[ 36.885325][ T26] audit: type=1800 audit(1555500331.652:28): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.720635][ T26] audit: type=1800 audit(1555500332.582:29): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.742157][ T26] audit: type=1800 audit(1555500332.582:30): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2019/04/17 11:26:02 fuzzer started 2019/04/17 11:26:05 dialing manager at 10.128.0.26:33179 2019/04/17 11:26:05 syscalls: 2285 2019/04/17 11:26:05 code coverage: enabled 2019/04/17 11:26:05 comparison tracing: enabled 2019/04/17 11:26:05 extra coverage: extra coverage is not supported by the kernel 2019/04/17 11:26:05 setuid sandbox: enabled 2019/04/17 11:26:05 namespace sandbox: enabled 2019/04/17 11:26:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/17 11:26:05 fault injection: enabled 2019/04/17 11:26:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/17 11:26:05 net packet injection: enabled 2019/04/17 11:26:05 net device setup: enabled 11:28:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syzkaller login: [ 208.061680][ T7729] IPVS: ftp: loaded support on port[0] = 21 11:28:23 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="175b4b359e9875e6e5f63ce586dd60bb561500442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa042065580000000000000800000086dd88ca88be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) [ 208.210728][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 208.285470][ T7732] IPVS: ftp: loaded support on port[0] = 21 [ 208.321307][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.329959][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.338655][ T7729] device bridge_slave_0 entered promiscuous mode [ 208.359625][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.367716][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.375795][ T7729] device bridge_slave_1 entered promiscuous mode 11:28:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) [ 208.417824][ T7729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.474650][ T7729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.536410][ T7729] team0: Port device team_slave_0 added [ 208.548702][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 208.560353][ T7729] team0: Port device team_slave_1 added 11:28:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4548460100f30700000000000000000300000002000000f80100000000000040000000000000008800000000000000f1d70000000038000200c8000180070057e574640600000000040000000000000800000000000000008000000000007f249d1fd9b484e300ff0700000000"], 0x6e) r1 = dup2(r0, r0) write(r1, &(0x7f00000014c0)="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", 0xe82) [ 208.631653][ T7735] IPVS: ftp: loaded support on port[0] = 21 [ 208.649488][ T7729] device hsr_slave_0 entered promiscuous mode [ 208.697157][ T7729] device hsr_slave_1 entered promiscuous mode [ 208.765814][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.773236][ T7729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.781166][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.788284][ T7729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.838191][ T7738] IPVS: ftp: loaded support on port[0] = 21 [ 208.870506][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.879467][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state 11:28:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) [ 208.887516][ T7732] device bridge_slave_0 entered promiscuous mode [ 208.912334][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.919983][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.930443][ T7732] device bridge_slave_1 entered promiscuous mode [ 209.007312][ T7732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.053411][ T7732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.108105][ T7732] team0: Port device team_slave_0 added [ 209.124988][ T7741] IPVS: ftp: loaded support on port[0] = 21 [ 209.140208][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.149220][ T7732] team0: Port device team_slave_1 added [ 209.238705][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.250540][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.271695][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state 11:28:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x30}, 0x0) [ 209.283592][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 209.308935][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.362385][ T7745] IPVS: ftp: loaded support on port[0] = 21 [ 209.378439][ T7732] device hsr_slave_0 entered promiscuous mode [ 209.407539][ T7732] device hsr_slave_1 entered promiscuous mode [ 209.471059][ T7735] chnl_net:caif_netlink_parms(): no params data found [ 209.565194][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.572720][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.580608][ T7735] device bridge_slave_0 entered promiscuous mode [ 209.588074][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.597528][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.606053][ T2810] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.613325][ T2810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.629902][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 209.664300][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.671459][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.679721][ T7735] device bridge_slave_1 entered promiscuous mode [ 209.707005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.715689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.724438][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.731743][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.740052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.769072][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.778441][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.787065][ T7738] device bridge_slave_0 entered promiscuous mode [ 209.803883][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.811100][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.820377][ T7738] device bridge_slave_1 entered promiscuous mode [ 209.833903][ T7735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.845981][ T7735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.872213][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.880871][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.889882][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.898569][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.908202][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.917105][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.925679][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.934492][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.942938][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.951884][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.965302][ T7738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.987248][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.000168][ T7738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.016055][ T7735] team0: Port device team_slave_0 added [ 210.044231][ T7735] team0: Port device team_slave_1 added [ 210.063333][ T7738] team0: Port device team_slave_0 added [ 210.073613][ T7738] team0: Port device team_slave_1 added [ 210.148171][ T7735] device hsr_slave_0 entered promiscuous mode [ 210.198422][ T7735] device hsr_slave_1 entered promiscuous mode [ 210.340306][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 210.399650][ T7738] device hsr_slave_0 entered promiscuous mode [ 210.438185][ T7738] device hsr_slave_1 entered promiscuous mode [ 210.518300][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.526955][ T7741] chnl_net:caif_netlink_parms(): no params data found [ 210.672801][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.698917][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.711986][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state 11:28:25 executing program 0: [ 210.720556][ T7741] device bridge_slave_0 entered promiscuous mode [ 210.735284][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.742894][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.757143][ T7741] device bridge_slave_1 entered promiscuous mode 11:28:25 executing program 0: 11:28:25 executing program 0: [ 210.813263][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.832633][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.840039][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.850265][ T7745] device bridge_slave_0 entered promiscuous mode 11:28:25 executing program 0: [ 210.899307][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.907943][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.919592][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.936650][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state 11:28:25 executing program 0: [ 210.944757][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.952888][ T7745] device bridge_slave_1 entered promiscuous mode [ 210.964639][ T7741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.977690][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.989910][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 11:28:25 executing program 0: [ 211.007220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.017039][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.024114][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.032483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 11:28:25 executing program 0: [ 211.050559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.059726][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.067022][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.075403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.087624][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.147276][ T7741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.160093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.189986][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.199120][ T7745] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.217212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.226152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.234603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.243572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.252375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.260847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.269187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.277021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.284819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.296356][ T7745] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.323927][ T7745] team0: Port device team_slave_0 added [ 211.337301][ T7741] team0: Port device team_slave_0 added [ 211.346603][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.354954][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.374505][ T7741] team0: Port device team_slave_1 added [ 211.381754][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.391004][ T7745] team0: Port device team_slave_1 added [ 211.400989][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.411151][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.420487][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.428035][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.436590][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.445222][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.465678][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.472914][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.480573][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.488460][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.548669][ T7741] device hsr_slave_0 entered promiscuous mode [ 211.586386][ T7741] device hsr_slave_1 entered promiscuous mode [ 211.629614][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.637272][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.645606][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.689311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.700834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.710064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.718990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.727821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.737048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.745396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.754470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.817695][ T7745] device hsr_slave_0 entered promiscuous mode [ 211.856227][ T7745] device hsr_slave_1 entered promiscuous mode [ 211.940815][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.949966][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.959438][ T2810] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.966571][ T2810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.974171][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.982990][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.991425][ T2810] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.998690][ T2810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.006708][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.015616][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.024250][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.032719][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.043857][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.055131][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.074700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.083960][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.093508][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.102373][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:28:27 executing program 1: [ 212.180890][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.194785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.205186][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.214966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.231944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.247881][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.264692][ T7738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.278080][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.292451][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.307225][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.315545][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.340735][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.361647][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.380583][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 11:28:27 executing program 2: [ 212.397307][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.419155][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.434204][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.442926][ T2810] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.450049][ T2810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.464910][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.473115][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.486488][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.513644][ T7741] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.520888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.532492][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.541436][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.548528][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.556673][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.565101][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.574131][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.582841][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.591423][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.615580][ T7745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.626853][ T7745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.657579][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.675178][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.684078][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:28:27 executing program 3: [ 212.700316][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.731190][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.745954][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.754263][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.763913][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.772503][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.779623][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.787301][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.795750][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.804167][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.811244][ T7739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.819979][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.828477][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.836290][ T7739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.851392][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.872464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.881160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.890890][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.899474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.908456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.930863][ T7741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.941723][ T7741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.955016][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.965084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.980458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.990972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.999750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.009057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.058698][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0 11:28:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) 11:28:28 executing program 0: 11:28:28 executing program 1: 11:28:28 executing program 2: 11:28:28 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:28:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x2, [{}, {}]}, 0x48) 11:28:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0xf3598490818b2457) 11:28:28 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 11:28:28 executing program 0: syz_emit_ethernet(0xb7, &(0x7f0000000180)={@local, @link_local, [], {@ipv4={0x800, {{0xf, 0x4, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@ssrr={0x89, 0x1b, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @local]}, @rr={0x7, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0x1d}, @local]}]}}, @igmp={0x1f, 0x0, 0x0, @multicast1, "844d4313a84e7279a27abe34a9a8c314951ddfeddfff4a53905b639bb814d9fea671ba155fd1365b1cdef63afb39e1bd23ebb7aa4615f5525513406cfa79b09461f3212bc6a0a0936cf3e914ab6269067008ff8fd7013d7757f808fe62d76da5e068fe4db3"}}}}}, 0x0) 11:28:28 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) read(r0, 0x0, 0x0) 11:28:28 executing program 3: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb5eb50eba8de7d4f) 11:28:28 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x20000, 0x0) 11:28:28 executing program 4: perf_event_open(&(0x7f0000000740)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 11:28:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11:28:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)=0x1e9) 11:28:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='rootfs\x00', 0x0, 0x0) 11:28:28 executing program 0: fstat(0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 11:28:28 executing program 2: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x2, 0xc080) [ 213.548204][ T7838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 213.567148][ T7838] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 11:28:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) 11:28:28 executing program 4: timerfd_settime(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) 11:28:28 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) 11:28:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000070000dcecc901000080000095000000009c437e09ca9d07bae188b30b000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 11:28:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r2, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000140)) 11:28:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000280)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/143) 11:28:28 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) 11:28:28 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) chmod(&(0x7f0000000200)='./file0\x00', 0x0) 11:28:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") inotify_add_watch(0xffffffffffffff9c, 0x0, 0x10000000) 11:28:28 executing program 5: r0 = memfd_create(&(0x7f0000000080)='-[\x00', 0x0) lseek(r0, 0x0, 0x4) 11:28:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x10000, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 11:28:28 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11:28:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) 11:28:28 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2020000, 0x0) 11:28:29 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7fff, 0x3, 0x7, 0xfffffffffffffffb, 0x3, 0x1, 0x7ef, 0x8000}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={0x8}, 0x8}) 11:28:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000080)) 11:28:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xcc\x06\x00\x00\x00\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\x00\x00\x00\x00\x00\x00\x00@\xe4\xc9\xeed\x9a7\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x00\b\xf8\x8e\xcc\x9c-\x81!q\xc4\x01bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xb3}H\x9e\x92]\xa1\x9b\xf3\x1e0\xec\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) 11:28:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgrp(0x0) waitid(0x1, r1, 0x0, 0x2, &(0x7f0000000d80)) 11:28:29 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="5002000090780000"], 0x0) 11:28:29 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x20000002, 0x2172, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f00000002c0)="c442752c6161c463f917e400c44289b87afe660f5a4265f3450faea614cdec8f44d9ebc4c2f91c79a6660f62bea4660000a6f30f11247df5041243") 11:28:29 executing program 2: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 11:28:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000000)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$int_in(r0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 11:28:29 executing program 4: syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a9feea8f48fa1f6b107fa0b3a983c1a80250fcc4a6e8d90e0779604fbb801c03e60107b3669a277eea03cf81a6c917f99ab2b7b69ff55b142ead2806dcae85efcb5c4e"], 0x0) 11:28:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") inotify_rm_watch(0xffffffffffffffff, 0x0) 11:28:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) 11:28:29 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='debugfs\x00', 0x8003, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000001400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 11:28:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:28:29 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) truncate(&(0x7f00000008c0)='./file0\x00', 0x0) 11:28:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) 11:28:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000080030000b0010000f0000000b001000000000000b0010000e8020000e8120000e8020000e8020000e802000004000000f276fbb905c4d4edb3e6529e54d24f93093093dde8ea1ac465da992bff7d056467c89abfd68e7d76ca6266991889e2ab0e96ab99d35839a870df66960fe0ec75b407711ba18a21ef146636ae80abd2c9989530afec3dd4bdf2b786fbf1444bbd9176a9c0"], 0x1) 11:28:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2=0xff010000, @in6=@local}}}}, 0xc0}, 0x8}, 0x0) 11:28:29 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 11:28:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") dup3(r1, r0, 0x80000) 11:28:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:28:29 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x0) 11:28:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x8000000011, 0x0, &(0x7f0000000040)) 11:28:29 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) 11:28:29 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:28:29 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 11:28:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) 11:28:29 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file1\x00') 11:28:29 executing program 3: mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000), 0xa) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 11:28:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 11:28:30 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') 11:28:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_create(&(0x7f0000000000), 0x0) write(r1, &(0x7f00000001c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = dup2(r0, r1) fsetxattr$security_smack_transmute(r2, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) 11:28:30 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x9f2}) 11:28:30 executing program 3: pipe(0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) set_tid_address(0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) 11:28:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$cgroup_pid(r0, 0x0, 0x0) 11:28:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) fcntl$getownex(r0, 0x10, 0x0) 11:28:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0) 11:28:30 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd'}, 0x0, &(0x7f0000000180)='f2fs\x00', 0x1, &(0x7f00000001c0)='}locgroupvboxnet0\x12selinux@,!em1&,\x00') 11:28:30 executing program 0: syz_execute_func(&(0x7f00000001c0)="c461e173db54ff8700800000c442719124d66545d24b0866dbe3c4c22508c466f30f7f78000f004f00c40351687c4c160f0f9932") 11:28:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 11:28:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0xdd) 11:28:30 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil) 11:28:30 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='sysfs\x00o\n\x927\xd6\xcb\xb3\xef4]', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 11:28:30 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28c0, 0x0) 11:28:30 executing program 5: 11:28:30 executing program 4: 11:28:30 executing program 2: 11:28:30 executing program 0: 11:28:30 executing program 4: 11:28:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) sendto$inet(r0, &(0x7f00000007c0)='2', 0x1, 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) 11:28:30 executing program 1: 11:28:30 executing program 3: 11:28:30 executing program 2: 11:28:30 executing program 0: 11:28:30 executing program 4: 11:28:30 executing program 3: 11:28:30 executing program 1: 11:28:30 executing program 4: 11:28:30 executing program 2: 11:28:30 executing program 3: 11:28:30 executing program 0: 11:28:31 executing program 5: 11:28:31 executing program 1: 11:28:31 executing program 4: 11:28:31 executing program 2: 11:28:31 executing program 3: 11:28:31 executing program 0: 11:28:31 executing program 1: 11:28:31 executing program 4: 11:28:31 executing program 2: 11:28:31 executing program 3: 11:28:31 executing program 0: 11:28:31 executing program 5: 11:28:31 executing program 3: 11:28:31 executing program 4: 11:28:31 executing program 0: 11:28:31 executing program 1: 11:28:31 executing program 2: 11:28:31 executing program 4: 11:28:31 executing program 3: 11:28:31 executing program 2: 11:28:31 executing program 5: 11:28:31 executing program 0: 11:28:31 executing program 4: 11:28:31 executing program 3: 11:28:31 executing program 1: 11:28:31 executing program 5: 11:28:31 executing program 4: 11:28:31 executing program 2: 11:28:31 executing program 3: 11:28:31 executing program 1: 11:28:31 executing program 0: 11:28:31 executing program 5: 11:28:31 executing program 3: 11:28:31 executing program 2: 11:28:31 executing program 1: 11:28:31 executing program 4: 11:28:31 executing program 0: 11:28:31 executing program 5: 11:28:32 executing program 3: 11:28:32 executing program 2: 11:28:32 executing program 4: 11:28:32 executing program 1: 11:28:32 executing program 0: 11:28:32 executing program 5: 11:28:32 executing program 3: 11:28:32 executing program 5: 11:28:32 executing program 2: 11:28:32 executing program 3: 11:28:32 executing program 4: 11:28:32 executing program 0: 11:28:32 executing program 1: 11:28:32 executing program 5: 11:28:32 executing program 2: 11:28:32 executing program 1: 11:28:32 executing program 3: 11:28:32 executing program 4: 11:28:32 executing program 0: 11:28:32 executing program 5: 11:28:32 executing program 3: 11:28:32 executing program 2: 11:28:32 executing program 4: 11:28:32 executing program 1: 11:28:32 executing program 0: 11:28:32 executing program 5: 11:28:32 executing program 4: 11:28:32 executing program 2: 11:28:32 executing program 3: 11:28:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000540)=[{r3}], 0x1, 0x0, 0x0, 0x0) 11:28:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000180)='T', 0x1, 0x0, 0x0, 0x0) 11:28:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x1}) 11:28:32 executing program 5: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 11:28:32 executing program 4: 11:28:32 executing program 3: 11:28:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x400000032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x28f) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, &(0x7f0000000100)) close(r2) close(r1) 11:28:33 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) symlink(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000440)='./file1\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$BLKGETSIZE64(r1, 0x80081272, 0x0) 11:28:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$cont(0x4, r1, 0x0, 0x0) 11:28:33 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 11:28:33 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 11:28:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) 11:28:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000540)=[{r3}], 0x1, 0x0, 0x0, 0x0) 11:28:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f8", 0x1}], 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 11:28:33 executing program 2: r0 = gettid() write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendto(r1, 0x0, 0x0, 0x24000004, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0xffff, @broadcast}}, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt(r2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) tkill(r0, 0x1000000000016) 11:28:33 executing program 4: socketpair(0x11, 0x3, 0x0, &(0x7f0000000240)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") 11:28:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x1, {0x7fff, 0x0, 0x0, 0xfffffffffffffffc}}) 11:28:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 11:28:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:28:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x2, 0x82}, 0x8) close(r1) 11:28:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 11:28:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000240)={0x8001, 0x0, 0x901}) r5 = add_key(&(0x7f0000000600)='syzkaller\x00', 0x0, &(0x7f0000000780)="a43774df3a40cd99ed2e95e32b0bc88fdc73cf21de9a71d493c0b6749546981ab463fe7231b45f3ed06b62a8c65c3b871038624e60a6728496b05f74bb5bc85ceefb9d955e22e53b33b9eaf0022f95c3c60b4341a0345ba237d00999b79d6d80364ed1c84d5f8e59c2a5538b4ae996152cf6811f287678dac51797d3bfff9316", 0x80, 0xfffffffffffffff8) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000002c0)='/\x00', r5) semget$private(0x0, 0x3, 0x84) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) semctl$GETPID(0x0, 0x0, 0xb, 0x0) readahead(0xffffffffffffffff, 0x5, 0xf83) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') bind$vsock_stream(r4, &(0x7f0000000340), 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$P9_RRENAMEAT(r4, 0x0, 0x0) dup(0xffffffffffffffff) r6 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x5, 0x1c241) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) 11:28:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000007c0)='2', 0x1, 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x0) 11:28:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 11:28:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000540)=[{r3}], 0x1, 0x0, 0x0, 0x0) 11:28:34 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:28:34 executing program 4: 11:28:34 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 11:28:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:28:34 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = dup2(r0, r0) write(r1, &(0x7f00000014c0)="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", 0x2d9) [ 219.545198][ T8353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:28:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cb00000000000000d40adcff000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 11:28:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 11:28:34 executing program 5: 11:28:34 executing program 5: 11:28:34 executing program 2: 11:28:34 executing program 0: 11:28:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000540)=[{r3}], 0x1, 0x0, 0x0, 0x0) 11:28:35 executing program 3: 11:28:35 executing program 4: 11:28:35 executing program 5: 11:28:35 executing program 2: 11:28:35 executing program 0: 11:28:35 executing program 4: 11:28:35 executing program 5: 11:28:35 executing program 3: 11:28:35 executing program 2: 11:28:35 executing program 0: 11:28:35 executing program 4: 11:28:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) 11:28:35 executing program 2: 11:28:35 executing program 5: 11:28:35 executing program 3: 11:28:35 executing program 0: 11:28:35 executing program 4: 11:28:35 executing program 4: 11:28:35 executing program 0: 11:28:35 executing program 3: 11:28:35 executing program 4: 11:28:35 executing program 3: 11:28:35 executing program 2: 11:28:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:28:36 executing program 0: 11:28:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:36 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:36 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000044060000000000000000000000000000000000000000000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000ec8ac71f00000000000800655800000000"], 0x0) 11:28:36 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) 11:28:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 11:28:36 executing program 4: clone(0x3102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) 11:28:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) 11:28:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:36 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 11:28:36 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) 11:28:36 executing program 4: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:28:36 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_emit_ethernet(0x1c6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='/group.stat\x00<#\xfbW*xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15]$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xd1u\x1f>D\xdaC\xc0\xed\x973o8\xd6\xc6z\xde\xa2\x1d\xb4\x90\xc69ry\xe2\x9fNT\xe0\xc8:{++\xa6!\xabL\x00\x83\x1c\xd13\x13+8P\xe7\xa6\xc2\t\x18\xae:2\x9a\xc9\x8e\xe2\xee2E\x84\xb4M-\x14\x81Z\xd8{~\xb5h\xba\x8b\xf5\xb9\x1a5\x05\x83D\xbf\x1c|\x95P\x92^\x1d\xef\x7fDeg\xc5D', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 11:28:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:36 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:36 executing program 4: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 221.930046][ C0] hrtimer: interrupt took 25477 ns 11:28:36 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:37 executing program 3: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x0, 0x0) syz_emit_ethernet(0x1c6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='/group.stat\x00<#\xfbW*xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15]$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xd1u\x1f>D\xdaC\xc0\xed\x973o8\xd6\xc6z\xde\xa2\x1d\xb4\x90\xc69ry\xe2\x9fNT\xe0\xc8:{++\xa6!\xabL\x00\x83\x1c\xd13\x13+8P\xe7\xa6\xc2\t\x18\xae:2\x9a\xc9\x8e\xe2\xee2E\x84\xb4M-\x14\x81Z\xd8{~\xb5h\xba\x8b\xf5\xb9\x1a5\x05\x83D\xbf\x1c|\x95P\x92^\x1d\xef\x7fDeg\xc5D', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 11:28:37 executing program 4: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:28:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) 11:28:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) 11:28:37 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000100)=@raw=[@call], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f}, 0x10}, 0x70) 11:28:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)) 11:28:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x10003d}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 11:28:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(r0, 0x0, 0x2, 0x0) 11:28:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 11:28:37 executing program 3: mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 11:28:37 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1124, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:28:40 executing program 4: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:28:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="fec5c92c3123dd81898160a00ba32fb5", 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x20) 11:28:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:40 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) 11:28:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x0) 11:28:40 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @remote, [], {@mpls_uc={0x8847, {[], @ipv6={0x0, 0x6, "b78f91", 0x28, 0x0, 0x0, @local, @initdev, {[], @tipc=@name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x0) 11:28:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = dup2(r1, r1) sendto(r2, 0x0, 0x0, 0x20000001, 0x0, 0x0) 11:28:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x1}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:28:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) 11:28:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 11:28:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x0, 0x0, 0xa37, 0x1, 0x1}, 0x2c) 11:28:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) [ 225.605891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.611953][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:28:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x0) fcntl$addseals(r0, 0x409, 0x0) [ 225.848523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.854366][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:28:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:40 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:28:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x0) 11:28:40 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 11:28:40 executing program 0: r0 = inotify_init1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) 11:28:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0x0, 0xa37, 0x1, 0x1}, 0x2c) 11:28:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000002780)=[{0x10, 0x1}], 0x10}, 0xa25}], 0x1, 0x4000) 11:28:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10001, 0x5) 11:28:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x200000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045565) 11:28:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3180d070") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:28:41 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) [ 226.274895][ T8653] input: syz1 as /devices/virtual/input/input5 [ 226.379411][ T8653] input: syz1 as /devices/virtual/input/input6 11:28:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30}, 0x30) 11:28:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) 11:28:41 executing program 0: msgget$private(0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000240), 0x0) lseek(r0, 0x0, 0x3) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) 11:28:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x0) 11:28:41 executing program 3: 11:28:41 executing program 4: 11:28:41 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r0, 0x1000000000016) 11:28:41 executing program 0: 11:28:41 executing program 4: 11:28:41 executing program 3: 11:28:41 executing program 0: 11:28:42 executing program 4: 11:28:42 executing program 3: 11:28:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) 11:28:44 executing program 0: 11:28:44 executing program 3: 11:28:44 executing program 4: 11:28:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r1, 0x0) 11:28:44 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r0, 0x1000000000016) 11:28:44 executing program 0: 11:28:44 executing program 4: 11:28:44 executing program 3: 11:28:45 executing program 4: 11:28:45 executing program 0: 11:28:45 executing program 3: 11:28:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r1, 0x1000000000016) 11:28:47 executing program 4: 11:28:47 executing program 0: 11:28:47 executing program 3: 11:28:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) 11:28:48 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r0, 0x1000000000016) 11:28:48 executing program 0: 11:28:48 executing program 3: 11:28:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) 11:28:48 executing program 4: 11:28:48 executing program 0: 11:28:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r1, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x23b, 0x0, 0x0, 0x0, 0xffffffff, &(0x7f0000000040)='erspan0\x00', 0x0, 0x8, 0x3f}) r2 = dup2(r1, r1) sendto(r2, 0x0, 0x0, 0x20000001, 0x0, 0x0) 11:28:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="00800000000000009bd070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 11:28:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x0) 11:28:50 executing program 0: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 11:28:50 executing program 3: syz_execute_func(&(0x7f0000000380)="410f01f964ff0941c3c4e2c997584264420f1f003e46d87312c4a2bbf5baffefffff3e0f1110c442019dcc6f") mknod(&(0x7f0000000100)='./file1\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) clone(0x31020017f5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 11:28:51 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:28:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000002c0)='./file0\x00', 0x0) [ 236.245869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.251680][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:28:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYRES32], 0x3}}, 0x0) 11:28:51 executing program 3: 11:28:51 executing program 3: 11:28:51 executing program 3: 11:28:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:28:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:54 executing program 3: 11:28:54 executing program 4: 11:28:54 executing program 0: 11:28:54 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r2, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000140)) 11:28:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="287474dae6badf3ab85f04000000d2eb", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001980)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1c458765f391bf93f0248dbb5dc1566e5fe7971b2cd088da4f5960512e7f4bc51ee546cf84007100ded65ae7c7b75cb1c14d6efaecc23336c7ccef9b401ba07dfa8a357f1f6421bf71b01420d938f376f6d0351a7c03acabe4ae85ac", 0x5c}], 0x1}], 0x1, 0x0) 11:28:54 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0xdd) 11:28:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:28:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:28:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:28:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:28:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:28:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000900)={@mcast2, @remote, @mcast2, 0x400002, 0x2, 0x7fffffff, 0x100000000000400, 0x84, 0x617}) write$binfmt_elf64(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000a00)="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") r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000280)={r3, 0x4}) socket$inet6(0xa, 0x3, 0x4) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r4, &(0x7f00000000c0)=0x202, 0xdd) 11:28:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:28:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40406300, 0x0, 0x48}], 0x0, 0x0, 0x0}) [ 242.241550][ T8865] binder: 8864:8865 got new transaction with bad transaction stack, transaction 2 has target 8864:0 [ 242.242204][ T8861] binder: BINDER_SET_CONTEXT_MGR already set [ 242.258905][ T8861] binder: 8860:8861 ioctl 40046207 0 returned -16 [ 242.289672][ T8865] binder: 8864:8865 transaction failed 29201/-71, size 0-0 line 3045 [ 242.312444][ T8861] binder: BINDER_SET_CONTEXT_MGR already set [ 242.323311][ T8861] binder: 8860:8861 ioctl 40046207 0 returned -16 [ 242.324110][ T22] binder: release 8864:8865 transaction 2 out, still active 11:28:57 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:28:57 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:28:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) [ 242.360840][ T22] binder: undelivered TRANSACTION_COMPLETE [ 242.371461][ T22] binder: undelivered TRANSACTION_ERROR: 29201 11:28:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f0000000140)) 11:28:57 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 242.401723][ T22] binder: release 8864:8874 transaction 4 out, still active [ 242.423836][ T22] binder: undelivered TRANSACTION_COMPLETE [ 242.434495][ T22] binder: send failed reply for transaction 2, target dead 11:28:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) [ 242.468481][ T22] binder: send failed reply for transaction 4, target dead 11:28:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) 11:28:57 executing program 3: getuid() setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) memfd_create(&(0x7f0000000200)='selinuxvboxnet1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x8003f1) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ffffffff00000000000000000000000000000000000000009ed5678de2ab97a6a99ea9a02608a8797c04f3af7cd7c4519d3a98a6672efccdc4cd9de5297f9d7cbfbc4f2a229a8db809d190239ac1062bc3027b80c7831f87bfabcc74cc9bca0ec13c742f5469b3c41c01dc9e0a8090299a71510dd3a2fd6230232dce5e5eee2caeac28573f7970a627e6bbc767ebee6f44eb555571d143d822440f1681cc9c421c64059379eadb48e4b9e52a3cd3f63493ccb5120b760d8001caa37d2765ab1f0d3338ca7800bd2c62f7495f0d438b23dab3076f626b77bf5fa8966369ec"]) 11:29:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = dup2(r1, r1) write(r2, &(0x7f00000014c0)="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", 0x5b1) 11:29:00 executing program 3: getuid() setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x8003f1) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000ffffffff00000000000000000000000000000000000000009ed5678de2ab97a6a99ea9a02608a8797c04f3af7cd7c4519d3a98a6672efccdc4cd9de5297f9d7cbfbc4f2a229a8db809d190239ac1062bc3027b80c7831f87bfabcc74cc9bca0ec13c742f5469b3c41c01dc9e0a8090299a71510dd3a2fd6230232dce5e5eee2caeac28573f7970a627e6bbc767ebee6f44eb555571d143d822440f1681cc9c421c64059379eadb48e4b9e52a3cd3f63493ccb5120b760d8001caa37d2765ab1f0d3338ca7800bd2c62f7495f0d438b23"]) 11:29:00 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:00 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:29:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) 11:29:00 executing program 0: 11:29:00 executing program 0: 11:29:00 executing program 3: 11:29:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:01 executing program 0: 11:29:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:01 executing program 3: 11:29:01 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:01 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:29:01 executing program 0: 11:29:01 executing program 3: 11:29:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:01 executing program 3: 11:29:01 executing program 0: 11:29:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:01 executing program 0: 11:29:01 executing program 3: 11:29:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:02 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) 11:29:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:29:02 executing program 3: 11:29:02 executing program 0: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x1) clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000000d80)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "b179f2", 0x18, 0x0, 0x0, @dev, @remote, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @remote}}}}}, 0x4a) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x29) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x39}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) exit_group(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 11:29:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbd, 0x0) 11:29:02 executing program 3: 11:29:02 executing program 0: [ 247.195623][ T8997] ptrace attach of "/root/syz-executor.0"[8996] was attempted by "/root/syz-executor.0"[8997] 11:29:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:29:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:02 executing program 0: 11:29:02 executing program 3: 11:29:02 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:29:02 executing program 0: 11:29:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:02 executing program 3: 11:29:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000080), 0x6, 0x0, &(0x7f0000000100)={0x400000000}, 0x0, 0x0) 11:29:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:29:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:03 executing program 3: 11:29:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:03 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) syz_open_pts(r0, 0x0) 11:29:03 executing program 3: 11:29:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11:29:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 11:29:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbc, 0x0) 11:29:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:04 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbc, 0x0) 11:29:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x400) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) sigaltstack(&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0) 11:29:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(0xffffffffffffffff, 0xffffffffbfffbfbc, 0x0) 11:29:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) [ 250.140412][ T26] audit: type=1326 audit(1555500544.992:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x50000 [ 250.168716][ T26] audit: type=1326 audit(1555500545.002:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 250.196099][ T26] audit: type=1326 audit(1555500545.002:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x50000 [ 250.220029][ T26] audit: type=1326 audit(1555500545.002:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x458c29 code=0x50000 [ 250.253283][ T26] audit: type=1326 audit(1555500545.002:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x50000 [ 250.276342][ T26] audit: type=1326 audit(1555500545.002:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 250.298954][ T26] audit: type=1326 audit(1555500545.002:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 250.321297][ T26] audit: type=1326 audit(1555500545.002:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 11:29:05 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:05 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) [ 250.343378][ T26] audit: type=1326 audit(1555500545.002:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 250.365421][ T26] audit: type=1326 audit(1555500545.002:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9114 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 11:29:05 executing program 2: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x204000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xd6, 0x5, 0x9, 0x0, 0x13, 0x80, 0x80, 0x8, 0x6, 0x7, 0x96, 0x80000001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:29:05 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:05 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:05 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:05 executing program 2: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:05 executing program 5: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:05 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:06 executing program 5: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 2: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x18, [@generic="04ac0f"]}]}, 0x1c}}, 0x0) 11:29:06 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:06 executing program 2: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 5: futex(0x0, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:06 executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) 11:29:06 executing program 5: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:06 executing program 2: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 5: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 2: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 5: futex(&(0x7f0000000080), 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:06 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffbfffbfbc, 0x0) 11:29:06 executing program 2: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:07 executing program 5: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:07 executing program 2: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 11:29:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:07 executing program 2: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 5: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:07 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:07 executing program 5: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:07 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 3: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) shutdown(0xffffffffffffffff, 0x0) 11:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) 11:29:08 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:08 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) 11:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:08 executing program 3: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 11:29:08 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffbfffbfbd, 0x0) 11:29:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xff, 0x10000) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4000, 0x0) openat(r4, 0x0, 0x200, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000000)) accept4(r4, &(0x7f0000000380)=@can, &(0x7f0000000280)=0x80, 0x80000) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0000010000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000300)=[@acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r7 = dup2(r0, r5) write$FUSE_IOCTL(r7, &(0x7f0000000040)={0x20, 0x800, 0x7, {0xfffffffffffffffc, 0x0, 0x0, 0x400001}}, 0x20) 11:29:08 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0x0, 0x0) 11:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) [ 253.703384][ T9345] binder: 9344:9345 unknown command 65536 [ 253.716991][ T9345] binder: 9344:9345 ioctl c0306201 20000180 returned -22 [ 253.749363][ T9357] binder: 9344:9357 BC_ACQUIRE_DONE u0000000000000000 no match [ 253.780800][ T9357] binder: 9344:9357 got reply transaction with no transaction stack [ 253.791270][ T9357] binder: 9344:9357 transaction failed 29201/-71, size 0-0 line 2900 11:29:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:08 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0x0, 0x0) 11:29:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:08 executing program 3: semop(0x0, &(0x7f0000000140)=[{0x0, 0x23}], 0x1) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000180)=""/230) semop(0x0, &(0x7f0000000040), 0x46) semctl$IPC_RMID(0x0, 0x0, 0xf) [ 253.880893][ T9357] binder: 9344:9357 unknown command 65536 [ 253.887011][ T9357] binder: 9344:9357 ioctl c0306201 20000180 returned -22 [ 253.915322][ T22] binder: undelivered TRANSACTION_ERROR: 29201 11:29:11 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0x0, 0x0) 11:29:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000580)=""/104, 0x68}, {&(0x7f0000000940)=""/156, 0x9c}], 0x3}, 0x40000000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) getpid() socketpair(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000400000037}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) getgroups(0x1, &(0x7f00000000c0)=[0xee00]) write$P9_RGETATTR(r1, &(0x7f0000000a00)={0xa0, 0x19, 0x1, {0x800, {0x0, 0x4}, 0x106, r2, r3, 0x7dd2, 0x3f, 0x1f, 0x3199fc14, 0xfffffffffffffffe, 0x3, 0x3, 0x0, 0x1, 0x80000000, 0x44, 0xe9, 0x9, 0x9, 0x8}}, 0xa0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x800, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4000) setgroups(0x9, &(0x7f0000000200)=[r3, r3, r3, r3, r3, r3, r3, r3, r3]) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000300)=@isdn={0x22, 0x1, 0x9, 0x6, 0x8}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="93ade544a47528941615a6f10af480a3badc94788999c272e3f98462c558b0e130894be87f4bbba3db3f84540189d83aad4334253448be", 0x37}], 0x1}, 0x10) socketpair(0x1, 0x20000000000001, 0x6000000000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000e00)='lo\x00\x96o\xd6Q\xb9Y\xb4dJ,\x00\xd2\x97\x04\x03\xdc\r\x0f\xc3\xfc\xd8\xe3!\xf1\x15hlA\b\x9f\xc7\x97\x03>=qH\xfd+\xa7|\x04oO\xcf\xc4\xa2\xdc\x02\x1f\xbc=\x1c\x04\x9b\xcd\xd1\xd8J\xd4D?\xf1\xa8\xa3\xf4\xae\xd2\x91+\xb7\xe1\xa81\xabk\xa5\xe1\xdew//j\xccz\x11Kv\x83\xc2tV\xca\xce(J\xf3\'\xf0k\xa2\x1dS\xf6^\xcdz*z\x05b\x0f*\xcb\xaf!R\xbd\xb9\xcb\xd6G\xd2N\x8aY\xbdu\xc8\x86\xde\xdduh\xb5Vd1\x01;\xcc\xd294E(\xc3\x863\x18\x82\x1dJM\xd5\xa3\xee\x8a\x9a[\xb2\xf6\xab\xb6\b\x95\xb8\xba\xc5?0Q8\x7fO\v\'\b\xde\xe2 \xd72\xbc\x1f\xde\x9e\xd6\xc1\xa3\xccW\xd4\xf1\xc0\x81\x0e\xc2\xa8\xa66Yt|\x97\x13k\xcc\x02\xc7\xa5\x17e:w\x1aW\x90\xd7x\xcb\xb2\xf4I\ttg\xb7\x99:WH\'\x10\x19\xa8\xf77\xc0\xd6\x92&Z\xf6\x1a\x17\xab') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') setgroups(0x1, &(0x7f0000000140)=[r3]) 11:29:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:11 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) [ 256.685502][ T9398] FAULT_INJECTION: forcing a failure. [ 256.685502][ T9398] name failslab, interval 1, probability 0, space 0, times 1 [ 256.719320][ T9398] CPU: 1 PID: 9398 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #73 [ 256.727261][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.737332][ T9398] Call Trace: [ 256.740802][ T9398] dump_stack+0x172/0x1f0 [ 256.745223][ T9398] should_fail.cold+0xa/0x15 [ 256.749849][ T9398] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 256.755770][ T9398] ? ___might_sleep+0x163/0x280 [ 256.765726][ T9398] __should_failslab+0x121/0x190 [ 256.770755][ T9398] should_failslab+0x9/0x14 [ 256.775512][ T9398] __kmalloc+0x2dc/0x740 [ 256.779863][ T9398] ? __lock_acquire+0x548/0x3fb0 [ 256.784879][ T9398] ? drm_ioctl+0x45c/0xa50 [ 256.789321][ T9398] drm_ioctl+0x45c/0xa50 [ 256.793671][ T9398] ? drm_mode_getblob_ioctl+0x2c0/0x2c0 [ 256.799259][ T9398] ? drm_version+0x3d0/0x3d0 [ 256.803930][ T9398] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 256.809832][ T9398] ? __fget+0x35a/0x550 [ 256.814017][ T9398] ? drm_version+0x3d0/0x3d0 [ 256.818685][ T9398] do_vfs_ioctl+0xd6e/0x1390 [ 256.823814][ T9398] ? ioctl_preallocate+0x210/0x210 [ 256.828951][ T9398] ? __fget+0x381/0x550 [ 256.833150][ T9398] ? ksys_dup3+0x3e0/0x3e0 [ 256.837665][ T9398] ? tomoyo_file_ioctl+0x23/0x30 [ 256.842683][ T9398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.849021][ T9398] ? security_file_ioctl+0x93/0xc0 [ 256.854161][ T9398] ksys_ioctl+0xab/0xd0 [ 256.858346][ T9398] __x64_sys_ioctl+0x73/0xb0 [ 256.863013][ T9398] do_syscall_64+0x103/0x610 [ 256.867693][ T9398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.873605][ T9398] RIP: 0033:0x458c29 [ 256.877526][ T9398] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.897144][ T9398] RSP: 002b:00007f69c002fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.905656][ T9398] RAX: ffffffffffffffda RBX: 00007f69c002fc90 RCX: 0000000000458c29 [ 256.913645][ T9398] RDX: 0000000000000000 RSI: ffffffffbfffbfbd RDI: 0000000000000004 [ 256.921632][ T9398] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:29:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) [ 256.930083][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69c00306d4 [ 256.938072][ T9398] R13: 00000000004bfe5a R14: 00000000004d21b0 R15: 0000000000000005 11:29:11 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x7fe, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x80) pipe2$9p(&(0x7f0000000180), 0x4800) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001200)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c744240000010000c7442402f7e33256ff2c240f3806f1c4c1fe6faf8000c0fe0f01c82666460f38821d01c87715440f01cf66bad004ed66440f3831b50000000066ba4300b00aeedd8a0d000000", 0x4e}], 0x1, 0x4c, &(0x7f00000002c0)=[@dstype3], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=""/129, 0x81) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000001c0)={0x1, 0x100, 0x7, {0x0, 0xffffffff80000000, 0x101, 0x401}}) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000100)='/dev/null\x00', &(0x7f00000003c0), &(0x7f0000000400)='/proc/capi/capi20ncci\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='.\x00', &(0x7f00000004c0)='posix_acl_accesssecurity\x00', &(0x7f0000000500)='/dev/null\x00'], &(0x7f0000000700)=[&(0x7f0000000580)=':\x00', &(0x7f0000000600)='/proc/capi/capi20ncci\x00', &(0x7f0000000640)='keyringmime_type-GPLppp1(em0selinux:^\x00', &(0x7f0000000680)='[\xc2system\x00', &(0x7f00000006c0)='[bdevem1wlan0vboxnet1]:!trustedbdevvmnet0@\x00'], 0x1000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:29:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:11 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:14 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbd, 0x0) 11:29:14 executing program 3: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) fstatfs(r0, &(0x7f0000000080)=""/52) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4000c0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x81, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r3, r4) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000300)={0x0, @reserved}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3, 0x2}}, 0x30) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x400, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0x9, 0x0) getsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000500)={0x1, 0x0, {0x3ff, 0x7fffffff, 0x2, 0x7}}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000540)={0x80000001, 0x1, 0x1, "3b3d36a13abd03e3fd04d6e2ac78f3abb3fc150230965bcdfc7e11222eb333088ccfbee4d99974aae912940e1e905ed22385681c65eaecc30d6c0af5", 0x1d, "364b605607074fa23d6ad869fdb4c92a7fef463c3be7c252c102d1ab3f0bc72477b2467f5147a63907fdad703e1b1823f26231ce3461d7a04d6d7007", 0x80}) r6 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x10000, 0x8000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000640)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000680)={{0x772, 0x7}, 'port0\x00', 0x40, 0x1, 0x3, 0x3, 0x0, 0x0, 0x3a67, 0x0, 0x0, 0x8000}) keyctl$link(0x8, r3, r3) openat$cgroup_subtree(r5, &(0x7f0000000740)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000780)={0x8, {0x7d8c2875, 0x6, 0xa8, 0x4, 0x7, 0x5}}) sendto$rxrpc(r1, &(0x7f00000007c0)="e3020c80ffd1fc35d94f479142e5c815df9859fefe49ea75da952f892ca1ef929ab95d8e926c5caa518d6f582ac38714ca8300d643f29d982fb4366c5518fe4daaf8e8f9289927ce8fa39e363297dda802c858d80402dea61d148ac54dd03cbc801d95e5061e1e558be4c15094b5cf02892c33949c0ba5", 0x77, 0x4008080, &(0x7f0000000840)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000900)={0x6, 0x1, {0xffffffffffffffff, 0x3, 0x49efbc2, 0x2, 0xfffffffffffffff7}}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x700000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000980)={0xfffffffffffffffb, 0x3, 0x400, 0x401, [], [], [], 0x10000, 0x8, 0x200, 0x397, "7add5341889a2cb4cc485fc688e2fb1a"}) write$binfmt_aout(r0, &(0x7f0000000ac0)={{0x1cf, 0x10001, 0x2, 0x126, 0x184, 0x8, 0x31b, 0x3}, "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"}, 0x1020) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001b80)={0x0, 0x5, 0x1}, &(0x7f0000001bc0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001c00)={r7, 0x9, 0x30, 0x5, 0x26f}, &(0x7f0000001c40)=0x18) 11:29:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:14 executing program 3: r0 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, 0x0, 0x0) io_uring_enter(r0, 0xdd93, 0x0, 0x3, &(0x7f0000000000)={0x9d}, 0x8) 11:29:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffff00000002, 0x0) 11:29:14 executing program 5: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffff00005421, 0x0) 11:29:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:17 executing program 2: futex(&(0x7f0000000080)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffff00005450, 0x0) 11:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) syz_open_pts(r1, 0x0) 11:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffbfffbfbc, 0x0) 11:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffff00005451, 0x0) [ 422.965984][ T1041] INFO: task syz-executor.3:9440 blocked for more than 143 seconds. [ 422.974318][ T1041] Not tainted 5.1.0-rc5+ #73 [ 422.979675][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.988399][ T1041] syz-executor.3 D29480 9440 7738 0x00000004 [ 422.994719][ T1041] Call Trace: [ 422.998106][ T1041] __schedule+0x813/0x1cc0 [ 423.002548][ T1041] ? lock_downgrade+0x880/0x880 [ 423.007477][ T1041] ? __sched_text_start+0x8/0x8 [ 423.012341][ T1041] ? __lock_acquire+0x548/0x3fb0 [ 423.017338][ T1041] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.023165][ T1041] schedule+0x92/0x180 [ 423.027313][ T1041] schedule_timeout+0x8ca/0xfd0 [ 423.032161][ T1041] ? wait_for_completion+0x294/0x440 [ 423.037553][ T1041] ? find_held_lock+0x35/0x130 [ 423.042322][ T1041] ? usleep_range+0x170/0x170 [ 423.047068][ T1041] ? mark_held_locks+0xa4/0xf0 [ 423.051839][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 423.057112][ T1041] ? wait_for_completion+0x294/0x440 [ 423.062398][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 423.067659][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.079650][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 423.084678][ T1041] ? kasan_check_read+0x11/0x20 [ 423.089635][ T1041] wait_for_completion+0x29c/0x440 [ 423.094770][ T1041] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 423.101344][ T1041] ? wake_up_q+0xf0/0xf0 [ 423.105600][ T1041] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.111562][ T1041] ? percpu_ref_kill_and_confirm+0x1b7/0x3b0 [ 423.117652][ T1041] __io_uring_register+0xb6/0x1fd0 [ 423.122770][ T1041] ? __mutex_lock+0x3cd/0x1310 [ 423.127638][ T1041] ? __x64_sys_io_uring_register+0x182/0x1f0 [ 423.133643][ T1041] ? io_sq_wq_submit_work+0x10f0/0x10f0 [ 423.139259][ T1041] __x64_sys_io_uring_register+0x193/0x1f0 [ 423.145121][ T1041] do_syscall_64+0x103/0x610 [ 423.149861][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.155817][ T1041] RIP: 0033:0x458c29 [ 423.159870][ T1041] Code: cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 df 00 00 00 48 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 48 8b 42 08 48 8b 48 70 <48> 89 4c 24 20 48 8b 10 48 89 54 24 18 48 8b 40 08 48 89 44 24 10 [ 423.179655][ T1041] RSP: 002b:00007fa97e855c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 423.188122][ T1041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 423.196297][ T1041] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 423.204385][ T1041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.213238][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa97e8566d4 [ 423.221416][ T1041] R13: 00000000004cb698 R14: 00000000004d2138 R15: 00000000ffffffff [ 423.229479][ T1041] INFO: task syz-executor.3:9447 blocked for more than 143 seconds. [ 423.237531][ T1041] Not tainted 5.1.0-rc5+ #73 [ 423.242644][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.251364][ T1041] syz-executor.3 D30032 9447 7738 0x00000004 [ 423.257756][ T1041] Call Trace: [ 423.261089][ T1041] __schedule+0x813/0x1cc0 [ 423.265502][ T1041] ? __mutex_lock+0x721/0x1310 [ 423.270335][ T1041] ? __sched_text_start+0x8/0x8 [ 423.275208][ T1041] schedule+0x92/0x180 [ 423.279357][ T1041] schedule_preempt_disabled+0x13/0x20 [ 423.284831][ T1041] __mutex_lock+0x726/0x1310 [ 423.289483][ T1041] ? __x64_sys_io_uring_enter+0x67f/0xac0 [ 423.295233][ T1041] ? mutex_trylock+0x1e0/0x1e0 [ 423.300100][ T1041] ? __x64_sys_io_uring_enter+0x35a/0xac0 [ 423.305900][ T1041] ? lock_downgrade+0x880/0x880 [ 423.310778][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.317491][ T1041] mutex_lock_nested+0x16/0x20 [ 423.322273][ T1041] ? mutex_lock_nested+0x16/0x20 [ 423.327290][ T1041] __x64_sys_io_uring_enter+0x67f/0xac0 [ 423.332862][ T1041] ? __io_uring_register+0x1fd0/0x1fd0 [ 423.339217][ T1041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.344699][ T1041] ? do_syscall_64+0x26/0x610 [ 423.349448][ T1041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.355536][ T1041] ? do_syscall_64+0x26/0x610 [ 423.360394][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.365713][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 423.370887][ T1041] do_syscall_64+0x103/0x610 [ 423.375497][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.381549][ T1041] RIP: 0033:0x458c29 [ 423.385459][ T1041] Code: cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 df 00 00 00 48 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 48 8b 42 08 48 8b 48 70 <48> 89 4c 24 20 48 8b 10 48 89 54 24 18 48 8b 40 08 48 89 44 24 10 [ 423.405159][ T1041] RSP: 002b:00007fa97e834c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 423.413752][ T1041] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458c29 [ 423.421850][ T1041] RDX: 0000000000000000 RSI: 000000000000dd93 RDI: 0000000000000003 [ 423.429883][ T1041] RBP: 000000000073bfa0 R08: 0000000020000000 R09: 0000000000000008 [ 423.437953][ T1041] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fa97e8356d4 [ 423.446529][ T1041] R13: 00000000004bfe3c R14: 00000000004d2120 R15: 00000000ffffffff [ 423.454558][ T1041] [ 423.454558][ T1041] Showing all locks held in the system: [ 423.462393][ T1041] 1 lock held by khungtaskd/1041: [ 423.468296][ T1041] #0: 0000000026489706 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 423.477840][ T1041] 2 locks held by rsyslogd/7581: [ 423.482781][ T1041] #0: 000000009746f5f0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 423.491811][ T1041] #1: 0000000061ea6ba1 (logbuf_lock){-.-.}, at: is_bpf_text_address+0x0/0x170 [ 423.501043][ T1041] 2 locks held by getty/7693: [ 423.505701][ T1041] #0: 00000000ee2eae9c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.514731][ T1041] #1: 00000000572490d8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.524453][ T1041] 2 locks held by getty/7694: [ 423.529313][ T1041] #0: 0000000063debf41 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.538355][ T1041] #1: 000000003517f326 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.548049][ T1041] 2 locks held by getty/7695: [ 423.552722][ T1041] #0: 00000000d852a174 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.561919][ T1041] #1: 00000000f27f2ed6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.571547][ T1041] 2 locks held by getty/7696: [ 423.576293][ T1041] #0: 00000000087fbaa8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.585243][ T1041] #1: 00000000f26179c1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.594863][ T1041] 2 locks held by getty/7697: [ 423.600014][ T1041] #0: 00000000276b52fb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.609044][ T1041] #1: 0000000002d11789 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.618645][ T1041] 2 locks held by getty/7698: [ 423.623306][ T1041] #0: 000000003f6d5d40 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.632307][ T1041] #1: 000000007bf141e6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.641953][ T1041] 2 locks held by getty/7699: [ 423.646667][ T1041] #0: 00000000a2948aae (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 423.655632][ T1041] #1: 00000000dccb4e29 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 423.665323][ T1041] 1 lock held by syz-executor.3/9440: [ 423.670747][ T1041] #0: 000000009aa6330a (&ctx->uring_lock){+.+.}, at: __x64_sys_io_uring_register+0x182/0x1f0 [ 423.681161][ T1041] 1 lock held by syz-executor.3/9447: [ 423.686668][ T1041] #0: 000000009aa6330a (&ctx->uring_lock){+.+.}, at: __x64_sys_io_uring_enter+0x67f/0xac0 [ 423.696791][ T1041] [ 423.699119][ T1041] ============================================= [ 423.699119][ T1041] [ 423.707581][ T1041] NMI backtrace for cpu 0 [ 423.711909][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc5+ #73 [ 423.719430][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.729470][ T1041] Call Trace: [ 423.732767][ T1041] dump_stack+0x172/0x1f0 [ 423.737085][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 423.742439][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 423.748080][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 423.754135][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 423.760017][ T1041] watchdog+0x9b7/0xec0 [ 423.764211][ T1041] kthread+0x357/0x430 [ 423.768351][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 423.774012][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 423.780252][ T1041] ret_from_fork+0x3a/0x50 [ 423.784863][ T1041] Sending NMI from CPU 0 to CPUs 1: [ 423.790527][ C1] NMI backtrace for cpu 1 [ 423.790533][ C1] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.1.0-rc5+ #73 [ 423.790540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.790544][ C1] Workqueue: bat_events batadv_nc_worker [ 423.790551][ C1] RIP: 0010:__rcu_read_unlock+0xa8/0x130 [ 423.790563][ C1] Code: 81 00 00 00 c7 83 70 03 00 00 01 00 00 80 48 8d bb 74 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 57 8b 83 74 03 00 [ 423.790567][ C1] RSP: 0018:ffff8880aa25fcc0 EFLAGS: 00000a07 [ 423.790575][ C1] RAX: dffffc0000000000 RBX: ffff8880aa2521c0 RCX: ffffffff86f44331 [ 423.790580][ C1] RDX: 0000000000000000 RSI: ffffffff86f4409f RDI: ffff8880aa252534 [ 423.790586][ C1] RBP: ffff8880aa25fcd0 R08: ffff8880aa2521c0 R09: ffffed1015d25bc8 [ 423.790591][ C1] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: ffff8880aa252530 [ 423.790596][ C1] R13: 0000000000000088 R14: 0000000000000001 R15: dffffc0000000000 [ 423.790602][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 423.790607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.790612][ C1] CR2: ffffffffff600400 CR3: 0000000096c12000 CR4: 00000000001406e0 [ 423.790617][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.790623][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.790625][ C1] Call Trace: [ 423.790629][ C1] batadv_nc_worker+0x208/0x760 [ 423.790633][ C1] process_one_work+0x98e/0x1790 [ 423.790637][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 423.790641][ C1] ? lock_acquire+0x16f/0x3f0 [ 423.790644][ C1] worker_thread+0x98/0xe40 [ 423.790654][ C1] kthread+0x357/0x430 [ 423.790658][ C1] ? process_one_work+0x1790/0x1790 [ 423.790663][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 423.790666][ C1] ret_from_fork+0x3a/0x50 [ 423.791879][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 423.983210][ T1041] CPU: 0 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc5+ #73 [ 423.990744][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.000788][ T1041] Call Trace: [ 424.004234][ T1041] dump_stack+0x172/0x1f0 [ 424.008643][ T1041] panic+0x2cb/0x65c [ 424.012533][ T1041] ? __warn_printk+0xf3/0xf3 [ 424.017193][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 424.022878][ T1041] ? ___preempt_schedule+0x16/0x18 [ 424.027996][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 424.034140][ T1041] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 424.040333][ T1041] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 424.046533][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 424.052802][ T1041] watchdog+0x9c8/0xec0 [ 424.056953][ T1041] kthread+0x357/0x430 [ 424.061008][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 424.066540][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 424.072828][ T1041] ret_from_fork+0x3a/0x50 [ 424.078114][ T1041] Kernel Offset: disabled [ 424.082447][ T1041] Rebooting in 86400 seconds..