[ 13.557862] audit: type=1400 audit(1571589667.331:4): avc: denied { syslog } for pid=1917 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2019/10/20 16:41:17 fuzzer started 2019/10/20 16:41:19 dialing manager at 10.128.0.26:40769 2019/10/20 16:41:19 syscalls: 1333 2019/10/20 16:41:19 code coverage: enabled 2019/10/20 16:41:19 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/20 16:41:19 extra coverage: extra coverage is not supported by the kernel 2019/10/20 16:41:19 setuid sandbox: enabled 2019/10/20 16:41:19 namespace sandbox: enabled 2019/10/20 16:41:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/20 16:41:19 fault injection: kernel does not have systematic fault injection support 2019/10/20 16:41:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/20 16:41:19 net packet injection: enabled 2019/10/20 16:41:19 net device setup: enabled 2019/10/20 16:41:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 16:41:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x319, 0x20020ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20000180, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendto$inet(r0, &(0x7f00000012c0)='2', 0x1, 0x11, 0x0, 0x0) 16:41:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 16:41:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000840)={0x0, 'bridge_slave_1\x00', 0x2}, 0x18) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9074ecbc04c983083f4aecd645ae21464742b60d5d070e9826557914da1567ee4534b1192353f3f801223d563be035e546973e9c7800", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) 16:41:46 executing program 2: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd(0x0) fstat(r3, &(0x7f0000000540)) 16:41:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 16:41:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) sendto$inet(r0, 0x0, 0x264, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) 16:41:48 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 16:41:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=':', 0x1}, {0x0}], 0x2) 16:41:48 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) 16:41:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x6c, 0x0, &(0x7f0000001380)=[@acquire_done, @decrefs, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)}}], 0x0, 0x0, 0x0}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 16:41:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000003100)=[{0x0}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0xd) syzkaller login: [ 54.462149] audit: type=1400 audit(1571589708.231:5): avc: denied { set_context_mgr } for pid=2276 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 54.498129] binder: 2276:2282 BC_ACQUIRE_DONE node 1 has no pending acquire request 16:41:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2d, &(0x7f0000000000)=0xc604, 0x4) [ 54.506223] binder: 2276:2282 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 54.513982] binder: 2276:2282 BC_FREE_BUFFER u0000000000000000 no match [ 54.529131] binder: 2276:2282 got reply transaction with no transaction stack [ 54.538327] binder: 2276:2282 transaction failed 29201/-71, size 0-24 line 2922 16:41:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 54.563310] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.564347] binder: 2276:2282 BC_ACQUIRE_DONE node 3 has no pending acquire request [ 54.564358] binder: 2276:2282 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 54.564366] binder: 2276:2282 BC_FREE_BUFFER u0000000000000000 no match [ 54.564372] binder: 2276:2282 got reply transaction with no transaction stack [ 54.564379] binder: 2276:2282 transaction failed 29201/-71, size 0-24 line 2922 [ 54.607607] binder: undelivered TRANSACTION_ERROR: 29201 16:41:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 16:41:48 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500) 16:41:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 54.706286] loop_reread_partitions: partition scan of loop0 (x_~{RoI)u&XRCn4=I'<.ҢcROqv) failed (rc=-13) 16:41:48 executing program 3: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) 16:41:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 16:41:48 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20, @remote}, 0x10) 16:41:48 executing program 5: 16:41:51 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1418c2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 16:41:51 executing program 1: 16:41:51 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0xfffffffe) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 16:41:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write(r1, &(0x7f0000000000)='F', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = gettid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 16:41:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) 16:41:51 executing program 1: 16:41:51 executing program 5: 16:41:51 executing program 2: [ 57.467106] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 16:41:51 executing program 5: 16:41:51 executing program 2: 16:41:51 executing program 1: 16:41:51 executing program 3: 16:41:51 executing program 0: 16:41:51 executing program 5: 16:41:51 executing program 2: 16:41:54 executing program 4: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 5: 16:41:54 executing program 3: 16:41:54 executing program 2: 16:41:54 executing program 0: 16:41:54 executing program 3: 16:41:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) 16:41:54 executing program 2: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 4: 16:41:54 executing program 5: 16:41:54 executing program 2: 16:41:54 executing program 3: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 4: 16:41:54 executing program 5: 16:41:54 executing program 2: 16:41:54 executing program 3: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 2: 16:41:54 executing program 4: 16:41:54 executing program 5: 16:41:54 executing program 3: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 4: 16:41:54 executing program 2: 16:41:54 executing program 5: 16:41:54 executing program 3: 16:41:54 executing program 1: 16:41:54 executing program 0: 16:41:54 executing program 4: 16:41:54 executing program 5: 16:41:54 executing program 2: 16:41:54 executing program 3: 16:41:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x12, 0x0, [], "689369d81da86d330cf2"}}}}}, 0x0) 16:41:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x1c, 0x0, [], "689369d81da86d330cf23c2456e78da5290cc1c9"}}}}}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 16:41:54 executing program 4: 16:41:54 executing program 0: 16:41:54 executing program 2: 16:41:54 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x1}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 16:41:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe2(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) io_setup(0x9, &(0x7f0000000340)) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 16:41:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() 16:41:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x319, 0x20020ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)='2', 0x1, 0x0, 0x0, 0x0) 16:41:54 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="11"], 0x1) close(r3) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) writev(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)="15", 0x1}], 0x1) 16:41:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x40000000000) 16:41:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0x96dc672cbcb1e1c0, 0x100, &(0x7f0000001880)={0xa, 0xe3c9}, 0x17c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x2d9) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00\xa6\xfbS\xf4\xa9\n\x82-\x7fps\x17I\xbb\x80\xfax\xb2K//\x19\xc0\xfe+k\x0f:\xde-\x98X\xa2\x96A\x15/G\xf2(\x92\xa2\xe2:w', 0x123) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x1a) 16:41:54 executing program 2: r0 = socket$inet6(0xa, 0x80000000000003, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]}) 16:41:55 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08060001080006040001aaaaaaaaaa00000000000180c20000007f00000155cf325175b9fc30300ba459a9c478611ddfc009dab08a6853381fa03df4530001d2e3643db1b4"], 0x0) 16:41:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 16:41:55 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) 16:41:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) [ 61.322926] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 16:41:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x1}, 0xff7f) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 16:41:55 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe2(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) io_setup(0x9, &(0x7f0000000340)) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 16:41:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3c, &(0x7f0000000000), 0x4) 16:41:55 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r3, &(0x7f0000002340), 0x100000000000003a) readv(r3, &(0x7f0000000580), 0x25b) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000002ac0), 0x0, 0x0) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4) setsockopt$sock_int(r5, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xf, 0x80005, 0x1800000000009) r9 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r9) r10 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r11 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r11, &(0x7f0000000440)=[{&(0x7f00000003c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) write$binfmt_elf32(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="37d6f11a2b7dceb447fbe16e1d906c97e339012c36ada06b9f16fc12133f4cc6b160fdc792e3f952ffa280daacd7cb7b92a34daff9df9e264cab16016616620aec9e017a8db58546be12ba41c68760e5041bd4c88bd795e627276135812ceb9e8bdbba5081512fab770456ddaaa5d03d67ddfb1b0b06dc4ee3d72d7aebad11faeec38b6fed18efa9b430834c2e2f6ccdb0bbfb131cbc3b2bf9a6b5a5903a10a81954b95361253e2fdeb864c5ba0b2d00428e353d35a3142a502095f5ac7d66a9309c19a94828e0e13f0459038b72622e45aee336b8f7d5bfb5d9dc3cf4632bbee13f2d136187dd13d4269cf3b4c079c0ad0a45"], 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) r14 = eventfd(0x8) fstat(r14, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xfffffffffffffe8a, 0x19, 0x0, {0x2002, {0x0, 0x1, 0x6}, 0x100010014, 0x0, r15, 0x442, 0xfffd, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0xac46, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r12, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r10, r11, 0x0, 0x180003) 16:41:55 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0) 16:41:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2c, &(0x7f0000000000), 0x4) 16:41:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0xc, &(0x7f0000000000), 0x4) 16:41:55 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0) 16:41:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000010028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1000000000000085) 16:41:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:41:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) 16:41:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) 16:41:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x2, 0x0, 0x0) 16:41:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 16:41:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 16:41:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000001600)={0x21d}, 0x7) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:41:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x22, &(0x7f0000000000), 0x4) 16:41:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20, @empty}, 0x10) 16:41:56 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) 16:41:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) 16:41:56 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0307008000a000", 0x33a) 16:41:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4) 16:41:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 16:41:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f00000001c0), 0xc0000005, 0x0) 16:41:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='@']], 0x0, 0x0, 0x0}) 16:41:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:41:57 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003005f540ddc8523bf50133a9cf800001400080000000000000000010000000000000001"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) [ 63.283040] audit: type=1400 audit(1571589717.051:6): avc: denied { call } for pid=2634 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 63.293987] audit: type=1400 audit(1571589717.061:7): avc: denied { create } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 63.295231] audit: type=1400 audit(1571589717.061:8): avc: denied { setopt } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 63.297109] audit: type=1400 audit(1571589717.071:9): avc: denied { create } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.298653] audit: type=1400 audit(1571589717.071:10): avc: denied { write } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.319086] audit: type=1400 audit(1571589717.091:11): avc: denied { read } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 63.321233] audit: type=1400 audit(1571589717.091:12): avc: denied { write } for pid=2641 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 63.450704] binder: 2634:2637 got transaction with invalid data ptr [ 63.457235] binder: 2634:2637 transaction failed 29201/-14, size 88-24 line 3155 [ 63.467722] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.468500] binder: BINDER_SET_CONTEXT_MGR already set 16:41:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2b, &(0x7f0000000000), 0x4) 16:41:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x12, &(0x7f0000000000), 0x4) 16:41:57 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003005f540ddc8523bf50133a9cf800001400080000000000000000010000000000000001"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x2b5) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x5ad}], 0x1}}], 0x1, 0x0) 16:41:57 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 16:41:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) [ 63.468509] binder: 2634:2656 ioctl 40046207 0 returned -16 [ 63.468884] binder_alloc: 2634: binder_alloc_buf, no vma [ 63.468925] binder: 2634:2656 transaction failed 29189/-3, size 88-24 line 3137 [ 63.499288] binder: undelivered TRANSACTION_ERROR: 29189 16:41:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) 16:41:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 16:41:57 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) 16:41:57 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003005f540ddc8523bf50133a9cf800001400080000000000000000010000000000000001"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xffffffff, 0x4) 16:41:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x40000000000) 16:41:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x7, 0x8, 0x1}}, {0x0, 0x200}}]}, 0xa8) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) 16:41:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:57 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003005f540ddc8523bf50133a9cf800001400080000000000000000010000000000000001"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x7, 0x8, 0x1}}, {0x0, 0x200}}]}, 0xa8) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 63.742309] binder: 2702:2704 BC_INCREFS_DONE node 8 has no pending increfs request [ 63.761627] binder: 2702:2710 BC_INCREFS_DONE node 9 has no pending increfs request 16:41:58 executing program 3: socketpair(0x11, 0xa, 0x8, &(0x7f0000000000)) 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) socket$netlink(0x10, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003005f540ddc8523bf50133a9cf800001400080000000000000000010000000000000001"], 0x28}}, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x20000000, 0x0, 0x1f, 0x0, 0x64}}) 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 16:41:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3c80b3, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 16:41:58 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) exit(0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 16:41:58 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) exit(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000000)=""/68, 0xfcec}], 0x1, 0x0) 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0xa, &(0x7f0000000000), 0x4) [ 64.352507] binder_alloc: 2724: binder_alloc_buf, no vma [ 64.360551] binder: 2724:2728 transaction failed 29189/-3, size 0-0 line 3137 [ 64.369692] binder: 2729:2732 BC_INCREFS_DONE node 12 has no pending increfs request [ 64.378565] binder: undelivered TRANSACTION_ERROR: 29189 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) socket$netlink(0x10, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000540), 0x196, 0x0) [ 64.471079] binder: 2746:2748 BC_INCREFS_DONE node 14 has no pending increfs request 16:41:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x1b, &(0x7f0000000000), 0x4) 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2, &(0x7f0000000000), 0x4) 16:41:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000480)=[@acquire_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) socket$netlink(0x10, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 0: 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) socket$netlink(0x10, 0x3, 0x2) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 3: [ 64.601873] binder: 2766:2770 BC_ACQUIRE_DONE node 15 has no pending acquire request [ 64.632479] binder: 2773:2776 BC_INCREFS_DONE node 16 has no pending increfs request 16:41:58 executing program 0: 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 3: [ 64.668901] binder: 2766:2780 BC_ACQUIRE_DONE node 17 has no pending acquire request 16:41:58 executing program 1: 16:41:58 executing program 5: 16:41:58 executing program 0: 16:41:58 executing program 3: 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) [ 64.766289] binder: 2786:2790 BC_INCREFS_DONE u0000000000000000 no match 16:41:58 executing program 0: 16:41:58 executing program 3: 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 1: 16:41:58 executing program 0: [ 64.913293] binder: 2804:2806 BC_INCREFS_DONE u0000000000000000 no match 16:41:58 executing program 1: 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 5: 16:41:58 executing program 3: 16:41:58 executing program 0: 16:41:58 executing program 1: 16:41:58 executing program 3: 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 5: 16:41:58 executing program 1: 16:41:58 executing program 0: [ 65.126095] binder: 2829:2833 BC_INCREFS_DONE u0000000000000000 no match 16:41:58 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:58 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:58 executing program 5: 16:41:59 executing program 3: 16:41:59 executing program 0: 16:41:59 executing program 1: 16:41:59 executing program 3: 16:41:59 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 5: 16:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 1: 16:41:59 executing program 0: 16:41:59 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 5: 16:41:59 executing program 0: 16:41:59 executing program 1: 16:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 3: 16:41:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 5: 16:41:59 executing program 1: 16:41:59 executing program 0: 16:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 3: 16:41:59 executing program 5: 16:41:59 executing program 1: 16:41:59 executing program 0: 16:41:59 executing program 1: 16:41:59 executing program 5: 16:41:59 executing program 3: 16:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 0: 16:41:59 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 3: 16:41:59 executing program 1: 16:41:59 executing program 5: 16:41:59 executing program 2: socket$netlink(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 1: 16:41:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 3: 16:41:59 executing program 5: 16:41:59 executing program 0: 16:41:59 executing program 5: 16:41:59 executing program 1: 16:41:59 executing program 3: 16:41:59 executing program 2: socket$netlink(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:41:59 executing program 0: [ 66.103454] binder: 2935:2938 BC_INCREFS_DONE u0000000000000000 no match 16:41:59 executing program 1: 16:41:59 executing program 5: 16:41:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:41:59 executing program 3: 16:42:00 executing program 0: 16:42:00 executing program 2: socket$netlink(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000100007041dfffd946f610500ef47226da304aab500000800050016000400ff7e", 0x24}], 0x1}, 0x0) 16:42:00 executing program 5: 16:42:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x4}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000240)="11dca50d5eab71244db09606c0e29066eaf1e451079f56755bb7821dc577dcce022fb1eb2dc3b4881756d2ed5bb8028a40417b7e234cdcaa9d5de4ef0bc561f81e1834") r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) munlockall() pipe(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) fcntl$dupfd(0xffffffffffffffff, 0xd8de8fc036f7c8ab, r2) 16:42:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) 16:42:00 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$cont(0x9, r0, 0x0, 0x0) [ 66.266529] binder: 2955:2959 BC_INCREFS_DONE u0000000000000000 no match 16:42:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:42:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) munlockall() fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_open_pts(0xffffffffffffffff, 0x0) 16:42:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000100)='&e$\x81XK%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\xcc\x13\xce\x88\xd7R\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\x97\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xcf\x01\\\xbb\xd1r\xbb\x12A\xce\xd4-Q[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\xcf\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\xfe\xcf\x8b,a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`W\xce$\xda6\xf0\x15?\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xecV2\b\xf1\xd3\xed\xb7\xc1J-\x1d\x9d\xe1\x96\xc7sP\x00'/348) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) [ 66.363228] binder: 2968:2972 BC_INCREFS_DONE u0000000000000000 no match 16:42:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:42:00 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$cont(0x9, r0, 0x0, 0x0) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) 16:42:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:42:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x800043fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() recvmsg(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) ptrace(0x10, r4) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) [ 66.455690] loop_reread_partitions: partition scan of loop0 (i g!Ṅs؛R1z]=YҀSBۙyk #I") failed (rc=-13) [ 66.480732] tmpfs: Bad mount option &e$XK%/}iR @Z 懓a6ZAO%$Qw.HOo-_$Z@]t;(|C6ۉ })DC?ΈR~PqHm34Ih!(.x㝟}'s $O,3ZW5> 16:42:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000015c0)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done], 0x0, 0x0, 0x0}) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 66.537688] tmpfs: Bad mount option &e$XK%/}iR @Z 懓a6ZAO%$Qw.HOo-_$Z@]t;(|C6ۉ })DC?ΈR~PqHm34Ih!(.x㝟}'s $O,3ZW5> [ 66.546379] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 16:42:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:00 executing program 3: mknod(&(0x7f0000000000)='./bus\x00', 0x80008000, 0x801) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 16:42:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 16:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) [ 66.676485] loop_reread_partitions: partition scan of loop0 (i g!Ṅs؛R1z]=YҀSBۙyk #I") failed (rc=-13) 16:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 66.736240] binder: 3041:3043 ioctl c0306201 0 returned -14 [ 66.777029] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 16:42:03 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$cont(0x9, r0, 0x0, 0x0) 16:42:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:42:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 16:42:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 16:42:03 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffeeb) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 16:42:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 69.555911] binder: 3057:3065 ioctl c0306201 0 returned -14 16:42:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)}, 0x0) 16:42:03 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 69.606414] loop_reread_partitions: partition scan of loop0 (i g!Ṅs؛R1z]=YҀSBۙyk #I") failed (rc=-13) 16:42:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x5, 0x0, 0x1, 0x4}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000240)="11dca50d5eab71244db09606c0e29066eaf1e451079f56755bb7821dc577dcce022fb1eb2dc3b4881756d2ed5bb8028a40417b7e234cdcaa9d5de4ef0b") r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) munlockall() pipe(0x0) fallocate(r2, 0x50, 0x400, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) fcntl$dupfd(0xffffffffffffffff, 0xd8de8fc036f7c8ab, r2) syz_open_pts(0xffffffffffffffff, 0x1) 16:42:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) [ 69.678904] binder: 3085:3089 ioctl c0306201 0 returned -14 [ 69.706210] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 16:42:06 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$cont(0x9, r0, 0x0, 0x0) 16:42:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) 16:42:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:06 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) getxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 16:42:06 executing program 3: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$cont(0x9, r0, 0x0, 0x0) 16:42:06 executing program 3: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:42:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) 16:42:06 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000009dc0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10, 0x0}}, {{&(0x7f0000000440)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002740)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) 16:42:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) 16:42:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 72.666069] loop_reread_partitions: partition scan of loop0 (i g!Ṅs؛R1z]=YҀSBۙyk #I") failed (rc=-13) [ 72.766826] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 16:42:09 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 16:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1}, 0x0) 16:42:09 executing program 1: 16:42:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 16:42:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "1c69ab0d058b1b678397214eec9ff0c8cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c972000000000000000bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7795500", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"}) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:42:09 executing program 3: 16:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1}, 0x0) 16:42:09 executing program 3: 16:42:09 executing program 1: 16:42:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 16:42:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1}, 0x0) 16:42:10 executing program 0: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0}) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={r1}, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes [ 281.735561] INFO: task syz-executor.0:2107 blocked for more than 140 seconds. [ 281.743143] Not tainted 4.4.174+ #17 [ 281.747452] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.755626] syz-executor.0 D ffff8801d5def5f8 24688 2107 1 0x20020004 [ 281.763076] ffff8801d5def5f8 ffff8801d66daf80 be6c653081233391 ffff8801d66daf80 [ 281.771164] 0000000000000000 ffff8801d66db800 ffff8801db71f180 ffff8801db71f1a8 [ 281.779230] ffff8801db71e898 ffff8801da6897c0 ffff8801d66daf80 ffffed003abbd001 [ 281.787338] Call Trace: [ 281.790129] [] schedule+0x99/0x1d0 [ 281.795317] [] schedule_preempt_disabled+0x13/0x20 [ 281.801966] [] mutex_lock_nested+0x3c2/0xb80 [ 281.808044] [] ? __blkdev_get+0x10c/0xdf0 [ 281.813828] [] ? get_disk+0xe0/0xe0 [ 281.819125] [] ? kobj_lookup+0x273/0x410 [ 281.824849] [] ? mutex_trylock+0x500/0x500 [ 281.830760] [] ? disk_block_events+0xc7/0x140 [ 281.836917] [] __blkdev_get+0x10c/0xdf0 [ 281.842525] [] ? __blkdev_put+0x840/0x840 [ 281.848340] [] ? trace_hardirqs_on+0x10/0x10 [ 281.854477] [] blkdev_get+0x2e8/0x920 [ 281.859961] [] ? bd_may_claim+0xd0/0xd0 [ 281.865703] [] ? bd_acquire+0x8a/0x370 [ 281.871310] [] ? _raw_spin_unlock+0x2d/0x50 [ 281.877309] [] blkdev_open+0x1aa/0x250 [ 281.882839] [] do_dentry_open+0x38f/0xbd0 [ 281.888665] [] ? __inode_permission2+0x9e/0x250 [ 281.894983] [] ? blkdev_get_by_dev+0x80/0x80 [ 281.901086] [] vfs_open+0x10b/0x210 [ 281.906380] [] ? may_open.isra.0+0xe7/0x210 [ 281.912343] [] path_openat+0x136f/0x4470 [ 281.918111] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 281.924444] [] ? may_open.isra.0+0x210/0x210 [ 281.930540] [] ? trace_hardirqs_on+0x10/0x10 [ 281.936633] [] do_filp_open+0x1a1/0x270 [ 281.942241] [] ? user_path_mountpoint_at+0x50/0x50 [ 281.948855] [] ? do_dup2+0x3d0/0x3d0 [ 281.954211] [] ? _raw_spin_unlock+0x2d/0x50 [ 281.960652] [] do_sys_open+0x2f8/0x600 [ 281.966222] [] ? mntput+0x66/0x90 [ 281.971307] [] ? filp_open+0x70/0x70 [ 281.976682] [] ? SyS_mkdirat+0x164/0x250 [ 281.982385] [] ? SyS_mknod+0x40/0x40 [ 281.987762] [] compat_SyS_open+0x2a/0x40 [ 281.993467] [] ? compat_SyS_getdents64+0x270/0x270 [ 282.000082] [] do_fast_syscall_32+0x32d/0xa90 [ 282.006398] [] sysenter_flags_fixed+0xd/0x1a [ 282.012445] 1 lock held by syz-executor.0/2107: [ 282.017142] #0: (&bdev->bd_mutex){+.+.+.}, at: [] __blkdev_get+0x10c/0xdf0 [ 282.026732] Sending NMI to all CPUs: [ 282.031712] NMI backtrace for cpu 0 [ 282.035325] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.4.174+ #17 [ 282.041688] task: ffffffff82e151c0 task.stack: ffffffff82e00000 [ 282.047758] RIP: 0010:[] [] native_safe_halt+0x2/0x10 [ 282.056202] RSP: 0018:ffffffff82e07db0 EFLAGS: 00000246 [ 282.061639] RAX: 0000000000000007 RBX: ffffffff8319bf68 RCX: 0000000000000000 [ 282.068927] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff82e15a84 [ 282.076208] RBP: ffffffff82e07de0 R08: 0000000000000000 R09: 0000000000000000 [ 282.083460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 282.090827] R13: ffffffff82e08000 R14: dffffc0000000000 R15: ffffffff82e00000 [ 282.098240] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 282.106491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.112361] CR2: 00007f5c3bb1c000 CR3: 00000001d714b000 CR4: 00000000001606b0 [ 282.119659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.126947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.134252] Stack: [ 282.136437] ffffffff81020b16 ffffffff82e00000 0000000000000000 ffffffff82e08000 [ 282.143966] dffffc0000000000 ffffffff82e00000 ffffffff82e07df0 ffffffff81022d50 [ 282.151534] ffffffff82e07e08 ffffffff811eb4c8 0000000000000000 ffffffff82e07ed0 [ 282.159088] Call Trace: [ 282.161780] [] ? default_idle+0x56/0x3d0 [ 282.167536] [] arch_cpu_idle+0x10/0x20 [ 282.173336] [] default_idle_call+0x48/0x70 [ 282.179283] [] cpu_startup_entry+0x6d1/0x810 [ 282.185338] [] ? complete+0x18/0x70 [ 282.190659] [] ? call_cpuidle+0xe0/0xe0 [ 282.196320] [] ? schedule+0xab/0x1d0 [ 282.201701] [] rest_init+0x190/0x199 [ 282.207085] [] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 282.215126] [] start_kernel+0x64a/0x67e [ 282.220772] [] ? thread_stack_cache_init+0xb/0xb [ 282.227204] [] ? early_idt_handler_array+0x120/0x120 [ 282.233951] [] ? early_idt_handler_array+0x120/0x120 [ 282.240909] [] x86_64_start_reservations+0x29/0x2b [ 282.247510] [] x86_64_start_kernel+0x137/0x15a [ 282.253820] Code: 2e 0f 1f 84 00 00 00 00 00 fa c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 0f 1f 40 00 66 [ 282.272861] NMI backtrace for cpu 1 [ 282.276511] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 282.282992] task: ffff8801da6c2f80 task.stack: ffff8800001e8000 [ 282.289084] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 282.297858] RSP: 0018:ffff8800001efc88 EFLAGS: 00000046 [ 282.303286] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 282.310569] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 282.317861] RBP: ffff8800001efcb8 R08: 0000000000000018 R09: 0000000000000000 [ 282.325126] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 282.332421] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 282.339701] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 282.347935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.353813] CR2: 00000000025fd000 CR3: 00000001d8041000 CR4: 00000000001606b0 [ 282.361130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.368424] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.375832] Stack: [ 282.377969] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 282.385551] 000000000001b6c0 0000000000000008 ffff8800001efcd8 ffffffff81092bee [ 282.393192] 0000000000000008 ffffffff82924260 ffff8800001efd30 ffffffff81ab8252 [ 282.400768] Call Trace: [ 282.403340] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 282.409772] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 282.417168] [] ? print_lock+0xa8/0xab [ 282.422600] [] ? irq_force_complete_move+0x330/0x330 [ 282.429374] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 282.436560] [] watchdog.cold+0xd3/0xee [ 282.442120] [] ? watchdog+0xac/0xa00 [ 282.447516] [] ? reset_hung_task_detector+0x20/0x20 [ 282.454180] [] kthread+0x273/0x310 [ 282.459404] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.466121] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 282.472425] [] ? finish_task_switch+0x1e1/0x660 [ 282.478751] [] ? finish_task_switch+0x1b3/0x660 [ 282.485065] [] ? __schedule+0x7af/0x1ee0 [ 282.490801] [] ? __schedule+0x7a3/0x1ee0 [ 282.496521] [] ? __schedule+0x7af/0x1ee0 [ 282.502217] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.508900] [] ret_from_fork+0x55/0x80 [ 282.514441] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.521153] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 282.540441] Kernel panic - not syncing: hung_task: blocked tasks [ 282.546730] CPU: 0 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #17 [ 282.553344] 0000000000000000 ff40f4d8d4dc5371 ffff8800001efc60 ffffffff81aad1a1 [ 282.561374] ffff8801d66daf80 ffffffff82872120 dffffc0000000000 0000000000000003 [ 282.569383] 00000000003fff97 ffff8800001efd40 ffffffff813a48c2 0000000041b58ab3 [ 282.577382] Call Trace: [ 282.579952] [] dump_stack+0xc1/0x120 [ 282.585320] [] panic+0x1b9/0x37b [ 282.590334] [] ? add_taint.cold+0x16/0x16 [ 282.596125] [] ? nmi_trigger_all_cpu_backtrace+0x3e1/0x490 [ 282.603410] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 282.610674] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 282.617932] [] watchdog.cold+0xe4/0xee [ 282.623465] [] ? watchdog+0xac/0xa00 [ 282.628807] [] ? reset_hung_task_detector+0x20/0x20 [ 282.635638] [] kthread+0x273/0x310 [ 282.640907] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.648249] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 282.654556] [] ? finish_task_switch+0x1e1/0x660 [ 282.660853] [] ? finish_task_switch+0x1b3/0x660 [ 282.667153] [] ? __schedule+0x7af/0x1ee0 [ 282.672841] [] ? __schedule+0x7a3/0x1ee0 [ 282.678542] [] ? __schedule+0x7af/0x1ee0 [ 282.684505] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.691149] [] ret_from_fork+0x55/0x80 [ 282.696663] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 282.704014] Kernel Offset: disabled [ 282.707642] Rebooting in 86400 seconds..