphy_register+0x1d66/0x2850 [ 219.695717][ T9502] ? wiphy_unregister+0xbb0/0xbb0 [ 219.700760][ T9502] ? generic_xdp_install+0x700/0x700 [ 219.706065][ T9502] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 219.712149][ T9502] ieee80211_register_hw+0x22c9/0x39a0 [ 219.717638][ T9502] ? ieee80211_restart_hw+0x290/0x290 [ 219.723064][ T9502] ? debug_object_destroy+0x210/0x210 [ 219.728453][ T9502] ? lock_downgrade+0x830/0x830 [ 219.733327][ T9502] ? memset+0x20/0x40 [ 219.737350][ T9502] ? __hrtimer_init+0x12c/0x260 [ 219.742223][ T9502] mac80211_hwsim_new_radio+0x2353/0x4540 22:07:47 executing program 3: [ 219.747971][ T9502] ? hwsim_virtio_rx_work+0x350/0x350 [ 219.753365][ T9502] ? memcpy+0x39/0x60 [ 219.757370][ T9502] hwsim_new_radio_nl+0x93e/0xf90 [ 219.762414][ T9502] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 219.768368][ T9502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 219.775315][ T9502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 219.782188][ T9502] genl_rcv_msg+0x61d/0x980 [ 219.786891][ T9502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 219.793846][ T9502] ? lock_release+0x890/0x890 22:07:47 executing program 3: 22:07:47 executing program 3: [ 219.798526][ T9502] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 219.803830][ T9502] netlink_rcv_skb+0x15a/0x430 [ 219.808611][ T9502] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 219.815566][ T9502] ? netlink_ack+0xa10/0xa10 [ 219.820188][ T9502] genl_rcv+0x24/0x40 [ 219.824182][ T9502] netlink_unicast+0x533/0x7d0 [ 219.828968][ T9502] ? netlink_attachskb+0x810/0x810 [ 219.834091][ T9502] ? __phys_addr_symbol+0x2c/0x70 [ 219.839149][ T9502] ? __check_object_size+0x171/0x3f0 [ 219.844504][ T9502] netlink_sendmsg+0x856/0xd90 [ 219.849288][ T9502] ? netlink_unicast+0x7d0/0x7d0 [ 219.854254][ T9502] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.859549][ T9502] ? netlink_unicast+0x7d0/0x7d0 [ 219.864501][ T9502] sock_sendmsg+0xcf/0x120 [ 219.868928][ T9502] ____sys_sendmsg+0x6e8/0x810 [ 219.873705][ T9502] ? kernel_sendmsg+0x50/0x50 [ 219.878386][ T9502] ? do_recvmmsg+0x700/0x700 [ 219.882992][ T9502] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 219.888994][ T9502] ___sys_sendmsg+0xf3/0x170 [ 219.893635][ T9502] ? sendmsg_copy_msghdr+0x160/0x160 [ 219.898927][ T9502] ? lock_downgrade+0x830/0x830 [ 219.903787][ T9502] ? find_held_lock+0x2d/0x110 [ 219.908560][ T9502] ? __might_fault+0xd3/0x180 [ 219.913333][ T9502] ? __fget_files+0x294/0x400 [ 219.918032][ T9502] ? __fget_light+0xea/0x280 [ 219.922643][ T9502] __sys_sendmsg+0xe5/0x1b0 [ 219.927153][ T9502] ? __sys_sendmsg_sock+0xb0/0xb0 [ 219.932186][ T9502] ? __x64_sys_futex+0x382/0x4e0 [ 219.937168][ T9502] ? check_preemption_disabled+0x50/0x130 [ 219.942899][ T9502] ? syscall_enter_from_user_mode+0x1d/0x60 [ 219.948805][ T9502] do_syscall_64+0x2d/0x70 [ 219.953234][ T9502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 219.959145][ T9502] RIP: 0033:0x45d5f9 [ 219.963047][ T9502] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.982661][ T9502] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.991097][ T9502] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 219.999075][ T9502] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 220.007057][ T9502] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 220.015049][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 220.023024][ T9502] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:47 executing program 2: 22:07:47 executing program 3: 22:07:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:47 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:47 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:47 executing program 3: 22:07:47 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:48 executing program 2: [ 220.626799][ T9537] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 220.635894][ T9537] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.652717][ T9537] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 220.673311][ T9537] CPU: 1 PID: 9537 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 220.683143][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.693197][ T9537] Call Trace: [ 220.696525][ T9537] dump_stack+0x198/0x1fb [ 220.700870][ T9537] sysfs_warn_dup.cold+0x1c/0x29 [ 220.705828][ T9537] sysfs_do_create_link_sd+0x11e/0x140 [ 220.711302][ T9537] sysfs_create_link+0x5f/0xc0 [ 220.716082][ T9537] device_add+0x6ff/0x1c40 [ 220.720516][ T9537] ? devlink_add_symlinks+0x450/0x450 22:07:48 executing program 2: [ 220.725906][ T9537] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 220.731930][ T9537] wiphy_register+0x1d66/0x2850 [ 220.736813][ T9537] ? wiphy_unregister+0xbb0/0xbb0 [ 220.741858][ T9537] ? generic_xdp_install+0x700/0x700 [ 220.747169][ T9537] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 220.753256][ T9537] ieee80211_register_hw+0x22c9/0x39a0 [ 220.758747][ T9537] ? ieee80211_restart_hw+0x290/0x290 [ 220.764165][ T9537] ? debug_object_destroy+0x210/0x210 [ 220.769546][ T9537] ? lock_downgrade+0x830/0x830 [ 220.774419][ T9537] ? memset+0x20/0x40 [ 220.778421][ T9537] ? __hrtimer_init+0x12c/0x260 [ 220.783294][ T9537] mac80211_hwsim_new_radio+0x2353/0x4540 [ 220.789046][ T9537] ? hwsim_virtio_rx_work+0x350/0x350 [ 220.794437][ T9537] ? memcpy+0x39/0x60 [ 220.798441][ T9537] hwsim_new_radio_nl+0x93e/0xf90 [ 220.803498][ T9537] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 220.809414][ T9537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 220.816374][ T9537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 220.823269][ T9537] genl_rcv_msg+0x61d/0x980 22:07:48 executing program 2: [ 220.827803][ T9537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 220.834775][ T9537] ? lock_release+0x890/0x890 [ 220.839454][ T9537] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 220.844756][ T9537] netlink_rcv_skb+0x15a/0x430 [ 220.849562][ T9537] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 220.856506][ T9537] ? netlink_ack+0xa10/0xa10 [ 220.861134][ T9537] genl_rcv+0x24/0x40 [ 220.865132][ T9537] netlink_unicast+0x533/0x7d0 [ 220.869923][ T9537] ? netlink_attachskb+0x810/0x810 [ 220.875078][ T9537] ? __phys_addr_symbol+0x2c/0x70 [ 220.880111][ T9537] ? __check_object_size+0x171/0x3f0 [ 220.885413][ T9537] netlink_sendmsg+0x856/0xd90 [ 220.890194][ T9537] ? netlink_unicast+0x7d0/0x7d0 [ 220.895181][ T9537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.900482][ T9537] ? netlink_unicast+0x7d0/0x7d0 [ 220.905426][ T9537] sock_sendmsg+0xcf/0x120 [ 220.909854][ T9537] ____sys_sendmsg+0x6e8/0x810 [ 220.914632][ T9537] ? kernel_sendmsg+0x50/0x50 [ 220.919311][ T9537] ? do_recvmmsg+0x700/0x700 22:07:48 executing program 2: [ 220.923917][ T9537] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 220.929916][ T9537] ___sys_sendmsg+0xf3/0x170 [ 220.934514][ T9537] ? sendmsg_copy_msghdr+0x160/0x160 [ 220.939838][ T9537] ? lock_downgrade+0x830/0x830 [ 220.944706][ T9537] ? find_held_lock+0x2d/0x110 [ 220.949511][ T9537] ? __might_fault+0xd3/0x180 [ 220.954275][ T9537] ? __fget_files+0x294/0x400 [ 220.958972][ T9537] ? __fget_light+0xea/0x280 [ 220.963583][ T9537] __sys_sendmsg+0xe5/0x1b0 [ 220.968101][ T9537] ? __sys_sendmsg_sock+0xb0/0xb0 [ 220.973136][ T9537] ? __x64_sys_futex+0x382/0x4e0 [ 220.978098][ T9537] ? check_preemption_disabled+0x50/0x130 [ 220.983828][ T9537] ? syscall_enter_from_user_mode+0x1d/0x60 [ 220.989732][ T9537] do_syscall_64+0x2d/0x70 [ 220.994163][ T9537] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 221.000059][ T9537] RIP: 0033:0x45d5f9 [ 221.003961][ T9537] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:07:48 executing program 2: [ 221.023569][ T9537] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.031996][ T9537] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 221.039976][ T9537] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 221.047954][ T9537] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 221.055931][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 221.063909][ T9537] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:48 executing program 2: 22:07:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:48 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:48 executing program 3: 22:07:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:48 executing program 3: 22:07:48 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@huge_never={'huge=never', 0x2c, ')'}}]}) 22:07:48 executing program 2: 22:07:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:48 executing program 3: 22:07:49 executing program 2: 22:07:49 executing program 2: 22:07:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:49 executing program 3: 22:07:49 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:07:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:49 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:49 executing program 2: 22:07:49 executing program 3: 22:07:49 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:49 executing program 2: 22:07:49 executing program 3: 22:07:49 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:07:49 executing program 2: 22:07:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) rt_sigsuspend(&(0x7f0000000380)={[0x8]}, 0x8) 22:07:50 executing program 3: 22:07:50 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:50 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:07:50 executing program 2: 22:07:50 executing program 2: 22:07:50 executing program 3: 22:07:50 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:50 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 22:07:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:50 executing program 2: 22:07:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(0x0, 0x0) 22:07:51 executing program 3: 22:07:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:51 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 22:07:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:51 executing program 2: 22:07:51 executing program 2: 22:07:51 executing program 3: [ 224.347150][ T9637] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 224.380297][ T9637] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:51 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) [ 224.442887][ T9637] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 224.471763][ T9637] CPU: 0 PID: 9637 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 224.481578][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.491640][ T9637] Call Trace: [ 224.494951][ T9637] dump_stack+0x198/0x1fb [ 224.499306][ T9637] sysfs_warn_dup.cold+0x1c/0x29 [ 224.504268][ T9637] sysfs_do_create_link_sd+0x11e/0x140 [ 224.509747][ T9637] sysfs_create_link+0x5f/0xc0 [ 224.514535][ T9637] device_add+0x6ff/0x1c40 [ 224.519016][ T9637] ? devlink_add_symlinks+0x450/0x450 [ 224.524441][ T9637] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 224.530457][ T9637] wiphy_register+0x1d66/0x2850 [ 224.535332][ T9637] ? wiphy_unregister+0xbb0/0xbb0 [ 224.540385][ T9637] ? generic_xdp_install+0x700/0x700 [ 224.545693][ T9637] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 224.551775][ T9637] ieee80211_register_hw+0x22c9/0x39a0 [ 224.557271][ T9637] ? ieee80211_restart_hw+0x290/0x290 [ 224.562690][ T9637] ? debug_object_destroy+0x210/0x210 [ 224.568071][ T9637] ? lock_downgrade+0x830/0x830 [ 224.572961][ T9637] ? memset+0x20/0x40 [ 224.576961][ T9637] ? __hrtimer_init+0x12c/0x260 [ 224.581837][ T9637] mac80211_hwsim_new_radio+0x2353/0x4540 [ 224.587611][ T9637] ? hwsim_virtio_rx_work+0x350/0x350 [ 224.592998][ T9637] ? memcpy+0x39/0x60 [ 224.597002][ T9637] hwsim_new_radio_nl+0x93e/0xf90 [ 224.602042][ T9637] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 224.607983][ T9637] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 224.614928][ T9637] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 224.621794][ T9637] genl_rcv_msg+0x61d/0x980 [ 224.626318][ T9637] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 224.633289][ T9637] ? lock_release+0x890/0x890 [ 224.637977][ T9637] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 224.643280][ T9637] netlink_rcv_skb+0x15a/0x430 [ 224.648079][ T9637] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 224.655028][ T9637] ? netlink_ack+0xa10/0xa10 [ 224.659691][ T9637] genl_rcv+0x24/0x40 [ 224.663684][ T9637] netlink_unicast+0x533/0x7d0 [ 224.668500][ T9637] ? netlink_attachskb+0x810/0x810 [ 224.673627][ T9637] ? __phys_addr_symbol+0x2c/0x70 [ 224.678663][ T9637] ? __check_object_size+0x171/0x3f0 [ 224.683962][ T9637] netlink_sendmsg+0x856/0xd90 [ 224.688791][ T9637] ? netlink_unicast+0x7d0/0x7d0 [ 224.693747][ T9637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 224.699049][ T9637] ? netlink_unicast+0x7d0/0x7d0 [ 224.703989][ T9637] sock_sendmsg+0xcf/0x120 [ 224.708415][ T9637] ____sys_sendmsg+0x6e8/0x810 [ 224.713187][ T9637] ? kernel_sendmsg+0x50/0x50 [ 224.717870][ T9637] ? do_recvmmsg+0x700/0x700 [ 224.722475][ T9637] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 224.728503][ T9637] ___sys_sendmsg+0xf3/0x170 [ 224.733139][ T9637] ? sendmsg_copy_msghdr+0x160/0x160 [ 224.738441][ T9637] ? lock_downgrade+0x830/0x830 [ 224.743326][ T9637] ? find_held_lock+0x2d/0x110 [ 224.748127][ T9637] ? __might_fault+0xd3/0x180 [ 224.752830][ T9637] ? __fget_files+0x294/0x400 [ 224.757568][ T9637] ? __fget_light+0xea/0x280 [ 224.762186][ T9637] __sys_sendmsg+0xe5/0x1b0 [ 224.766695][ T9637] ? __sys_sendmsg_sock+0xb0/0xb0 [ 224.771725][ T9637] ? __x64_sys_futex+0x382/0x4e0 [ 224.776684][ T9637] ? check_preemption_disabled+0x50/0x130 [ 224.782412][ T9637] ? syscall_enter_from_user_mode+0x1d/0x60 [ 224.788319][ T9637] do_syscall_64+0x2d/0x70 [ 224.792768][ T9637] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 224.798669][ T9637] RIP: 0033:0x45d5f9 [ 224.802573][ T9637] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.822180][ T9637] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.830600][ T9637] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 22:07:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:52 executing program 2: 22:07:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(0x0, 0x0) 22:07:52 executing program 4: 22:07:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') [ 224.838571][ T9637] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 224.846577][ T9637] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 224.854556][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 224.862559][ T9637] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:52 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x0) 22:07:52 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0xc5, &(0x7f0000000480)=ANY=[], 0x0) 22:07:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:52 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000100)={0x0, 0x48000000}, 0x8) 22:07:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(0x0, 0x0) 22:07:52 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 22:07:52 executing program 2: 22:07:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:52 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x1, 0x0) 22:07:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000760001a5"], 0x14}}, 0x0) [ 225.426095][ T7084] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.454158][ T9684] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 225.464285][ T9684] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380), 0x8) [ 225.479202][ T9684] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 225.490374][ T9684] CPU: 0 PID: 9684 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 225.500199][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.510256][ T9684] Call Trace: [ 225.513572][ T9684] dump_stack+0x198/0x1fb [ 225.517942][ T9684] sysfs_warn_dup.cold+0x1c/0x29 [ 225.522906][ T9684] sysfs_do_create_link_sd+0x11e/0x140 [ 225.528402][ T9684] sysfs_create_link+0x5f/0xc0 [ 225.533182][ T9684] device_add+0x6ff/0x1c40 [ 225.537646][ T9684] ? devlink_add_symlinks+0x450/0x450 [ 225.543033][ T9684] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 225.549063][ T9684] wiphy_register+0x1d66/0x2850 [ 225.553961][ T9684] ? wiphy_unregister+0xbb0/0xbb0 [ 225.559000][ T9684] ? generic_xdp_install+0x700/0x700 [ 225.564332][ T9684] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 225.570424][ T9684] ieee80211_register_hw+0x22c9/0x39a0 [ 225.575937][ T9684] ? ieee80211_restart_hw+0x290/0x290 [ 225.581353][ T9684] ? debug_object_destroy+0x210/0x210 [ 225.586740][ T9684] ? lock_downgrade+0x830/0x830 [ 225.591612][ T9684] ? memset+0x20/0x40 [ 225.595612][ T9684] ? __hrtimer_init+0x12c/0x260 [ 225.600488][ T9684] mac80211_hwsim_new_radio+0x2353/0x4540 [ 225.606237][ T9684] ? hwsim_virtio_rx_work+0x350/0x350 [ 225.611621][ T9684] ? memcpy+0x39/0x60 [ 225.615621][ T9684] hwsim_new_radio_nl+0x93e/0xf90 [ 225.620666][ T9684] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 225.626586][ T9684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 225.633556][ T9684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 225.640437][ T9684] genl_rcv_msg+0x61d/0x980 [ 225.644963][ T9684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 225.651926][ T9684] ? lock_release+0x890/0x890 [ 225.656633][ T9684] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 225.661935][ T9684] netlink_rcv_skb+0x15a/0x430 [ 225.666714][ T9684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 225.673673][ T9684] ? netlink_ack+0xa10/0xa10 [ 225.678296][ T9684] genl_rcv+0x24/0x40 [ 225.682288][ T9684] netlink_unicast+0x533/0x7d0 [ 225.687072][ T9684] ? netlink_attachskb+0x810/0x810 [ 225.692207][ T9684] ? __phys_addr_symbol+0x2c/0x70 [ 225.697267][ T9684] ? __check_object_size+0x171/0x3f0 [ 225.702562][ T9684] netlink_sendmsg+0x856/0xd90 [ 225.707357][ T9684] ? netlink_unicast+0x7d0/0x7d0 [ 225.712317][ T9684] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 225.717700][ T9684] ? netlink_unicast+0x7d0/0x7d0 [ 225.722657][ T9684] sock_sendmsg+0xcf/0x120 [ 225.727089][ T9684] ____sys_sendmsg+0x6e8/0x810 [ 225.731865][ T9684] ? kernel_sendmsg+0x50/0x50 [ 225.736550][ T9684] ? do_recvmmsg+0x700/0x700 [ 225.741158][ T9684] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 225.747170][ T9684] ___sys_sendmsg+0xf3/0x170 [ 225.751786][ T9684] ? sendmsg_copy_msghdr+0x160/0x160 [ 225.757090][ T9684] ? lock_downgrade+0x830/0x830 [ 225.761980][ T9684] ? find_held_lock+0x2d/0x110 [ 225.766760][ T9684] ? __might_fault+0xd3/0x180 [ 225.771465][ T9684] ? __fget_files+0x294/0x400 [ 225.777133][ T9684] ? __fget_light+0xea/0x280 [ 225.777154][ T9684] __sys_sendmsg+0xe5/0x1b0 [ 225.777170][ T9684] ? __sys_sendmsg_sock+0xb0/0xb0 [ 225.777185][ T9684] ? __x64_sys_futex+0x382/0x4e0 [ 225.777230][ T9684] ? check_preemption_disabled+0x50/0x130 [ 225.777261][ T9684] ? syscall_enter_from_user_mode+0x1d/0x60 [ 225.777282][ T9684] do_syscall_64+0x2d/0x70 [ 225.777315][ T9684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 225.777353][ T9684] RIP: 0033:0x45d5f9 [ 225.777386][ T9684] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.777404][ T9684] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.850264][ T9684] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 225.858467][ T9684] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 225.866449][ T9684] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 22:07:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) [ 225.874427][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 225.882405][ T9684] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c [ 226.116067][ T7084] usb 5-1: device descriptor read/64, error 18 [ 226.545955][ T7084] usb 5-1: device descriptor read/64, error 18 [ 226.816005][ T7084] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.115993][ T7084] usb 5-1: device descriptor read/64, error 18 [ 227.565943][ T7084] usb 5-1: device descriptor read/64, error 18 [ 227.696193][ T7084] usb usb5-port1: attempt power cycle 22:07:55 executing program 4: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2088611, 0x0) acct(&(0x7f0000000380)='./file0\x00') 22:07:55 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:55 executing program 2: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) 22:07:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)='=', 0x8ec0}], 0x8, &(0x7f0000001280)=[@rights], 0x18}, 0x0) 22:07:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380), 0x8) [ 228.212401][ T9727] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 22:07:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x3ac, 0x0, 0xf8, 0x18c, 0x18c, 0x1a8, 0x334, 0x318, 0x318, 0x318, 0x334, 0x4, 0x0, {[{{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@physdev={{0x64, 'physdev\x00'}, {'macsec0\x00', {}, 'veth0_macvtap\x00', {}, 0x0, 0x14}}]}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'gretap0\x00', 'ip6erspan0\x00'}, 0x0, 0x130, 0x18c, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x1, 0x0, 'bm\x00', "9f42cba9a335378ca78022ea3f357f4b6a4b6681872e20b780e2514e8f054f6a7f0e0c27b1bfcf6731282d9d95de2cefe000eb307cbaf488d5685306015171e52cf85900001fdb4a364503bf4fd60200203dd743589818ca522bc189932113580f0628b02e54a4d9aa00"}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x408) 22:07:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) [ 228.256749][ T9727] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. 22:07:55 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 228.328121][ T9727] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 228.368470][ T9727] CPU: 1 PID: 9727 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 228.378308][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.388387][ T9727] Call Trace: [ 228.391708][ T9727] dump_stack+0x198/0x1fb [ 228.396236][ T9727] sysfs_warn_dup.cold+0x1c/0x29 [ 228.401313][ T9727] sysfs_do_create_link_sd+0x11e/0x140 [ 228.406919][ T9727] sysfs_create_link+0x5f/0xc0 [ 228.411801][ T9727] device_add+0x6ff/0x1c40 [ 228.416267][ T9727] ? devlink_add_symlinks+0x450/0x450 [ 228.421678][ T9727] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 228.427796][ T9727] wiphy_register+0x1d66/0x2850 [ 228.433047][ T9727] ? wiphy_unregister+0xbb0/0xbb0 [ 228.438105][ T9727] ? generic_xdp_install+0x700/0x700 [ 228.443463][ T9727] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 228.449758][ T9727] ieee80211_register_hw+0x22c9/0x39a0 [ 228.455358][ T9727] ? ieee80211_restart_hw+0x290/0x290 [ 228.460764][ T9727] ? debug_object_destroy+0x210/0x210 [ 228.466263][ T9727] ? lock_downgrade+0x830/0x830 [ 228.471323][ T9727] ? memset+0x20/0x40 [ 228.475347][ T9727] ? __hrtimer_init+0x12c/0x260 [ 228.480250][ T9727] mac80211_hwsim_new_radio+0x2353/0x4540 [ 228.486212][ T9727] ? hwsim_virtio_rx_work+0x350/0x350 [ 228.491772][ T9727] ? memcpy+0x39/0x60 [ 228.495799][ T9727] hwsim_new_radio_nl+0x93e/0xf90 [ 228.500863][ T9727] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 228.506811][ T9727] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 228.513974][ T9727] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 228.521225][ T9727] genl_rcv_msg+0x61d/0x980 [ 228.525842][ T9727] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 228.532861][ T9727] ? lock_release+0x890/0x890 [ 228.537751][ T9727] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 228.543622][ T9727] netlink_rcv_skb+0x15a/0x430 [ 228.548449][ T9727] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 228.555410][ T9727] ? netlink_ack+0xa10/0xa10 [ 228.560060][ T9727] genl_rcv+0x24/0x40 [ 228.564241][ T9727] netlink_unicast+0x533/0x7d0 [ 228.569040][ T9727] ? netlink_attachskb+0x810/0x810 [ 228.574187][ T9727] ? __phys_addr_symbol+0x2c/0x70 [ 228.579247][ T9727] ? __check_object_size+0x171/0x3f0 [ 228.584577][ T9727] netlink_sendmsg+0x856/0xd90 [ 228.589528][ T9727] ? netlink_unicast+0x7d0/0x7d0 [ 228.594541][ T9727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 228.600103][ T9727] ? netlink_unicast+0x7d0/0x7d0 [ 228.605069][ T9727] sock_sendmsg+0xcf/0x120 [ 228.609522][ T9727] ____sys_sendmsg+0x6e8/0x810 [ 228.614314][ T9727] ? kernel_sendmsg+0x50/0x50 [ 228.619014][ T9727] ? do_recvmmsg+0x700/0x700 [ 228.623641][ T9727] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 228.629657][ T9727] ___sys_sendmsg+0xf3/0x170 [ 228.634278][ T9727] ? sendmsg_copy_msghdr+0x160/0x160 [ 228.639718][ T9727] ? lock_downgrade+0x830/0x830 [ 228.644591][ T9727] ? find_held_lock+0x2d/0x110 [ 228.649377][ T9727] ? __might_fault+0xd3/0x180 [ 228.654092][ T9727] ? __fget_files+0x294/0x400 [ 228.658895][ T9727] ? __fget_light+0xea/0x280 [ 228.663518][ T9727] __sys_sendmsg+0xe5/0x1b0 [ 228.668045][ T9727] ? __sys_sendmsg_sock+0xb0/0xb0 [ 228.673090][ T9727] ? __x64_sys_futex+0x382/0x4e0 [ 228.678095][ T9727] ? check_preemption_disabled+0x50/0x130 [ 228.683851][ T9727] ? syscall_enter_from_user_mode+0x1d/0x60 [ 228.689775][ T9727] do_syscall_64+0x2d/0x70 [ 228.694220][ T9727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 228.700149][ T9727] RIP: 0033:0x45d5f9 [ 228.704075][ T9727] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.723860][ T9727] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.732492][ T9727] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 228.740489][ T9727] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 228.748664][ T9727] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 228.756658][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c 22:07:56 executing program 3: r0 = gettid() unshare(0x28020400) r1 = getpid() kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 22:07:56 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000b00)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x20, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @remote, [{0x2, 0x1, "5866221643b9"}]}}}}}}, 0x0) [ 228.764649][ T9727] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 22:07:56 executing program 2: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000500)="b95b03b7080300003b03000086dd", 0x0, 0x806, 0xd00, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:07:56 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200001e5c, 0x400000000000087f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 22:07:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000380), 0x8) [ 229.153137][ T9763] NFS: Device name not specified [ 229.188723][ T9769] NFS: Device name not specified 22:07:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:07:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x184, 0x170, 0x170, 0x184, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0xac, 0xcc, 0x0, {}, [@common=@unspec=@limit={{0x3c, 'limit\x00'}, {0x0, 0x2}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'macvlan1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x274) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}, 0x880) 22:07:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)=@isdn, 0x80, 0x0}}], 0x1, 0x0, 0x0) 22:07:56 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x901c41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0xfe80) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x0, 0xfffffffffffffffc}) 22:07:56 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) poll(0x0, 0x0, 0x8000000000000200) [ 229.479318][ T9784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.517591][ T9787] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 22:07:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:07:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000900)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4ec, 0x2c, 0x0, @private1, @mcast2, {[@dstopts={0x0, 0x93, [], [@pad1, @generic={0x0, 0x494, "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"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x51e) [ 229.614808][ T9787] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.672393][ T9787] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 229.690710][ T9787] CPU: 1 PID: 9787 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 229.700660][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.710742][ T9787] Call Trace: [ 229.714074][ T9787] dump_stack+0x198/0x1fb [ 229.718448][ T9787] sysfs_warn_dup.cold+0x1c/0x29 [ 229.723506][ T9787] sysfs_do_create_link_sd+0x11e/0x140 [ 229.729013][ T9787] sysfs_create_link+0x5f/0xc0 [ 229.733807][ T9787] device_add+0x6ff/0x1c40 [ 229.738423][ T9787] ? devlink_add_symlinks+0x450/0x450 [ 229.743832][ T9787] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 229.749859][ T9787] wiphy_register+0x1d66/0x2850 [ 229.754753][ T9787] ? wiphy_unregister+0xbb0/0xbb0 [ 229.759808][ T9787] ? generic_xdp_install+0x700/0x700 [ 229.765132][ T9787] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 229.771243][ T9787] ieee80211_register_hw+0x22c9/0x39a0 [ 229.776884][ T9787] ? ieee80211_restart_hw+0x290/0x290 [ 229.782291][ T9787] ? debug_object_destroy+0x210/0x210 [ 229.787688][ T9787] ? lock_downgrade+0x830/0x830 [ 229.792578][ T9787] ? memset+0x20/0x40 [ 229.796585][ T9787] ? __hrtimer_init+0x12c/0x260 [ 229.801477][ T9787] mac80211_hwsim_new_radio+0x2353/0x4540 [ 229.807240][ T9787] ? hwsim_virtio_rx_work+0x350/0x350 [ 229.812644][ T9787] ? memcpy+0x39/0x60 [ 229.816657][ T9787] hwsim_new_radio_nl+0x93e/0xf90 [ 229.821713][ T9787] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 229.827645][ T9787] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 229.834599][ T9787] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 229.841475][ T9787] genl_rcv_msg+0x61d/0x980 [ 229.846015][ T9787] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 229.853171][ T9787] ? lock_release+0x890/0x890 [ 229.857874][ T9787] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 229.863203][ T9787] netlink_rcv_skb+0x15a/0x430 [ 229.867996][ T9787] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 229.875135][ T9787] ? netlink_ack+0xa10/0xa10 [ 229.879781][ T9787] genl_rcv+0x24/0x40 [ 229.883810][ T9787] netlink_unicast+0x533/0x7d0 [ 229.888608][ T9787] ? netlink_attachskb+0x810/0x810 [ 229.893953][ T9787] ? __phys_addr_symbol+0x2c/0x70 [ 229.899005][ T9787] ? __check_object_size+0x171/0x3f0 [ 229.904323][ T9787] netlink_sendmsg+0x856/0xd90 [ 229.909162][ T9787] ? netlink_unicast+0x7d0/0x7d0 [ 229.914198][ T9787] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 229.919537][ T9787] ? netlink_unicast+0x7d0/0x7d0 [ 229.924513][ T9787] sock_sendmsg+0xcf/0x120 [ 229.928956][ T9787] ____sys_sendmsg+0x6e8/0x810 [ 229.933766][ T9787] ? kernel_sendmsg+0x50/0x50 [ 229.938552][ T9787] ? do_recvmmsg+0x700/0x700 [ 229.943184][ T9787] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 229.949371][ T9787] ___sys_sendmsg+0xf3/0x170 [ 229.954018][ T9787] ? sendmsg_copy_msghdr+0x160/0x160 [ 229.959347][ T9787] ? lock_downgrade+0x830/0x830 [ 229.964233][ T9787] ? find_held_lock+0x2d/0x110 [ 229.969034][ T9787] ? __might_fault+0xd3/0x180 [ 229.973745][ T9787] ? __fget_files+0x294/0x400 [ 229.978480][ T9787] ? __fget_light+0xea/0x280 [ 229.983114][ T9787] __sys_sendmsg+0xe5/0x1b0 [ 229.987639][ T9787] ? __sys_sendmsg_sock+0xb0/0xb0 [ 229.992855][ T9787] ? __x64_sys_futex+0x382/0x4e0 [ 229.998086][ T9787] ? check_preemption_disabled+0x50/0x130 [ 230.003831][ T9787] ? syscall_enter_from_user_mode+0x1d/0x60 [ 230.009752][ T9787] do_syscall_64+0x2d/0x70 [ 230.014189][ T9787] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 230.020098][ T9787] RIP: 0033:0x45d5f9 [ 230.024102][ T9787] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.043730][ T9787] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.052339][ T9787] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 230.060431][ T9787] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 230.068523][ T9787] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 230.076677][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 230.084759][ T9787] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r0, &(0x7f0000000040), 0x373) 22:07:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e23}, 0x6b) 22:07:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 230.457357][ T9820] ptrace attach of "/root/syz-executor.2"[9805] was attempted by "/root/syz-executor.2"[9820] 22:07:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:07:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:58 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024008b0d00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000240008801c00010000000000000000000000003f7e0a8f00000000000000000000000000040002"], 0x6c}}, 0x0) 22:07:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfffd}]}}}}}}}}, 0x0) 22:07:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) [ 230.756169][ T9840] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 230.784300][ T9842] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.807627][ T9844] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 22:07:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$evdev(r1, &(0x7f0000000000)=[{}], 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000f003000000000000a002000000000000a0020000000000005c0300005c0300005c0300005c0300005c0300000600000000000000ac1e0001ac14140000000000000000006d6163766c616e30000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400434845434b53554d0000000000000000000080000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400445343500000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009400000000000000000000000000000000000000000024004453435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000240074746c000000000000000000000000080000000000000000000000000000020400002c0061646472747970650000000000000000000000000000000000000000000000000000000000000000000024004e46515545554500000000000000000000000000000000000000000000010000b630000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009400bc000000000000000000000000000000000000000000240074746c000000000000000000000000000000000000000000000000000000b600000028004e46515545554500000000000000000000000000000000000000000000020000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19406, 0x0) 22:07:58 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 230.870847][ T9849] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 230.897663][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:07:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x8, &(0x7f0000000640)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_submit(r0, 0x0, 0x0) [ 230.922461][ T9849] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.981447][ T9849] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 231.006657][ T9849] CPU: 1 PID: 9849 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 231.016581][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.026658][ T9849] Call Trace: [ 231.029991][ T9849] dump_stack+0x198/0x1fb [ 231.034380][ T9849] sysfs_warn_dup.cold+0x1c/0x29 [ 231.039530][ T9849] sysfs_do_create_link_sd+0x11e/0x140 [ 231.045025][ T9849] sysfs_create_link+0x5f/0xc0 [ 231.049821][ T9849] device_add+0x6ff/0x1c40 [ 231.054288][ T9849] ? devlink_add_symlinks+0x450/0x450 [ 231.059931][ T9849] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 231.066042][ T9849] wiphy_register+0x1d66/0x2850 [ 231.070942][ T9849] ? wiphy_unregister+0xbb0/0xbb0 [ 231.075999][ T9849] ? generic_xdp_install+0x700/0x700 [ 231.081403][ T9849] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 231.087580][ T9849] ieee80211_register_hw+0x22c9/0x39a0 [ 231.093094][ T9849] ? ieee80211_restart_hw+0x290/0x290 [ 231.098485][ T9849] ? debug_object_destroy+0x210/0x210 [ 231.103871][ T9849] ? lock_downgrade+0x830/0x830 [ 231.108834][ T9849] ? memset+0x20/0x40 [ 231.112834][ T9849] ? __hrtimer_init+0x12c/0x260 [ 231.117717][ T9849] mac80211_hwsim_new_radio+0x2353/0x4540 [ 231.123494][ T9849] ? hwsim_virtio_rx_work+0x350/0x350 [ 231.128886][ T9849] ? memcpy+0x39/0x60 [ 231.132891][ T9849] hwsim_new_radio_nl+0x93e/0xf90 [ 231.137952][ T9849] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 231.143874][ T9849] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 231.150822][ T9849] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 231.157767][ T9849] genl_rcv_msg+0x61d/0x980 [ 231.162295][ T9849] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 231.169258][ T9849] ? lock_release+0x890/0x890 [ 231.173962][ T9849] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 231.179789][ T9849] netlink_rcv_skb+0x15a/0x430 [ 231.184569][ T9849] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 231.191522][ T9849] ? netlink_ack+0xa10/0xa10 [ 231.196216][ T9849] genl_rcv+0x24/0x40 [ 231.200211][ T9849] netlink_unicast+0x533/0x7d0 [ 231.205089][ T9849] ? netlink_attachskb+0x810/0x810 [ 231.210217][ T9849] ? __phys_addr_symbol+0x2c/0x70 [ 231.215253][ T9849] ? __check_object_size+0x171/0x3f0 [ 231.220707][ T9849] netlink_sendmsg+0x856/0xd90 [ 231.225494][ T9849] ? netlink_unicast+0x7d0/0x7d0 [ 231.230466][ T9849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 231.235780][ T9849] ? netlink_unicast+0x7d0/0x7d0 [ 231.240778][ T9849] sock_sendmsg+0xcf/0x120 [ 231.245208][ T9849] ____sys_sendmsg+0x6e8/0x810 [ 231.250135][ T9849] ? kernel_sendmsg+0x50/0x50 [ 231.255117][ T9849] ? do_recvmmsg+0x700/0x700 [ 231.259728][ T9849] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 231.265735][ T9849] ___sys_sendmsg+0xf3/0x170 [ 231.270402][ T9849] ? sendmsg_copy_msghdr+0x160/0x160 [ 231.275714][ T9849] ? lock_downgrade+0x830/0x830 [ 231.280577][ T9849] ? find_held_lock+0x2d/0x110 [ 231.285353][ T9849] ? __might_fault+0xd3/0x180 [ 231.290058][ T9849] ? __fget_files+0x294/0x400 [ 231.294760][ T9849] ? __fget_light+0xea/0x280 [ 231.299355][ T9849] __sys_sendmsg+0xe5/0x1b0 [ 231.303876][ T9849] ? __sys_sendmsg_sock+0xb0/0xb0 [ 231.308912][ T9849] ? __x64_sys_futex+0x382/0x4e0 [ 231.313895][ T9849] ? check_preemption_disabled+0x50/0x130 [ 231.319628][ T9849] ? syscall_enter_from_user_mode+0x1d/0x60 [ 231.325538][ T9849] do_syscall_64+0x2d/0x70 [ 231.329988][ T9849] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 231.336028][ T9849] RIP: 0033:0x45d5f9 [ 231.339937][ T9849] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.359583][ T9849] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.368019][ T9849] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 231.376020][ T9849] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 231.384043][ T9849] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 231.392118][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 231.400129][ T9849] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:58 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sync() [ 231.626043][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 22:07:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:07:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) 22:07:59 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 231.975019][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.986542][ T9878] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 232.046841][ T9878] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.086519][ T9878] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 232.141171][ T9878] CPU: 0 PID: 9878 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 232.150985][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.161043][ T9878] Call Trace: [ 232.164355][ T9878] dump_stack+0x198/0x1fb [ 232.168708][ T9878] sysfs_warn_dup.cold+0x1c/0x29 [ 232.173669][ T9878] sysfs_do_create_link_sd+0x11e/0x140 [ 232.179173][ T9878] sysfs_create_link+0x5f/0xc0 [ 232.183980][ T9878] device_add+0x6ff/0x1c40 [ 232.188451][ T9878] ? devlink_add_symlinks+0x450/0x450 [ 232.193872][ T9878] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 232.199872][ T9878] wiphy_register+0x1d66/0x2850 [ 232.204749][ T9878] ? wiphy_unregister+0xbb0/0xbb0 [ 232.209795][ T9878] ? generic_xdp_install+0x700/0x700 [ 232.215113][ T9878] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 232.221200][ T9878] ieee80211_register_hw+0x22c9/0x39a0 [ 232.226686][ T9878] ? ieee80211_restart_hw+0x290/0x290 [ 232.232092][ T9878] ? debug_object_destroy+0x210/0x210 [ 232.237474][ T9878] ? lock_downgrade+0x830/0x830 [ 232.242348][ T9878] ? memset+0x20/0x40 [ 232.246348][ T9878] ? __hrtimer_init+0x12c/0x260 [ 232.251247][ T9878] mac80211_hwsim_new_radio+0x2353/0x4540 [ 232.257005][ T9878] ? hwsim_virtio_rx_work+0x350/0x350 [ 232.262422][ T9878] ? memcpy+0x39/0x60 [ 232.266423][ T9878] hwsim_new_radio_nl+0x93e/0xf90 [ 232.271471][ T9878] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 232.277386][ T9878] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 232.284335][ T9878] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 232.291199][ T9878] genl_rcv_msg+0x61d/0x980 [ 232.295727][ T9878] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 232.302684][ T9878] ? lock_release+0x890/0x890 [ 232.307372][ T9878] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 232.312673][ T9878] netlink_rcv_skb+0x15a/0x430 [ 232.317476][ T9878] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 232.324455][ T9878] ? netlink_ack+0xa10/0xa10 [ 232.329083][ T9878] genl_rcv+0x24/0x40 [ 232.333067][ T9878] netlink_unicast+0x533/0x7d0 [ 232.337836][ T9878] ? netlink_attachskb+0x810/0x810 [ 232.342950][ T9878] ? __phys_addr_symbol+0x2c/0x70 [ 232.347986][ T9878] ? __check_object_size+0x171/0x3f0 [ 232.353282][ T9878] netlink_sendmsg+0x856/0xd90 [ 232.358058][ T9878] ? netlink_unicast+0x7d0/0x7d0 [ 232.363022][ T9878] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 232.368341][ T9878] ? netlink_unicast+0x7d0/0x7d0 [ 232.373279][ T9878] sock_sendmsg+0xcf/0x120 [ 232.377698][ T9878] ____sys_sendmsg+0x6e8/0x810 [ 232.382463][ T9878] ? kernel_sendmsg+0x50/0x50 [ 232.387140][ T9878] ? do_recvmmsg+0x700/0x700 [ 232.391746][ T9878] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 232.397741][ T9878] ___sys_sendmsg+0xf3/0x170 [ 232.402348][ T9878] ? sendmsg_copy_msghdr+0x160/0x160 [ 232.407638][ T9878] ? lock_downgrade+0x830/0x830 [ 232.412487][ T9878] ? find_held_lock+0x2d/0x110 [ 232.417263][ T9878] ? __might_fault+0xd3/0x180 [ 232.421952][ T9878] ? __fget_files+0x294/0x400 [ 232.426671][ T9878] ? __fget_light+0xea/0x280 [ 232.431267][ T9878] __sys_sendmsg+0xe5/0x1b0 [ 232.435770][ T9878] ? __sys_sendmsg_sock+0xb0/0xb0 [ 232.440792][ T9878] ? __x64_sys_futex+0x382/0x4e0 [ 232.445756][ T9878] ? check_preemption_disabled+0x50/0x130 [ 232.451472][ T9878] ? syscall_enter_from_user_mode+0x1d/0x60 [ 232.457374][ T9878] do_syscall_64+0x2d/0x70 [ 232.461786][ T9878] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 232.467832][ T9878] RIP: 0033:0x45d5f9 [ 232.471727][ T9878] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.491453][ T9878] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.499880][ T9878] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 232.507851][ T9878] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 232.515825][ T9878] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 232.523814][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 232.531812][ T9878] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:07:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:07:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) 22:07:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) 22:07:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}}, 0x0) [ 232.687754][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 22:08:00 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:08:00 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) 22:08:00 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x901c41, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = dup(r1) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfe80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x40, 0x4, 0x0, 0x8}) 22:08:00 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5409, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6ad21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x50}}, 0x0) [ 233.044878][ T9920] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 22:08:00 executing program 5: 22:08:00 executing program 3: [ 233.117142][ T9924] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 233.234944][ T9924] device gretap0 entered promiscuous mode [ 233.241032][ T9924] device macvlan2 entered promiscuous mode [ 233.251256][ T9924] device gretap0 left promiscuous mode 22:08:00 executing program 5: 22:08:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:01 executing program 3: 22:08:01 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:01 executing program 5: 22:08:01 executing program 5: [ 233.934043][ T9920] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 233.947787][ T9920] CPU: 0 PID: 9920 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 233.957602][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.967674][ T9920] Call Trace: [ 233.971022][ T9920] dump_stack+0x198/0x1fb [ 233.975368][ T9920] sysfs_warn_dup.cold+0x1c/0x29 [ 233.980322][ T9920] sysfs_do_create_link_sd+0x11e/0x140 [ 233.985825][ T9920] sysfs_create_link+0x5f/0xc0 [ 233.990598][ T9920] device_add+0x6ff/0x1c40 [ 233.995025][ T9920] ? devlink_add_symlinks+0x450/0x450 [ 234.000411][ T9920] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 234.006411][ T9920] wiphy_register+0x1d66/0x2850 [ 234.011287][ T9920] ? wiphy_unregister+0xbb0/0xbb0 [ 234.016357][ T9920] ? generic_xdp_install+0x700/0x700 [ 234.021677][ T9920] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 234.027762][ T9920] ieee80211_register_hw+0x22c9/0x39a0 [ 234.033298][ T9920] ? ieee80211_restart_hw+0x290/0x290 [ 234.038703][ T9920] ? debug_object_destroy+0x210/0x210 [ 234.044126][ T9920] ? lock_downgrade+0x830/0x830 [ 234.048989][ T9920] ? memset+0x20/0x40 [ 234.052989][ T9920] ? __hrtimer_init+0x12c/0x260 [ 234.057858][ T9920] mac80211_hwsim_new_radio+0x2353/0x4540 [ 234.063609][ T9920] ? hwsim_virtio_rx_work+0x350/0x350 [ 234.068996][ T9920] ? memcpy+0x39/0x60 [ 234.072992][ T9920] hwsim_new_radio_nl+0x93e/0xf90 [ 234.078034][ T9920] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 234.083953][ T9920] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 234.090897][ T9920] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 234.097769][ T9920] genl_rcv_msg+0x61d/0x980 [ 234.102314][ T9920] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 234.109297][ T9920] ? lock_release+0x890/0x890 [ 234.113978][ T9920] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 234.119294][ T9920] netlink_rcv_skb+0x15a/0x430 [ 234.124069][ T9920] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 234.131014][ T9920] ? netlink_ack+0xa10/0xa10 [ 234.135645][ T9920] genl_rcv+0x24/0x40 [ 234.139653][ T9920] netlink_unicast+0x533/0x7d0 [ 234.144434][ T9920] ? netlink_attachskb+0x810/0x810 [ 234.149588][ T9920] ? __phys_addr_symbol+0x2c/0x70 [ 234.154618][ T9920] ? __check_object_size+0x171/0x3f0 [ 234.159930][ T9920] netlink_sendmsg+0x856/0xd90 [ 234.164712][ T9920] ? netlink_unicast+0x7d0/0x7d0 [ 234.169668][ T9920] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 234.174986][ T9920] ? netlink_unicast+0x7d0/0x7d0 [ 234.179956][ T9920] sock_sendmsg+0xcf/0x120 [ 234.184406][ T9920] ____sys_sendmsg+0x6e8/0x810 [ 234.189192][ T9920] ? kernel_sendmsg+0x50/0x50 [ 234.193878][ T9920] ? do_recvmmsg+0x700/0x700 [ 234.198516][ T9920] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 234.204514][ T9920] ___sys_sendmsg+0xf3/0x170 [ 234.209118][ T9920] ? sendmsg_copy_msghdr+0x160/0x160 [ 234.214421][ T9920] ? lock_downgrade+0x830/0x830 [ 234.219293][ T9920] ? find_held_lock+0x2d/0x110 [ 234.224078][ T9920] ? __might_fault+0xd3/0x180 [ 234.228780][ T9920] ? __fget_files+0x294/0x400 [ 234.233479][ T9920] ? __fget_light+0xea/0x280 [ 234.238088][ T9920] __sys_sendmsg+0xe5/0x1b0 [ 234.242599][ T9920] ? __sys_sendmsg_sock+0xb0/0xb0 [ 234.247635][ T9920] ? __x64_sys_futex+0x382/0x4e0 [ 234.252606][ T9920] ? check_preemption_disabled+0x50/0x130 [ 234.258336][ T9920] ? syscall_enter_from_user_mode+0x1d/0x60 [ 234.264260][ T9920] do_syscall_64+0x2d/0x70 [ 234.268702][ T9920] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 234.274614][ T9920] RIP: 0033:0x45d5f9 [ 234.278528][ T9920] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.298155][ T9920] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.306605][ T9920] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 234.314571][ T9920] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 234.322536][ T9920] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 234.330519][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 234.338521][ T9920] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c [ 234.392178][ T9950] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 234.424328][ T9950] device gretap0 entered promiscuous mode [ 234.446811][ T9950] device macvlan2 entered promiscuous mode [ 234.491000][ T9950] device gretap0 left promiscuous mode 22:08:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:08:02 executing program 3: 22:08:02 executing program 5: 22:08:02 executing program 4: 22:08:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:02 executing program 3: 22:08:02 executing program 5: [ 234.991831][ T9975] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 235.011296][ T9975] __nla_validate_parse: 3 callbacks suppressed [ 235.011306][ T9975] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.073913][ T9975] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 235.104168][ T9975] CPU: 0 PID: 9975 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 235.113984][ T9975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.124046][ T9975] Call Trace: [ 235.127351][ T9975] dump_stack+0x198/0x1fb [ 235.131699][ T9975] sysfs_warn_dup.cold+0x1c/0x29 [ 235.136654][ T9975] sysfs_do_create_link_sd+0x11e/0x140 [ 235.142130][ T9975] sysfs_create_link+0x5f/0xc0 [ 235.146912][ T9975] device_add+0x6ff/0x1c40 [ 235.151351][ T9975] ? devlink_add_symlinks+0x450/0x450 [ 235.156775][ T9975] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 235.162798][ T9975] wiphy_register+0x1d66/0x2850 [ 235.167676][ T9975] ? wiphy_unregister+0xbb0/0xbb0 [ 235.172715][ T9975] ? generic_xdp_install+0x700/0x700 [ 235.178021][ T9975] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 235.184110][ T9975] ieee80211_register_hw+0x22c9/0x39a0 [ 235.189597][ T9975] ? ieee80211_restart_hw+0x290/0x290 [ 235.194984][ T9975] ? debug_object_destroy+0x210/0x210 [ 235.200364][ T9975] ? lock_downgrade+0x830/0x830 [ 235.205244][ T9975] ? memset+0x20/0x40 [ 235.209238][ T9975] ? __hrtimer_init+0x12c/0x260 [ 235.214108][ T9975] mac80211_hwsim_new_radio+0x2353/0x4540 [ 235.219868][ T9975] ? hwsim_virtio_rx_work+0x350/0x350 [ 235.225257][ T9975] ? memcpy+0x39/0x60 [ 235.229260][ T9975] hwsim_new_radio_nl+0x93e/0xf90 [ 235.234301][ T9975] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 235.240222][ T9975] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 235.247171][ T9975] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 235.254039][ T9975] genl_rcv_msg+0x61d/0x980 [ 235.258566][ T9975] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 235.265514][ T9975] ? lock_release+0x890/0x890 [ 235.270188][ T9975] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 235.275477][ T9975] netlink_rcv_skb+0x15a/0x430 [ 235.280245][ T9975] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 235.287183][ T9975] ? netlink_ack+0xa10/0xa10 [ 235.291788][ T9975] genl_rcv+0x24/0x40 [ 235.295765][ T9975] netlink_unicast+0x533/0x7d0 [ 235.300535][ T9975] ? netlink_attachskb+0x810/0x810 [ 235.305650][ T9975] ? __phys_addr_symbol+0x2c/0x70 [ 235.310672][ T9975] ? __check_object_size+0x171/0x3f0 [ 235.315964][ T9975] netlink_sendmsg+0x856/0xd90 [ 235.320734][ T9975] ? netlink_unicast+0x7d0/0x7d0 [ 235.325677][ T9975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 235.330961][ T9975] ? netlink_unicast+0x7d0/0x7d0 [ 235.335898][ T9975] sock_sendmsg+0xcf/0x120 [ 235.340326][ T9975] ____sys_sendmsg+0x6e8/0x810 [ 235.345098][ T9975] ? kernel_sendmsg+0x50/0x50 [ 235.349772][ T9975] ? do_recvmmsg+0x700/0x700 [ 235.354364][ T9975] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 235.360387][ T9975] ___sys_sendmsg+0xf3/0x170 [ 235.364982][ T9975] ? sendmsg_copy_msghdr+0x160/0x160 [ 235.370273][ T9975] ? lock_downgrade+0x830/0x830 [ 235.375117][ T9975] ? find_held_lock+0x2d/0x110 [ 235.379890][ T9975] ? __might_fault+0xd3/0x180 [ 235.384590][ T9975] ? __fget_files+0x294/0x400 [ 235.389278][ T9975] ? __fget_light+0xea/0x280 [ 235.393875][ T9975] __sys_sendmsg+0xe5/0x1b0 [ 235.398378][ T9975] ? __sys_sendmsg_sock+0xb0/0xb0 [ 235.403396][ T9975] ? __x64_sys_futex+0x382/0x4e0 [ 235.408370][ T9975] ? check_preemption_disabled+0x50/0x130 [ 235.414099][ T9975] ? syscall_enter_from_user_mode+0x1d/0x60 [ 235.419992][ T9975] do_syscall_64+0x2d/0x70 [ 235.424405][ T9975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 235.430305][ T9975] RIP: 0033:0x45d5f9 [ 235.434310][ T9975] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.453933][ T9975] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.462347][ T9975] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 235.470315][ T9975] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 235.478298][ T9975] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 235.486263][ T9975] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 235.494260][ T9975] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:08:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:08:04 executing program 5: 22:08:04 executing program 3: 22:08:04 executing program 4: 22:08:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:08:04 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:04 executing program 3: 22:08:04 executing program 5: 22:08:04 executing program 4: [ 236.958575][T10003] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 236.983695][T10003] netlink: 10238 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.081420][T10003] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 237.099839][T10003] CPU: 1 PID: 10003 Comm: syz-executor.1 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 237.109736][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.119798][T10003] Call Trace: [ 237.123145][T10003] dump_stack+0x198/0x1fb [ 237.127496][T10003] sysfs_warn_dup.cold+0x1c/0x29 [ 237.132469][T10003] sysfs_do_create_link_sd+0x11e/0x140 [ 237.137958][T10003] sysfs_create_link+0x5f/0xc0 [ 237.142749][T10003] device_add+0x6ff/0x1c40 [ 237.147186][T10003] ? devlink_add_symlinks+0x450/0x450 [ 237.152582][T10003] ? ieee80211_set_bitrate_flags+0x3d1/0x610 [ 237.158601][T10003] wiphy_register+0x1d66/0x2850 [ 237.163559][T10003] ? wiphy_unregister+0xbb0/0xbb0 [ 237.168616][T10003] ? generic_xdp_install+0x700/0x700 [ 237.173940][T10003] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 237.180046][T10003] ieee80211_register_hw+0x22c9/0x39a0 [ 237.185568][T10003] ? ieee80211_restart_hw+0x290/0x290 [ 237.190963][T10003] ? debug_object_destroy+0x210/0x210 [ 237.196362][T10003] ? lock_downgrade+0x830/0x830 [ 237.201234][T10003] ? memset+0x20/0x40 [ 237.205225][T10003] ? __hrtimer_init+0x12c/0x260 [ 237.210099][T10003] mac80211_hwsim_new_radio+0x2353/0x4540 [ 237.215839][T10003] ? hwsim_virtio_rx_work+0x350/0x350 [ 237.221221][T10003] ? memcpy+0x39/0x60 [ 237.225224][T10003] hwsim_new_radio_nl+0x93e/0xf90 [ 237.230270][T10003] ? mac80211_hwsim_new_radio+0x4540/0x4540 [ 237.236191][T10003] ? genl_family_rcv_msg_attrs_parse.isra.0+0x19a/0x250 [ 237.243137][T10003] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 237.249995][T10003] genl_rcv_msg+0x61d/0x980 [ 237.254521][T10003] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 237.261478][T10003] ? lock_release+0x890/0x890 [ 237.266162][T10003] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 237.271487][T10003] netlink_rcv_skb+0x15a/0x430 [ 237.276263][T10003] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 237.283215][T10003] ? netlink_ack+0xa10/0xa10 [ 237.287838][T10003] genl_rcv+0x24/0x40 [ 237.291834][T10003] netlink_unicast+0x533/0x7d0 [ 237.296615][T10003] ? netlink_attachskb+0x810/0x810 [ 237.301738][T10003] ? __phys_addr_symbol+0x2c/0x70 [ 237.306781][T10003] ? __check_object_size+0x171/0x3f0 [ 237.312087][T10003] netlink_sendmsg+0x856/0xd90 [ 237.316897][T10003] ? netlink_unicast+0x7d0/0x7d0 [ 237.321864][T10003] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 237.327208][T10003] ? netlink_unicast+0x7d0/0x7d0 [ 237.332168][T10003] sock_sendmsg+0xcf/0x120 [ 237.336609][T10003] ____sys_sendmsg+0x6e8/0x810 [ 237.341398][T10003] ? kernel_sendmsg+0x50/0x50 [ 237.346118][T10003] ? do_recvmmsg+0x700/0x700 [ 237.350740][T10003] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 237.356752][T10003] ___sys_sendmsg+0xf3/0x170 [ 237.361355][T10003] ? sendmsg_copy_msghdr+0x160/0x160 [ 237.366697][T10003] ? lock_downgrade+0x830/0x830 [ 237.371584][T10003] ? find_held_lock+0x2d/0x110 [ 237.376369][T10003] ? __might_fault+0xd3/0x180 [ 237.381071][T10003] ? __fget_files+0x294/0x400 [ 237.385806][T10003] ? __fget_light+0xea/0x280 [ 237.390417][T10003] __sys_sendmsg+0xe5/0x1b0 [ 237.394934][T10003] ? __sys_sendmsg_sock+0xb0/0xb0 [ 237.399994][T10003] ? __x64_sys_futex+0x382/0x4e0 [ 237.404949][T10003] ? check_preemption_disabled+0x50/0x130 [ 237.410678][T10003] ? syscall_enter_from_user_mode+0x1d/0x60 [ 237.416584][T10003] do_syscall_64+0x2d/0x70 [ 237.421011][T10003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 237.426905][T10003] RIP: 0033:0x45d5f9 [ 237.430808][T10003] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.450435][T10003] RSP: 002b:00007f843e8f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.458860][T10003] RAX: ffffffffffffffda RBX: 000000000002cd40 RCX: 000000000045d5f9 [ 237.466834][T10003] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 237.474827][T10003] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 22:08:04 executing program 5: 22:08:04 executing program 4: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) 22:08:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4ae", 0x12}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 237.482802][T10003] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 237.490784][T10003] R13: 00007ffd28caf8df R14: 00007f843e8f99c0 R15: 000000000118cf4c 22:08:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:08:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 22:08:05 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:05 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}, 0x0) 22:08:05 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:08:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:05 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x1, 0x2, &(0x7f0000001940)=[{0x0}, {0x0}], 0x0, &(0x7f0000001a00)={[{@logdev={'logdev', 0x3d, './file0'}}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@pquota='pquota'}, {@logbsize={'logbsize', 0x3d, [0x0, 0x0, 0x78]}}], [{@smackfsroot={'smackfsroot', 0x3d, '+*['}}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) 22:08:05 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:08:05 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 238.436346][T10055] xfs: Unknown parameter 'biosize' 22:08:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:05 executing program 1: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 238.520915][T10055] xfs: Unknown parameter 'biosize' 22:08:08 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 22:08:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:08 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000340)) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000680)="ede34cd510b8", 0x6}], 0x3, 0x81003, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x10080003) 22:08:08 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:08:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) [ 240.791089][T10091] xfs: Unknown parameter 'biosize' 22:08:08 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0x18) 22:08:08 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80300000100000000122e25d30806", 0x0, 0x3a, 0xe00, 0x22d}, 0x28) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) 22:08:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) 22:08:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x22, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0}) 22:08:08 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, 0x0, 0x0) 22:08:08 executing program 5: socket$kcm(0x10, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2fd, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103004000638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000006f40)) [ 241.357672][T10118] xfs: Unknown parameter 'biosize' 22:08:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 22:08:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) [ 241.834823][T10140] xfs: Unknown parameter 'biosize' 22:08:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 22:08:09 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) tee(r1, r0, 0x81, 0x0) 22:08:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 22:08:09 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:09 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 22:08:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:08:09 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e", 0xa6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xbc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:08:10 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:08:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:10 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xbc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:08:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:08:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xbc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs={0x40046307, 0x2}], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:08:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 22:08:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 22:08:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 22:08:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}, {@biosize={'biosize'}}]}) 22:08:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) 22:08:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016", 0x17}], 0x1}, 0x0) 22:08:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016", 0x17}], 0x1}, 0x0) 22:08:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) 22:08:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016", 0x17}], 0x1}, 0x0) 22:08:18 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) 22:08:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e", 0x23}], 0x1}, 0x0) 22:08:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)={[{@ikeep='ikeep'}]}) 22:08:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e", 0x23}], 0x1}, 0x0) [ 251.936630][T10350] XFS (loop4): Invalid superblock magic number 22:08:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e", 0x23}], 0x1}, 0x0) 22:08:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)) [ 252.408003][T10374] XFS (loop4): Invalid superblock magic number 22:08:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a00118004", 0x29}], 0x1}, 0x0) 22:08:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)) [ 254.712633][T10394] XFS (loop4): Invalid superblock magic number 22:08:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a00118004", 0x29}], 0x1}, 0x0) 22:08:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001400)) 22:08:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xd0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @register_looper, @decrefs, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a00118004", 0x29}], 0x1}, 0x0) 22:08:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 255.093270][T10418] XFS (loop4): Invalid superblock magic number 22:08:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000", 0x2c}], 0x1}, 0x0) 22:08:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:25 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080)='/dev/vcsa\x00', 0xe300, 0x0) 22:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000", 0x2c}], 0x1}, 0x0) 22:08:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xcc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000", 0x2c}], 0x1}, 0x0) 22:08:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="675f07000005eb301420384897f1ac1dea61a7a765760036f300000000007d7cff30f363089c28409259007600000000800000009af7d19a1867a3387302dbb82ca75a57a50722725aaa7d4fd256142f29a26ac048afaed1898489f3fcd807eb0767d9dea868730402e1ecf7f1ad016defff1b", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1", 0x2d}], 0x1}, 0x0) 22:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1", 0x2d}], 0x1}, 0x0) 22:08:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e28000026003511d25a80638c63940d0424fc60100016400a0002000200000037153e370a001180042f0000d1", 0x2d}], 0x1}, 0x0) 22:08:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xcc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:28 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 22:08:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xcc, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/244, 0xf4, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1055414b003dda89}, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x86}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:08:28 executing program 4: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x1, 0x3, &(0x7f0000001940)=[{&(0x7f0000000600)="423b9446695ff20750df425e51797afb845ffef003c50fdc4709fd6a1240949f0f2e23a0897df36bd1ad90f1c944ae25300ffd3f6d8006ed1f38b50bdeb1d5f5bfd87e5f83832e6d6a81ca2bb688", 0x4e, 0x4}, {&(0x7f0000000780)}, {0x0}], 0x1090000, &(0x7f0000001a00)={[{@logdev={'logdev', 0x3d, './file0'}}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@pquota='pquota'}, {@logbsize={'logbsize', 0x3d, [0x0, 0x0]}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) 22:08:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 261.065491][T10512] warning: process `syz-executor.1' used the obsolete bdflush system call 22:08:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000c00)=@caif=@util={0x25, "cfb592280f46d71a7e83bfa7de1286ce"}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000d80)}, {0x0}, {0x0}], 0x3}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x1, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x0, 0x0, 0x8, 0x100000001, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 261.116301][T10512] Fix your initscripts? 22:08:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:28 executing program 4: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$xfs(0x0, 0x0, 0x1, 0x3, &(0x7f0000001940)=[{&(0x7f0000000600)="423b9446695ff20750df425e51797afb845ffef003c50fdc4709fd6a1240949f0f2e23a0897df36bd1ad90f1c944ae25300ffd3f6d8006ed1f38b50bdeb1d5f5bfd87e5f83832e6d6a81ca2bb688", 0x4e, 0x4}, {&(0x7f0000000780)}, {0x0}], 0x1090000, &(0x7f0000001a00)={[{@logdev={'logdev', 0x3d, './file0'}}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@pquota='pquota'}, {@logbsize={'logbsize', 0x3d, [0x0, 0x0]}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) 22:08:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000580)='xfs\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001a00)={[{@logbsize={'logbsize', 0x3d, [0x31, 0x67, 0x67]}}]}) 22:08:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{}]}, 0x2c, 0x0) 22:08:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:31 executing program 4: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) 22:08:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)) 22:08:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:31 executing program 4: io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_cancel(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 22:08:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) 22:08:31 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@empty, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvtap0\x00', 'ip6gretap0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="9838343a4419", @mac, @loopback, @local, 0x4}}}, {{@arp={@private, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'geneve1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @broadcast, @empty, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xe8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 264.640814][T10598] x_tables: duplicate underflow at hook 1 22:08:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:34 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x6, 0x7, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'rr\x00'}, 0x2c) 22:08:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:34 executing program 4: r0 = epoll_create(0x4) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040), 0xc, 0x0) 22:08:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="1f5583624999c4665398664cc4878a29fc1df4c0c9045e3fd64362f39caf1701d25c2fd6d499b05357e238b5ea791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c61381fb7c754ff4185d3cd1b6e0fe6ea2cd36efecfe2dd8b38b19f9ec1e7b23b2ede490fd5676911df2cbc32f508a1145afcd84ff4c71424914408b769768cffa2365c20b667f15ad27ddba5b47ec2488b8b2a33b94e14871621a0cc91c775176190bb4ff14ecfc4186c956528cf8f6e8cf57a60ce878023adeeb0f8f5a4a7841bb9", 0xda}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:08:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 267.248465][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.260534][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.282315][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 267.292684][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 267.364567][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.377233][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 267.516133][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.548206][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 267.804619][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.834766][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 22:08:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) 22:08:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x81) 22:08:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) 22:08:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:43 executing program 4: socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}, 0x1c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'tunl0\x00'}) mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x184000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/516, @ANYRESHEX=0x0, @ANYBLOB=',uname=@.--*.^.!({\\!-,zoose,context=user_u,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) 22:08:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x74, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:44 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:44 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0) [ 276.796300][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/158) [ 276.842724][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:44 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 276.950385][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.960661][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:46 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)) 22:08:46 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 279.351594][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.361523][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001480)={[{@dots='dots'}, {@nodots='nodots'}], [{@uid_eq={'uid', 0x3d, r1}}]}) 22:08:46 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 279.615393][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.637211][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.666267][T10848] FAT-fs (loop4): Unrecognized mount option "uid=00000000004294967295" or missing value 22:08:47 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:47 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x2}}) [ 279.927086][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.953344][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:47 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:47 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x40, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:49 executing program 4: r0 = epoll_create(0x410b24c) dup3(r0, 0xffffffffffffffff, 0x0) 22:08:49 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x40, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 282.461550][T10895] __nla_validate_parse: 2 callbacks suppressed [ 282.461642][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x2, [@union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}]}}, 0x0, 0xfe}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:08:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 282.627024][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x40, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:50 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 282.910899][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.954793][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.966865][T10940] ptrace attach of "/root/syz-executor.2"[10939] was attempted by "/root/syz-executor.2"[10940] 22:08:50 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 283.221878][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.270946][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:52 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, 0x8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) dup(r0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) 22:08:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 285.653719][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.683668][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.761219][T10975] ptrace attach of "/root/syz-executor.2"[10973] was attempted by "/root/syz-executor.2"[10975] 22:08:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:53 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 285.962322][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.001053][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 286.560166][T11000] ptrace attach of "/root/syz-executor.2"[10998] was attempted by "/root/syz-executor.2"[11000] 22:08:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:54 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, 0x8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) dup(r0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) 22:08:54 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 289.053783][T11044] __nla_validate_parse: 2 callbacks suppressed [ 289.053794][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:08:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 289.182276][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:08:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80300000100000000122e25d30806", 0x0, 0x3a, 0xe00, 0x22d}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) socket$kcm(0x10, 0x0, 0x0) 22:08:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x110a}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:57 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:08:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 290.421726][T11117] usb usb7: usbfs: process 11117 (syz-executor.4) did not claim interface 0 before use 22:08:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:08:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:58 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:58 executing program 4: socket(0x10, 0x800, 0x500000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x929}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f00000000c0)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:08:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80300000100000000122e25d30806", 0x0, 0x3a, 0xe00, 0x22d}, 0x28) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581fffffff07004000632f77fbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x0) [ 291.439785][T11163] ptrace attach of "/root/syz-executor.5"[11162] was attempted by "/root/syz-executor.5"[11163] 22:08:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:08:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:08:59 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:08:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:59 executing program 4: 22:08:59 executing program 4: [ 292.016430][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.030663][T11184] ptrace attach of "/root/syz-executor.5"[11183] was attempted by "/root/syz-executor.5"[11184] 22:08:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 22:08:59 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 292.111569][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:08:59 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:08:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238", 0x20}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 292.237265][T11199] ptrace attach of "/root/syz-executor.5"[11198] was attempted by "/root/syz-executor.5"[11199] [ 292.303571][T11207] ptrace attach of "/root/syz-executor.3"[11206] was attempted by "/root/syz-executor.3"[11207] 22:09:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:00 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:00 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 292.979005][T11225] ptrace attach of "/root/syz-executor.3"[11224] was attempted by "/root/syz-executor.3"[11225] [ 293.001824][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.105569][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 293.220543][T11241] ptrace attach of "/root/syz-executor.3"[11240] was attempted by "/root/syz-executor.3"[11241] 22:09:00 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x69, 0x0, &(0x7f0000000580)="724b97768d067edf885a90a5c7107a7726dc974532eabb22af56aa66cc7e98186b1aef69bc4250d1ba9a39170b871e73dc7907cca5dcc46bf1cc0efe6aadc0eedfb3f436227880254773bea2b0058941343c3c6eb0d9098da43e637c90a87ed793381df842f3932210"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 293.285997][ T2638] Bluetooth: hci0: command 0x0406 tx timeout [ 293.286042][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 293.321137][ T23] Bluetooth: hci2: command 0x0406 tx timeout 22:09:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 293.352625][T11249] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.356514][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 293.375624][T11249] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.411657][ T23] Bluetooth: hci5: command 0x0406 tx timeout 22:09:02 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 295.323733][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.399936][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:02 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 295.808751][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.832387][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 296.121474][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.131387][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 296.301309][T11335] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.333045][T11335] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:03 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:06 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:06 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 298.878631][T11364] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.904148][T11364] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:06 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:06 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:06 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:06 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:09 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:09 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:09 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 301.917261][T11419] __nla_validate_parse: 6 callbacks suppressed [ 301.917271][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.984113][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:09 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:09 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:09 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 22:09:09 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 302.396469][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.514276][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:12 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:09:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:12 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 305.011254][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, 0x0, 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 305.062576][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:12 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 22:09:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, 0x0, 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 305.455504][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.495157][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:12 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180), 0x0, 0x0, 0x0) 22:09:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100707269"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, 0x0, 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:15 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180), 0x0, 0x0, 0x0) 22:09:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 308.051133][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:15 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180), 0x0, 0x0, 0x0) 22:09:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100707269"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 308.119468][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.293435][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.349957][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540), 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:15 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{0x0}], 0x1, 0x0, 0x0) 22:09:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100707269"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 308.582762][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:16 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{0x0}], 0x1, 0x0, 0x0) [ 308.708737][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:18 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540), 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:18 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{0x0}], 0x1, 0x0, 0x0) 22:09:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 311.139882][T11565] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.170718][T11565] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.329524][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.350812][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:18 executing program 4: 22:09:18 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540), 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:19 executing program 4: 22:09:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:21 executing program 4: 22:09:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 314.223071][T11615] __nla_validate_parse: 2 callbacks suppressed [ 314.223082][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.274621][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:22 executing program 4: 22:09:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:22 executing program 4: [ 314.785867][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.823723][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:24 executing program 4: [ 317.359753][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.405049][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:25 executing program 4: 22:09:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:27 executing program 4: 22:09:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:28 executing program 4: 22:09:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:30 executing program 4: 22:09:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:31 executing program 4: 22:09:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:31 executing program 4: 22:09:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 324.271578][T11794] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.282673][T11794] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:33 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:33 executing program 4: 22:09:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 326.610244][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.643558][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:34 executing program 4: 22:09:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 327.147380][T11829] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.172767][T11829] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:34 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:34 executing program 4: 22:09:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:37 executing program 4: 22:09:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 329.687893][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.717773][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:37 executing program 4: 22:09:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 330.268652][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.298626][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:37 executing program 4: 22:09:37 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:40 executing program 4: 22:09:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:40 executing program 4: [ 332.866239][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.901278][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:40 executing program 4: 22:09:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 333.162051][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 333.213456][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.369219][T11927] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.400516][T11927] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.246089][ T8244] Bluetooth: hci4: command 0x0406 tx timeout 22:09:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:43 executing program 4: 22:09:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b0000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:43 executing program 4: 22:09:43 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 335.953588][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.977690][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:43 executing program 4: 22:09:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 336.184248][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.194132][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r1, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x100) [ 336.368784][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.395518][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 4: socket(0x25, 0x5, 0x4) 22:09:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x5, 0xbd2, 0x34e, 0xfffffffb, 0x0, "40982e07edea9e639ae175ca5fa75576a4cf88"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 339.066639][T11993] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.118213][T11993] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 22:09:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 339.257880][T12001] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:09:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 22:09:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 22:09:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:49 executing program 4: r0 = epoll_create(0x410b24f) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000008}) close(r1) 22:09:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) 22:09:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007f40)=""/4096, 0x1000}], 0x1}}], 0x45, 0x120, 0x0) 22:09:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) 22:09:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36e", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x42182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x84, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}, @clear_death={0x400c630f, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @acquire_done], 0x0, 0x0, &(0x7f0000000580)}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) 22:09:52 executing program 4: syz_mount_image$ntfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 22:09:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 345.257166][T12111] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 22:09:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 345.324610][T12111] overlayfs: missing 'lowerdir' 22:09:52 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000005c0)) 22:09:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) 22:09:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 22:09:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') read$midi(r0, 0x0, 0x0) 22:09:53 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) 22:09:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36e", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:09:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="e70ca2e2c85e121bfe019edbf6cb"], 0x16) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:09:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(0xffffffffffffffff, 0x0) 22:09:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:09:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) 22:09:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x0, @private=0xa010101}}) 22:09:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) 22:09:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) 22:09:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36e", 0x66}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 22:09:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) 22:09:58 executing program 0: prctl$PR_SET_MM_MAP(0x1e, 0xe, 0x0, 0x0) 22:09:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3dd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b556477f9a0d9d4f33ff3f3bfd238a216648e8cf5811c54dac5866b3158828cc5330ba05bbb041e42d520ae699d21dcaec99e9550bd20178af0b7f2be56f2e1e108ea1c7e3eb1bf3a7063654e67c917d52b9410c70ca6e79461d45e560f7531f1d6bee6d2c4b3956e79c67d21fa56380bfa88e5db185c8756eef3b6f88e428ad1165601d1c09229e38155dc5db5e62964", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) 22:09:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 22:09:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) 22:09:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:09:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x0, 0x0) 22:09:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 22:09:59 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x6, 0x25, &(0x7f00000000c0)={0x0, 'veth1_to_hsr\x00'}, 0x18) 22:10:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 22:10:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 22:10:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) [ 354.520474][T12236] binder: 12234:12236 ioctl c018620b 0 returned -14 22:10:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 22:10:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3dd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b556477f9a0d9d4f33ff3f3bfd238a216648e8cf5811c54dac5866b3158828cc5330ba05bbb041e42d520ae699d21dcaec99e9550bd20178af0b7f2be56f2e1e108ea1c7e3eb1bf3a7063654e67c917d52b9410c70ca6e79461d45e560f7531f1d6bee6d2c4b3956e79c67d21fa56380bfa88e5db185c8756eef3b6f88e428ad1165601d1c09229e38155dc5db5e62964", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) 22:10:02 executing program 4: bpf$MAP_CREATE(0x2, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x722aa6f3], [0x0, 0x0, 0xffff]}, 0x45c) 22:10:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e9907", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 22:10:02 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x11], 0x0}, 0x42}, 0x80, 0x0}, 0x0) 22:10:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 22:10:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="dc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 22:10:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000240007ff0100810000008f9b00000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) 22:10:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:04 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {0x0}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bb", 0x20}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 22:10:05 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4, @in=@remote}}, {{@in=@private}, 0x0, @in6=@mcast1}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) 22:10:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) 22:10:05 executing program 4: r0 = socket(0xa, 0x3, 0x2) getsockname$ax25(r0, 0x0, &(0x7f0000000080)) 22:10:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e9907", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:05 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)="5520c73c1b82418c1d08435ba68214b0710bfddde5e73ff85385a84118bb8f45d38beb81ba1c21506097023b19cc389e582f040f16a0371a44aab452a083b00b5366f8b9686e21f37e0f82c127c9be215a97a34a395777b857edb3d3bff2a979622e1f898b978357b122cf07211dbf65fa2e285ea65e57e27a1a381e634d1d0ba7ccec0fb21365ceaf0dcacb71216510fb740e9cfbcd4781a49a292aad5cd8bcaa87e4e34d2ae9d7090932854b701fc5c15ee354c1b9140dea571310ee34a08a132093044c229a7d920033a29bae083d63cc427f904a3f7021940628890ae51ec40b8f5cf261ae4147d84b060413eb3f9d71106974a88a3ef1978f233d2003cc231df8dd5a5496c71e36d8b3c2b237008406543858fbd6a05dc395ee8e58b72b8b41ef15700034030c0e2d475bef5188f8e5a4b0f90a043535b1cdb962a70555ca751de285a18537389c1ffa37734d175655400479877524bab7443317eda9bdcc789eae8cb0b8bf533a0b99813f32a0ce2a918d9a36622e968b80664b9dc638a323807dc604fe1e32ce5af6a7ffeaf196cb542f9fa5019f6bfdb2d14538527feee4bcfce8644de6a9e26e65d8b4730aafee4f8962ca41590134f88899e1e51b6cd61a6e2b5a2ef0ef1c5c2c265aad09b90a2e50a6900795bc99d3c96980ec4ed89d9cb5ae7806d47c04a516da5f1f7cb84c8758fa3a0386c6b6a689dca9c7d5", 0x200}]) 22:10:05 executing program 0: 22:10:05 executing program 1: 22:10:05 executing program 1: [ 358.202063][T12302] Dev loop4: unable to read RDB block 1 [ 358.210594][T12302] loop4: unable to read partition table [ 358.235236][T12302] loop4: partition table beyond EOD, truncated [ 358.262471][T12302] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 22:10:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:08 executing program 0: 22:10:08 executing program 4: 22:10:08 executing program 1: 22:10:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:08 executing program 1: 22:10:08 executing program 4: 22:10:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e9907", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:08 executing program 0: 22:10:08 executing program 4: 22:10:08 executing program 1: 22:10:08 executing program 4: 22:10:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6", 0x80}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:11 executing program 0: 22:10:11 executing program 1: 22:10:11 executing program 4: 22:10:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:11 executing program 4: 22:10:11 executing program 1: 22:10:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:11 executing program 0: 22:10:11 executing program 4: 22:10:11 executing program 1: 22:10:11 executing program 1: 22:10:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6", 0x80}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:14 executing program 0: 22:10:14 executing program 4: 22:10:14 executing program 1: 22:10:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:14 executing program 0: 22:10:14 executing program 4: 22:10:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:14 executing program 1: 22:10:14 executing program 0: 22:10:14 executing program 4: 22:10:14 executing program 4: 22:10:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6", 0x80}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:17 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x4, 0x0, 0x4f4000) 22:10:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x200000000000000, 0x0) syz_usb_disconnect(r1) 22:10:17 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, 0x0, 0x0) 22:10:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:17 executing program 4: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000280)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket(0x29, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x128000}}, 0x0) 22:10:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x3c}}, 0x0) 22:10:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504", 0xae}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:17 executing program 4: syz_mount_image$nfs(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:17 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) 22:10:17 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000100)={0x2000000, 0x0, 0x0, 'queue1\x00'}) 22:10:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_disconnect(r1) 22:10:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 22:10:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6c5, 0xffffffffffffffff, 0x2}, 0x40) 22:10:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x10e, 0xa, 0x0, 0x0) 22:10:20 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) 22:10:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 22:10:20 executing program 1: r0 = epoll_create1(0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 22:10:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33ead", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:20 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x1b, 0x0, 0x4f4000) 22:10:20 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045017, &(0x7f0000000040)) 22:10:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0xcc, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x4c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}, {0x4}]}]}]}]}, 0xcc}}, 0x0) 22:10:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:10:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000080)={'veth1_virt_wifi\x00', @ifru_ivalue}) 22:10:23 executing program 0: bpf$MAP_CREATE(0x1d, &(0x7f00000004c0), 0x40) 22:10:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x8) 22:10:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:10:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_names='macvlan1\x00'}) 22:10:23 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = gettid() r2 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r0}) 22:10:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33ead", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:23 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 22:10:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x14, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x218, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 22:10:23 executing program 0: r0 = socket(0x23, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) 22:10:24 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000002440)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[@op={0x18}, @iv={0x18, 0x117, 0x2, 0x4, "2cee089c"}], 0x8}], 0x3, 0x0) 22:10:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x2507991028828fee, 0x162, 0x0, 0x0) 22:10:26 executing program 0: r0 = socket(0x23, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) 22:10:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) waitid(0x0, 0x0, &(0x7f0000000000), 0x2, 0x0) 22:10:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 22:10:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff4}], &(0x7f00000001c0)='GPL\x00', 0x7, 0xaa, &(0x7f0000000200)=""/170, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:10:26 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000d40), 0x10) 22:10:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33ead", 0xb1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:27 executing program 1: semctl$GETZCNT(0x0, 0xff0f0000, 0x10, 0x0) 22:10:27 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x44}, 0x20) 22:10:27 executing program 4: r0 = socket(0x29, 0x80002, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={0x1000, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xfec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x19, 0x5, "b133a2f54d0290b648a0cbd646427c2a2c4a18146b"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xfc1, 0x4, "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"}]}]}, 0x1000}}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[], 0x204}}, 0x0) 22:10:27 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 22:10:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='^', 0x1}], 0x1}, 0x44020) 22:10:29 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xf641, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 22:10:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8910, &(0x7f0000000380)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) 22:10:29 executing program 2: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f00000049c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x4c) 22:10:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x14, 0x0, &(0x7f0000000000)=0x1f00) 22:10:29 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, 0x0, 0x0) 22:10:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc7", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:30 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) msgsnd(0x0, 0x0, 0xd6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 22:10:30 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) accept$ax25(r0, 0x0, 0x0) 22:10:30 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x1, 0x0, 0x0) 22:10:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000002b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32], 0x88}], 0x1, 0x0) [ 382.913733][T12605] device lo entered promiscuous mode 22:10:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:32 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={&(0x7f0000000000), 0x2000000c, &(0x7f0000001d00)={&(0x7f0000001980)={0x14}, 0x14}}, 0x0) 22:10:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000000)) 22:10:32 executing program 4: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xff600000) 22:10:32 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) msgsnd(0x0, 0x0, 0xd6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 22:10:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd03000000000000002d0500000008003c0080000000080003000f"], 0x44}, 0x1, 0x80ffff}, 0x0) 22:10:32 executing program 0: r0 = socket$inet_sctp(0x2, 0xa, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x6364, 0x0) [ 385.617019][T12637] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 22:10:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc7", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x5, 0x0) 22:10:33 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 22:10:33 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x7a, 0x0, 0x4f4000) 22:10:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 22:10:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be", 0x86}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:35 executing program 4: r0 = socket(0x1, 0x80002, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001dc0)={&(0x7f0000000180), 0xc, &(0x7f0000001d80)={0x0}}, 0x0) 22:10:35 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc040) 22:10:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) socket(0x2, 0x6, 0x0) 22:10:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 22:10:35 executing program 4: mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x7fff, 0x3, 0x1) 22:10:35 executing program 1: bpf$MAP_CREATE(0xd, 0x0, 0x0) 22:10:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc7", 0xb2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x19, 0x0, &(0x7f0000000000)) 22:10:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000180000003500000000000000850000007d0000009500000000000000ddf803b0a9919bbd9f871cf9f3be96a213221cdee21ed587e7f100b65a9fb6d063630f7b6f3c2ae8a689e3d2d061aa7bafac2e699978129363e5e3f0317321a221e6adb23a0f4384cbe48cf4572ab68bebc4789c9ace944261689a1c128b15b063b322e879928469a09f0d42c78c39e5889db7796e637d5dffa0c58655b507498361"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 22:10:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 22:10:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x21, 0x0, &(0x7f0000000000)) 22:10:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:38 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100008493142200002602"], 0x14}}, 0x0) 22:10:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 22:10:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5}, 0x3c) 22:10:39 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0xf601, 0x200000f, 0x8032, 0xffffffffffffffff, 0x10000000) 22:10:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x218, 0x190, 0x190, 0x95ffffff, 0x77, 0x93ffffff, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 22:10:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8906, 0x0) 22:10:39 executing program 0: r0 = socket(0x2a, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 22:10:42 executing program 0: r0 = socket(0x29, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000800)=ANY=[], 0x86c}}, 0x44056) 22:10:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x1a, 0x0, &(0x7f0000000000)=0x1f00) 22:10:42 executing program 0: r0 = socket(0xa, 0x3, 0xa) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x29, 0x49, 0x0, 0x0) 22:10:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 22:10:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000040) inotify_rm_watch(r1, r2) 22:10:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:42 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:10:42 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 22:10:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be52", 0x87}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:45 executing program 1: socket$kcm(0xa, 0x802, 0x88) 22:10:45 executing program 0: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001180)) 22:10:45 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:10:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 22:10:45 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:10:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:45 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x8004500f, 0x0) 22:10:45 executing program 1: r0 = socket(0x23, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x12100) 22:10:45 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:48 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:48 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x0) 22:10:48 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e22}, 0x80, 0x0}, 0x0) 22:10:48 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0xd, 0x0, 0x4f4000) 22:10:48 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:48 executing program 0: bpf$MAP_CREATE(0x9, &(0x7f0000000480), 0x40) 22:10:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000005, 0x13, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 22:10:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:51 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000240)=0x40000, 0x8) 22:10:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:51 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x19, 0x0, 0x401000) 22:10:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0x7, &(0x7f0000000000)=@framed={{}, [@map, @map]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x7d) 22:10:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:10:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:51 executing program 1: r0 = socket(0x26, 0x5, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 22:10:51 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:51 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 22:10:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:54 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:54 executing program 0: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x4, 0x0, 0x401000) 22:10:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 22:10:54 executing program 1: r0 = socket(0xa, 0x3, 0xa) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x29, 0x35, 0x0, 0x300) 22:10:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x6d, 0x0, &(0x7f0000000000)) 22:10:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:54 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000029c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @loopback}}}}], 0x28}, 0x0) 22:10:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:10:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 22:10:57 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) 22:10:57 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:10:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:57 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x541b, 0x0) 22:10:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:10:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 22:10:57 executing program 0: fchmodat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0) 22:10:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:10:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x6}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) 22:10:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0xe, 0x0, &(0x7f0000000000)=0x300) 22:10:58 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 22:10:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:10:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 22:10:58 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:11:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:11:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x8953, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}}) 22:11:00 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x5, 0x0, 0x0) 22:11:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 22:11:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:01 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000040)={'team0\x00'}) 22:11:01 executing program 0: r0 = socket(0xa, 0x3, 0xa) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x29, 0x19, 0x0, 0x300) 22:11:01 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x89e8, &(0x7f0000000000)={0x0, @ax25={0x3, @bcast}, @tipc=@id, @hci}) 22:11:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x7, 0x0, &(0x7f0000000000)=0x300) 22:11:01 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0xf}]}, 0x1c}}, 0x0) 22:11:01 executing program 1: bpf$MAP_CREATE(0xf, 0x0, 0x0) 22:11:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x89a0, 0x0) socket(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 22:11:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'vlan1\x00', @ifru_hwaddr=@random="8550a4abdd68"}) 22:11:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x25, 0x0, 0x401000) 22:11:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8981, &(0x7f0000000380)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) 22:11:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}) ioctl$sock_ifreq(r0, 0x890c, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_names='macvlan1\x00'}) 22:11:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r0, 0x5156) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fallocate(r0, 0x11, 0x0, 0xffffffff000) 22:11:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setflags(r0, 0x2, 0x0) 22:11:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x29, 0x0, 0x1000000) 22:11:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x541b, 0x0) 22:11:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:07 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x6, 0x0, 0x401000) 22:11:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:11:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x600800) r1 = syz_open_dev$ndb(&(0x7f0000001cc0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 22:11:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r0, 0x5156) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fallocate(r0, 0x11, 0x0, 0xffffffff000) 22:11:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:11:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x20) 22:11:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff7f00000120"], 0x28}, 0x0) 22:11:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:07 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x301c, 0x3000007, 0x4020032, 0xffffffffffffffff, 0x8000000) 22:11:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) 22:11:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:07 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005480)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="8b", 0x1}], 0x1}], 0x1, 0x0) 22:11:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8936, 0x0) 22:11:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) [ 421.619190][ T164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.984934][ T164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.250931][ T164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.409087][ T164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.505417][ T164] tipc: TX() has been purged, node left! 22:11:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:10 executing program 0: r0 = socket(0x21, 0x2, 0xa) setsockopt$IP_VS_SO_SET_ADD(r0, 0x110, 0x2, 0x0, 0x0) 22:11:10 executing program 4: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 22:11:10 executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) 22:11:10 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x402, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x8010500c, &(0x7f0000000040)) 22:11:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) 22:11:10 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x890b, 0x0) 22:11:10 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000001080), &(0x7f0000048000), 0x0) [ 425.021174][T13217] IPVS: ftp: loaded support on port[0] = 21 [ 425.053653][ T164] device hsr_slave_0 left promiscuous mode [ 425.059995][ T164] device hsr_slave_1 left promiscuous mode [ 425.067593][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.075083][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.084435][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.093523][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.103059][ T164] device bridge_slave_1 left promiscuous mode [ 425.109359][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.118597][ T164] device bridge_slave_0 left promiscuous mode [ 425.124780][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.141478][ T164] device veth1_macvtap left promiscuous mode [ 425.147556][ T164] device veth0_macvtap left promiscuous mode [ 425.153573][ T164] device veth1_vlan left promiscuous mode [ 425.159571][ T164] device veth0_vlan left promiscuous mode [ 426.976191][ T7084] Bluetooth: hci5: command 0x0409 tx timeout [ 429.056171][ T12] Bluetooth: hci5: command 0x041b tx timeout [ 429.784699][ T164] team0 (unregistering): Port device team_slave_1 removed [ 429.798414][ T164] team0 (unregistering): Port device team_slave_0 removed [ 429.815315][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.833321][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.895069][ T164] bond0 (unregistering): Released all slaves [ 430.100748][T13217] chnl_net:caif_netlink_parms(): no params data found [ 430.227159][T13217] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.234269][T13217] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.243084][T13217] device bridge_slave_0 entered promiscuous mode [ 430.255559][T13217] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.265494][T13217] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.274239][T13217] device bridge_slave_1 entered promiscuous mode [ 430.300058][T13217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.314988][T13217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.355279][T13217] team0: Port device team_slave_0 added [ 430.375543][T13217] team0: Port device team_slave_1 added [ 430.423917][T13217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.431892][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.459908][T13217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.474858][T13217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.482378][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.511075][T13217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.565937][T13217] device hsr_slave_0 entered promiscuous mode [ 430.575013][T13217] device hsr_slave_1 entered promiscuous mode [ 430.592369][T13217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.605022][T13217] Cannot create hsr debugfs directory [ 430.760080][T13217] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.767248][T13217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.774768][T13217] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.781929][T13217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.862704][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.883353][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.892696][ T23] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.902244][ T23] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.925244][T13217] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.953040][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.962005][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.969143][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.987415][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.995916][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.003051][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.028185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.038367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.048475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.060831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.081387][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.091595][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.101608][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.111138][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.120784][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.137929][T13217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.144101][ T2638] Bluetooth: hci5: command 0x040f tx timeout [ 431.150486][T13217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.167239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.175815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.209116][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.217658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.234858][T13217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.366500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.375200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.423739][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.441958][ T2638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.469256][T13217] device veth0_vlan entered promiscuous mode [ 431.476378][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.484079][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.515123][T13217] device veth1_vlan entered promiscuous mode [ 431.565489][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.575120][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.584791][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.597146][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.609341][T13217] device veth0_macvtap entered promiscuous mode [ 431.634836][T13217] device veth1_macvtap entered promiscuous mode [ 431.683642][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.694990][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.716412][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.728504][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.741121][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.753686][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.765185][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.776632][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.787346][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.798715][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.811413][T13217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.821838][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.832294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.841553][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.852200][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.865762][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.880439][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.892484][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.903926][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.914971][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.926785][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.937485][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.948907][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.959685][T13217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.970980][T13217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.983454][T13217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.996783][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.005528][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:11:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 22:11:19 executing program 2: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0xb, 0x0, 0x401000) 22:11:19 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x84, 0x3, 0x0, 0x401000) 22:11:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x29) 22:11:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000340)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) flistxattr(r1, 0x0, 0x0) 22:11:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x178, 0xffffff80, 0x178, 0x0, 0x178, 0x178, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 22:11:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 22:11:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000340)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) flistxattr(r1, 0x0, 0x0) 22:11:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b001b5e13c"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 22:11:20 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:20 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) 22:11:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)=']!{\x00', 0x0, r0) 22:11:20 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) [ 433.206298][ T8244] Bluetooth: hci5: command 0x0419 tx timeout 22:11:20 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b001b5e13c"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:20 executing program 4: socket$inet6(0xa, 0xbed70d7304612807, 0x0) 22:11:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)=']!{\x00', 0x0, r0) 22:11:23 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=""/82, 0x52}}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 22:11:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:23 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:23 executing program 2: r0 = socket(0x22, 0x2, 0x3) recvmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1) 22:11:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:23 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:11:23 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) 22:11:23 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000027c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 22:11:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40305839, 0x0) 22:11:26 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:11:26 executing program 0: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:26 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x240100, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 22:11:26 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x408000, 0x0) 22:11:26 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:26 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:11:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "7269625e27190fb6", "ac78e09636392c4dd218abb12d3ab14f", "424881c0", "e8fd63973d590d84"}, 0x28) 22:11:26 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:26 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x500e, 0x0) 22:11:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000007500)=[{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000540)="da93d3ebf178181d748f40cdfda4eb4f8cad196090d6d490fd0c298c36802cd2666859a49d9a90cc828b3f6ac00fd1407894f1a52967dbc0200f44bea8eff688fde447cb4c2d0133882dafdbafca7db7ed4411156c0ec74d32688164db79635878ff95b83a4b9e83719b69453f8a", 0x6e}, {&(0x7f00000005c0)="8f7ab149f51ac17277fd08eeab8c8995347556721859f484023208ad74f270b06ea57d30e56078392164096b0d512146d6c19b54f6b6033f1f6106513e83e52e422fe04ed07a21a83be933ceae4c73b020ddd262142673c003124eee0030910f9cdc40b9c8171f804b87c423045947c179a8fa3f22dfde63fb55785e1b483a4c37781987d361b64f9bcac78d5b7d0666db9b9bc465a12ae61710d281c18db735c6958b6583bab3c514df0cd76364bd5c2487ea5252afa9b02aa486cb67f26741bffe099ffa763665f09e38d8c2397313b4e6", 0xd2}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="e2a62209424fa3ba3d4a853818965c7c3483b73e6ca1aab10353dc3cb82ce47eff16", 0x22}, {&(0x7f0000001700)="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", 0xd51}, {&(0x7f00000027c0)="69d92d9d7166de13f7b2f92167cb", 0xe}], 0x6}], 0x1, 0x0) 22:11:29 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x20) 22:11:29 executing program 2: r0 = socket(0x1e, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 22:11:29 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:11:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000005, 0x13, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) 22:11:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0xa, 0x0, 0x0) 22:11:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 22:11:29 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:11:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:32 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc0}}, 0x0) 22:11:32 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:11:32 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLERROR(r0, &(0x7f0000000080)={0xb, 0x7, 0x0, {0x2, '(}'}}, 0xb) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0xfdef) 22:11:32 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) 22:11:32 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={&(0x7f0000000000), 0xc, &(0x7f0000001d00)={&(0x7f0000001980)={0x14}, 0x14}}, 0x0) 22:11:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:32 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:32 executing program 4: r0 = socket(0x2b, 0x1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000060) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2062) 22:11:32 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) 22:11:33 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0xf, 0x0) 22:11:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x20) 22:11:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x3, 0x0, &(0x7f0000000000)=0x300) 22:11:35 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000d34000/0x4000)=nil, 0x7fffdf2cb000, 0x0, 0x82031, 0xffffffffffffffff, 0x10000000) 22:11:35 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x23, 0x0, 0x0) 22:11:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000180)="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", 0x5a7, 0x800, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x20) 22:11:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}}) 22:11:35 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x453}, 0xfda3}}, 0x0) 22:11:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:38 executing program 2: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f00000028c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty=0xe0000000}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x13e8}, 0x0) 22:11:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:38 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000280)={'tunl0\x00', @ifru_mtu=0x531101}) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x20fff000, 0x0, 0x4090031, 0xffffffffffffffff, 0x0) 22:11:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:38 executing program 4: pselect6(0x0, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000180), 0x0) 22:11:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x10e, 0x2, 0x0, 0x300) 22:11:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0xba7) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900000000000000000000001c140000fe0000010000000004001300"/160], 0xa0}}, 0x0) 22:11:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$can_j1939(r0, &(0x7f0000001ac0)={&(0x7f0000000a40), 0x18, &(0x7f0000001a80)={0x0, 0xf0ff7f}}, 0x0) 22:11:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0}) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_map={0x0, 0x0, 0x80fe}}) [ 451.782264][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 451.824803][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) socket(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0xf00}, 0x0) 22:11:41 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@xdp={0xa, 0x500}, 0x80, 0x0}, 0x7ffffff7) 22:11:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0xba7) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900000000000000000000001c140000fe0000010000000004001300"/160], 0xa0}}, 0x0) 22:11:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 454.573661][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) 22:11:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x8) 22:11:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0xba7) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900000000000000000000001c140000fe0000010000000004001300"/160], 0xa0}}, 0x0) 22:11:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab456"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 454.870116][T13784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:42 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x8010500c, &(0x7f0000000040)) 22:11:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:44 executing program 4: syz_genetlink_get_family_id$nl80211(0xfffffffffffffffe) 22:11:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0xba7) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900000000000000000000001c140000fe0000010000000004001300"/160], 0xa0}}, 0x0) 22:11:44 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f00000049c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @local}, 0x80, 0x0, 0x0, &(0x7f00000025c0)=[{0x10, 0x1}], 0x10}, 0x0) [ 457.657085][T13805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:45 executing program 4: bpf$MAP_CREATE(0xe, 0x0, 0x0) 22:11:45 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffac, 0x0}, 0x1) 22:11:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r2, 0xba7) 22:11:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) [ 457.962473][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:11:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) 22:11:48 executing program 0: [ 460.736800][T13845] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:48 executing program 0: 22:11:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 22:11:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:11:48 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) [ 461.068832][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:51 executing program 0: 22:11:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22:11:51 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:11:51 executing program 0: [ 463.783651][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 22:11:51 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:11:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:51 executing program 0: [ 464.124499][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:51 executing program 0: 22:11:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:54 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:11:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:11:54 executing program 0: [ 466.909959][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:11:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:54 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:11:54 executing program 0: 22:11:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:11:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:57 executing program 0: 22:11:57 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:11:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:11:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:11:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:11:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:11:57 executing program 0: 22:11:57 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:11:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:11:57 executing program 0: [ 470.315918][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:00 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:12:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:00 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:12:00 executing program 0: 22:12:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 473.141299][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:00 executing program 0: 22:12:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:00 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:12:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:03 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:12:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:03 executing program 0: 22:12:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:03 executing program 0: 22:12:03 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005141307"], 0x20}}, 0x0) 22:12:03 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:12:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:03 executing program 0: 22:12:03 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) 22:12:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:06 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:12:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:06 executing program 0: 22:12:06 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) 22:12:06 executing program 0: 22:12:06 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x2, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x40046201, 0x0) 22:12:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:06 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0) 22:12:06 executing program 0: 22:12:06 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:09 executing program 0: 22:12:09 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 22:12:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b001b5e1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:09 executing program 0: 22:12:09 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 22:12:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:09 executing program 0: 22:12:10 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 22:12:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b001b5e1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:12 executing program 0: 22:12:12 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x0) 22:12:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:13 executing program 0: 22:12:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:13 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x0) 22:12:13 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:13 executing program 0: 22:12:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:15 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x0) 22:12:15 executing program 0: 22:12:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000560700000fff06006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec2cababdfa556910ab5e7a182c3658d0e4a4857cb0311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7023bc969b8b91a819a38a0ab45672285748220352219c32939d59b0ffd625e0c760e749bcdc34ffe19b72cabaccdee1da4e3fac3e283bcbe096ebc9fda15a2ff0ad598207f1a0f6a16305f61ae517f1e23c646c64ae0d2d3d5a2c2c5e2e5a2162fa49d34708d057622a4b7f7967990847eb17725d10c1946f5752211ed559daf568b99cbb7ed8a935061281b3662b516a9bc5277556b65bb4b65f6c732594d30fd88a0a89d2587e2fb5cfb8dd8d3cf7229826085fadf03f4f979f56c49106d16ea9cf9a2a7084e892e171506aba5c5835636e5e10315577190104ea915d1f9b4c6d26b6315efb4a581d5651e6c51c98d12bc7d02e1515e5096a18b9ba65f392a387eab2f0a52c9b94eb247991e7151475673a27c2d0fd91e09d6fe81eccd0162880b001b5e13c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:16 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x20}}, 0x0) 22:12:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:16 executing program 0: 22:12:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:16 executing program 0: 22:12:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:19 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x20}}, 0x0) 22:12:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:12:19 executing program 0: 22:12:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x40046201, 0x0) 22:12:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:19 executing program 0: 22:12:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 22:12:19 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x20}}, 0x0) 22:12:19 executing program 0: 22:12:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:12:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 22:12:22 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}}, 0x0) 22:12:22 executing program 0: 22:12:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x40046201, 0x0) 22:12:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:22 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}}, 0x0) 22:12:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 22:12:22 executing program 0: 22:12:22 executing program 4: 22:12:22 executing program 0: 22:12:22 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}}, 0x0) 22:12:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:12:25 executing program 1: 22:12:25 executing program 4: 22:12:25 executing program 0: 22:12:25 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) 22:12:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 22:12:25 executing program 0: 22:12:25 executing program 1: 22:12:25 executing program 4: 22:12:25 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) 22:12:25 executing program 0: 22:12:25 executing program 1: 22:12:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:12:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000400)='\\') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:12:28 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) 22:12:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f20e035010000000f22e0b9e30b0000b8ab75cc71ba000000000f30b8010000000f01d90f20c035000000400f22c0b9800000c00f3235008000000f302e0f6b8eec8cfce40f22c0ea3b0f00009600660f65470867260f790a", 0x59}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x10000, 0x4, &(0x7f0000000800)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000680)}, {0x0}], 0x0, &(0x7f0000000b00)={[{@gid={'gid'}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@mode={'mode'}}, {@huge_advise={'huge=advise', 0x3d, '\\'}}], [{@pcr={'pcr', 0x3d, 0x2b}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '}\x00\x00\x01\x02}'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@measure='measure'}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:28 executing program 1: socketpair(0x11, 0x2, 0x0, &(0x7f0000002b00)) 22:12:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:12:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) 22:12:28 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000514"], 0x20}}, 0x0) 22:12:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000400)='\\') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:12:28 executing program 4: open(0x0, 0x0, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91gu\x88_[)i\xe1MK_S#%\xba\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf\xa9\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb \xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8f\x8e:2L\x06J\xf8\xde\xd0\x03\x00\x00\x00\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000003, 0x4046811, r1, 0x0) [ 501.229488][T14284] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:12:28 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000514"], 0x20}}, 0x0) 22:12:28 executing program 4: socket$netlink(0x10, 0x3, 0x0) setregid(0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 22:12:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:12:31 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000514"], 0x20}}, 0x0) 22:12:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='ramfs\x00', 0x50, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 22:12:31 executing program 4: socket$netlink(0x10, 0x3, 0x0) setregid(0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2b, 'pids'}]}, 0x6) 22:12:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0xa, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), 0x8001, r0}, 0x38) 22:12:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 22:12:31 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000051413"], 0x20}}, 0x0) 22:12:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=']) [ 504.355932][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001780)={0x1, 0x3, 0x9, 0x8001}, 0x40) [ 504.422149][T14344] fuse: Bad value for 'fd' 22:12:31 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000051413"], 0x20}}, 0x0) 22:12:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000000000000ffff00010000000020000000ff000100001f000000060000000400000000000000fffffffff9ffffff030000000600000009"]}) [ 504.595581][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000000000000ffff00010000000020000000ff000100001f000000060000000400000000000000fffffffff9ffffff030000000600000009"]}) 22:12:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73d", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 22:12:34 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000051413"], 0x20}}, 0x0) 22:12:34 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67e, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) 22:12:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000000000000ffff00010000000020000000ff000100001f000000060000000400000000000000fffffffff9ffffff030000000600000009"]}) 22:12:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={0x14, 0x0, 0x17c4c4c4f58fe7e7, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22:12:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521d", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 507.229099][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 22:12:34 executing program 0: creat(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x8c010, 0x0) 22:12:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000000000000ffff00010000000020000000ff000100001f000000060000000400000000000000fffffffff9ffffff030000000600000009"]}) 22:12:34 executing program 0: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 22:12:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0xcf01) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 22:12:34 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67e, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x0) 22:12:34 executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000000000000ffff00010000000020000000ff000100001f000000060000000400000000000000fffffffff9ffffff030000000600000009"]}) [ 507.710583][T14389] mmap: syz-executor.2 (14389) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 507.765390][T14393] ================================================================== [ 507.773859][T14393] BUG: KASAN: null-ptr-deref in PageHuge+0x19/0x170 [ 507.780458][T14393] Read of size 8 at addr 0000000000000000 by task syz-executor.2/14393 [ 507.788691][T14393] [ 507.791037][T14393] CPU: 1 PID: 14393 Comm: syz-executor.2 Not tainted 5.9.0-rc5-next-20200915-syzkaller #0 [ 507.800925][T14393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.810981][T14393] Call Trace: [ 507.814288][T14393] dump_stack+0x198/0x1fb [ 507.818632][T14393] ? PageHuge+0x19/0x170 [ 507.822881][T14393] ? PageHuge+0x19/0x170 [ 507.827138][T14393] kasan_report.cold+0x5/0x37 [ 507.831831][T14393] ? PageHuge+0x19/0x170 [ 507.836086][T14393] check_memory_region+0x13d/0x180 [ 507.841207][T14393] PageHuge+0x19/0x170 [ 507.845291][T14393] find_get_incore_page+0x165/0x2e0 [ 507.850507][T14393] mincore_page+0x1e/0x310 [ 507.854940][T14393] __mincore_unmapped_range+0x171/0x2c0 [ 507.860501][T14393] ? rwlock_bug.part.0+0x90/0x90 [ 507.865482][T14393] mincore_unmapped_range+0x61/0xc0 [ 507.870735][T14393] ? __mincore_unmapped_range+0x2c0/0x2c0 [ 507.876466][T14393] __walk_page_range+0x178e/0x22c0 [ 507.881608][T14393] ? walk_page_test+0x78/0x180 [ 507.886399][T14393] walk_page_range+0x20d/0x400 [ 507.891181][T14393] ? __walk_page_range+0x22c0/0x22c0 [ 507.896486][T14393] ? vmacache_update+0xce/0x140 [ 507.901447][T14393] __do_sys_mincore+0x279/0x7a0 [ 507.906311][T14393] do_syscall_64+0x2d/0x70 [ 507.910759][T14393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.916653][T14393] RIP: 0033:0x45d5f9 [ 507.920552][T14393] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 507.940156][T14393] RSP: 002b:00007f28f52d1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 507.948577][T14393] RAX: ffffffffffffffda RBX: 0000000000020ac0 RCX: 000000000045d5f9 [ 507.956559][T14393] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 507.964534][T14393] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 507.972531][T14393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 507.980511][T14393] R13: 00007ffed84732bf R14: 00007f28f52d29c0 R15: 000000000118cfec [ 507.988613][T14393] ================================================================== [ 507.996668][T14393] Disabling lock debugging due to kernel taint [ 508.022769][T14393] Kernel panic - not syncing: panic_on_warn set ... [ 508.029410][T14393] CPU: 1 PID: 14393 Comm: syz-executor.2 Tainted: G B 5.9.0-rc5-next-20200915-syzkaller #0 [ 508.040669][T14393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.050784][T14393] Call Trace: [ 508.054076][T14393] dump_stack+0x198/0x1fb [ 508.058382][T14393] ? hugetlb_register_node+0x1c0/0x270 [ 508.063812][T14393] panic+0x347/0x7c0 [ 508.067699][T14393] ? __warn_printk+0xf3/0xf3 [ 508.072262][T14393] ? preempt_schedule_common+0x59/0xc0 [ 508.077690][T14393] ? PageHuge+0x19/0x170 [ 508.081906][T14393] ? preempt_schedule_thunk+0x16/0x18 [ 508.087252][T14393] ? trace_hardirqs_on+0x51/0x1c0 [ 508.092248][T14393] ? PageHuge+0x19/0x170 [ 508.096463][T14393] ? PageHuge+0x19/0x170 [ 508.100680][T14393] end_report+0x58/0x5e [ 508.104829][T14393] kasan_report.cold+0xd/0x37 [ 508.109481][T14393] ? PageHuge+0x19/0x170 [ 508.113704][T14393] check_memory_region+0x13d/0x180 [ 508.118795][T14393] PageHuge+0x19/0x170 [ 508.122835][T14393] find_get_incore_page+0x165/0x2e0 [ 508.128020][T14393] mincore_page+0x1e/0x310 [ 508.132410][T14393] __mincore_unmapped_range+0x171/0x2c0 [ 508.137942][T14393] ? rwlock_bug.part.0+0x90/0x90 [ 508.142856][T14393] mincore_unmapped_range+0x61/0xc0 [ 508.148024][T14393] ? __mincore_unmapped_range+0x2c0/0x2c0 [ 508.153743][T14393] __walk_page_range+0x178e/0x22c0 [ 508.158844][T14393] ? walk_page_test+0x78/0x180 [ 508.163583][T14393] walk_page_range+0x20d/0x400 [ 508.168330][T14393] ? __walk_page_range+0x22c0/0x22c0 [ 508.173600][T14393] ? vmacache_update+0xce/0x140 [ 508.178424][T14393] __do_sys_mincore+0x279/0x7a0 [ 508.183248][T14393] do_syscall_64+0x2d/0x70 [ 508.187642][T14393] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 508.193523][T14393] RIP: 0033:0x45d5f9 [ 508.197405][T14393] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 508.216993][T14393] RSP: 002b:00007f28f52d1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 508.225376][T14393] RAX: ffffffffffffffda RBX: 0000000000020ac0 RCX: 000000000045d5f9 [ 508.233332][T14393] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 508.241275][T14393] RBP: 000000000118d020 R08: 0000000000000000 R09: 0000000000000000 [ 508.249231][T14393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 508.257177][T14393] R13: 00007ffed84732bf R14: 00007f28f52d29c0 R15: 000000000118cfec [ 508.266230][T14393] Kernel Offset: disabled [ 508.270554][T14393] Rebooting in 86400 seconds..