Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 43.070967] random: sshd: uninitialized urandom read (32 bytes read) 2019/05/01 11:38:43 fuzzer started [ 43.265939] audit: type=1400 audit(1556710723.651:36): avc: denied { map } for pid=6994 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.023996] random: cc1: uninitialized urandom read (8 bytes read) 2019/05/01 11:38:46 dialing manager at 10.128.0.105:41179 2019/05/01 11:38:46 syscalls: 2434 2019/05/01 11:38:46 code coverage: enabled 2019/05/01 11:38:46 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/05/01 11:38:46 extra coverage: extra coverage is not supported by the kernel 2019/05/01 11:38:46 setuid sandbox: enabled 2019/05/01 11:38:46 namespace sandbox: enabled 2019/05/01 11:38:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/01 11:38:46 fault injection: enabled 2019/05/01 11:38:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/01 11:38:46 net packet injection: enabled 2019/05/01 11:38:46 net device setup: enabled [ 47.828039] random: crng init done 11:41:16 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(0x0, r1, 0x0, r0, 0x1) clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0xc0ef75125390657d) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="4f0000007d0200000048000001090000000200000000020000000200000000000418d134f91b467ed37ba050020000000000000000000000010000000000070066696c74657200070066696c74657200070066697474657200"], 0x59) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 11:41:16 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/138, 0x8a}, {0x0}], 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 11:41:16 executing program 3: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000001) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:41:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:16 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = perf_event_open(0x0, r1, 0x0, r0, 0x1) clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") creat(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0xc0ef75125390657d) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x101, 0xc9, 0x2, 0x5}) r4 = gettid() exit_group(0x0) ptrace(0x4206, r4) wait4(0x0, 0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) write$P9_RSTAT(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="4f0000007d0200000048000001090000000200000000020000000200000000000418d134f91b467ed37ba050020000000000000000000000010000000000070066696c74657200070066696c74657200070066697474657200"], 0x59) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x2) msgsnd(0x0, &(0x7f0000000140)={0x3, "d99b16835a4c4db33974b36013dcc40703e5f3329990209bdc1c853e7d08f9dfbad8ebc3620beff58d632d4f21961173a93bb4ceab28427448819395846141f63ac6e76489"}, 0x49, 0x800) 11:41:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) write(r1, &(0x7f0000000140), 0x28d) [ 195.954878] audit: type=1400 audit(1556710876.341:37): avc: denied { map } for pid=6994 comm="syz-fuzzer" path="/root/syzkaller-shm597320766" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 196.001676] audit: type=1400 audit(1556710876.371:38): avc: denied { map } for pid=7012 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13793 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 196.950165] IPVS: ftp: loaded support on port[0] = 21 [ 197.264426] chnl_net:caif_netlink_parms(): no params data found [ 197.273143] IPVS: ftp: loaded support on port[0] = 21 [ 197.326407] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.333351] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.340404] device bridge_slave_0 entered promiscuous mode [ 197.349141] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.355555] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.362595] device bridge_slave_1 entered promiscuous mode [ 197.376532] IPVS: ftp: loaded support on port[0] = 21 [ 197.389670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.402934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.432655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.439777] team0: Port device team_slave_0 added [ 197.451083] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.458076] team0: Port device team_slave_1 added [ 197.463535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.473661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.552251] device hsr_slave_0 entered promiscuous mode [ 197.610310] device hsr_slave_1 entered promiscuous mode [ 197.650566] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.660395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.714729] chnl_net:caif_netlink_parms(): no params data found [ 197.739436] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.745920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.752665] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.758991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.821435] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.827855] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.834704] IPVS: ftp: loaded support on port[0] = 21 [ 197.836709] device bridge_slave_0 entered promiscuous mode [ 197.861725] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.868120] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.875164] device bridge_slave_1 entered promiscuous mode [ 197.890971] chnl_net:caif_netlink_parms(): no params data found [ 197.931917] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.945060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.992997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.000129] team0: Port device team_slave_0 added [ 198.016210] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.023372] IPVS: ftp: loaded support on port[0] = 21 [ 198.023403] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.036012] device bridge_slave_0 entered promiscuous mode [ 198.043454] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.051547] team0: Port device team_slave_1 added [ 198.060427] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.066779] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.074150] device bridge_slave_1 entered promiscuous mode [ 198.081114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.107189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.124280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.158390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.216012] IPVS: ftp: loaded support on port[0] = 21 [ 198.273138] device hsr_slave_0 entered promiscuous mode [ 198.310766] device hsr_slave_1 entered promiscuous mode [ 198.352060] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 198.358515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.365022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.372683] team0: Port device team_slave_0 added [ 198.378388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.385547] team0: Port device team_slave_1 added [ 198.401794] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.418903] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.426207] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 198.435796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.443033] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.452890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.476436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.498791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.505142] chnl_net:caif_netlink_parms(): no params data found [ 198.603717] device hsr_slave_0 entered promiscuous mode [ 198.640322] device hsr_slave_1 entered promiscuous mode [ 198.699024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.708330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.744078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.752724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.761661] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.767729] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.775940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.802375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.808735] chnl_net:caif_netlink_parms(): no params data found [ 198.837206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.847021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.865779] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.875838] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.882816] device bridge_slave_0 entered promiscuous mode [ 198.889129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.897523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.905297] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.911679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.918403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.926841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.934474] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.940862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.951906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.960511] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.968209] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.974918] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.982359] device bridge_slave_1 entered promiscuous mode [ 198.995462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.004678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.037740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.052054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.073340] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.083727] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.098618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.106738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.114385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.127807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.136764] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.143532] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.150655] device bridge_slave_0 entered promiscuous mode [ 199.157377] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.163820] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.172831] device bridge_slave_1 entered promiscuous mode [ 199.208695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.217359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.227135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.240347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.247616] team0: Port device team_slave_0 added [ 199.272543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.279920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.294267] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.302726] team0: Port device team_slave_1 added [ 199.308655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.323880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.334683] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.344639] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.354677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.362175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.369634] chnl_net:caif_netlink_parms(): no params data found [ 199.378710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.395339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.402115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.443418] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.452685] team0: Port device team_slave_0 added [ 199.459352] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.467176] team0: Port device team_slave_1 added [ 199.472762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.485621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.532125] device hsr_slave_0 entered promiscuous mode [ 199.570246] device hsr_slave_1 entered promiscuous mode [ 199.610740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 199.618668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 199.642092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.712043] device hsr_slave_0 entered promiscuous mode [ 199.750305] device hsr_slave_1 entered promiscuous mode [ 199.790756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 199.797859] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 199.807156] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.828630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.837778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.844910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.870566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.878784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.894804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.903649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.921786] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.929100] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.936361] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.943405] device bridge_slave_0 entered promiscuous mode [ 199.952269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.966282] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.982360] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.988432] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.995670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.002765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.009593] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.017395] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.024886] device bridge_slave_1 entered promiscuous mode [ 200.052862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.067709] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 200.074496] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.106913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.113109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.121964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.129500] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.135879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.145288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 11:41:20 executing program 5: syz_execute_func(&(0x7f0000000040)="982c0a0f050520d0f80791b04c4141e2e996855b66c4237909a200800000e666f66d220fa0e5be34d1c4e1f8c421fc22ebc462399c40fe00006eba0dfe8c738888a1c40fbbc4e201acac10000000808f294001b00b0000000f71d539f08171a38a806ebb57c46291ae8ca065600000c4618de3c0646464440f622a2d9600000000cadcdc1d440f2b550142c4b6593131b15dfba1c9fb11620f3804830a000000") r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000100)={0x0, 0x10000, [0x7, 0x8, 0x0, 0x2], 0x1aa3}) fchown(r0, r1, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) [ 200.154622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.164913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.164957] hrtimer: interrupt took 26560 ns [ 200.177464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.188090] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.194895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.210583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.218348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.226085] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.226186] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.242472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.250251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 11:41:20 executing program 5: open(&(0x7f0000000080)='./bus\x00', 0x47b, 0x400000002) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:pam_var_run_t:s0\x00', 0xff83, 0x0) [ 200.258013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.265619] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.272009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.279167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.293864] 8021q: adding VLAN 0 to HW filter on device bond0 11:41:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000180)={0x8021, 0x2}) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), &(0x7f00000012c0)=0x4) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001240)="f43ed03e5f75624075e57b0f678452a21b75929bc507b7e8d8639a45dafdbb15778d87f9f6bfd27c0f1b9d66f7996dcdb126321fa79b76fbff747324de74b8c63b78b5fdd9a6104d5e3f6445cab66368d947b759ca41bf2a4a92f47e1425c0e7d4", 0x61, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x2000120) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 200.305265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.316740] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 200.326468] audit: type=1400 audit(1556710880.701:39): avc: denied { mac_admin } for pid=7057 comm="syz-executor.5" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 200.369542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.386663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.395912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.405073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.416313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.423827] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.431407] team0: Port device team_slave_0 added [ 200.437686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.445706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.453859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.461983] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.468329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.475797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.486574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.497241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.505347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.513984] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 11:41:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) [ 200.522110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.529216] team0: Port device team_slave_1 added [ 200.534458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.542575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.550602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.557494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.568920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.580583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.587527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.600725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.615043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.623825] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 200.629893] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.639728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.647860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.655460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.662500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.670531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.677995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.685733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.693383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.701207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.708653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.718652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.728374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.735608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.745706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.754510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.762443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.770191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.777751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.785311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.793121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.800801] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.807137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.814378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.822726] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 200.828790] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.838447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.861277] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.867293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:41:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) [ 200.882571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.891865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.907508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.955111] device hsr_slave_0 entered promiscuous mode [ 201.000327] device hsr_slave_1 entered promiscuous mode [ 201.043008] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 201.051131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.063445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 201.070522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.078699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.091599] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.098215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.105557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.113589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.121438] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.127761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.134633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 11:41:21 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80803, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2}) socket$inet_udplite(0x2, 0x2, 0x88) [ 201.142025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.151867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 201.162079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.174210] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.181187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 201.188929] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.206780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.217894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.225573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.234411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.242423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.249930] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.256318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.265584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.278961] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 201.286740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.324059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.333298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.344652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.356706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 201.363996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.371013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.378490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.386024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.394413] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.403369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.410797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 201.419955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 201.444555] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.453273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.469131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.476864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.484929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.496919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.504471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.514505] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 201.521258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.532414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.540303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.547942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.561775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.573861] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.581931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.594005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.601495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.609059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.636166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.646296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 201.659497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.669697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.686757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.698947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 201.714836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.723262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.732684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.742603] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.756430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.764467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.779328] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 201.786290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.794930] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 201.811651] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.836344] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.836650] binder: 7100:7103 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 201.850233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.866248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.869434] binder: 7100:7106 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:22 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80803, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2}) socket$inet_udplite(0x2, 0x2, 0x88) [ 201.873976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.895786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.907116] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.913522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.921782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.929529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.937311] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.943712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.950889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.969113] 8021q: adding VLAN 0 to HW filter on device batadv0 11:41:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004c80)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1}}, 0x0) [ 202.009593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.038902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.058137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.078721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.136345] audit: type=1804 audit(1556710882.521:40): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir848390670/syzkaller.8Q45KO/0/file0" dev="sda1" ino=16531 res=1 [ 202.202250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.214480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.223882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.232263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.242128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.251496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 202.258904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.267031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.274784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.282565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.308503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 202.324295] audit: type=1400 audit(1556710882.711:41): avc: denied { create } for pid=7135 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 202.353079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.357057] audit: type=1400 audit(1556710882.711:42): avc: denied { write } for pid=7135 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 202.364426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 11:41:22 executing program 3: 11:41:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:22 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x8, 0x17, 0x100000000, 0x189b, "6fd8ca47fbc144c1097fc539c245ea07a95d0663c6da6eb3f5dc39342256a219"}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2, 0x400}, 0x1c) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000ac0)=""/219) ioctl$VT_OPENQRY(r3, 0x5600, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x40011) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0xd4) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, 0x0) write$binfmt_misc(r3, &(0x7f00000006c0)=ANY=[], 0x0) write$P9_RFLUSH(r3, &(0x7f0000000680)={0x7}, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) [ 202.388864] audit: type=1400 audit(1556710882.751:43): avc: denied { read } for pid=7135 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 202.415517] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 202.426773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.481270] binder: 7141:7146 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 202.486708] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 202.520637] 8021q: adding VLAN 0 to HW filter on device batadv0 11:41:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11:41:23 executing program 2: 11:41:23 executing program 0: 11:41:23 executing program 3: 11:41:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 11:41:23 executing program 0: 11:41:23 executing program 2: 11:41:23 executing program 3: 11:41:23 executing program 0: [ 203.542662] binder: 7164:7169 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:24 executing program 3: [ 203.654155] binder: 7184:7187 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb803d88c8f00010ae1b"], 0x14}}, 0x0) 11:41:24 executing program 2: 11:41:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x0) 11:41:24 executing program 5: 11:41:24 executing program 4: 11:41:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:24 executing program 2: 11:41:24 executing program 5: 11:41:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) [ 204.356529] audit: type=1400 audit(1556710884.741:44): avc: denied { create } for pid=7199 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:41:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:24 executing program 4: socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10100, 0x0) 11:41:24 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 204.485924] audit: type=1400 audit(1556710884.781:45): avc: denied { write } for pid=7199 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 11:41:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x63) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={'\x05\x00\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x03\x03\x00', 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 11:41:25 executing program 3: r0 = socket(0x11000000000010, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)={0x14, 0x1e, 0x100000000000301}, 0x14}}, 0x0) 11:41:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x18a) 11:41:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:25 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 11:41:25 executing program 4: socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10100, 0x0) 11:41:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1000000000000001, 0x0) close(r1) close(r0) pipe(&(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000200)={'syz0'}, 0x8762c13b) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000001280)="f3", 0x1}], 0x1, 0x0) 11:41:25 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) read$alg(r2, &(0x7f00000002c0)=""/217, 0xd9) 11:41:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:25 executing program 0: socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x7f}) sendmsg(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:41:25 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/userio\x00', 0x0, 0x0) r1 = dup(r0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/222, 0xde}], 0x1, 0x0) 11:41:25 executing program 4: socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10100, 0x0) 11:41:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:25 executing program 4: socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10100, 0x0) 11:41:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)={0x14, 0x4, 0x1, 0x1}, 0x14}}, 0x0) 11:41:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="623ad882c0d98a0d7ed2fa6843dd3c22", 0x0, 0x0, 0x0, 0x4}, 0x20) 11:41:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 205.064448] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 205.087455] binder: 7294:7295 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 205.091113] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:41:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x15555555555555b5, 0x0, 0x0, 0x8a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:41:26 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={0x0, r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(r0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc70000e0) 11:41:26 executing program 0: r0 = socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x7f, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:41:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 205.618657] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 205.665920] binder: 7306:7310 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 205.759988] audit: type=1800 audit(1556710886.141:46): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="loop3" ino=3 res=0 11:41:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x801000008912, &(0x7f0000000280)="0a8100121be1f66c93d07000"/21) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r3 = geteuid() quotactl(0x0, 0x0, r3, &(0x7f00000002c0)="c7d8989b49e3659207a490f7db8dc38d708ef9ba3952d41065d15e0c4e784b996851661703583af1249f0a8c39f642e69cb9d7646f5cfecbd800d47c001f58b4f0cdc19e7922571e908ef0ee48c4aede3c29423ff4db8e840dd75bf676e0f506c5d07c8dbcd46d7256eef143a89be29fd6ec049ad01d164829ebd1ae58aeb3ada448c5278c01951b0f9fdf6629b81fc527f4") setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:41:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:41:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r1, &(0x7f00000012c0)=""/252, 0xfc) [ 205.904590] binder: 7322:7328 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:26 executing program 2: r0 = semget(0x0, 0x4, 0x0) semop(r0, 0x0, 0x1d2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x100004009b4b62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000740)={0x17, 0x5b03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}) time(&(0x7f0000000840)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x3, 0x0) accept(r6, &(0x7f0000000a40)=@caif=@dgm, &(0x7f00000002c0)=0x80) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xd9e2, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) 11:41:26 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb00000000000000ecff0400000000001000000000000000000000000004000400170000001f0000da000700003f00000000000000030000000000120002000be166a32e000108000000000000"], 0x88}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 11:41:26 executing program 0: r0 = socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x7f, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:41:26 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 206.000552] audit: type=1804 audit(1556710886.171:47): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir102527356/syzkaller.UVaXSP/8/file0/file0" dev="loop3" ino=3 res=1 [ 206.118397] binder: 7344:7345 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 206.160126] audit: type=1800 audit(1556710886.171:48): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="loop3" ino=3 res=0 11:41:26 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 11:41:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000280)="a2", 0x1) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYPTR], 0x1}}, 0x8000) close(r1) 11:41:26 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f6105000a600000fe02000000000800080004000400ff7e", 0x24}], 0x1}, 0x0) [ 206.333269] audit: type=1400 audit(1556710886.521:49): avc: denied { name_bind } for pid=7337 comm="syz-executor.2" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 206.367160] binder: 7356:7358 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 206.436299] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:41:27 executing program 0: r0 = semget(0x0, 0x4, 0x0) semop(r0, 0x0, 0x1d2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x100004009b4b62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5412, 0x0) time(&(0x7f0000000840)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x28a, 0x0}}], 0x2ba, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x3, 0x0) accept(r6, &(0x7f0000000a40)=@caif=@dgm, &(0x7f00000002c0)=0x80) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xd9e2, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) 11:41:27 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:41:27 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000280)="a2", 0x1) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYPTR], 0x1}}, 0x8000) close(r1) 11:41:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 11:41:27 executing program 5: r0 = semget(0x0, 0x4, 0x0) semop(r0, 0x0, 0x1d2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x100004009b4b62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000740)={0x17, 0x5b03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}) time(&(0x7f0000000840)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x28a, 0x0}}], 0x2ba, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x3, 0x0) accept(r6, &(0x7f0000000a40)=@caif=@dgm, &(0x7f00000002c0)=0x80) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xd9e2, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x0, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) 11:41:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x100000003, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) [ 206.740892] binder: 7381:7385 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 206.785037] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:41:27 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80803, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2}) dup3(r2, r1, 0x0) 11:41:27 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x7, 0x0, [{0x2000, 0x1c, &(0x7f0000000040)=""/28}, {0x10000, 0x52, &(0x7f0000000100)=""/82}, {0x0, 0x0, 0x0}, {0x5000, 0x88, &(0x7f0000000180)=""/136}, {0x2000, 0x26, &(0x7f0000000280)=""/38}, {0xf000, 0x28, &(0x7f00000002c0)=""/40}, {0x14000, 0x2c, &(0x7f0000000440)=""/44}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) [ 206.832185] binder: 7393:7398 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 11:41:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 207.010480] binder: 7412:7415 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffffd}, 0x0) 11:41:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000011c0)="b6", 0x1, 0x81, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 11:41:27 executing program 0: r0 = semget(0x0, 0x4, 0x0) semop(r0, 0x0, 0x1d2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x100004009b4b62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5412, 0x0) time(&(0x7f0000000840)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb857) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x28a, 0x0}}], 0x2ba, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x3, 0x0) accept(r6, &(0x7f0000000a40)=@caif=@dgm, &(0x7f00000002c0)=0x80) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xd9e2, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) 11:41:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000040)=0x3fc0, 0x4) sendto$inet(r0, &(0x7f00000011c0)="b6", 0x1, 0x0, 0x0, 0x0) [ 207.425825] binder: 7427:7433 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xa0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="000400000000000002004e2100000e6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ffffffff00000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2300000001000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff008d068a1ea6a53a55acfe872b0389788c8e080f5f40bf26bd371b2db7d391d9025177a8baea712101ed97b00700f2a21cb85b9efd62c960ed28a5b2939e8077741997c84d67160fbc37910c33b5defe2730ab45ecaf29b2b4f424fd5c455cb2f09fe5917fd2a5cd66675b6c2001fe5aec3598ec13579466d52bb2f698b69f37f4d05a966e91a4ee819ea6d85034e8c615d3e0eea54e4716131140aa57f2afdb63c60dd34369d5cbdc61b7168aa92baf53f99e58091096f52370b93017ee7488e36c30d796ced88e8d4926c689db48655ae1ac151a2da7fb9fc79123731d16df272e844a0528a6e8cc3859f65cee1e80f99a84e6c223f02e24350916de18bb780818"], 0x1) fallocate(r1, 0x3, 0xffffbffffffffa6d, 0xffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000240)={'U-', 0xffffffffffff15fe}, 0x28, 0x2) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340)) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) syz_open_dev$usbmon(0x0, 0x40, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000380)={@local}) stat(0x0, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) getsockopt$inet6_int(r0, 0x29, 0xf, &(0x7f0000000000), &(0x7f00000003c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) 11:41:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:27 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0xffffffb5) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) [ 207.606914] binder: 7447:7450 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:28 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80803, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2}) dup3(r2, r1, 0x0) 11:41:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xa0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="000400000000000002004e2100000e6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ffffffff00000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2300000001000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff008d068a1ea6a53a55acfe872b0389788c8e080f5f40bf26bd371b2db7d391d9025177a8baea712101ed97b00700f2a21cb85b9efd62c960ed28a5b2939e8077741997c84d67160fbc37910c33b5defe2730ab45ecaf29b2b4f424fd5c455cb2f09fe5917fd2a5cd66675b6c2001fe5aec3598ec13579466d52bb2f698b69f37f4d05a966e91a4ee819ea6d85034e8c615d3e0eea54e4716131140aa57f2afdb63c60dd34369d5cbdc61b7168aa92baf53f99e58091096f52370b93017ee7488e36c30d796ced88e8d4926c689db48655ae1ac151a2da7fb9fc79123731d16df272e844a0528a6e8cc3859f65cee1e80f99a84e6c223f02e24350916de18bb780818"], 0x1) fallocate(r1, 0x3, 0xffffbffffffffa6d, 0xffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000240)={'U-', 0xffffffffffff15fe}, 0x28, 0x2) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340)) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) syz_open_dev$usbmon(0x0, 0x40, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000380)={@local}) stat(0x0, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) getsockopt$inet6_int(r0, 0x29, 0xf, &(0x7f0000000000), &(0x7f00000003c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) 11:41:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup3(r0, r1, 0x0) 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 207.966136] binder: 7461:7469 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:28 executing program 5: r0 = socket(0x10, 0x200000000000003, 0x0) write(r0, &(0x7f0000000140)="2400000052001f08ff03f4f9002304000a04f51108000100022100022800028001000000", 0x24) [ 208.028410] binder: 7476:7477 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000a7c12151b4e3710e"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 208.109309] binder: 7483:7487 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 208.119956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:41:28 executing program 5: r0 = socket(0x10, 0x200000000000003, 0x0) write(r0, &(0x7f0000000140)="2400000043001f08ff03f4f9002304000a04f51108000100022100022800028001000000", 0x24) [ 208.254504] binder: 7494:7501 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 208.262590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:41:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0x80045300, &(0x7f0000000140)) 11:41:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000003c0)="994a2ae92c10964c0f05bf00000020c4a37bf0c5bf41e2e9c422e9aabb3c00000064f3460f1b2800000f383a9e02000000110f4e5bc4a265aa104b2636a00f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efc4c3194198ac77000007459d6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc402712f358f0000000f9f3c6436b266450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca5536f347aab03a00a2f1fbfb766208cf") 11:41:28 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) pread64(r0, 0x0, 0x0, 0x0) 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) 11:41:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xa0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="000400000000000002004e2100000e6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ffffffff00000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2300000001000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff008d068a1ea6a53a55acfe872b0389788c8e080f5f40bf26bd371b2db7d391d9025177a8baea712101ed97b00700f2a21cb85b9efd62c960ed28a5b2939e8077741997c84d67160fbc37910c33b5defe2730ab45ecaf29b2b4f424fd5c455cb2f09fe5917fd2a5cd66675b6c2001fe5aec3598ec13579466d52bb2f698b69f37f4d05a966e91a4ee819ea6d85034e8c615d3e0eea54e4716131140aa57f2afdb63c60dd34369d5cbdc61b7168aa92baf53f99e58091096f52370b93017ee7488e36c30d796ced88e8d4926c689db48655ae1ac151a2da7fb9fc79123731d16df272e844a0528a6e8cc3859f65cee1e80f99a84e6c223f02e24350916de18bb780818"], 0x1) fallocate(r1, 0x3, 0xffffbffffffffa6d, 0xffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000240)={'U-', 0xffffffffffff15fe}, 0x28, 0x2) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340)) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) syz_open_dev$usbmon(0x0, 0x40, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000380)={@local}) stat(0x0, 0x0) r4 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) getsockopt$inet6_int(r0, 0x29, 0xf, &(0x7f0000000000), &(0x7f00000003c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) 11:41:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xffffffffffffff4b, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) socketpair(0x0, 0x0, 0x7, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) pipe(0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xffffffffffffff1d) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x300, 0x0, 0x0) 11:41:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfdfdffff}) [ 208.401054] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 208.424941] binder: 7511:7517 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 11:41:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 11:41:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 208.492087] ion_ioctl: ioctl validate failed 11:41:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) exit_group(0x0) ptrace(0x4206, 0x0) wait4(0x0, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x2) r1 = msgget(0x2, 0x430a995ca8ae50ff) msgsnd(r1, &(0x7f0000000140), 0x8, 0x800) 11:41:28 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 11:41:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\xaf1\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\xa7\xf0\x0fA\xb7\x01)I\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6g?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd0Y\x05\xd1l\x98|0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xffffffffffffff8f) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000500), 0x3528acda}], 0x20000000000002d7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') syz_genetlink_get_family_id$tipc(0x0) pwritev(r3, &(0x7f0000001400), 0x31f, 0x0) getgroups(0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) ptrace$getsig(0x4202, 0x0, 0x2000000100000002, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@local}, &(0x7f0000000040)=0x14) 11:42:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:02 executing program 1: syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5b94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0xffffffb5) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 11:42:02 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0xffffffffffffff8f) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x181002, 0x0) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000500), 0x3528acda}], 0x20000000000002d7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x1, 0xe88b}, @window={0x3, 0x4}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x7, 0x8}, @sack_perm], 0x8) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') syz_genetlink_get_family_id$tipc(0x0) pwritev(r3, &(0x7f0000001400), 0x31f, 0x0) getgroups(0x2, &(0x7f00000005c0)=[0x0, 0xee01]) ptrace$getsig(0x4202, 0x0, 0x2000000100000002, &(0x7f0000000140)) 11:42:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000001200)=""/137, 0x89}], 0x1}}], 0x1, 0x0, 0x0) 11:42:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0x6, 0x66}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) 11:42:02 executing program 4: 11:42:02 executing program 0: 11:42:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:02 executing program 2: 11:42:02 executing program 5: 11:42:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000002c0), 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000180)="e1a4fddc46c59f822c82902a9b509a6ba1ac856aa0c3a5fada082d2267457087e35de91b9cfebba20577779b390304ddf33e6e2a6f71", 0x0}, 0x18) 11:42:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:42:02 executing program 5: 11:42:02 executing program 0: 11:42:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:02 executing program 4: 11:42:02 executing program 1: 11:42:02 executing program 2: 11:42:03 executing program 2: 11:42:03 executing program 5: 11:42:03 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:42:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x33, 0x0, 0x0) 11:42:03 executing program 1: syz_execute_func(&(0x7f0000000140)="1cffb5b598cd801b69e4f56962f5696200d9d9d017795b69f9f9680c00c46239011d000000008fe9589b26c7e4c753fbc46580c70fbde1fed4f47d82663ed107c4c2b90a23f21e657051c422b18cb6070000005151ccc4a27d181e1eea01eff265dc5f000f676d005b5b45e145af000f9a99030faee42c240f54635bde3ef3407104a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") syz_execute_func(&(0x7f0000000180)="982c3d0f050520d0f80791b06a4141e2e996855b99a4c466a4c4660f0f01fc66f66d220f66450f73db0421fc22ebd72e41812047002b0000000f49f6ba0dfe8c730c88a1d20fbbc4a201458b6a0000008f294001b00b0000000f73d539f08171a38a806ebb57c46291ae8ca0656000000f4318bedfbecebedfbece00000064470f8c8d04000055f344ded7c4c26db6e420b15ffbb15ffb64400f38cd01c461d561970d000000") 11:42:03 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 11:42:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000002c0)=0x40, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000002000) 11:42:03 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r1, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x1000007, 0x2013, r1, 0x0) 11:42:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)) 11:42:03 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af04, &(0x7f0000000040)) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x49, 0x1, {0x1, 0x4, 0x1}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffffd, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x40000ff) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000040)={0x13, 0x0, 0x0}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) rename(&(0x7f0000002300)='./file0\x00', 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x4000040) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x100000001) unshare(0x60000000) sendmmsg(r1, &(0x7f0000007740), 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x2, 0xd, 0xcf3, 0x5, 0x1b, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_key={0xa, 0x9, 0x210, 0x0, "dc7dc691fbf3b73fa0c6aecfb1b6b848749f59d1d2243926ea5088342d75226d1c13fc9eea591dcce568b32122f7389534b13bf14ec4bcd7b66777f38910ca9eb6b1"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in=@multicast1, 0x11, 0x0, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_sa2={0x2, 0x13, 0x753, 0x0, 0x0, 0x70bd2c, 0x3500}, @sadb_x_filter={0x5, 0x1a, @in, @in=@multicast2, 0x5, 0x10, 0x10}, @sadb_ident={0x2, 0xa, 0xffffffff80000001, 0x0, 0x6}]}, 0xd8}}, 0x8000) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)) creat(&(0x7f0000000100)='./file0\x00', 0x1) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000400)=0x5) creat(&(0x7f0000000200)='./file0\x00', 0x45) write$cgroup_type(r3, &(0x7f00000001c0)='threaded\x00', 0x9) 11:42:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x80000000}}) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) setresgid(0x0, 0xee00, 0x0) setresuid(0x0, 0xfffe, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 11:42:03 executing program 5: socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f0000000100), 0x8) 11:42:03 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000200), 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r1, 0x0, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x8000000000002, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x40000000006, 0x0, 0x0, 0x50000}]}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 11:42:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_TIOCINQ(0xffffffffffffff9c, 0x541b, 0x0) 11:42:03 executing program 4: r0 = socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x0, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) [ 243.561695] IPVS: ftp: loaded support on port[0] = 21 11:42:04 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x49, 0x1, {0x1, 0x4, 0x1}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0xfffffffffffffffd, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x40000ff) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000040)={0x13, 0x0, 0x0}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) rename(&(0x7f0000002300)='./file0\x00', 0x0) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x4000040) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x100000001) unshare(0x60000000) sendmmsg(r1, &(0x7f0000007740), 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x2, 0xd, 0xcf3, 0x5, 0x1b, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_key={0xa, 0x9, 0x210, 0x0, "dc7dc691fbf3b73fa0c6aecfb1b6b848749f59d1d2243926ea5088342d75226d1c13fc9eea591dcce568b32122f7389534b13bf14ec4bcd7b66777f38910ca9eb6b1"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in=@multicast1, 0x11, 0x0, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_sa2={0x2, 0x13, 0x753, 0x0, 0x0, 0x70bd2c, 0x3500}, @sadb_x_filter={0x5, 0x1a, @in, @in=@multicast2, 0x5, 0x10, 0x10}, @sadb_ident={0x2, 0xa, 0xffffffff80000001, 0x0, 0x6}]}, 0xd8}}, 0x8000) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)) creat(&(0x7f0000000100)='./file0\x00', 0x1) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000400)=0x5) creat(&(0x7f0000000200)='./file0\x00', 0x45) write$cgroup_type(r3, &(0x7f00000001c0)='threaded\x00', 0x9) 11:42:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000d40)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, 0x0) 11:42:04 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 11:42:04 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x5, 0x0, [{0x0, 0xe9, &(0x7f0000000340)=""/233}, {0x5000, 0x88, &(0x7f0000000180)=""/136}, {0x2000, 0x26, &(0x7f0000000280)=""/38}, {0xf000, 0x28, &(0x7f00000002c0)=""/40}, {0x14000, 0x2c, &(0x7f0000000440)=""/44}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) 11:42:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="85009e9ef5a97a0f851e49533678a087558fbc796865699f00002200001c"], 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 11:42:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1d, 0x0, 0x84004}}, 0x50) 11:42:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = gettid() mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x13) 11:42:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000001c0)=[@enter_looper, @register_looper], 0x7, 0x0, 0x0}) 11:42:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x4) write(r1, &(0x7f0000000200)='}', 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1) 11:42:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 244.111714] binder: 10218:10220 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 244.132870] binder: 10218:10220 ioctl c0306201 20000380 returned -14 [ 244.146209] binder: 10218:10222 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 244.154962] binder: 10218:10222 ioctl c0306201 20000380 returned -14 11:42:05 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) open(0x0, 0x20000, 0x18) 11:42:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) 11:42:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:42:05 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0, 0x0) 11:42:05 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') symlink(&(0x7f0000000000)='./file1/file1\x00', &(0x7f0000000080)='./file1/file0\x00') rmdir(&(0x7f0000000100)='./file1\x00') 11:42:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xa0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="000400000000000002004e2100000e6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ffffffff00000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2300000001000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff008d068a1ea6a53a55acfe872b0389788c8e080f5f40bf26bd371b2db7d391d9025177a8baea712101ed97b00700f2a21cb85b9efd62c960ed28a5b2939e8077741997c84d67160fbc37910c33b5defe2730ab45ecaf29b2b4f424fd5c455cb2f09fe5917fd2a5cd66675b6c2001fe5aec3598ec13579466d52bb2f698b69f37f4d05a966e91a4ee819ea6d85034e8c615d3e0eea54e4716131140aa57f2afdb63c60dd34369d5cbdc61b7168aa92baf53f99e58091096f52370b93017ee7488e36c30d796ced88e8d4926c689db48655ae1ac151a2da7fb9fc79123731d16df272e844a0528a6e8cc3859f65cee1e80f99a84e6c223f02e24350916de18bb780818"], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000340)) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) syz_open_dev$usbmon(0x0, 0x40, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000380)={@local}) stat(0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @local}, {0x306, @remote}, 0x40, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 'netdevsim0\x00'}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) getsockopt$inet6_int(r0, 0x29, 0xf, &(0x7f0000000000), &(0x7f00000003c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) 11:42:05 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 11:42:05 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:42:05 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x801000008912, &(0x7f0000000280)="0a8100121be1f66c93d07000"/21) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r3 = geteuid() quotactl(0x0, 0x0, r3, &(0x7f00000002c0)="c7d8989b49e3659207a490f7db8dc38d708ef9ba3952d41065d15e0c4e784b996851661703583af1249f0a8c39f642e69cb9d7646f5cfecbd800d47c001f58b4f0cdc19e7922571e908ef0ee48c4aede3c29423ff4db8e840dd75bf676e0f506c5d07c8dbcd46d7256eef143a89be29fd6ec049ad01d164829ebd1ae58aeb3ada448c5278c01951b0f9fdf6629b81fc527f4") setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:42:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:05 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:05 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="240000001e0007121dff18946f610500020000001f00000000000100080008000400ff7e", 0x24}], 0x1}, 0x0) 11:42:05 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 11:42:06 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x7f, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:42:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:06 executing program 4: r0 = socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x7f, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:42:06 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000040)) 11:42:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:06 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="82c700003c123d319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="240000001e0007121dff18946f610500020000001f00000000000800080008000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) 11:42:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x208204) r3 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]}}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000003700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00@\x00'/26]) 11:42:06 executing program 0: connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, 0x0) 11:42:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x7fffdfd13000, 0x0, 0x0, 0x0) 11:42:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) unshare(0x40000000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000380)=0x1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000880)="d3c43c1246966d5ecd50900087d591c7950e928daf09ebbe90a67147b4f2126281961a27eb4fafc38b7e3eb0716c5a1bac8492cfa380d47a2985ba1c2cb696949523b179e87f542be95c402d591ccfaff1d2884cd037d4d271c23bd88d64460d5d9ea22007e81d9ede7a36e29fb13417171fc5723de7afc650bf17c5957fe443e0cb555418dfe7a511aaf084a8fdc15e9bf6866b2a2f75b92c045b8336543c686359dd7f54cf570f5574b7981daaaccc25d99892c68326213b1d4357a38787e4dcf1a8b84bbbfe978a449aa557b12a5bcaf621511c9f8f4d915b5000e4cb932e835aa3ca6746899818f54edd16d32d9d99f4705e2708d4727695c9a8ebf7557658b13b7c8728227cebdfe1d14652361702b359fa06084becd48fc520f4c87330e17dc126f3196a35d69bc10b6b33c67f60958f5a3a4223f658cde78aeb6af9659ce7bdf8cca54bd35e918f8e8b6441c4e16245abacbc21be1e46d0ba9d20b45f03da1a10636bc26a7f80c2d2243ac017b693db3716f7e35797b7641ebd4d0649e156708759ffb345effa8bc9424cfdaba5ef53a8508fa419a6d390255e746035f1ccbbcfae1615acf1ba57f22b50549c01ab6369958b5557c8d0650ae32ed9e2704f91b3d17dbe50b08aa30b0a4309a4fd1d8cfb9822ed0ed5dfa61dba9363c6aa3d4a1a8a22d826d68f2462a65878619b85f2592418b973a3003d596e24f98c77ea3f01f6b5779e3c654e97c7771addda40c8b1a6d7edd234a49b9d139c5848240f87dba8a3ca73a7acd249b3a9670cc16e92edfc1e5f29da9c46f4406c4e1d0ab84ddc2b19439f3b932297a18fd880be04def34f709e94973e8deaf409e914891e758b41191bee0eae47578f2fe74a6d9568ca194e2a5211f0c776c4369c42aed0bbc786c5ba6ed6d668d68b1769b3ce742613082d79ddcaa916b77fd9e093cf56693b27a4bb8d75e701e9412e23510779198c0782e9876e2d93e556725eb23aa3cc6b52b22934d2ffb305bb1846f10136c2cf9a81440f0fc850388bee86e9705372a4db7fc7ffb9c6644f1b7bf1febd30a8744900dc052b31135bb7e3c0dcba790447297b270ee75a985b031af11f660f7d06841cd7b3bc80bcf21f4f5cf6cf82f8146da46f7816ce49f24e3ef7223e4560a37b38f05ccef8adb71447d7eb666539fa3485b6781e29795dc76e09e8117a1675e4008bb934053c0e8ff6063032f981661c71ed8974780fd43d2a21ebc8e3187b948d06ef7ed3ce3b20035fc9c72fbc5be3848300edd2fc33a98bb6fdd73d2bf50aaabc133cbe615340847d069a8c6cf2b95401d86e5a37a21bc19ec2f6150115f74862d9d445a19e0af68d262b228a7df7c9ed680731ffb7201689144616dbe362350ac1eb361d7053c262284871be1bce4ec633099b919385899a2cd9c3fbc2337f986ed249ebc2c37bb0e3cb7800568b5faccebf82233fab0c7fc1881ee29ad27ed3f0df4d647c89ddfc626ef7c24e83426d883e5f8cc73528f359145b7d90365ab34557bdec0485b204a15f895febc6535fc6ecf25b540f8ca9737059be5d12eef85a785c82e882c1fa81d3517b0c2a5b9fc81e829d0486a9d3e171fbab283e0943212d0f162371957246fa4fbec11e5f00ae9c501c82e4871020385a1db87943ad5e9d34c73da0f8a9c0b52419570f4d4af8a65e5602e318053b0b797fbc6257e89817fc452bab05d527e06ba0432f133671871b9d31cdf140fbbc93eca3cb221bfe59cfa8c4eebc5938e401de62a81da4e097530ca988bc76309c6e85c749482c91dd2052116c651d6a8242fe2267ef0c0e55d4332df0e6cdb85de50408d974e61afc52687ab109beb9655489344dfcb2a5ef92532094cfcffe9831c65dcfc8517d508e9818b5bc1163ac86ff5810fd5a6c0bbb0c077f77b1c1d208fda9eba3588af8004d1237cf6864ec75a0e7d83afce0b511b8860273e0619050570029010f5b48db74bc53e2a0a363690f18cdad815aef7702646168b8b18c5bf339fa0fbbcea64a0830cabc7377867154523d30bbcc8717918fabaae1bb3acc99fe579a067ffde36ce5f8e94938358ddf9b2e4fe15d1127d18356cdf09e0af9e734d03602b4445656bd352dbb082b78eed0284e2209d156035250a4b9307610f7e80d6530e09ff8a74d2e05c210bc09603f1b4b219bec15c36ed20a28147f8458f66ac9c9e154f7723d237e0df8dae762fcd1c7dcee4cfc0a88913b1d04d04037ec6a57bd9edb0d03a6e3f6f71770564c95ab96fc5b18e2211da150e8eb26a74933d7a86c2db5f77ecf83305a7c3ad25e89099772180d1c3ff81eb691f082cf107366ab2adc2d1a8d4264ffd54f59539edb4297894dbbd4a2aae4463cb4ffe1fa467380f2d917db7b8817650a173aec46ba8d59d6a7c1019f17bd732fe3d044ce6740368b34290aff1451a52bb40db5d8c45af76325019be7f38ecccaba33e0b51da571700f6c274a4219c813ebeec9bb0693d1e49f0561d93b45454ef36248306813d5adc03e9893a34af9646f5590670636575dd73ff5fa8a663340ce893cc5c39604e3389732416f73a831087f1fc78809a03b50fcf128402f6479ca8cc68b2e1eedc636bef4c1f845ea740206aea3e00a0e3855f2e8b68b6259269486f61d96ded727d97c6bf38d83bfba6b2d25c9b023e4b7c101e9246fb650e8b8623eda38fdf0b26e6a7596f102dd70f6") getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000340), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000300)={0x0, 0x9, [0x0, 0x80, 0x8, 0x1, 0x800], 0x8}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/20) lremovexattr(0x0, &(0x7f00000001c0)=@random={'osx.', 'SEG6\x00'}) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200), 0x0) 11:42:06 executing program 0: connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) [ 246.055729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:42:06 executing program 5: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2}) 11:42:06 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) 11:42:06 executing program 0: connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) 11:42:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:06 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) write$cgroup_pid(r1, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1}, 0x0) 11:42:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") get_mempolicy(0x0, &(0x7f0000000240), 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x4) [ 247.880202] IPVS: ftp: loaded support on port[0] = 21 11:42:08 executing program 1: r0 = socket(0x0, 0x5, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x7f, 0x0, 0x0, 0x2}) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) recvmmsg(r0, &(0x7f0000000c40), 0x0, 0x10100, &(0x7f0000000d00)={0x77359400}) 11:42:08 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) connect$nfc_llcp(r0, &(0x7f0000001240)={0x27, 0x0, 0x0, 0x0, 0x3, 0x0, "eb963b8844baaccf046b56f7e00114b6fc430a74ec9027d0aa195753dced47e08b839d2b2744f396e8ae8bf66b4bcb06c52edddcb92d5330dcaec6dec21a78"}, 0x60) 11:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) 11:42:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 11:42:08 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20420}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x1ae) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = accept(0xffffffffffffff9c, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x5) syz_open_dev$evdev(0x0, 0x0, 0x0) accept(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000300)) r4 = creat(0x0, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x8883) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40505330, &(0x7f0000000140)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x20) 11:42:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\xaf1\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\xa7\xf0\x0fA\xb7\x01)I\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6g?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd0Y\x05\xd1l\x98| /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.370566] syz-executor.5 D24992 7018 1 0x00000004 [ 571.376197] Call Trace: [ 571.378777] __schedule+0x7be/0x1cf0 [ 571.382549] ? __mutex_lock+0x737/0x1470 [ 571.386616] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.391673] schedule+0x92/0x1c0 [ 571.395047] schedule_preempt_disabled+0x13/0x20 [ 571.399788] __mutex_lock+0x73c/0x1470 [ 571.403726] ? trace_hardirqs_on+0x10/0x10 [ 571.407976] ? lo_release+0x84/0x1b0 [ 571.411746] ? save_trace+0x250/0x290 [ 571.415549] ? mutex_trylock+0x1c0/0x1c0 [ 571.419588] ? __blkdev_put+0x397/0x7f0 [ 571.423599] ? find_held_lock+0x35/0x130 [ 571.427668] ? __blkdev_put+0x397/0x7f0 [ 571.431697] ? loop_clr_fd+0xae0/0xae0 [ 571.435587] mutex_lock_nested+0x16/0x20 [ 571.439640] ? mutex_lock_nested+0x16/0x20 [ 571.443931] lo_release+0x84/0x1b0 [ 571.447478] ? loop_clr_fd+0xae0/0xae0 [ 571.451431] __blkdev_put+0x436/0x7f0 [ 571.455280] ? bd_set_size+0xb0/0xb0 [ 571.458990] ? wait_for_completion+0x420/0x420 [ 571.463619] blkdev_put+0x88/0x510 [ 571.467161] ? fcntl_setlk+0xb90/0xb90 [ 571.471085] ? blkdev_put+0x510/0x510 [ 571.474981] blkdev_close+0x8b/0xb0 [ 571.478670] __fput+0x277/0x7a0 [ 571.482024] ____fput+0x16/0x20 [ 571.485306] task_work_run+0x119/0x190 [ 571.489198] exit_to_usermode_loop+0x1da/0x220 [ 571.493843] do_syscall_64+0x4a9/0x630 [ 571.497739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.502633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.507826] RIP: 0033:0x412b40 [ 571.511299] RSP: 002b:00007ffdf4e63468 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 571.519017] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000412b40 [ 571.526335] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 571.533652] RBP: 0000000000000295 R08: 0000000000000000 R09: 000000000000000a [ 571.540984] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 571.548259] R13: 00007ffdf4e634a0 R14: 0000000000046df6 R15: 00007ffdf4e634b0 [ 571.555610] INFO: task syz-executor.0:7019 blocked for more than 140 seconds. [ 571.562962] Not tainted 4.14.114 #4 [ 571.567096] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.575092] syz-executor.0 D24992 7019 1 0x00000004 [ 571.580795] Call Trace: [ 571.583380] __schedule+0x7be/0x1cf0 [ 571.587079] ? __mutex_lock+0x737/0x1470 [ 571.591219] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.596237] schedule+0x92/0x1c0 [ 571.599583] schedule_preempt_disabled+0x13/0x20 [ 571.604376] __mutex_lock+0x73c/0x1470 [ 571.608266] ? trace_hardirqs_on+0x10/0x10 [ 571.612542] ? lo_open+0x1d/0xb0 [ 571.615912] ? refcount_add+0x40/0x50 [ 571.619765] ? mutex_trylock+0x1c0/0x1c0 [ 571.623873] ? find_held_lock+0x35/0x130 [ 571.627935] ? disk_get_part+0x9c/0x140 [ 571.631955] ? lock_downgrade+0x6e0/0x6e0 [ 571.636108] ? loop_unregister_transfer+0x90/0x90 [ 571.641004] mutex_lock_nested+0x16/0x20 [ 571.645138] ? mutex_lock_nested+0x16/0x20 [ 571.649408] lo_open+0x1d/0xb0 [ 571.652645] __blkdev_get+0x2c9/0x1120 [ 571.656540] ? __blkdev_put+0x7f0/0x7f0 [ 571.660606] ? bd_acquire+0x178/0x2c0 [ 571.664413] ? find_held_lock+0x35/0x130 [ 571.668456] blkdev_get+0xa8/0x8e0 [ 571.672087] ? bd_may_claim+0xd0/0xd0 [ 571.675910] ? _raw_spin_unlock+0x2d/0x50 [ 571.680119] blkdev_open+0x1d1/0x260 [ 571.683832] ? security_file_open+0x8f/0x1a0 [ 571.688230] do_dentry_open+0x73e/0xeb0 [ 571.692293] ? bd_acquire+0x2c0/0x2c0 [ 571.696094] vfs_open+0x105/0x230 [ 571.699530] path_openat+0x8bd/0x3f70 [ 571.703381] ? trace_hardirqs_on+0x10/0x10 [ 571.707622] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 571.712332] ? find_held_lock+0x35/0x130 [ 571.716462] ? __alloc_fd+0x1d4/0x4a0 [ 571.720341] do_filp_open+0x18e/0x250 [ 571.724158] ? may_open_dev+0xe0/0xe0 [ 571.727946] ? _raw_spin_unlock+0x2d/0x50 [ 571.732416] ? __alloc_fd+0x1d4/0x4a0 [ 571.736230] do_sys_open+0x2c5/0x430 [ 571.739927] ? filp_open+0x70/0x70 [ 571.743554] SyS_open+0x2d/0x40 [ 571.746844] ? do_sys_open+0x430/0x430 [ 571.750865] do_syscall_64+0x1eb/0x630 [ 571.754754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 571.759637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 571.764887] RIP: 0033:0x412d20 [ 571.768075] RSP: 002b:00007ffdb75a92c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 571.775848] RAX: ffffffffffffffda RBX: 0000000000046ed6 RCX: 0000000000412d20 [ 571.783178] RDX: 00007ffdb75a935a RSI: 0000000000000002 RDI: 00007ffdb75a9350 [ 571.790513] RBP: 0000000000000246 R08: 0000000000000000 R09: 000000000000000a [ 571.797783] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 571.805111] R13: 00007ffdb75a9300 R14: 0000000000046ba2 R15: 00007ffdb75a9310 [ 571.812429] INFO: task syz-executor.1:7020 blocked for more than 140 seconds. [ 571.819693] Not tainted 4.14.114 #4 [ 571.823889] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.831957] syz-executor.1 D25168 7020 1 0x00000004 [ 571.837599] Call Trace: [ 571.840314] __schedule+0x7be/0x1cf0 [ 571.844028] ? __mutex_lock+0x737/0x1470 [ 571.848086] ? pci_mmcfg_check_reserved+0x150/0x150 [ 571.853178] schedule+0x92/0x1c0 [ 571.856562] schedule_preempt_disabled+0x13/0x20 [ 571.861602] __mutex_lock+0x73c/0x1470 [ 571.865517] ? lo_open+0x1d/0xb0 [ 571.868912] ? refcount_add+0x40/0x50 [ 571.872799] ? mutex_trylock+0x1c0/0x1c0 [ 571.876865] ? exact_match+0xd/0x20 [ 571.880544] ? kobj_lookup+0x319/0x410 [ 571.884444] ? loop_unregister_transfer+0x90/0x90 [ 571.889278] mutex_lock_nested+0x16/0x20 [ 571.893381] ? mutex_lock_nested+0x16/0x20 [ 571.897619] lo_open+0x1d/0xb0 [ 571.900864] __blkdev_get+0xab1/0x1120 [ 571.904756] ? __blkdev_put+0x7f0/0x7f0 [ 571.908753] ? bd_acquire+0x178/0x2c0 [ 571.912625] ? find_held_lock+0x35/0x130 [ 571.916688] blkdev_get+0xa8/0x8e0 [ 571.920269] ? bd_may_claim+0xd0/0xd0 [ 571.924078] ? _raw_spin_unlock+0x2d/0x50 [ 571.928219] blkdev_open+0x1d1/0x260 [ 571.931974] ? security_file_open+0x8f/0x1a0 [ 571.936395] do_dentry_open+0x73e/0xeb0 [ 571.940429] ? bd_acquire+0x2c0/0x2c0 [ 571.944230] vfs_open+0x105/0x230 [ 571.947678] path_openat+0x8bd/0x3f70 [ 571.951540] ? trace_hardirqs_on+0x10/0x10 [ 571.955827] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 571.960538] ? find_held_lock+0x35/0x130 [ 571.964711] ? __alloc_fd+0x1d4/0x4a0 [ 571.968498] do_filp_open+0x18e/0x250 [ 571.972330] ? may_open_dev+0xe0/0xe0 [ 571.976129] ? _raw_spin_unlock+0x2d/0x50 [ 571.980334] ? __alloc_fd+0x1d4/0x4a0 [ 571.984142] do_sys_open+0x2c5/0x430 [ 571.987910] ? filp_open+0x70/0x70 [ 571.991563] SyS_open+0x2d/0x40 [ 571.994844] ? do_sys_open+0x430/0x430 [ 571.998714] do_syscall_64+0x1eb/0x630 [ 572.002705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.007567] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.012840] RIP: 0033:0x412d20 [ 572.016028] RSP: 002b:00007ffd5a6eed98 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.023779] RAX: ffffffffffffffda RBX: 0000000000046ec5 RCX: 0000000000412d20 [ 572.031104] RDX: 00007ffd5a6eee2a RSI: 0000000000000002 RDI: 00007ffd5a6eee20 [ 572.038370] RBP: 00000000000002ce R08: 0000000000000000 R09: 000000000000000a [ 572.045675] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 572.052978] R13: 00007ffd5a6eedd0 R14: 0000000000046e7a R15: 00007ffd5a6eede0 [ 572.060345] INFO: task syz-executor.3:7021 blocked for more than 140 seconds. [ 572.067618] Not tainted 4.14.114 #4 [ 572.071924] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.079988] syz-executor.3 D24992 7021 1 0x00000004 [ 572.085682] Call Trace: [ 572.088258] __schedule+0x7be/0x1cf0 [ 572.092008] ? __mutex_lock+0x737/0x1470 [ 572.096070] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.101122] schedule+0x92/0x1c0 [ 572.104490] schedule_preempt_disabled+0x13/0x20 [ 572.109237] __mutex_lock+0x73c/0x1470 [ 572.113198] ? trace_hardirqs_on+0x10/0x10 [ 572.117449] ? lo_open+0x1d/0xb0 [ 572.120854] ? refcount_add+0x40/0x50 [ 572.124649] ? mutex_trylock+0x1c0/0x1c0 [ 572.128802] ? find_held_lock+0x35/0x130 [ 572.132904] ? disk_get_part+0x9c/0x140 [ 572.136882] ? lock_downgrade+0x6e0/0x6e0 [ 572.141060] ? loop_unregister_transfer+0x90/0x90 [ 572.145901] mutex_lock_nested+0x16/0x20 [ 572.149953] ? mutex_lock_nested+0x16/0x20 [ 572.154354] lo_open+0x1d/0xb0 [ 572.157554] __blkdev_get+0x2c9/0x1120 [ 572.161501] ? __blkdev_put+0x7f0/0x7f0 [ 572.165476] ? bd_acquire+0x178/0x2c0 [ 572.169310] ? find_held_lock+0x35/0x130 [ 572.173442] blkdev_get+0xa8/0x8e0 [ 572.176993] ? bd_may_claim+0xd0/0xd0 [ 572.180869] ? _raw_spin_unlock+0x2d/0x50 [ 572.185062] blkdev_open+0x1d1/0x260 [ 572.188764] ? security_file_open+0x8f/0x1a0 [ 572.193312] do_dentry_open+0x73e/0xeb0 [ 572.197305] ? bd_acquire+0x2c0/0x2c0 [ 572.201146] vfs_open+0x105/0x230 [ 572.204680] path_openat+0x8bd/0x3f70 [ 572.208478] ? trace_hardirqs_on+0x10/0x10 [ 572.212804] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 572.217483] ? find_held_lock+0x35/0x130 [ 572.221631] ? __alloc_fd+0x1d4/0x4a0 [ 572.225435] do_filp_open+0x18e/0x250 [ 572.229217] ? may_open_dev+0xe0/0xe0 [ 572.233060] ? _raw_spin_unlock+0x2d/0x50 [ 572.237210] ? __alloc_fd+0x1d4/0x4a0 [ 572.241055] do_sys_open+0x2c5/0x430 [ 572.244763] ? filp_open+0x70/0x70 [ 572.248288] SyS_open+0x2d/0x40 [ 572.251602] ? do_sys_open+0x430/0x430 [ 572.255479] do_syscall_64+0x1eb/0x630 [ 572.261705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.266552] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.271785] RIP: 0033:0x412d20 [ 572.274966] RSP: 002b:00007fff7d0831d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.283333] RAX: ffffffffffffffda RBX: 0000000000046e86 RCX: 0000000000412d20 [ 572.290755] RDX: 00007fff7d08326a RSI: 0000000000000002 RDI: 00007fff7d083260 [ 572.298017] RBP: 00000000000002c5 R08: 0000000000000000 R09: 000000000000000a [ 572.305427] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 572.312850] R13: 00007fff7d083210 R14: 0000000000046e5b R15: 00007fff7d083220 [ 572.320180] INFO: task syz-executor.4:7023 blocked for more than 140 seconds. [ 572.327452] Not tainted 4.14.114 #4 [ 572.331631] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.339578] syz-executor.4 D25168 7023 1 0x00000004 [ 572.345249] Call Trace: [ 572.347830] __schedule+0x7be/0x1cf0 [ 572.351596] ? __mutex_lock+0x737/0x1470 [ 572.355764] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.360824] schedule+0x92/0x1c0 [ 572.364200] schedule_preempt_disabled+0x13/0x20 [ 572.368945] __mutex_lock+0x73c/0x1470 [ 572.372883] ? trace_hardirqs_on+0x10/0x10 [ 572.377180] ? lo_open+0x1d/0xb0 [ 572.380604] ? refcount_add+0x40/0x50 [ 572.384393] ? mutex_trylock+0x1c0/0x1c0 [ 572.388433] ? find_held_lock+0x35/0x130 [ 572.392536] ? disk_get_part+0x9c/0x140 [ 572.396504] ? lock_downgrade+0x6e0/0x6e0 [ 572.400682] ? loop_unregister_transfer+0x90/0x90 [ 572.405507] mutex_lock_nested+0x16/0x20 [ 572.409551] ? mutex_lock_nested+0x16/0x20 [ 572.413817] lo_open+0x1d/0xb0 [ 572.417040] __blkdev_get+0x2c9/0x1120 [ 572.420967] ? __blkdev_put+0x7f0/0x7f0 [ 572.424933] ? bd_acquire+0x178/0x2c0 [ 572.428720] ? find_held_lock+0x35/0x130 [ 572.432807] blkdev_get+0xa8/0x8e0 [ 572.436333] ? bd_may_claim+0xd0/0xd0 [ 572.440157] ? _raw_spin_unlock+0x2d/0x50 [ 572.444297] blkdev_open+0x1d1/0x260 [ 572.447992] ? security_file_open+0x8f/0x1a0 [ 572.452448] do_dentry_open+0x73e/0xeb0 [ 572.456421] ? bd_acquire+0x2c0/0x2c0 [ 572.460261] vfs_open+0x105/0x230 [ 572.463702] path_openat+0x8bd/0x3f70 [ 572.467486] ? trace_hardirqs_on+0x10/0x10 [ 572.471752] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 572.476414] ? find_held_lock+0x35/0x130 [ 572.480516] ? __alloc_fd+0x1d4/0x4a0 [ 572.484308] do_filp_open+0x18e/0x250 [ 572.488219] ? may_open_dev+0xe0/0xe0 [ 572.492103] ? _raw_spin_unlock+0x2d/0x50 [ 572.496243] ? __alloc_fd+0x1d4/0x4a0 [ 572.500090] do_sys_open+0x2c5/0x430 [ 572.503798] ? filp_open+0x70/0x70 [ 572.507320] SyS_open+0x2d/0x40 [ 572.510624] ? do_sys_open+0x430/0x430 [ 572.514503] do_syscall_64+0x1eb/0x630 [ 572.518370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.523281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.528463] RIP: 0033:0x412d20 [ 572.531682] RSP: 002b:00007ffce7d7e468 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 572.539373] RAX: ffffffffffffffda RBX: 0000000000046edc RCX: 0000000000412d20 [ 572.546681] RDX: 00007ffce7d7e4fa RSI: 0000000000000002 RDI: 00007ffce7d7e4f0 [ 572.554010] RBP: 0000000000000290 R08: 0000000000000000 R09: 000000000000000a [ 572.561311] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 572.568573] R13: 00007ffce7d7e4a0 R14: 0000000000046da1 R15: 00007ffce7d7e4b0 [ 572.575917] INFO: task syz-executor.2:13312 blocked for more than 140 seconds. [ 572.583290] Not tainted 4.14.114 #4 [ 572.587458] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.595549] syz-executor.2 D29120 13312 7022 0x00000004 [ 572.601251] Call Trace: [ 572.603844] __schedule+0x7be/0x1cf0 [ 572.607539] ? __mutex_lock+0x737/0x1470 [ 572.611654] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.616671] schedule+0x92/0x1c0 [ 572.620072] schedule_preempt_disabled+0x13/0x20 [ 572.624815] __mutex_lock+0x73c/0x1470 [ 572.628697] ? blkdev_reread_part+0x1f/0x40 [ 572.633055] ? mutex_trylock+0x1c0/0x1c0 [ 572.637222] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 572.642362] ? __wake_up_common_lock+0xe3/0x160 [ 572.647026] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 572.652231] mutex_lock_nested+0x16/0x20 [ 572.656330] ? mutex_lock_nested+0x16/0x20 [ 572.660612] blkdev_reread_part+0x1f/0x40 [ 572.664758] loop_reread_partitions+0x7c/0x90 [ 572.669236] loop_set_status+0xc28/0x1200 [ 572.673417] loop_set_status64+0xa6/0xf0 [ 572.677545] ? loop_set_status_old+0x2d0/0x2d0 [ 572.682179] lo_ioctl+0x5c1/0x1c70 [ 572.685721] ? loop_probe+0x160/0x160 [ 572.689499] blkdev_ioctl+0x983/0x1880 [ 572.693421] ? blkpg_ioctl+0x980/0x980 [ 572.697298] ? __might_sleep+0x93/0xb0 [ 572.701215] ? __fget+0x210/0x370 [ 572.704658] block_ioctl+0xde/0x120 [ 572.708268] ? blkdev_fallocate+0x3b0/0x3b0 [ 572.712660] do_vfs_ioctl+0x7b9/0x1070 [ 572.716598] ? selinux_file_mprotect+0x5d0/0x5d0 [ 572.721394] ? lock_downgrade+0x6e0/0x6e0 [ 572.725529] ? ioctl_preallocate+0x1c0/0x1c0 [ 572.729916] ? __fget+0x237/0x370 [ 572.733673] ? security_file_ioctl+0x8f/0xc0 [ 572.738077] SyS_ioctl+0x8f/0xc0 [ 572.741471] ? do_vfs_ioctl+0x1070/0x1070 [ 572.745607] do_syscall_64+0x1eb/0x630 [ 572.749677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 572.754584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 572.759807] RIP: 0033:0x458c17 [ 572.763037] RSP: 002b:00007ff2b22989f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 572.770791] RAX: ffffffffffffffda RBX: 00007ff2b22996d4 RCX: 0000000000458c17 [ 572.778053] RDX: 00007ff2b2298ab0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 572.785473] RBP: 000000000073bf00 R08: 0000000000000000 R09: 000000000000000a [ 572.792826] R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000004 [ 572.800272] R13: 0000000000000004 R14: 0000000000000005 R15: 00000000ffffffff [ 572.807567] INFO: task syz-executor.2:13319 blocked for more than 140 seconds. [ 572.815054] Not tainted 4.14.114 #4 [ 572.819199] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.827219] syz-executor.2 D29184 13319 7022 0x00000004 [ 572.832906] Call Trace: [ 572.835494] __schedule+0x7be/0x1cf0 [ 572.839219] ? __mutex_lock+0x737/0x1470 [ 572.843322] ? pci_mmcfg_check_reserved+0x150/0x150 [ 572.848453] schedule+0x92/0x1c0 [ 572.851875] schedule_preempt_disabled+0x13/0x20 [ 572.856629] __mutex_lock+0x73c/0x1470 [ 572.860571] ? __mutex_unlock_slowpath+0x71/0x800 [ 572.865470] ? __blkdev_get+0x145/0x1120 [ 572.869605] ? mutex_trylock+0x1c0/0x1c0 [ 572.873754] ? exact_match+0xd/0x20 [ 572.877391] ? kobj_lookup+0x319/0x410 [ 572.881335] ? blkdev_ioctl+0x1880/0x1880 [ 572.885495] mutex_lock_nested+0x16/0x20 [ 572.889588] ? mutex_lock_nested+0x16/0x20 [ 572.893870] __blkdev_get+0x145/0x1120 [ 572.897761] ? __blkdev_put+0x7f0/0x7f0 [ 572.901774] ? bd_acquire+0x178/0x2c0 [ 572.905575] ? find_held_lock+0x35/0x130 [ 572.909624] blkdev_get+0xa8/0x8e0 [ 572.913243] ? bd_may_claim+0xd0/0xd0 [ 572.917092] ? _raw_spin_unlock+0x2d/0x50 [ 572.921283] blkdev_open+0x1d1/0x260 [ 572.925149] ? security_file_open+0x8f/0x1a0 [ 572.929557] do_dentry_open+0x73e/0xeb0 [ 572.937045] ? bd_acquire+0x2c0/0x2c0 [ 572.954791] vfs_open+0x105/0x230 [ 572.960231] path_openat+0x8bd/0x3f70 [ 572.964054] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 572.968724] ? __alloc_fd+0x1d4/0x4a0 [ 572.972573] do_filp_open+0x18e/0x250 [ 572.976374] ? may_open_dev+0xe0/0xe0 [ 572.980350] ? _raw_spin_unlock+0x2d/0x50 [ 572.984508] ? __alloc_fd+0x1d4/0x4a0 [ 572.988302] do_sys_open+0x2c5/0x430 [ 572.992082] ? filp_open+0x70/0x70 [ 572.995632] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 573.001040] SyS_open+0x2d/0x40 [ 573.004321] ? do_sys_open+0x430/0x430 [ 573.008200] do_syscall_64+0x1eb/0x630 [ 573.012120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.016976] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.022236] RIP: 0033:0x412d41 [ 573.025423] RSP: 002b:00007ff2b22779f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 573.033568] RAX: ffffffffffffffda RBX: 00007ff2b22786d4 RCX: 0000000000412d41 [ 573.040882] RDX: 00007ff2b2277baa RSI: 0000000000000002 RDI: 00007ff2b2277ba0 [ 573.048157] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 000000000000000a [ 573.055512] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 573.062816] R13: 0000000000000003 R14: 00000000004dde98 R15: 00000000ffffffff [ 573.070145] INFO: task blkid:13309 blocked for more than 140 seconds. [ 573.076718] Not tainted 4.14.114 #4 [ 573.080893] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.088859] blkid D29040 13309 7117 0x00000004 [ 573.094545] Call Trace: [ 573.097140] __schedule+0x7be/0x1cf0 [ 573.100902] ? __mutex_lock+0x737/0x1470 [ 573.104978] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.109995] schedule+0x92/0x1c0 [ 573.113614] schedule_preempt_disabled+0x13/0x20 [ 573.118365] __mutex_lock+0x73c/0x1470 [ 573.122322] ? lo_ioctl+0x87/0x1c70 [ 573.125954] ? lock_downgrade+0x621/0x6e0 [ 573.130139] ? mutex_trylock+0x1c0/0x1c0 [ 573.134199] ? avc_has_extended_perms+0x8ec/0xe40 [ 573.139024] ? __might_fault+0x110/0x1d0 [ 573.143176] ? avc_ss_reset+0x110/0x110 [ 573.147157] mutex_lock_nested+0x16/0x20 [ 573.151255] ? mutex_lock_nested+0x16/0x20 [ 573.155481] lo_ioctl+0x87/0x1c70 [ 573.158913] ? loop_probe+0x160/0x160 [ 573.162826] blkdev_ioctl+0x983/0x1880 [ 573.166703] ? blkpg_ioctl+0x980/0x980 [ 573.170745] ? __might_sleep+0x93/0xb0 [ 573.174624] ? save_trace+0x290/0x290 [ 573.178411] block_ioctl+0xde/0x120 [ 573.182083] ? blkdev_fallocate+0x3b0/0x3b0 [ 573.186393] do_vfs_ioctl+0x7b9/0x1070 [ 573.190394] ? selinux_file_mprotect+0x5d0/0x5d0 [ 573.195143] ? ioctl_preallocate+0x1c0/0x1c0 [ 573.199546] ? lock_downgrade+0x6e0/0x6e0 [ 573.203742] ? security_file_ioctl+0x83/0xc0 [ 573.208136] ? security_file_ioctl+0x8f/0xc0 [ 573.212566] SyS_ioctl+0x8f/0xc0 [ 573.215925] ? do_vfs_ioctl+0x1070/0x1070 [ 573.220111] do_syscall_64+0x1eb/0x630 [ 573.224089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.228926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.234153] RIP: 0033:0x7f05734fe347 [ 573.237851] RSP: 002b:00007ffebdc5c848 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.245595] RAX: ffffffffffffffda RBX: 0000000001cad030 RCX: 00007f05734fe347 [ 573.252892] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003 [ 573.260202] RBP: 0000000000000003 R08: 00007f05737ae5a0 R09: 0000000000000008 [ 573.267459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.274752] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 573.282059] INFO: task blkid:13315 blocked for more than 140 seconds. [ 573.288625] Not tainted 4.14.114 #4 [ 573.292801] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.300798] blkid D28368 13315 6979 0x00000004 [ 573.306419] Call Trace: [ 573.308996] __schedule+0x7be/0x1cf0 [ 573.312746] ? __mutex_lock+0x737/0x1470 [ 573.316794] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.321835] schedule+0x92/0x1c0 [ 573.325206] schedule_preempt_disabled+0x13/0x20 [ 573.329946] __mutex_lock+0x73c/0x1470 [ 573.333869] ? lo_open+0x1d/0xb0 [ 573.337227] ? refcount_add+0x40/0x50 [ 573.341051] ? mutex_trylock+0x1c0/0x1c0 [ 573.345108] ? exact_match+0xd/0x20 [ 573.348721] ? kobj_lookup+0x319/0x410 [ 573.352650] ? loop_unregister_transfer+0x90/0x90 [ 573.357481] mutex_lock_nested+0x16/0x20 [ 573.361653] ? mutex_lock_nested+0x16/0x20 [ 573.365876] lo_open+0x1d/0xb0 [ 573.369049] __blkdev_get+0xab1/0x1120 [ 573.372993] ? __blkdev_put+0x7f0/0x7f0 [ 573.376956] ? bd_acquire+0x178/0x2c0 [ 573.380897] ? find_held_lock+0x35/0x130 [ 573.384952] blkdev_get+0xa8/0x8e0 [ 573.388476] ? bd_may_claim+0xd0/0xd0 [ 573.392327] ? _raw_spin_unlock+0x2d/0x50 [ 573.396486] blkdev_open+0x1d1/0x260 [ 573.400256] ? security_file_open+0x8f/0x1a0 [ 573.404659] do_dentry_open+0x73e/0xeb0 [ 573.408627] ? bd_acquire+0x2c0/0x2c0 [ 573.412476] vfs_open+0x105/0x230 [ 573.415918] path_openat+0x8bd/0x3f70 [ 573.419713] ? trace_hardirqs_on+0x10/0x10 [ 573.424035] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 573.428772] ? find_held_lock+0x35/0x130 [ 573.432895] ? __alloc_fd+0x1d4/0x4a0 [ 573.436692] do_filp_open+0x18e/0x250 [ 573.440533] ? may_open_dev+0xe0/0xe0 [ 573.444328] ? _raw_spin_unlock+0x2d/0x50 [ 573.448455] ? __alloc_fd+0x1d4/0x4a0 [ 573.452291] do_sys_open+0x2c5/0x430 [ 573.455990] ? filp_open+0x70/0x70 [ 573.459522] SyS_open+0x2d/0x40 [ 573.462835] ? do_sys_open+0x430/0x430 [ 573.466744] do_syscall_64+0x1eb/0x630 [ 573.470670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.475504] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.480732] RIP: 0033:0x7f388d779120 [ 573.484435] RSP: 002b:00007ffc79b7e748 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 573.492170] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f388d779120 [ 573.499439] RDX: 00007ffc79b80f41 RSI: 0000000000000000 RDI: 00007ffc79b80f41 [ 573.506748] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 573.514045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000010ec030 [ 573.521348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 573.528623] INFO: task blkid:13316 blocked for more than 140 seconds. [ 573.535243] Not tainted 4.14.114 #4 [ 573.539382] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.547392] blkid D29040 13316 6980 0x00000004 [ 573.553047] Call Trace: [ 573.555635] __schedule+0x7be/0x1cf0 [ 573.559383] ? __mutex_lock+0x737/0x1470 [ 573.563503] ? pci_mmcfg_check_reserved+0x150/0x150 [ 573.568523] schedule+0x92/0x1c0 [ 573.571923] schedule_preempt_disabled+0x13/0x20 [ 573.576672] __mutex_lock+0x73c/0x1470 [ 573.580599] ? __mutex_unlock_slowpath+0x71/0x800 [ 573.585442] ? __blkdev_get+0x145/0x1120 [ 573.589489] ? mutex_trylock+0x1c0/0x1c0 [ 573.593690] ? exact_match+0xd/0x20 [ 573.597312] ? kobj_lookup+0x319/0x410 [ 573.601237] ? blkdev_ioctl+0x1880/0x1880 [ 573.605374] mutex_lock_nested+0x16/0x20 [ 573.609515] ? mutex_lock_nested+0x16/0x20 [ 573.613792] __blkdev_get+0x145/0x1120 [ 573.617670] ? __blkdev_put+0x7f0/0x7f0 [ 573.621681] ? bd_acquire+0x178/0x2c0 [ 573.625530] ? find_held_lock+0x35/0x130 [ 573.629621] blkdev_get+0xa8/0x8e0 [ 573.633215] ? bd_may_claim+0xd0/0xd0 [ 573.637081] ? _raw_spin_unlock+0x2d/0x50 [ 573.641280] blkdev_open+0x1d1/0x260 [ 573.644988] ? security_file_open+0x8f/0x1a0 [ 573.649381] do_dentry_open+0x73e/0xeb0 [ 573.653463] ? bd_acquire+0x2c0/0x2c0 [ 573.657274] vfs_open+0x105/0x230 [ 573.660762] path_openat+0x8bd/0x3f70 [ 573.664656] ? trace_hardirqs_on+0x10/0x10 [ 573.668884] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 573.673589] ? find_held_lock+0x35/0x130 [ 573.677694] ? __alloc_fd+0x1d4/0x4a0 [ 573.681533] do_filp_open+0x18e/0x250 [ 573.685328] ? may_open_dev+0xe0/0xe0 [ 573.689257] ? _raw_spin_unlock+0x2d/0x50 [ 573.693458] ? __alloc_fd+0x1d4/0x4a0 [ 573.697268] do_sys_open+0x2c5/0x430 [ 573.701020] ? filp_open+0x70/0x70 [ 573.704557] SyS_open+0x2d/0x40 [ 573.707819] ? do_sys_open+0x430/0x430 [ 573.711747] do_syscall_64+0x1eb/0x630 [ 573.715629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.720516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 573.725698] RIP: 0033:0x7f977b531120 [ 573.729396] RSP: 002b:00007ffd45d51a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 573.737352] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f977b531120 [ 573.744651] RDX: 00007ffd45d52f34 RSI: 0000000000000000 RDI: 00007ffd45d52f34 [ 573.752037] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000 [ 573.759310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001059030 [ 573.766615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005 [ 573.774020] [ 573.774020] Showing all locks held in the system: [ 573.780393] 1 lock held by khungtaskd/1008: [ 573.784842] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 573.793938] 2 locks held by getty/6972: [ 573.797951] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.806673] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.815990] 2 locks held by getty/6973: [ 573.819951] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.828668] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.838109] 2 locks held by getty/6974: [ 573.842108] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.850810] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.860170] 2 locks held by getty/6975: [ 573.864140] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.872841] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.882157] 2 locks held by getty/6976: [ 573.886120] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.894833] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.904157] 2 locks held by getty/6977: [ 573.908123] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.916851] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.926181] 2 locks held by getty/6978: [ 573.930215] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 573.938892] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 573.948234] 3 locks held by syz-executor.5/7018: [ 573.953022] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_put+0xa6/0x7f0 [ 573.961564] #1: (loop_index_mutex){+.+.}, at: [] lo_release+0x1e/0x1b0 [ 573.969970] #2: (loop_ctl_mutex#2){+.+.}, at: [] lo_release+0x84/0x1b0 [ 573.978433] 2 locks held by syz-executor.0/7019: [ 573.983344] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 573.992047] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.000131] 2 locks held by syz-executor.1/7020: [ 574.004870] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.013578] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.021675] 2 locks held by syz-executor.3/7021: [ 574.026454] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.035171] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.043287] 2 locks held by syz-executor.4/7023: [ 574.048023] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.056778] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.064895] 2 locks held by syz-executor.2/13312: [ 574.069727] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 574.078124] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1f/0x40 [ 574.087113] 1 lock held by syz-executor.2/13319: [ 574.091936] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.100681] 1 lock held by blkid/13309: [ 574.104643] #0: (loop_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1c70 [ 574.113018] 2 locks held by blkid/13315: [ 574.117071] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.125777] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x1d/0xb0 [ 574.133897] 1 lock held by blkid/13316: [ 574.137857] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x145/0x1120 [ 574.146563] [ 574.148193] ============================================= [ 574.148193] [ 574.155351] NMI backtrace for cpu 1 [ 574.159003] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 574.165913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.175247] Call Trace: [ 574.177818] dump_stack+0x138/0x19c [ 574.183195] nmi_cpu_backtrace.cold+0x57/0x94 [ 574.187687] ? irq_force_complete_move.cold+0x7d/0x7d [ 574.193399] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 574.198661] arch_trigger_cpumask_backtrace+0x14/0x20 [ 574.203831] watchdog+0x5e7/0xb90 [ 574.207271] kthread+0x31c/0x430 [ 574.210617] ? hungtask_pm_notify+0x60/0x60 [ 574.214925] ? kthread_create_on_node+0xd0/0xd0 [ 574.219578] ret_from_fork+0x3a/0x50 [ 574.223360] Sending NMI from CPU 1 to CPUs 0: [ 574.227909] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff861b0222 [ 574.228865] Kernel panic - not syncing: hung_task: blocked tasks [ 574.241233] CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.114 #4 [ 574.247786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.257135] Call Trace: [ 574.259705] dump_stack+0x138/0x19c [ 574.263316] panic+0x1f2/0x438 [ 574.266488] ? add_taint.cold+0x16/0x16 [ 574.270447] ? irq_force_complete_move.cold+0x7d/0x7d [ 574.275623] watchdog+0x5f8/0xb90 [ 574.279057] kthread+0x31c/0x430 [ 574.282404] ? hungtask_pm_notify+0x60/0x60 [ 574.286703] ? kthread_create_on_node+0xd0/0xd0 [ 574.291353] ret_from_fork+0x3a/0x50 [ 574.296053] Kernel Offset: disabled [ 574.299674] Rebooting in 86400 seconds..