0x8000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000001c0)) write$nbd(r1, &(0x7f0000000240)={0x67446698, 0x1, 0x1, 0x0, 0x1, "2c7bfef128754c44c2991e7b47fdb7007fecad26ea3c430451b9ef1d14c214881927b5a041ba7abfa6199a185dc270a37c574e04258e7a9253c401e506be77df59a1d62065d8547447a065a56fc77d377fcf9ce85fef77673e40eee422b1aa14a1dcb270238b37df36f15d005c08c66bfa5c9f1d5bf1589053064e6dd0ade6d0e24ec7586e2eba3c5f99e5cead465ae0a3298c80ef80acfe9e4c4f7b2d5433b69d2197bf4341fa308654264c16a4e160d3885f632bef0b0f784f3f2815039900bf60"}, 0xd2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='caif0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100034, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) socket$inet(0x2, 0x0, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101900, 0x100) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)) 03:50:23 executing program 1: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:23 executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0xffffffffffffffce, 0x3) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 240.188209] audit: type=1400 audit(1553658623.074:42): avc: denied { accept } for pid=14528 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:50:23 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:23 executing program 1: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@i_version='i_version'}]}) 03:50:23 executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) [ 240.219196] audit: type=1400 audit(1553658623.104:43): avc: denied { ioctl } for pid=14528 comm="syz-executor.5" path="socket:[42494]" dev="sockfs" ino=42494 ioctlcmd=0x89a0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:50:23 executing program 1: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) recvmmsg(r0, &(0x7f0000007b00)=[{{&(0x7f0000000080)=@caif=@dbg, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/139, 0x8b}], 0x8, &(0x7f0000000700)=""/183, 0xb7}, 0xb}, {{&(0x7f00000007c0)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/62, 0x3e}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/201, 0xc9}], 0x3, &(0x7f0000000a40)=""/104, 0x68}, 0x2}, {{&(0x7f0000000ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/150, 0x96}, {&(0x7f0000001c00)=""/151, 0x97}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/89, 0x59}, {&(0x7f0000002d40)=""/115, 0x73}, {&(0x7f0000002dc0)=""/194, 0xc2}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x8, &(0x7f0000003f40)=""/196, 0xc4}, 0x9}, {{&(0x7f0000004040)=@can, 0x80, &(0x7f0000004280)=[{&(0x7f00000040c0)=""/140, 0x8c}, {&(0x7f0000004180)=""/97, 0x61}, {&(0x7f0000004200)=""/76, 0x4c}], 0x3, &(0x7f00000042c0)=""/117, 0x75}, 0x19}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/160, 0xa0}, {&(0x7f0000006400)=""/152, 0x98}], 0x4, &(0x7f0000006500)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f0000007500)=""/139, 0x8b}, {&(0x7f00000075c0)=""/199, 0xc7}, {&(0x7f00000076c0)=""/209, 0xd1}, {&(0x7f00000077c0)=""/197, 0xc5}, {&(0x7f00000078c0)=""/96, 0x60}, {&(0x7f0000007940)=""/82, 0x52}], 0x6, &(0x7f0000007a40)=""/187, 0xbb}, 0x401}], 0x6, 0x40, &(0x7f0000007c80)={0x77359400}) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000007cc0)="bc10b83500808e0c4b19b1d5210ebff9bd3eb2c0fce44aa2bd4ceabf51986658e3bdc98531278d3e27de0e7d29b42bc809dd5bf92a5409077540d595c14b4ba572798ad7d0665460fa43cace7ed7ea825094511658762d190eec63dd3398413192865a048ccb583407f67ac7befaa112fb95236aee05b85dd683711f8137feeba9281baee95f9cc91d6678ac79a285a4226d961d7bb07910b2d1fb1e9802d2ca338e947de9988e15146edba77e618f2158b55065e3ad7e7a00cd47ebb9457137ef07f53882b5ba0dea32f7b48f9a1e537cd7de35e61b151dd24fcdc0c70ea70ddd", 0xe1) 03:50:23 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 03:50:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80000) r1 = accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) r2 = getpgrp(0xffffffffffffffff) r3 = getuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3, r4}, 0xc) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) 03:50:23 executing program 1: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) ioctl$void(r0, 0xc0045c79) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 03:50:23 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 03:50:23 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x410, 0x210, 0x210, 0x210, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x9, 0x2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffff, 0x80, 0x3}, {0x1, 0x5, 0x6}, 0x1, 0x10001}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x9, 0x8, 0x8eb, 0x4], 0x0, 0x6}, {0x3, [0x7, 0x4, 0x7, 0xbf8, 0x5], 0x2e7, 0x100000001}}}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x7, 0x3, 0x10000, 0xd795, 0xc0f1, 0x3], 0x9, 0xcbff}}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x840, 0x810, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x10}, 0x84d5, 0x5, [0x1d, 0x20, 0x31, 0x1f, 0x18, 0x19, 0x2e, 0x5, 0x5, 0x32, 0x3d, 0x3f, 0x36, 0x2c, 0x13, 0x31], 0x3, 0x4f9, 0xfffffffffffff800}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000540)='keyringem0procuserem1cpuset):\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='subj_type', &(0x7f0000000600)='\x00', &(0x7f0000000640)='measure', &(0x7f0000000680)='measure', &(0x7f00000006c0)='measure', &(0x7f0000000700)='subj_type']) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB="646174615f6572723d69676e6f72652c00365e312564e228e3c2c74e964e18326cff1c6ce12b75e80174d8e2a66ea9928610cc07fb9de5b4c59105e6ad1f239e1ac571c9695c33f02815fd7a000000000800"]) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000780)=""/8) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 03:50:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) 03:50:23 executing program 1: openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) r1 = accept4(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000000)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf40f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a28}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4054}, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) 03:50:23 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:23 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 03:50:23 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/134, 0x86}], 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:23 executing program 1: r0 = open(0x0, 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 240.774757] EXT4-fs: 18 callbacks suppressed [ 240.774767] EXT4-fs (sda1): re-mounted. Opts: [ 240.804225] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 240.921461] EXT4-fs (sda1): Unrecognized mount option "d" or missing value 03:50:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, 0x0, 0x100032, &(0x7f0000000180)=ANY=[@ANYRESHEX]) 03:50:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x8) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) 03:50:23 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:50:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) 03:50:23 executing program 1: r0 = open(0x0, 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:23 executing program 3: setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64EXEC\x00', &(0x7f0000000100)='\x00', 0x1, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:23 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x40400, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00'}, &(0x7f0000000240)=0x54) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x800, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x20041, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, [], [{0x2000, 0x3ff, 0x9, 0x5, 0x5fde, 0x1}, {0x7fff, 0xffffffff, 0x6, 0xfffffffeffffffff, 0x80, 0xffff}]}) 03:50:23 executing program 1: r0 = open(0x0, 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:23 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:50:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) [ 241.061660] EXT4-fs (sda1): re-mounted. Opts: 03:50:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 241.150730] EXT4-fs (sda1): re-mounted. Opts: data_err=ignore, [ 241.228179] EXT4-fs (sda1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 241.315944] EXT4-fs (sda1): re-mounted. Opts: [ 241.334431] EXT4-fs (sda1): Unrecognized mount option "0xffffffffffffffff" or missing value 03:50:24 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x101) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:24 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:50:24 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) recvmmsg(r0, &(0x7f00000062c0)=[{{&(0x7f0000000080)=@rc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/100, 0x64}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001340)=""/70, 0x46}, 0xe90f}, {{&(0x7f00000013c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/207, 0xcf}, 0x1}, {{&(0x7f0000001580)=@nl=@proc, 0x80, &(0x7f0000001640)=[{&(0x7f0000001600)=""/39, 0x27}], 0x1, &(0x7f0000001680)=""/197, 0xc5}, 0xfff}, {{&(0x7f0000001780)=@ax25={{0x3, @netrom}, [@bcast, @netrom, @remote, @null, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/72, 0x48}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/55, 0x37}, {&(0x7f0000004900)=""/206, 0xce}], 0x7, &(0x7f0000004a80)=""/183, 0xb7}, 0x1}, {{&(0x7f0000004b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000006040)=[{&(0x7f0000004bc0)=""/227, 0xe3}, {&(0x7f0000004cc0)=""/201, 0xc9}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/254, 0xfe}, {&(0x7f0000005ec0)=""/181, 0xb5}, {&(0x7f0000005f80)=""/190, 0xbe}], 0x6, &(0x7f00000060c0)=""/12, 0xc}}, {{&(0x7f0000006100)=@generic, 0x80, &(0x7f0000006280)=[{&(0x7f0000006180)=""/119, 0x77}, {&(0x7f0000006200)=""/78, 0x4e}], 0x2}, 0x400}], 0x6, 0x10160, &(0x7f0000006440)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001440)={0x0, @local, @multicast2}, &(0x7f0000004880)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000064c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast1}}, &(0x7f00000065c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000006600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000006700)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000006c00)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006c40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00t\x00', @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="040051000000000000"], 0x44c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 03:50:24 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x2b) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r0 = gettid() ptrace$peekuser(0x3, r0, 0x2) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:24 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xd, "090691c47ccf64a32524cc91e0"}, &(0x7f00000000c0)=0x31) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 03:50:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:24 executing program 0: r0 = socket$inet(0x2, 0x800, 0x43) setsockopt$inet_opts(r0, 0x0, 0x100000004, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0xff, @local, 0x4e22, 0x4, 'dh\x00', 0x37, 0x6, 0x55}, {@local, 0x4e21, 0x0, 0xfffffffffffeffff, 0xfff, 0x1}}, 0x44) 03:50:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 241.545767] binder: 14721:14729 transaction failed 29189/-22, size 24-8 line 3117 [ 241.555198] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.625821] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 241.684252] binder: 14743:14747 transaction failed 29189/-22, size 24-8 line 3117 [ 241.693609] binder: 14743:14747 ioctl c0306201 200002c0 returned -14 03:50:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="64841b77ee760dd26e62f842d6b2a25f2fc7a7583b8e6f0d6c28433caf2d25b0ee85a9762b0125ca75b9b26233e4d0700c6360aa7e233db7f88837b5c473862bb768962fea49d7fe7fb3228460d8b8790ec070f064ac1b08f7c01dc93e52aa95968611df30b2beb9aac44b219577fc5829495e2fa76424ac2b0f3c21731ec023abfd6cf676c9e38a"]) 03:50:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB="010000f6038488b5066cbf010764c0011f9b000000000000000000da3ebc4806"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x90000, 0x41) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() getresuid(&(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() stat(&(0x7f0000000a00)='./file0/file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x1, 0x7}, [{0x2, 0x0, r12}, {0x2, 0x2, r6}, {0x2, 0x0, r9}, {0x2, 0x5, r7}], {0x4, 0x2}, [{0x8, 0x7, r14}, {0x8, 0x1, r4}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r1, @ANYBLOB="dd", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="02000000", @ANYRES32=r11, @ANYBLOB="02000200", @ANYRES32=r13, @ANYBLOB="040001000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r16, @ANYBLOB="10000600000000002000050000000000"], 0x8c, 0x1) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)) 03:50:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r1, 0x323, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44000) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="65b0f6ad7468ca3d347f4798798753281fe29eeca9e2185d121e5fcb0ef45fdf", 0x20}, {&(0x7f00000000c0)="5b97752357a6af1d3fbf9cd726fef80cdd9e9c0a09f13b7f5e194088bdb3eda93ea5f6071c778e77d744bb01a37be7f3d33622cb645406eac8c5dc6ac756bd7f28dc45461895260a9e85adc218a99fefa61161bd6735ba5c86317a905b8aee7a3225fe3cc37a3f", 0x67}, {&(0x7f0000000140)="75f78717978c", 0x6}], 0x3) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) [ 241.728488] binder: 14743:14747 transaction failed 29189/-22, size 24-8 line 3117 [ 241.737378] binder: 14743:14756 transaction failed 29189/-22, size 24-8 line 3117 [ 241.746096] binder: 14743:14756 ioctl c0306201 200002c0 returned -14 [ 241.763521] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.769305] binder: undelivered TRANSACTION_ERROR: 29189 03:50:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:24 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 03:50:24 executing program 0: r0 = socket$inet(0x2, 0x5, 0x684) setsockopt$inet_opts(r0, 0x0, 0x400000000004, &(0x7f0000000000)="441f080300e1a37f00000000000000be0e1c2074973564b81f7fc128a6d36b1697da631bbf43268f26b8207c8b391e96ac6260eb94fe4aca28ea560c907507ef70276b580e22e63b76adbbb9f4a1303b54e1df866dbce18d30480cf7e36adad9c7beb28006cc06072ff189a6ca6b48433f5dd04f2da227974b851bbd45558cb05407e429ac9b48f9d36d5361065f57652c61fa3bf004af4ff1ff000000000000000000000000000000", 0xfffffffffffffedd) [ 241.781872] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.814734] EXT4-fs (sda1): re-mounted. Opts: 03:50:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)) 03:50:24 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r4 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in, 0x0, 0xff}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x669}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write$selinux_load(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="8cff7cf908000000534520ccc076d0e31500000000000000080000000700000040260000000000002315c908e62da2986dc2fb99e15d031da8c2433bb66691bce0622ad84700000000000000000000000000000000a643362ed369e18a037715726deb298a95e9d0e1eb5864cc6a33578569137541947725800426eaceb3c733012a0bfb4a6a53f03a6d59496fcea2143d8a95f15a0154fcccb398af216b2cda962eb7c8e7722b1c3b30b2c250248fd73349db12d0646de8aa0e45cd0d84448a46aa9d895c239f9fa9d1ecec731155ba3f71c5532364ec08398824dc9348ee0000000000000000000000f93d8da3a8a74970d907a445b58db696c3bf479d208b300efb31df17b0252e9c64d1e712ae85b1eac33b3d7781b6017465be19b461eb566bbaae7b04a49b0cc8c21f8c1e5f0e9ffc7b35b80c0ac88dbaacd76d27acaf97371b4e6766d0b6defde56cd4bf00b95c33ff0310e838001604ce6f8d08734fd8dc26"], 0xea) setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r1, 0x0, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee46984c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8b64053c2997951777942cc1647d6bdb627a30e3be741a9160f0591b064789addb55e1c0af02000000000000cf89fb"], 0x70) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() r5 = creat(&(0x7f0000000080)='./bus\x00', 0xc1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000680)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(r5, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="10000000370000042bbd7020fddbdf2569ad69432ef7a5226626be4d7d697ef6913559aee9dd3c734df3f13b4bf738c9995343138d717535932fa5ace1a2774d3d0dc7fbbd8b8f1c0a91141b93fe3250555ae2ab22252c1af96b57b63d802d60bb18ba7304c66c3f370d3553e3fb579a155ebc86c488f9831ecaf72f6bf0b5487158c0ff7f2496f4a702fbf054bb8f0797c34a5995dd3e0d104d64c806247445385a968666d4910534f008617e6c0be426f369fa4812e78386b49943df89a67aa95b9b84ba49945e13dbe80c353a0c51b7040b18d6bf4af667b586d1ffd004"], 0x1}], 0x1}, 0x20000000) creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/239) request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd) socket$inet(0x2, 0xfffffffffffffffe, 0xffffffff80000001) [ 241.914912] binder: 14776:14783 sending u0000000000000000 node 7, cookie mismatch 0000000000000004 != 0000000000000000 [ 241.916027] audit: type=1400 audit(1553658624.804:44): avc: denied { set_context_mgr } for pid=14776 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 241.938054] binder: 14776:14783 transaction failed 29201/-22, size 24-8 line 3364 03:50:24 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) [ 241.971791] binder: 14776:14783 ioctl c0306201 200002c0 returned -14 03:50:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 242.019659] binder: send failed reply for transaction 6 to 14776:14783 [ 242.021479] audit: type=1400 audit(1553658624.804:45): avc: denied { call } for pid=14776 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 242.029647] binder: undelivered TRANSACTION_COMPLETE [ 242.051986] audit: type=1400 audit(1553658624.804:46): avc: denied { transfer } for pid=14776 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 242.063947] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.089988] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.107710] SELinux: policydb string SE ÌÀvÐã does not match my string SE Linux [ 242.132800] SELinux: failed to load policy [ 242.180574] binder: 14802:14809 transaction failed 29189/-22, size 0-8 line 3117 [ 242.194803] binder: undelivered TRANSACTION_ERROR: 29189 03:50:25 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000140)=ANY=[@ANYBLOB="6461a4513cefa2610a03472d1bf2b19360fb6b73247474615f6572723d69676e6f72652c00576734f699281a810b995992280f9fd83c36ff0f0000e94c4e791cdc3666537f553bfc9d9002ec364dc5e5fd25b2ef3db29db82f4cf166f8c7a036460e23bc8f18a8a1e54e66dfc6fb76958197000000000000000000000000008d914c434f"]) 03:50:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2f, @rand_addr=0x20, 0x4e22, 0x1, 'ovf\x00', 0x8, 0x101, 0x17}, 0x2c) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={&(0x7f0000000140)=@newtaction={0x14c4, 0x30, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{0x90, 0x1, @m_connmark={0x8c, 0x12, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x32ca, 0x40, 0x10000000, 0x5, 0x1000}, 0x1f}}}, {0x54, 0x6, "79e2eaf9e857f554ff9bd158747125e37ae6bd4dbbf734613e89eebe49122198ef14de2fcefc39d2f61fd8ffbb678820aa15d8b390c1cd2e2fd88f34d39afda4c6b2eb60ac7ccff4265b3449c0bfb3c1"}}}}, {0x1040, 0x1, @m_mirred={0x103c, 0x1, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb282, 0x4, 0x5, 0xef, 0x3ff}, 0x7, r2}}}, {0x1004, 0x6, "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"}}}}, {0xc4, 0x1, @m_skbedit={0xc0, 0x12, {{0xc, 0x1, 'skbedit\x00'}, {0x74, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xfe, 0x8, 0x7, 0x7ff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x7, 0x20000000, 0x3ff, 0x101}}]}, {0x38, 0x6, "1db99236a290c045f801ab3ecff3925b7ef60ded2def4e08b7eb0395596d0ce982972c5c1cddb8235b5104657dcf931771956f"}}}}, {0x60, 0x1, @m_vlan={0x5c, 0x1b, {{0xc, 0x1, 'vlan\x00'}, {0x38, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xf81}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x36, 0x2, 0x7, 0x100000000, 0x2c7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}]}, {0x10, 0x6, "e4f8166ed6eeef0608496f72"}}}}, {0xac, 0x1, @m_tunnel_key={0xa8, 0xf, {{0x10, 0x1, 'tunnel_key\x00'}, {0x68, 0x2, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x9, 0x0, 0x20, 0x4b5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x28, 0x6, "811acee5762643aa4be325575479918d60559a115807a52d9ec44e9cc22c8a1ab1"}}}}, {0x8c, 0x1, @m_gact={0x88, 0xc, {{0xc, 0x1, 'gact\x00'}, {0x34, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x8, 0x3, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x30f, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0xe51, 0x7}}]}, {0x40, 0x6, "86f194b5fcde6c174fc1ede6003550c99eab5b13afe6463803f13366dac6488262472c4cd5007b0f2da4d1b58bebf81e04a14f3f63e464290571"}}}}, {0x184, 0x1, @m_ipt={0x180, 0xf, {{0x8, 0x1, 'ipt\x00'}, {0x84, 0x2, [@TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x14, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9a00}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x14, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x800}]}, {0xec, 0x6, "eb18f5f40026770749d7465c1901688299335639807f36c423b47c6f89dcc5268422c51f82416ec7bf38b1a6ae1457f6b334733e1509affeffb0544b5a194bc6bc9245fd6f31ccbd65a8d20e7352bc858d4c26e1e9ceb957988bfae0036568ad34bd771e77182ad4b66efed8926bf6bcef9726a9c7b6876817c220893ae4a81f29b3bbedbef3b7cf88572c373308c2b8e0f20c28bb4fa6cd8a2f9ef512555841dd1004265b92e5dd2bb7f14ac789298f3168787cdb93b1785fdc72865155da88cbcb0e683c1cf3d96d77ee8e7872ad38c2fa10c146e32a1817404829efed627c2e8459526009"}}}}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:25 executing program 5: mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) [ 242.246804] SELinux: policydb string SE ÌÀvÐã does not match my string SE Linux [ 242.259986] SELinux: failed to load policy [ 242.303521] binder: 14824:14826 got new transaction with bad transaction stack, transaction 12 has target 14824:0 [ 242.333639] binder: 14824:14826 transaction failed 29201/-71, size 0-0 line 3144 03:50:25 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 03:50:25 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000009907800bb13120b2e47116149cc75f3e3495351577463040947e419ada2afdb1312b7883f7768471468248878d4750fba50fe06e2d4c3d9fe06e2d4c3d900000039c39e106d91652d935ffbf4fd5fa1e2d8e56d5767ddcb61cd8ea237759652b4bafdefc8005ba3901142103a7c88f678e2d5f3c205829e90482ffd73a479e4c8e78a8911584f39444162df9fea539c93ca4f134e1bcfb295614a127e5eba68160466b8162076cbc77337777ec5671671d60909ca880f78f38d7d348ab5b152bc6103af3611991794e404fa6a689874b5ce"], 0x0) [ 242.357571] binder_alloc: binder_alloc_mmap_handler: 14824 20001000-20004000 already mapped failed -16 [ 242.380523] binder: BINDER_SET_CONTEXT_MGR already set [ 242.386413] binder: 14824:14826 ioctl 40046207 0 returned -16 [ 242.394558] binder_alloc: 14824: binder_alloc_buf, no vma 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x7, 0x249000000000, 0x3f}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) [ 242.403827] binder: 14824:14834 transaction failed 29189/-3, size 24-0 line 3254 [ 242.412281] binder_alloc: 14824: binder_alloc_buf, no vma [ 242.418467] binder: send failed reply for transaction 12 to 14824:14826 [ 242.425662] binder: 14824:14826 transaction failed 29189/-3, size 0-0 line 3254 [ 242.433643] binder: undelivered TRANSACTION_COMPLETE [ 242.444894] binder: undelivered TRANSACTION_ERROR: 29201 03:50:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x220, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 03:50:25 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 242.456851] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.467519] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.477639] binder: undelivered TRANSACTION_ERROR: 29189 03:50:25 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0xa80010, 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='affs\x00', 0x1008000, &(0x7f0000000180)='\x00') syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)=ANY=[@ANYBLOB="64611e7d"]) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0xff, @broadcast, 0x4e21, 0x2, 'none\x00', 0x9, 0x8, 0xf}, 0x2c) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) sendto$inet(r0, &(0x7f0000000080)='t', 0x1, 0x4, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fadvise64(r0, 0x0, 0x1f, 0x4) 03:50:25 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 03:50:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYBLOB="643c82e8df2b14d4ee5a883194f95b5f608866cc045d08fb534890c3f0b988fba0492f2f11b1438661a7c055ac72b11cac83cc"]) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') r1 = getuid() sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004a}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x12, 0x200, 0x70bd29, 0x25dfdbfe, {0x20}, [@typed={0x8, 0x3e, @uid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) [ 242.614783] binder: 14861:14868 got new transaction with bad transaction stack, transaction 17 has target 14861:0 [ 242.625495] binder: 14861:14868 transaction failed 29201/-71, size 0-0 line 3144 [ 242.639233] binder: release 14861:14868 transaction 17 out, still active 03:50:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x5, 0x9}) 03:50:25 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 242.677201] binder: undelivered TRANSACTION_COMPLETE [ 242.684343] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.690753] binder: send failed reply for transaction 17, target dead [ 242.744652] binder: 14878:14882 transaction failed 29189/-22, size 24-0 line 3117 [ 242.776123] binder: 14883:14889 got new transaction with bad transaction stack, transaction 21 has target 14883:0 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0xffffffffffffff0f) 03:50:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x81008, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x141}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x380}}, {@mode={'mode', 0x3d, 0xfffffffffffffffb}}, {@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0xfffffffffffffff8}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x100000000}}], [{@subj_user={'subj_user', 0x3d, 'data_err=ignore'}}, {@audit='audit'}, {@fowner_gt={'fowner>', r0}}, {@fowner_gt={'fowner>', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '{ppp0-#ppp0\xc0vmnet1bdev}'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vboxnet0(em0'}}, {@obj_role={'obj_role', 0x3d, '}self@\xe1system}/--\''}}]}) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) [ 242.780508] binder: 14878:14893 got transaction with invalid offset (0, min 0 max 0) or object. [ 242.799348] binder: 14878:14893 transaction failed 29201/-22, size 0-8 line 3348 [ 242.806913] binder: 14883:14889 transaction failed 29201/-71, size 0-0 line 3144 [ 242.813266] binder: release 14883:14889 transaction 21 out, still active [ 242.829846] binder: undelivered TRANSACTION_COMPLETE 03:50:25 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:50:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) [ 242.888500] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.895617] binder: send failed reply for transaction 21, target dead [ 242.903485] binder: send failed reply for transaction 23 to 14878:14882 [ 242.912376] binder: undelivered TRANSACTION_COMPLETE [ 242.924624] binder: 14906:14909 transaction failed 29189/-22, size 24-8 line 3117 03:50:25 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) [ 242.934854] binder: 14906:14909 transaction failed 29189/-22, size 24-8 line 3117 [ 242.936085] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.944704] binder: 14906:14913 transaction failed 29189/-22, size 0-8 line 3117 [ 242.963680] binder: undelivered TRANSACTION_ERROR: 29201 [ 242.975743] binder: undelivered TRANSACTION_ERROR: 29189 03:50:25 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 242.983308] binder: 14914:14919 got new transaction with bad transaction stack, transaction 29 has target 14914:0 [ 242.983707] binder: undelivered TRANSACTION_ERROR: 29189 [ 242.996472] binder: 14914:14919 transaction failed 29201/-71, size 0-0 line 3144 [ 243.001412] binder: undelivered TRANSACTION_ERROR: 29189 03:50:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) creat(&(0x7f0000000040)='./file1\x00', 0x1) 03:50:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 243.029206] binder: undelivered TRANSACTION_ERROR: 29189 [ 243.047148] binder: release 14914:14919 transaction 29 out, still active [ 243.061779] binder: undelivered TRANSACTION_COMPLETE [ 243.068417] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.075633] binder: send failed reply for transaction 29, target dead 03:50:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) r1 = getpgrp(0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x80000000, 0x4, 0x7ff, 0x6d, 0x0, 0x9, 0x4, 0x2, 0xf53f, 0x8, 0x6, 0x17ba1888, 0x5, 0x7, 0xff, 0x5d5, 0x80000001, 0xff80000000000000, 0x1, 0x9, 0xf9, 0x1, 0xe54e, 0x99e4, 0xfffffffffffffffb, 0x3, 0xbdfe, 0x2, 0x6254, 0x5, 0x10001, 0xffffffff00000001, 0x5, 0x81, 0x1, 0x100000001, 0x0, 0x5b65, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4200, 0x400, 0x6, 0x0, 0xfffffffffffffdef, 0xfffffffffffffffd, 0x7fffffff}, r1, 0x8, r2, 0x2) 03:50:26 executing program 3: mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:26 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 03:50:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x8, 0x6}) [ 243.159997] binder: release 14934:14941 transaction 32 out, still active [ 243.174497] binder: undelivered TRANSACTION_COMPLETE [ 243.189259] binder: send failed reply for transaction 32, target dead 03:50:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='[\'posix_acl_access\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x100000000) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:50:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="8896267aac08553bfdf94f3952016b20eb0142540e64ff29b8da0af8c2761ceea902fde1bfc8e42155d8d7282a2dfdc7c6d856f01e58610fe157e00a1eed78a97b6fabe9cc20ba20862560776e553468ce96be5240c17c243fc632c18a1c4197fb1cf03be206a25f3eec03a1a6df407b7d00fd2a0b5f9678926f122083573fd25ba233d7ea31bdc1b295370654171795c7289ebb665c31c8837965e926226326806d6c8a74dffe8a6997bd4628d2eca435d9ad1b0c603591c5515f7fb97975000200001d0e6d199eb74900927aac59e658aefb7323c3710bd4a30da0dedfa81f5fc1f9a33d5562fbc911c047312297c81dd7b93b5b048972eedf07de5d2917e1aa3dfa8ff86e6b984a142d4ec2c98fa239a21e147377b79321fcc8f2c5e43b88d5ac21057dd0bc28d31dd5000000000000"]) [ 243.306301] binder: release 14956:14964 transaction 34 out, still active [ 243.317634] binder: undelivered TRANSACTION_COMPLETE 03:50:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 243.356098] binder: send failed reply for transaction 34, target dead 03:50:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f00000001c0)=ANY=[@ANYBLOB="646174615f6572723d69676e6f72652c0068558531f823b99bba7271d0d4780b8fdfdd68fd6a5040e3e91572102ca20cd84200000000e98c4d69"]) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 03:50:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) [ 243.423852] binder: release 14979:14986 transaction 36 out, still active [ 243.440788] binder: undelivered TRANSACTION_COMPLETE 03:50:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10810, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) [ 243.472643] binder: send failed reply for transaction 36, target dead 03:50:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) [ 243.545949] binder: 15001:15008 transaction failed 29189/-22, size 24-0 line 3117 [ 243.554677] binder: undelivered TRANSACTION_ERROR: 29189 03:50:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') getpeername(r0, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) 03:50:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x80000001, {{0x2, 0x4e23, @empty}}, 0x1, 0x9, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e1f, @rand_addr=0x84}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @broadcast}}]}, 0x510) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000005c0)=0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) [ 243.662357] binder: 15020:15025 transaction failed 29189/-22, size 24-0 line 3117 [ 243.685057] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 1: socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='[\'posix_acl_access\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) sendfile(r0, r2, 0x0, 0x20020102000007) dup2(r2, r1) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@nogrpid='nogrpid'}]}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2010002, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xff}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:50:27 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x2, 0x0) 03:50:27 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 0: socket$inet(0x2, 0x6, 0x5) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KDENABIO(r0, 0x4b36) socket$inet(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 244.203808] binder: 15062:15070 transaction failed 29189/-22, size 24-0 line 3117 [ 244.220428] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 1: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:50:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@random="51862e87cb33"]}) inotify_init() connect(r0, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80) 03:50:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000001c0)=0x80) r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001bc0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000001cc0)=0xe8) lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() lstat(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() lstat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() r10 = perf_event_open$cgroup(&(0x7f0000002400)={0x2, 0x70, 0x9, 0x7, 0x6, 0x20, 0x0, 0x1, 0x10000, 0x8, 0x0, 0x9467, 0xffffffff, 0x4, 0x9, 0x1, 0x9f, 0xff, 0x7ff, 0x0, 0x20, 0x72, 0x7, 0x3, 0x81, 0x7f, 0x3, 0x10001, 0x8, 0x200, 0x200, 0xe, 0xfffffffffffffffb, 0x25a7, 0xae, 0x13b, 0x10001, 0x3d, 0x0, 0x8, 0x6, @perf_config_ext={0x1, 0x5}, 0x2, 0x7fff, 0x800, 0x7, 0xf8, 0x20, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) r11 = inotify_init1(0x800) r12 = accept4$packet(0xffffffffffffff9c, &(0x7f0000002480), &(0x7f00000024c0)=0x14, 0x80000) r13 = memfd_create(&(0x7f0000002500)='cpuset\x00', 0x4) r14 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000002540)='syz0\x00', 0x200002, 0x0) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000002580)='/dev/null\x00', 0x800, 0x0) r16 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000025c0)='/selinux/enforce\x00', 0x200, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000002640)='/dev/zero\x00', 0x0, 0x0) r18 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002680)='/selinux/validatetrans\x00', 0x1, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000026c0)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002700)=0x0) r22 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002740)={0x0, 0x0, 0x0}, &(0x7f0000002780)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000027c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002800)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000002900)=0xe8) r26 = getegid() sendmmsg$unix(r0, &(0x7f0000002a00)=[{&(0x7f0000000240)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)="fa35f399e4984efe390e00d6dd61920286fc724a114e98aca60854e5e8e81a2cccbaa5bf817df0de10a075c88a2652d8251eb80de810b69900", 0x39}, {&(0x7f0000000300)="8d6cf068b2b375cfbde298105fb34f28832ed5bb3ae6077f547b38839f91124fd1bc206850d1f6a31c10d90c0333433114760878b7874593f00d9588a2322071c77673d01be0b93df9e6809b515e21221a9fe7d3dd6d", 0x56}, {&(0x7f0000000380)="dfcd99a88a44f2706e006a32a5a32b63c4e3fe0ed1db677b8a986e79ecb5939d28e2b594576c6fb83ff31254af3d245c4f9995e8900f6ebc9d4da06e2ffd2d33c373e3d94a91b3fbd63647b07d1e87d27f73d500e42b4a", 0x57}, {&(0x7f0000000400)="469004cdc35543b78a22b98c9dbcee97d153d2e65c23536958bfe00804ee053025e416a3a148cde2b42f54cae1b929f3f243ea8f5255614b9a4accde49dd7563c3526c9cbfca50f4323f6770d328e4a89361341f2c8957c07bc953be3db9a21c3d08b6d7b63e865d3611abc15fe892f1de6d6cf85c1bdc8713a086", 0x7b}, {&(0x7f0000000480)="1346453a", 0x4}, {&(0x7f00000004c0)="e36f89dbe246cb5ea567d55d5f33d432c733", 0x12}, {&(0x7f0000000500)="ed1c2de8de3261c7807b69da2c4438e487596f9ab75dc47d3ad68cba88d7f0524344b76441427876c1858193602f343ff2bbf1d98cb63b7a522f70fc1728cb42e1c0f6d0f721847e2df39ae1d789445073527fb82f549249d773a4a5f071", 0x5e}, {&(0x7f0000000580)="574fccb2e030040d0c939b9a44b42e1c5e29196543e5cf8c04e109cd04c24a65993c7eb8a5fe504cb7e7824c751df508dcdc4a99a7d5aae67d4318fd977d5d44ada985c48f4e02cfbbe9ba1753d984560c1afc7f59d65c963c07d890a5628f926ed39183ebe9b689d2b2ec4915d21afbbb96b190db1772fc4fbc4e8d84974511829ec17b9478dadfb70aaab3882d1bf56c23971e401300e0baf890d34d9a7b580f5684", 0xa3}, {&(0x7f0000000640)="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", 0xfa}], 0x9, 0x0, 0x0, 0x4000}, {&(0x7f0000000800)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000880)="fc4cb6164f9becf3", 0x8}, {&(0x7f00000008c0)="a94d4fac93986f904de005a3e1d5078f06adfdbc13972ab9cae48fc07f48101b484f7933e1c9363d4065a197f2ad5469d1feb81a903b659fa68ebee0a14619c5995762fce12f247b64806cd60dc7535b62db5caacffa0a004593d45c29cccf88b3d74541fb5d666aed4e0f01f51cb932b7c57bd9ada5499df54927a12852eac06032d100842fc7ce2a83ec784cb9a27867b4141f3ec45a5fec114dd8b5f228ade21b701cd8ba38c95e", 0xa9}, {&(0x7f0000000980)="0b635f4f52662eb558aee46726a68b738468437b7397de8eff494243b660a7ab59b59521aea0f898b97801570371a71e53ed24bfcfd22906143bc9f2d13e29bda37715efe7951f70bfbdbb2615412a024d31142ad51491f97dba8d28cd894beba8411c4341ef5ed24b5414040828c0bcad8b8990bd22a269e0abb66bcdcac449b9101c5db6c3a7898965c17638bb7de254352b2154f9c9fbc52915ac84bbcc0d18edb95568858b12d9809f97140e05260216ba60d3e440efc1427fb4948f003afdbb393cbb1b5a6a11633f6bd8b00ef42273ae59fcb628ce601ae910db5a8293", 0xe0}, {&(0x7f0000000a80)="5e9b02a4676ca2d0ca002b04f943d02c2c91cdccabe8fc917772c3ba86470e71c1006826f4f68c6c0b86301b9782154ee2e96b1e0307d31faf61d434fb86bb8325d9219c552778e27d59bb08bb5d60427592758ef04138340e97cf92fdabbc1b11128d82cad99ab48fdcad68824fee0831b702b14f9b80e51066d1de10f85388b6ff883791a3199b43e8fb9fe88432735ef72cff520e130983dd6a93f3c81982d763b71ce0b379a698fe4d6764ce029422eab8", 0xb3}, {&(0x7f0000000b40)="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", 0x1000}], 0x5, &(0x7f0000001fc0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x40000}, {&(0x7f0000002040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f00000020c0)}, {&(0x7f0000002100)="f10c990dd8efb686363caa7e2cbdaef57bc7ea2bdf45ab8f2d6ff2b9bfec0e5cc95ecebcf0ab860dbb2fe5dfb4edfc05ef7aa9789dc05213eba12bb62fca780b18994e05b3762159cd75a782a8fa25f93a5b979fb24a303465492c48b1ca0b0b484125ffbbffa8ce7f1b941140d24cd69aa15dace8c581489bcdce0d72f085b363b7d02a506add9d220b933321041c74a0595269b9e7091590fd6a8149990e4c2dd694090f3f389ac9589d91b7a13262584a6bf4b916bcb73337d6947d54eac274233e7b0a96804ee1cad9fa12de7511290869d0a3ebc3d720ef35722da6dcdca99baadadca88b5dc7a2d8e0893d187ae5", 0xf1}], 0x2, 0x0, 0x0, 0x4000800}, {&(0x7f0000002240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f00000022c0)="6a30fcf5738c9aca2e26e3cc3750e23082a1000245c866609b1c9bbb58f2a917bd4a1a5150ec74ef2711091ad63107458182edd12f8507b52a043d4191d2eac63ba917207488a9a78e9fe4206ef18089b9e5263b3eb44e820e82a6fab4f9701b8e202b4a38cee3d2c11a6793d6900bd88025231013b5b34a259c92f924f7bd7012c43f358fe29d9ced426318713ac4cf4d538522c771ba8ba7c4758cc8100dd9a3052f27ddf9fb173a2801985b7b2cd70af161df3a6b0ba5ef0ef9405c7148e54922d5dccc0cffa6f9327de285d82adc76", 0xd1}], 0x1, &(0x7f0000002940)=[@rights={0x30, 0x1, 0x1, [r10, r11, r12, r13, r14, r15, r16]}, @rights={0x20, 0x1, 0x1, [r17, r18, r19, r20]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}], 0x90}], 0x4, 0x40) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) chmod(&(0x7f0000000140)='./file0\x00', 0x110) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1000}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x0) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) [ 244.374427] binder_alloc: 15095: binder_alloc_buf, no vma [ 244.388370] binder: 15095:15104 transaction failed 29189/-3, size 24-0 line 3254 [ 244.398970] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 244.507973] binder_alloc: 15114: binder_alloc_buf, no vma [ 244.515781] binder: 15114:15122 transaction failed 29189/-3, size 24-0 line 3254 [ 244.542585] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e20, @remote}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/46) 03:50:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 244.652111] binder_alloc: 15136: binder_alloc_buf, no vma [ 244.669814] binder: 15136:15143 transaction failed 29189/-3, size 24-0 line 3254 [ 244.689326] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) 03:50:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 03:50:27 executing program 3: mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [], @local}, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', r1}) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:27 executing program 0: r0 = socket$inet(0x2, 0xfffffffffffffffe, 0x6) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 244.845848] binder: 15167:15174 transaction failed 29189/-22, size 24-0 line 3117 [ 244.869103] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f00000006c0)="2504f2ff1f002c5bc8fe89e0d2d6", 0x0, 0xf0ffff00000855}, 0x28) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:50:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x58) 03:50:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 244.946949] binder: 15184:15189 transaction failed 29189/-22, size 24-0 line 3117 [ 244.961575] binder: undelivered TRANSACTION_ERROR: 29189 03:50:27 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="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", 0x15e) [ 245.079913] binder: 15205:15216 transaction failed 29189/-22, size 24-0 line 3117 [ 245.098625] binder: undelivered TRANSACTION_ERROR: 29189 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001005, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x400, 0x9, 0xb7bb, 0xffffffffffff0001, 0x13, 0x8, 0x80000001, 0xef, 0x80000001, 0xfffffffffffffff8, 0x1, 0x800000000}) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000140)='net/mcfilter6\x00') syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@data_err_ignore='data_err=ignore'}]}) 03:50:28 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32]) 03:50:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f00000006c0)="2504f2ff1f002c5bc8fe89e0d2d6", 0x0, 0xf0ffff00000855}, 0x28) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:50:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e21, @empty}, {0x307, @local}, 0x2, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6erspan0\x00'}) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 03:50:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) lseek(r0, 0x4, 0x40000003) r1 = socket$inet(0x2, 0x6, 0x7fffffff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x109000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r3, 0x0, 0x1f, &(0x7f0000000100)='procvboxnet1\x8c+{(nodevH,\'md5sum\x00', r4}, 0x30) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000240)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 03:50:28 executing program 0: r0 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring-\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x352) accept(r1, &(0x7f0000000000)=@ax25={{0x3, @rose}, [@netrom, @bcast, @remote, @default, @bcast, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x80) listen(r1, 0x5) pipe(&(0x7f0000000240)) 03:50:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001005, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x6, 0x100000001, 0x38e, 0x1}, {0x4962, 0x7ff, 0xffffffffffff4a99, 0x95c}, {0x81, 0x7ff, 0x6a, 0x1}]}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB="95"]) 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffffffffffa}}) [ 245.805795] EXT4-fs: 31 callbacks suppressed [ 245.805805] EXT4-fs (sda1): Unrecognized mount option "daa0H“UMã$" or missing value [ 245.952656] EXT4-fs (sda1): Unrecognized mount option "daa0H“UMã$" or missing value 03:50:28 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:50:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x142) write$selinux_access(r1, &(0x7f0000000080)={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xa0}, 0x62) 03:50:28 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000000c0)="2b431983c068d4eab9992b56ed4790f0a745a9d0d4ea5d7e0f1371b3bcf3d58880ae61e2dfc02c44", 0x28) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r0) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) setsockopt$inet_opts(r2, 0x0, 0x2000000004, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x3e1) 03:50:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 246.059786] EXT4-fs (sda1): Unrecognized mount option "•" or missing value 03:50:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000001a00)='./control\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:50:29 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffffffffffa}}) 03:50:29 executing program 0: r0 = socket$inet(0x2, 0x80004, 0x3) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) [ 246.161400] binder_alloc: 15365: binder_alloc_buf, no vma [ 246.167090] binder: 15365:15368 transaction failed 29189/-3, size 24-0 line 3254 [ 246.184681] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) 03:50:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 246.292273] binder_alloc: 15380: binder_alloc_buf, no vma [ 246.298319] binder: 15380:15386 transaction failed 29189/-3, size 24-0 line 3254 [ 246.307245] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:50:29 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) 03:50:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:29 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='.keyring/%posix_acl_access\x00', &(0x7f0000000100)='&GPLselinuxeth0em1ppp0(wlan1&GPL.posix_acl_accesseth1\x00', &(0x7f0000000140)='%\x00', &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='/cpuset]\x9ekeyring\x00', &(0x7f0000000200)='vboxnet1}\x00', &(0x7f0000000240)='vboxnet0$\x00'], &(0x7f0000000440)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='trusted!$eth1[eth0$\x00', &(0x7f0000000340)='$em0cpusettrustedkeyring-\x00', &(0x7f0000000380)='em0J(-selinux\x00', &(0x7f00000003c0)='vboxnet1}{@\x00', &(0x7f0000000400)='{vmnet0\x00']) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x801, 0x0) r1 = socket$inet6(0xa, 0x8080e, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00000004c0)="b2dce74d96880714a4213eab56f786a81da2a648ffd7fed5119795d28c401e73c084cc13446f24f84e6651c43e7fc0bd27147759aa20c17871a57f96633e91cde7a6da68aebbb0c324a34af1de58385f6bc4360f41854594f8b1cbda6f11e41a4c7ad922c96a3348e16885257270cccce523842336f207a1209b660cdba3066b5be1127c15b367e99eb86f85fa2d", 0x8e) syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000005c0)={0x98, 0x7, 0x9}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="441f080300e1a37f00000000000000be0e1c20749727c1c6fe76cef3e2", 0x1d) 03:50:29 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500020000031f000003002808000800040004000300", 0x24}], 0x1}, 0x0) 03:50:29 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) 03:50:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") dup2(r1, r0) [ 246.456978] binder_alloc: 15402: binder_alloc_buf, no vma [ 246.463765] binder: 15402:15406 transaction failed 29189/-3, size 24-0 line 3254 [ 246.480501] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.589317] binder: 15424:15430 sending u0000000000000000 node 57, cookie mismatch 0000000000000004 != 0000000000000000 [ 246.601451] binder: 15424:15430 transaction failed 29201/-22, size 24-8 line 3364 [ 246.619678] binder: 15424:15430 ioctl c0306201 200002c0 returned -14 03:50:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x1000000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:50:29 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) [ 246.637830] binder_alloc: binder_alloc_mmap_handler: 15424 20001000-20004000 already mapped failed -16 [ 246.648227] binder: BINDER_SET_CONTEXT_MGR already set [ 246.653646] binder: 15424:15430 ioctl 40046207 0 returned -16 [ 246.659646] binder_alloc: 15424: binder_alloc_buf, no vma 03:50:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 246.689000] binder: 15424:15435 transaction failed 29189/-3, size 24-8 line 3254 [ 246.697665] binder: send failed reply for transaction 56 to 15424:15430 [ 246.707351] binder: undelivered TRANSACTION_COMPLETE [ 246.716289] binder_alloc: 15439: binder_alloc_buf, no vma [ 246.726604] binder: undelivered TRANSACTION_ERROR: 29201 03:50:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat], 0x0}}}], 0x0, 0x0, 0x0}) 03:50:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 246.750452] binder: 15439:15443 transaction failed 29189/-3, size 24-0 line 3254 [ 246.752427] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.766980] binder_alloc: 15439: binder_alloc_buf, no vma [ 246.775619] binder: 15439:15451 transaction failed 29189/-3, size 0-0 line 3254 [ 246.788929] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 246.805450] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.815295] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.833120] binder: 15455:15460 sending u0000000000000000 node 66, cookie mismatch 0000000000000004 != 0000000000000000 [ 246.844680] binder: 15455:15460 transaction failed 29201/-22, size 24-8 line 3364 03:50:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat], 0x0}}}], 0x0, 0x0, 0x0}) 03:50:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 246.861261] binder: 15455:15460 ioctl c0306201 200002c0 returned -14 [ 246.870233] binder: undelivered TRANSACTION_COMPLETE [ 246.888202] binder: release 15455:15460 transaction 65 out, still active [ 246.899292] binder: unexpected work type, 4, not freed 03:50:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 246.917257] binder: BINDER_SET_CONTEXT_MGR already set [ 246.919743] binder: undelivered TRANSACTION_COMPLETE [ 246.939484] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.942330] binder: 15465:15468 ioctl 40046207 0 returned -16 [ 246.954775] binder: send failed reply for transaction 65, target dead [ 246.965637] binder: 15465:15474 transaction failed 29189/-22, size 24-0 line 3117 [ 246.967714] binder: undelivered transaction 69, process died. [ 246.984709] binder: 15465:15468 transaction failed 29189/-22, size 0-0 line 3117 [ 246.986058] binder: 15470:15476 transaction failed 29189/-22, size 24-0 line 3117 [ 246.994659] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.006496] binder: undelivered TRANSACTION_ERROR: 29189 03:50:29 executing program 2: pipe2(0x0, 0x4000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f00000001c0)='[\'posix_acl_access\x00', 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000380)='S', 0x1}], 0x1, 0x4081886) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendfile(r1, r3, 0x0, 0x100000000) sendfile(r1, r3, 0x0, 0x20020102000007) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) r4 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/cgroup\x00') fallocate(0xffffffffffffffff, 0x4, 0x2, 0x7fff) dup2(r3, r2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016e15c0e6fc87970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760006000900a8e0912568d093074cbdffb64a9c4fd55e28349ca8723298e58720e2572e94b1f5b70d842e433f21ede08d57fdf75cac0791b73887a160"], 0x1) 03:50:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 247.015593] binder: 15473:15477 sending u0000000000000000 node 75, cookie mismatch 0000000000000004 != 0000000000000000 [ 247.025954] binder: BINDER_SET_CONTEXT_MGR already set [ 247.035134] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 247.035988] binder: 15473:15477 transaction failed 29201/-22, size 24-8 line 3364 [ 247.050579] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.056260] binder: 15475:15479 ioctl 40046207 0 returned -16 [ 247.063141] binder: 15473:15477 ioctl c0306201 200002c0 returned -14 [ 247.072315] binder: 15475:15479 sending u0000000000000000 node 79, cookie mismatch 0000000000000004 != 0000000000000000 [ 247.084543] binder: 15475:15479 transaction failed 29201/-22, size 24-8 line 3364 [ 247.092995] binder: release 15473:15477 transaction 74 out, still active [ 247.098194] binder: 15475:15479 ioctl c0306201 200002c0 returned -14 [ 247.106524] binder: unexpected work type, 4, not freed [ 247.106529] binder: undelivered TRANSACTION_COMPLETE [ 247.106540] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.109722] binder: send failed reply for transaction 74, target dead [ 247.115593] binder_alloc: binder_alloc_mmap_handler: 15475 20001000-20004000 already mapped failed -16 [ 247.119681] binder: send failed reply for transaction 78 to 15475:15479 [ 247.131249] binder_alloc: 15475: binder_alloc_buf, no vma [ 247.163122] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 247.174045] binder_alloc: 15475: binder_alloc_buf, no vma [ 247.182864] binder: undelivered TRANSACTION_COMPLETE [ 247.188004] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.196209] binder: 15475:15482 transaction failed 29189/-3, size 24-8 line 3254 [ 247.207361] binder: 15475:15479 transaction failed 29189/-3, size 24-8 line 3254 [ 247.215016] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.221025] binder: 15475:15482 ioctl c0306201 200002c0 returned -14 [ 247.236674] binder_alloc: 15486: binder_alloc_buf, no vma [ 247.243200] binder: 15486:15491 transaction failed 29189/-3, size 24-0 line 3254 [ 247.250920] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.256583] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.262202] binder: undelivered TRANSACTION_ERROR: 29189 03:50:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f00000006c0)="2504f2ff1f002c5bc8fe89e0d2d6", 0x0, 0xf0ffff00000855}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:50:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@remote, r1}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f00000003c0)=ANY=[@ANYBLOB="398600000000000016d00c9f0ee947f57e3e98dbc55b3407d1be2b244893c305587f13110000e80d6bdf16d562e7fe3003f8a6400797189a6f0d59dd7bca81e7bda8003b497c5d2d30d07b32e2cd2fa664a11a9e06f0152605767c5e797ca6bef128f10f6828bdf8"]) 03:50:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 247.582283] binder: 15500:15509 sending u0000000000000000 node 89, cookie mismatch 0000000000000004 != 0000000000000000 [ 247.594987] binder: 15501:15508 got new transaction with bad transaction stack, transaction 92 has target 15500:0 [ 247.597799] EXT4-fs (sda1): Unrecognized mount option "9†" or missing value [ 247.624565] binder: 15501:15508 transaction failed 29201/-71, size 0-0 line 3144 03:50:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x80) syncfs(0xffffffffffffffff) r2 = dup3(r1, r0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000000040)="c8", 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x9) [ 247.641112] binder: 15500:15509 transaction failed 29201/-22, size 24-8 line 3364 [ 247.661886] binder: 15500:15509 ioctl c0306201 200002c0 returned -14 [ 247.669888] binder: release 15501:15508 transaction 92 out, still active [ 247.683593] binder: undelivered TRANSACTION_COMPLETE 03:50:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:30 executing program 2: link(0x0, 0x0) unlink(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) eventfd2(0x0, 0x0) inotify_init() ioctl$PPPIOCDISCONN(r0, 0x7439) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) 03:50:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 247.695058] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.711015] binder: release 15500:15509 transaction 88 out, still active [ 247.729213] binder: unexpected work type, 4, not freed [ 247.756664] binder: undelivered TRANSACTION_COMPLETE 03:50:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x198, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}}}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x532}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200800000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92f8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000}, 0x40) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x400, 0x4) 03:50:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85}], 0x0}}}], 0x0, 0x0, 0x0}) [ 247.787179] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.802929] binder_alloc: 15500: binder_alloc_buf, no vma [ 247.810586] binder: send failed reply for transaction 88, target dead [ 247.817206] binder: send failed reply for transaction 92, target dead [ 247.825024] binder: 15521:15529 transaction failed 29189/-3, size 0-0 line 3254 03:50:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 247.829455] binder: 15526:15532 ioctl c0306201 200002c0 returned -14 [ 247.843401] binder: unexpected work type, 4, not freed [ 247.849138] binder: undelivered TRANSACTION_COMPLETE [ 247.858506] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.868965] binder: undelivered transaction 96, process died. 03:50:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:30 executing program 5: r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="2a94a48c12a81028fc10de9a8b4b1d9ac4", 0x11, 0x7}], 0x800803, &(0x7f0000000340)=ANY=[@ANYBLOB="65726f72733d636f6e74696a75652c6a6f75726e616c5f696f7072696f3d3078303030303030303030303030303030312c6e6f6175746f5f64615f616c6c6f632c7573726a71756f74613d2c66736e616d653d2c6f626a4c757365723d73c69ec30f41f78d82656375726974792c2a73656375726974792c736d61636b6673726f6f743d002c66736d616769633d3078303030303030303030303030303030351d726f6f74636f6e746578743d757365725f752c657569643d00", @ANYRESDEC=r0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00']) clock_settime(0x5, &(0x7f0000000180)) [ 247.914775] binder: 15533:15537 transaction failed 29189/-22, size 24-0 line 3117 [ 247.931192] binder: undelivered TRANSACTION_ERROR: 29189 03:50:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file1/file0\x00', 0xe, 0xe6091e44016b2d2c) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0xfffffffffffffcb2, 0x0, 0x100032, &(0x7f00000000c0)=ANY=[@ANYPTR]) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd0, r1, 0x228, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc041}, 0x1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xca, 0x88, &(0x7f00000001c0)="486f9603cc14f72fd19caa63e7d99816a245e11a125a64ced960076a77ffd908d706fdaa3b561a5ada2caf793e6d63b5b69242053268430e160eadbbc13bdd6ff597a9ca4c6d2427735238ca4e9c937e0a1e74f19422bfe44eccc9b872c2acbbb26b17f9badab24db3f4bd21e656745eba98448c399ad97641259cde5a4435154d053045706fa96fea49e072ec59761123ea4fbda11c14ed0c3c068c1a1f9af7ca851730c6bf772a6076a05ee4220c6eda5139f7792146143e6503d58bbbcf00298990e1be7d1da27fd4", &(0x7f00000002c0)=""/136, 0xffffffff}, 0x28) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) [ 247.959623] binder: 15535:15538 ioctl c0306201 200002c0 returned -14 [ 247.967756] binder: release 15536:15540 transaction 104 out, still active [ 247.996161] binder: undelivered TRANSACTION_COMPLETE [ 248.001902] binder: unexpected work type, 4, not freed 03:50:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 248.007246] binder: undelivered TRANSACTION_COMPLETE [ 248.012880] binder: undelivered transaction 101, process died. [ 248.018870] binder: send failed reply for transaction 104, target dead [ 248.061780] SELinux: ebitmap: truncated map [ 248.066822] binder: 15544:15548 transaction failed 29189/-22, size 0-0 line 3117 [ 248.086870] SELinux: failed to load policy [ 248.087968] binder: undelivered TRANSACTION_ERROR: 29189 [ 248.105110] binder: 15547:15549 ioctl c0306201 200002c0 returned -14 [ 248.128314] binder: unexpected work type, 4, not freed [ 248.137093] binder: undelivered TRANSACTION_COMPLETE [ 248.156933] binder: undelivered transaction 107, process died. 03:50:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 248.710787] binder: 15557:15559 transaction failed 29189/-22, size 24-8 line 3117 [ 248.720875] binder: 15557:15559 ioctl c0306201 200002c0 returned -14 [ 248.727442] SELinux: ebitmap: truncated map [ 248.729488] binder: 15556:15562 ioctl c0306201 0 returned -14 [ 248.732637] SELinux: failed to load policy [ 248.740898] binder: 15556:15562 transaction failed 29189/-22, size 0-0 line 3117 [ 248.752977] binder: undelivered TRANSACTION_ERROR: 29189 03:50:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 248.759013] binder: undelivered TRANSACTION_ERROR: 29189 03:50:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 248.800167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.811078] binder_alloc: 15564: binder_alloc_buf, no vma [ 248.817263] binder: 15564:15565 transaction failed 29189/-3, size 24-8 line 3254 [ 248.826142] binder: 15564:15565 ioctl c0306201 200002c0 returned -14 03:50:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) open(0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0x0, 0x101}) creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 248.846110] binder_alloc: 15564: binder_alloc_buf, no vma [ 248.859142] binder: 15566:15569 transaction failed 29189/-3, size 24-8 line 3254 [ 248.863224] binder: undelivered TRANSACTION_ERROR: 29189 [ 248.876227] binder: 15570:15573 ioctl c0306201 0 returned -14 [ 248.878793] binder: 15566:15569 ioctl c0306201 200002c0 returned -14 [ 248.884658] binder: 15570:15573 transaction failed 29189/-22, size 0-0 line 3117 [ 248.903125] binder: undelivered TRANSACTION_ERROR: 29189 [ 248.906301] SELinux: ebitmap: truncated map [ 248.914355] SELinux: failed to load policy [ 248.917290] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x8}, 0x10) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00']) stat(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000240)) 03:50:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f00000006c0)="2504f2ff1f002c5bc8fe89e0d2d6", 0x0, 0xf0ffff00000855}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 251.502277] binder: 15743:15745 transaction failed 29189/-22, size 24-8 line 3117 [ 251.511233] binder: 15740:15746 ioctl c0306201 0 returned -14 [ 251.512701] SELinux: ebitmap: truncated map [ 251.518121] binder: 15743:15745 ioctl c0306201 200002c0 returned -14 [ 251.529293] binder: 15740:15746 transaction failed 29189/-22, size 0-0 line 3117 [ 251.537810] SELinux: failed to load policy [ 251.539416] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 251.555908] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:34 executing program 2: 03:50:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 251.652358] EXT4-fs (sda1): re-mounted. Opts: [ 251.659987] binder_alloc: 15756: binder_alloc_buf, no vma [ 251.667543] binder_alloc: 15756: binder_alloc_buf, no vma [ 251.674034] binder: 15757:15761 transaction failed 29189/-3, size 0-0 line 3254 [ 251.683671] binder: 15756:15764 transaction failed 29189/-3, size 24-8 line 3254 03:50:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) connect(r0, &(0x7f0000000140)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) 03:50:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:34 executing program 2: [ 251.713086] binder_alloc: 15756: binder_alloc_buf, no vma [ 251.716652] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.733206] binder: 15756:15772 transaction failed 29189/-3, size 24-8 line 3254 [ 251.742924] binder: 15756:15772 ioctl c0306201 200002c0 returned -14 03:50:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 251.763833] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.770562] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 2: 03:50:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 251.834267] binder: 15776:15782 transaction failed 29189/-22, size 0-0 line 3117 [ 251.844572] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.866360] binder_alloc: 15783: binder_alloc_buf, no vma [ 251.873072] binder: 15783:15784 transaction failed 29189/-3, size 24-8 line 3254 03:50:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 251.901336] binder: 15783:15784 ioctl c0306201 200002c0 returned -14 [ 251.934059] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:34 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:34 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@deltclass={0x94, 0x29, 0x828, 0x70bd2b, 0x25dfdbfd, {0x0, r1, {0x5, 0xffff}, {0x2, 0xf}, {0xfff7, 0xe}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x64, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xfffffffffffffffd, 0x3, 0xe35}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0xffffffffffffc80b, 0x20}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x1000000000000000, 0xfffffffffffffffe}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x0, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0xb4f, 0x9, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x7fffffff}}]}}]}, 0x94}}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') accept4(r2, &(0x7f0000000080)=@ipx, &(0x7f0000000140)=0x80, 0x80800) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) [ 251.956564] binder: 15794:15797 transaction failed 29189/-22, size 0-0 line 3117 [ 251.970377] binder: undelivered TRANSACTION_ERROR: 29189 03:50:34 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 252.022764] binder: 15800:15803 transaction failed 29189/-22, size 24-0 line 3117 [ 252.029911] SELinux: ebitmap: truncated map [ 252.031432] binder: 15800:15803 ioctl c0306201 200002c0 returned -14 [ 252.039559] SELinux: failed to load policy [ 252.050328] binder_alloc: 15801: binder_alloc_buf, no vma [ 252.055924] binder: 15801:15805 transaction failed 29189/-3, size 24-8 line 3254 03:50:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000200)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x20003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80083) sendfile(r4, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 252.079599] binder: 15801:15805 ioctl c0306201 200002c0 returned -14 [ 252.084431] binder_alloc: 15801: binder_alloc_buf, no vma [ 252.089847] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.101800] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.119127] binder: 15806:15811 transaction failed 29189/-3, size 0-0 line 3254 03:50:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 252.136911] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.182004] SELinux: ebitmap: truncated map [ 252.203204] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 252.212647] SELinux: failed to load policy [ 252.218712] binder: 15819:15825 transaction failed 29189/-22, size 24-8 line 3117 [ 252.234126] binder: 15819:15825 ioctl c0306201 200002c0 returned -14 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80083) sendfile(r4, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:35 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 252.253068] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.268844] binder: 15827:15830 transaction failed 29189/-22, size 0-0 line 3117 [ 252.279984] binder: undelivered TRANSACTION_ERROR: 29189 03:50:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000002240)=ANY=[@ANYBLOB="e7745f18a1b46daeda8ac66528d7fe88b925f797c296424a47a7ad32cf701df7b0a327a777d41a22cbaa855693cbda1fa4684283c61255444ecb1562c3a4b030ee4a1d2af7d11e7bd7aa12b2c64bb432038ee023eda14bb01f4c7c2f73c6b5c52f1c14c5e77afbe8f7575b8d436b795e663be61f481b5cc2cac345712d39c4d59bc66ea7f4bf9acb4509b8c71669bedcd759cde74f4cb6a0d86d33d35f1c23c6573b113f9cb72416d3568ae43f040bafc000bf2fe0b42441bc797b02000051b307c3b0d80c4eaf6a7d34"]) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000340)=""/87, 0x57}], 0x5, &(0x7f0000000440)=""/86, 0x56}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f0000000500)=""/212, 0xd4}], 0x2, &(0x7f0000000640)=""/4096, 0x1000}, 0xffffffffffffff7f}, {{&(0x7f0000001640)=@nl, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/18, 0x12}, {&(0x7f0000001700)=""/103, 0x67}, {&(0x7f0000001780)=""/200, 0xc8}, {&(0x7f0000001880)=""/21, 0x15}, {&(0x7f00000018c0)=""/230, 0xe6}, {&(0x7f00000019c0)=""/28, 0x1c}, {&(0x7f0000001a00)=""/203, 0xcb}, {&(0x7f0000001b00)=""/187, 0xbb}, {&(0x7f0000001bc0)=""/253, 0xfd}], 0xa, &(0x7f0000001d80)=""/215, 0xd7}, 0x5b25854a}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e80)=""/239, 0xef}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/38, 0x26}, {&(0x7f0000001fc0)=""/28, 0x1c}, {&(0x7f0000004640)=""/4096, 0x1000}], 0x5, &(0x7f0000002080)=""/79, 0x4f}, 0x2bb40}], 0x4, 0x40000000, &(0x7f0000002200)={0x0, 0x1c9c380}) [ 252.322460] SELinux: ebitmap: truncated map 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80083) sendfile(r4, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:35 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 252.351642] SELinux: failed to load policy [ 252.363914] binder: 15833:15842 transaction failed 29189/-22, size 24-8 line 3117 [ 252.380922] binder: 15841:15843 transaction failed 29189/-22, size 0-0 line 3117 [ 252.393616] binder: 15833:15842 ioctl c0306201 200002c0 returned -14 03:50:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 252.406485] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.412228] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.461140] SELinux: ebitmap: truncated map [ 252.470804] SELinux: failed to load policy [ 252.510451] binder: 15849:15853 transaction failed 29189/-22, size 24-8 line 3117 [ 252.534380] binder: 15849:15853 ioctl c0306201 200002c0 returned -14 [ 252.544899] binder: undelivered TRANSACTION_ERROR: 29189 03:50:35 executing program 2: request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 03:50:35 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 252.586514] EXT4-fs (sda1): Unrecognized mount option "çt_¡´m®ÚŠÆe(×þˆ¹%÷—–BJG§­2Ïp÷°£'§wÔ"˪…V“ËÚ¤hBƒÆUDNËbä°0îJ*÷Ñ{ת²ÆK´2Žà#í¡K°L|/sƵÅ/Åçzûè÷W[Cky^f;æH\ÂÊÃEq-9ÄÕ›Æn§ô¿šËE ¸Çi¾Ü×YÍçOL¶ Øm3Ó_#ÆW;?œ·$ÓVŠä? ¯À" or missing value [ 252.660824] SELinux: ebitmap: truncated map [ 252.661662] binder: 15862:15865 transaction failed 29189/-22, size 0-0 line 3117 [ 252.666396] SELinux: failed to load policy [ 252.676106] binder: undelivered TRANSACTION_ERROR: 29189 03:50:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYRESOCT]) 03:50:35 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 252.702758] EXT4-fs (sda1): Unrecognized mount option "çt_¡´m®ÚŠÆe(×þˆ¹%÷—–BJG§­2Ïp÷°£'§wÔ"˪…V“ËÚ¤hBƒÆUDNËbä°0îJ*÷Ñ{ת²ÆK´2Žà#í¡K°L|/sƵÅ/Åçzûè÷W[Cky^f;æH\ÂÊÃEq-9ÄÕ›Æn§ô¿šËE ¸Çi¾Ü×YÍçOL¶ Øm3Ó_#ÆW;?œ·$ÓVŠä? ¯À" or missing value 03:50:35 executing program 2: 03:50:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 252.806557] SELinux: ebitmap: truncated map [ 252.814292] SELinux: failed to load policy 03:50:35 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:35 executing program 2: 03:50:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 252.848849] binder: 15883:15889 transaction failed 29189/-22, size 0-0 line 3117 [ 252.861978] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.899362] SELinux: ebitmap: truncated map 03:50:35 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 252.951318] EXT4-fs (sda1): Unrecognized mount option "01777777777777777777777" or missing value [ 252.964538] binder: 15898:15905 transaction failed 29189/-22, size 0-0 line 3117 03:50:35 executing program 2: 03:50:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 252.992836] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.019775] SELinux: ebitmap: truncated map [ 253.056592] EXT4-fs (sda1): Unrecognized mount option "01777777777777777777777" or missing value 03:50:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x22, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$lock(r0, 0x25, &(0x7f0000000300)={0x2, 0x4, 0x67bd, 0x10000, r1}) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:36 executing program 2: 03:50:36 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 2: 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 253.137504] binder: 15921:15925 transaction failed 29189/-22, size 0-0 line 3117 [ 253.145726] SELinux: ebitmap: truncated map [ 253.146810] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.169513] sel_write_load: 2 callbacks suppressed [ 253.169517] SELinux: failed to load policy 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 253.246808] binder: 15931:15933 transaction failed 29189/-22, size 0-0 line 3117 [ 253.255321] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.287188] binder_alloc: 15934: binder_alloc_buf, no vma [ 253.294584] binder: 15934:15939 transaction failed 29189/-3, size 24-8 line 3254 [ 253.304182] binder: 15934:15939 ioctl c0306201 200002c0 returned -14 [ 253.312544] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.333095] SELinux: ebitmap: truncated map [ 253.357423] SELinux: failed to load policy [ 253.374043] binder: 15943:15948 transaction failed 29189/-22, size 0-0 line 3117 [ 253.387638] binder: undelivered TRANSACTION_ERROR: 29189 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 2: 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x7, 0x1, 0x400, 0x3}) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:36 executing program 2: [ 253.482382] binder_alloc: 15956: binder_alloc_buf, no vma [ 253.490009] binder: 15956:15962 transaction failed 29189/-3, size 24-8 line 3254 [ 253.505758] SELinux: ebitmap: truncated map [ 253.508292] binder_alloc: 15956: binder_alloc_buf, no vma [ 253.511392] SELinux: failed to load policy [ 253.519569] binder: 15957:15964 transaction failed 29189/-3, size 24-0 line 3254 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 253.526844] binder: 15956:15962 ioctl c0306201 200002c0 returned -14 [ 253.547281] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.568479] binder: 15957:15970 transaction failed 29189/-22, size 0-0 line 3117 03:50:36 executing program 2: 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 253.584574] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.595930] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.604328] EXT4-fs (sda1): Unrecognized mount option "d" or missing value 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 2: 03:50:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="6ffa21e8c52ff19da460dbc3e490aca0f9ec07554b89d89847fb734f7f4423a6c3c3e4453c601d303d5034d1b398b1049733fce8c342f1829f5695aaa6b14642418cdd030b875f8f8881cb6bfbc1cfd9be88fe96d179216acf325087bd7e223ab9cdea7bd5f9a6107ea86acc1c119379fa5a9016eb269b924aa82677917417b374493f18927dcf4face4cb5a17ea6368492dcfdcfcc63aafe2210d4f6b343578bdc196059eb6", 0xa6, 0x7}, {&(0x7f0000000240)="e10976b5ed4e2c03325ca2234976214c70c4dcc7159b2bce75cdcc3a3675631dcab2c6e700c51a9e356a7af4377bad05be681e0e7d6028c8e22d4b092dbf2f3d3c958abf41d7b4497b0035a617e86a6ef27e2b31cb372d3d9dfc1c16f4fdcbc0058f06d68c0fe7d03f2ada94fbbb68074f090a0735d2279d67e69b620a40e57cb809f8418a318b3afbfbe875", 0x8c, 0x7}], 0x100080, &(0x7f0000000300)={[{@rodir='rodir'}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate='uni_xlate=1'}, {@uni_xlateno='uni_xlate=0'}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@rodir='rodir'}, {@fat=@usefree='usefree'}], [{@dont_measure='dont_measure'}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 253.664845] binder_alloc: 15978: binder_alloc_buf, no vma [ 253.672139] binder: 15978:15982 transaction failed 29189/-3, size 24-8 line 3254 [ 253.676671] SELinux: ebitmap: truncated map [ 253.680823] binder: 15978:15982 ioctl c0306201 200002c0 returned -14 [ 253.696666] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.709098] SELinux: failed to load policy 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:36 executing program 2: 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 253.759661] binder: 15987:15992 transaction failed 29189/-22, size 24-0 line 3117 [ 253.778623] binder: undelivered TRANSACTION_ERROR: 29189 [ 253.785876] binder_alloc: 15993: binder_alloc_buf, no vma [ 253.799557] binder: 15993:15996 transaction failed 29189/-3, size 24-8 line 3254 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 2: [ 253.812728] binder: 15993:15996 ioctl c0306201 200002c0 returned -14 [ 253.821107] binder: undelivered TRANSACTION_ERROR: 29189 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 253.889047] binder: 16003:16009 transaction failed 29189/-22, size 24-0 line 3117 [ 253.899319] binder: undelivered TRANSACTION_ERROR: 29189 03:50:36 executing program 2: 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 253.931292] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 253.941298] binder_alloc: 16010: binder_alloc_buf, no vma [ 253.963455] binder: 16010:16018 transaction failed 29189/-3, size 24-8 line 3254 [ 253.974173] binder: 16010:16018 ioctl c0306201 200002c0 returned -14 [ 253.983245] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.004035] binder: 16020:16023 transaction failed 29189/-22, size 24-0 line 3117 [ 254.020151] binder: undelivered TRANSACTION_ERROR: 29189 03:50:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 03:50:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:36 executing program 2: 03:50:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 254.119641] binder_alloc: 16034: binder_alloc_buf, no vma [ 254.125705] binder: 16034:16038 transaction failed 29189/-3, size 24-8 line 3254 [ 254.148766] binder: 16034:16038 ioctl c0306201 200002c0 returned -14 [ 254.157938] binder_alloc: 16034: binder_alloc_buf, no vma [ 254.163373] binder: undelivered TRANSACTION_ERROR: 29189 03:50:37 executing program 2: 03:50:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 254.166750] binder: 16035:16043 transaction failed 29189/-3, size 24-0 line 3254 [ 254.180759] binder: undelivered TRANSACTION_ERROR: 29189 03:50:37 executing program 2: [ 254.274278] binder: 16047:16057 transaction failed 29189/-22, size 24-8 line 3117 [ 254.284008] binder: 16051:16056 transaction failed 29189/-22, size 24-0 line 3117 [ 254.292788] binder: 16047:16057 ioctl c0306201 200002c0 returned -14 [ 254.303789] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.313597] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.318680] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 254.409089] EXT4-fs (sda1): Unrecognized mount option "d" or missing value 03:50:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:50:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:37 executing program 2: 03:50:37 executing program 2: 03:50:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 03:50:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 254.504849] binder: 16075:16078 transaction failed 29189/-22, size 24-0 line 3117 [ 254.515506] binder: 16075:16078 ioctl c0306201 0 returned -14 [ 254.523526] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.539455] binder: 16076:16080 transaction failed 29189/-22, size 24-8 line 3117 03:50:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:37 executing program 2: [ 254.550147] binder: 16076:16080 ioctl c0306201 200002c0 returned -14 [ 254.561306] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.592169] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 254.604517] CPU: 0 PID: 16084 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 254.611726] Call Trace: [ 254.614308] dump_stack+0xb9/0x10e [ 254.617846] warn_alloc.cold+0x91/0x1ab [ 254.624288] ? zone_watermark_ok_safe+0x250/0x250 [ 254.629117] ? lock_acquire+0x10f/0x380 [ 254.633089] ? avc_has_perm+0x9c/0x350 [ 254.637093] ? avc_has_perm+0x1b7/0x350 [ 254.641054] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 254.645733] ? __vmalloc_node_range+0x390/0x690 [ 254.650392] ? check_preemption_disabled+0x35/0x1f0 [ 254.655399] ? sel_write_load+0x199/0xfb0 [ 254.659553] ? vmalloc+0x60/0x80 [ 254.662904] ? sel_write_load+0x199/0xfb0 [ 254.667056] ? sel_write_load+0x199/0xfb0 [ 254.671200] ? sel_read_bool+0x240/0x240 [ 254.675281] ? trace_hardirqs_on+0x10/0x10 [ 254.679605] ? check_preemption_disabled+0x35/0x1f0 [ 254.684622] ? __vfs_write+0xf9/0x5a0 [ 254.688406] ? sel_read_bool+0x240/0x240 [ 254.692474] ? HARDIRQ_verbose+0x10/0x10 [ 254.696528] ? kernel_read+0x110/0x110 [ 254.700448] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 254.705923] ? rcu_read_lock_sched_held+0x10a/0x130 [ 254.710957] ? vfs_write+0x17f/0x4d0 [ 254.714695] ? SyS_write+0xc0/0x1a0 [ 254.718319] ? SyS_read+0x1a0/0x1a0 [ 254.721961] ? do_clock_gettime+0xd0/0xd0 [ 254.726147] ? do_syscall_64+0x43/0x4b0 [ 254.730120] ? SyS_read+0x1a0/0x1a0 [ 254.733774] ? do_syscall_64+0x19b/0x4b0 [ 254.737889] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.744987] warn_alloc_show_mem: 1 callbacks suppressed [ 254.744993] Mem-Info: [ 254.766721] active_anon:65382 inactive_anon:39 isolated_anon:0 [ 254.766721] active_file:4631 inactive_file:12049 isolated_file:0 [ 254.766721] unevictable:0 dirty:213 writeback:1 unstable:0 [ 254.766721] slab_reclaimable:5762 slab_unreclaimable:59101 [ 254.766721] mapped:58802 shmem:62 pagetables:2551 bounce:0 [ 254.766721] free:1432585 free_pcp:226 free_cma:0 [ 254.771211] binder: 16086:16087 transaction failed 29189/-22, size 24-0 line 3117 [ 254.803338] Node 0 active_anon:261528kB inactive_anon:156kB active_file:18524kB inactive_file:48196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235208kB dirty:852kB writeback:4kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 254.818050] binder: 16086:16092 ioctl c0306201 0 returned -14 03:50:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 254.850200] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.856499] binder: undelivered TRANSACTION_ERROR: 29189 [ 254.894907] binder: 16090:16096 transaction failed 29189/-22, size 24-8 line 3117 [ 254.901958] lowmem_reserve[]: 0 3437 3437 03:50:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:50:37 executing program 2: [ 254.910329] Normal free:2650304kB min:5476kB low:8996kB high:12516kB active_anon:261728kB inactive_anon:156kB active_file:18524kB inactive_file:48396kB unevictable:0kB writepending:856kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5504kB pagetables:10204kB bounce:0kB free_pcp:824kB local_pcp:472kB free_cma:0kB [ 254.916578] binder: 16090:16096 ioctl c0306201 200002c0 returned -14 [ 254.943209] lowmem_reserve[]: 0 0 0 [ 254.951769] binder: undelivered TRANSACTION_ERROR: 29189 03:50:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 254.959358] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 254.974855] Normal: 6001*4kB (UME) 2788*8kB (UME) 3042*16kB (UME) 748*32kB (UME) 369*64kB (UME) 164*128kB (UME) 77*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 4*2048kB (ME) 595*4096kB (M) = 2650564kB [ 255.001290] 16765 total pagecache pages [ 255.007326] 0 pages in swap cache [ 255.013374] Swap cache stats: add 0, delete 0, find 0/0 [ 255.022728] Free swap = 0kB [ 255.025891] Total swap = 0kB [ 255.032119] binder: 16099:16107 transaction failed 29189/-22, size 24-0 line 3117 [ 255.041715] 1965979 pages RAM [ 255.044840] 0 pages HighMem/MovableOnly [ 255.048827] 315697 pages reserved [ 255.053153] binder: 16099:16107 ioctl c0306201 0 returned -14 [ 255.067536] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.094707] binder: 16109:16111 ioctl c0306201 200002c0 returned -14 [ 255.112503] binder: unexpected work type, 4, not freed 03:50:38 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x400000000002) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x12000, &(0x7f00000005c0)=ANY=[@ANYBLOB='mode=00000000000000000004000,mode=00000000000000000003777,mode=00000000000020000000001,mode=00000000000000000000010,mode=00000000000000000000151,mode=00000000000000000006122,mode=00000000000000000000001,mode=00000000000000000021426,mode=00000000000004477115513,mode=00000000000000000000006,fowner>', @ANYRESDEC=r0, @ANYBLOB="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"]) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000004c0)}, 0x27323103) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000800)={0x0, 0xfb, 0x10a, 0x1, 0x6, "40ca90885965dafb5fa64afc3f49cabd", "594a799d0a5ed64b73daa49a88be648b52d77379bfb0aeb93582c6a2095c110ee5760bf062495c807e42b72a765e336e3b3678367304b15ece95acbd8364537a3ac677511e643e0608e353f13616d48cfe9058b9b9a7a40bee107659f21f9f217cb6cd97827010ec697eb0b115240b258961ea2ebc8917c79ac726794946b4d31f6ddb1ce4e125631a2d0fd3bc28c920a3b4da40f631cd3e2c1da463d76722a908bef7898487d95e0c2e3ce0b93f9daffa698a5332e1c8621ee630b0757649ecfb900349faa51ff180864cf61e19874b665338927c7b5b4f22b9c411b6aaf5d0d1ef3c6547fe022d083a5122847dce0136fde3d9e0"}, 0x10a, 0x1) 03:50:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) 03:50:38 executing program 2: 03:50:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 255.117812] binder: undelivered TRANSACTION_COMPLETE 03:50:38 executing program 2: [ 255.158430] binder: undelivered transaction 167, process died. [ 255.178975] binder: 16118:16121 transaction failed 29189/-22, size 24-0 line 3117 [ 255.194848] binder: 16120:16123 ioctl c0306201 200002c0 returned -14 [ 255.212281] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 255.213024] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.236926] CPU: 1 PID: 16124 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 255.244196] Call Trace: [ 255.245130] binder: unexpected work type, 4, not freed [ 255.246826] dump_stack+0xb9/0x10e [ 255.246849] warn_alloc.cold+0x91/0x1ab [ 255.246865] ? zone_watermark_ok_safe+0x250/0x250 [ 255.264497] ? lock_acquire+0x10f/0x380 [ 255.267665] binder: undelivered TRANSACTION_COMPLETE [ 255.268490] ? avc_has_perm+0x9c/0x350 [ 255.268515] ? avc_has_perm+0x1b7/0x350 [ 255.268530] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 255.277148] binder: undelivered transaction 172, process died. [ 255.277557] ? __vmalloc_node_range+0x390/0x690 [ 255.296855] ? check_preemption_disabled+0x35/0x1f0 [ 255.301896] ? sel_write_load+0x199/0xfb0 [ 255.306157] ? vmalloc+0x60/0x80 03:50:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:38 executing program 2: [ 255.309543] ? sel_write_load+0x199/0xfb0 [ 255.313735] ? sel_write_load+0x199/0xfb0 [ 255.317914] ? sel_read_bool+0x240/0x240 [ 255.322010] ? trace_hardirqs_on+0x10/0x10 [ 255.326285] ? check_preemption_disabled+0x35/0x1f0 [ 255.331360] ? __vfs_write+0xf9/0x5a0 [ 255.335185] ? sel_read_bool+0x240/0x240 [ 255.339265] ? HARDIRQ_verbose+0x10/0x10 [ 255.343875] ? kernel_read+0x110/0x110 [ 255.347803] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 255.353280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 255.358330] ? vfs_write+0x17f/0x4d0 03:50:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, 0x0, 0x0) [ 255.362081] ? SyS_write+0xc0/0x1a0 [ 255.365719] ? SyS_read+0x1a0/0x1a0 [ 255.369368] ? do_clock_gettime+0xd0/0xd0 [ 255.373597] ? do_syscall_64+0x43/0x4b0 [ 255.377672] ? SyS_read+0x1a0/0x1a0 [ 255.381304] ? do_syscall_64+0x19b/0x4b0 [ 255.385586] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.458926] binder: 16140:16144 ioctl c0306201 200002c0 returned -14 [ 255.475997] binder: unexpected work type, 4, not freed [ 255.481873] binder: undelivered TRANSACTION_COMPLETE [ 255.497426] binder: release 16143:16150 transaction 179 out, still active [ 255.516033] binder: undelivered TRANSACTION_COMPLETE [ 255.522507] binder: undelivered transaction 176, process died. [ 255.531016] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 255.541747] binder: send failed reply for transaction 179, target dead [ 255.548595] CPU: 1 PID: 16153 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 255.555791] Call Trace: [ 255.558373] dump_stack+0xb9/0x10e [ 255.561918] warn_alloc.cold+0x91/0x1ab [ 255.565901] ? zone_watermark_ok_safe+0x250/0x250 [ 255.575789] ? lock_acquire+0x10f/0x380 [ 255.595115] ? avc_has_perm+0x9c/0x350 [ 255.599038] ? avc_has_perm+0x1b7/0x350 [ 255.603047] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 255.607719] ? __vmalloc_node_range+0x390/0x690 [ 255.612394] ? check_preemption_disabled+0x35/0x1f0 [ 255.618450] ? sel_write_load+0x199/0xfb0 [ 255.622618] ? vmalloc+0x60/0x80 [ 255.625982] ? sel_write_load+0x199/0xfb0 [ 255.630130] ? sel_write_load+0x199/0xfb0 [ 255.634282] ? sel_read_bool+0x240/0x240 [ 255.638356] ? trace_hardirqs_on+0x10/0x10 [ 255.642591] ? check_preemption_disabled+0x35/0x1f0 [ 255.647604] ? __vfs_write+0xf9/0x5a0 [ 255.651389] ? sel_read_bool+0x240/0x240 [ 255.655437] ? HARDIRQ_verbose+0x10/0x10 [ 255.659496] ? kernel_read+0x110/0x110 03:50:38 executing program 2: 03:50:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x88) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="5eaf09550e23932c2718f8d26eee73f4443d437f7352c2826128c0fc802b413acef84c1f8715e7153bf734107ccc54a632b24f642645997a3fd530833bf85eaa69145bdf68a31d8c69264303366b58451ac0bf6c3944309cbd53cbf8defe0e388a35fe2bab62edd72d7b00691e887a2cacfcd4c20514263267f553495c370f378ba84f45d28fca20fb8c1af106f38e7dbccd57e27254a6fa17ed0f3f4ed4d3d079c72211c154077ea17998fd85e2ca2dbe1862ddf820a29e7e639487ee899978f118e88241eb31254a3c92c35fc7c239e564cf6fe04322bd3398a82621149e99"]) 03:50:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[], 0x0) [ 255.667349] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 255.672822] ? rcu_read_lock_sched_held+0x10a/0x130 [ 255.677853] ? vfs_write+0x17f/0x4d0 [ 255.681666] ? SyS_write+0xc0/0x1a0 [ 255.685281] ? SyS_read+0x1a0/0x1a0 [ 255.688902] ? do_clock_gettime+0xd0/0xd0 [ 255.693052] ? do_syscall_64+0x43/0x4b0 [ 255.697013] ? SyS_read+0x1a0/0x1a0 [ 255.700626] ? do_syscall_64+0x19b/0x4b0 [ 255.704709] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:50:38 executing program 2: 03:50:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 255.764053] binder: 16156:16160 ioctl c0306201 0 returned -14 [ 255.772865] binder: 16156:16160 ioctl c0306201 200002c0 returned -14 [ 255.783491] binder: unexpected work type, 4, not freed [ 255.788798] binder: undelivered TRANSACTION_COMPLETE [ 255.796420] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 255.805539] binder: release 16157:16162 transaction 184 out, still active 03:50:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 255.816154] binder: undelivered TRANSACTION_COMPLETE [ 255.826052] binder: undelivered transaction 181, process died. [ 255.842317] CPU: 0 PID: 16163 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 255.846110] binder: send failed reply for transaction 184, target dead [ 255.849533] Call Trace: [ 255.849556] dump_stack+0xb9/0x10e [ 255.849584] warn_alloc.cold+0x91/0x1ab [ 255.866697] ? zone_watermark_ok_safe+0x250/0x250 [ 255.871530] ? lock_acquire+0x10f/0x380 [ 255.875499] ? avc_has_perm+0x9c/0x350 [ 255.879484] ? avc_has_perm+0x1b7/0x350 [ 255.883462] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 255.888129] ? __vmalloc_node_range+0x390/0x690 [ 255.892814] ? check_preemption_disabled+0x35/0x1f0 [ 255.897824] ? sel_write_load+0x199/0xfb0 [ 255.901986] ? vmalloc+0x60/0x80 [ 255.905362] ? sel_write_load+0x199/0xfb0 [ 255.909505] ? sel_write_load+0x199/0xfb0 [ 255.913918] ? sel_read_bool+0x240/0x240 [ 255.917990] ? trace_hardirqs_on+0x10/0x10 [ 255.922216] ? check_preemption_disabled+0x35/0x1f0 [ 255.927245] ? __vfs_write+0xf9/0x5a0 [ 255.931051] ? sel_read_bool+0x240/0x240 [ 255.935111] ? HARDIRQ_verbose+0x10/0x10 [ 255.939155] ? kernel_read+0x110/0x110 [ 255.943038] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 255.948483] ? rcu_read_lock_sched_held+0x10a/0x130 [ 255.953491] ? vfs_write+0x17f/0x4d0 [ 255.957193] ? SyS_write+0xc0/0x1a0 [ 255.960813] ? SyS_read+0x1a0/0x1a0 [ 255.964428] ? do_clock_gettime+0xd0/0xd0 [ 255.968563] ? do_syscall_64+0x43/0x4b0 [ 255.972541] ? SyS_read+0x1a0/0x1a0 [ 255.976178] ? do_syscall_64+0x19b/0x4b0 [ 255.980257] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.987857] warn_alloc_show_mem: 2 callbacks suppressed [ 255.987861] Mem-Info: [ 255.996397] active_anon:65519 inactive_anon:39 isolated_anon:0 [ 255.996397] active_file:4631 inactive_file:12059 isolated_file:0 [ 255.996397] unevictable:0 dirty:214 writeback:0 unstable:0 03:50:38 executing program 2: [ 255.996397] slab_reclaimable:5753 slab_unreclaimable:59050 [ 255.996397] mapped:58802 shmem:62 pagetables:2500 bounce:0 [ 255.996397] free:1432499 free_pcp:336 free_cma:0 [ 256.036616] Node 0 active_anon:262076kB inactive_anon:156kB active_file:18524kB inactive_file:48236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235208kB dirty:856kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 256.064842] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.093897] lowmem_reserve[]: 0 3437 3437 03:50:39 executing program 2: 03:50:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 256.098164] Normal free:2648896kB min:5476kB low:8996kB high:12516kB active_anon:262332kB inactive_anon:156kB active_file:18524kB inactive_file:48236kB unevictable:0kB writepending:856kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5632kB pagetables:10364kB bounce:0kB free_pcp:808kB local_pcp:520kB free_cma:0kB [ 256.131495] binder: 16168:16179 ioctl c0306201 0 returned -14 [ 256.138103] binder: release 16171:16180 transaction 186 out, still active [ 256.138110] binder: 16168:16179 ioctl c0306201 200002c0 returned -14 [ 256.147104] lowmem_reserve[]: 0 0 0 03:50:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 256.156659] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 256.170115] binder: undelivered TRANSACTION_COMPLETE [ 256.173210] Normal: 5869*4kB (UME) 2776*8kB (UME) 3016*16kB (UME) 733*32kB (UME) 374*64kB (UME) 164*128kB (UME) 77*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 4*2048kB (ME) 595*4096kB (M) = 2649364kB [ 256.179559] binder: send failed reply for transaction 186, target dead [ 256.195342] 16777 total pagecache pages [ 256.202513] binder: undelivered transaction 187, process died. [ 256.207719] 0 pages in swap cache 03:50:39 executing program 5: unlink(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80000) [ 256.217546] Swap cache stats: add 0, delete 0, find 0/0 [ 256.229787] binder: undelivered TRANSACTION_COMPLETE [ 256.240201] Free swap = 0kB [ 256.251458] Total swap = 0kB 03:50:39 executing program 2: 03:50:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[], 0x0) 03:50:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 256.269336] 1965979 pages RAM [ 256.276075] 0 pages HighMem/MovableOnly [ 256.284259] 315697 pages reserved [ 256.297409] binder: 16185:16191 ioctl c0306201 0 returned -14 03:50:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:50:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:39 executing program 2: [ 256.316324] binder: 16185:16191 ioctl c0306201 200002c0 returned -14 [ 256.325233] binder: unexpected work type, 4, not freed [ 256.330863] binder: undelivered TRANSACTION_COMPLETE [ 256.344248] binder: undelivered transaction 191, process died. [ 256.351440] binder: send failed reply for transaction 194 to 16188:16194 [ 256.358560] binder: undelivered TRANSACTION_COMPLETE [ 256.363985] binder: undelivered TRANSACTION_ERROR: 29189 [ 256.405357] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 256.417348] CPU: 1 PID: 16200 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 256.424649] Call Trace: [ 256.427259] dump_stack+0xb9/0x10e [ 256.430954] warn_alloc.cold+0x91/0x1ab [ 256.434964] ? zone_watermark_ok_safe+0x250/0x250 [ 256.439912] ? lock_acquire+0x10f/0x380 [ 256.443915] ? avc_has_perm+0x9c/0x350 [ 256.447830] ? avc_has_perm+0x1b7/0x350 03:50:39 executing program 2: [ 256.452175] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 256.456874] ? __vmalloc_node_range+0x390/0x690 [ 256.461561] ? check_preemption_disabled+0x35/0x1f0 [ 256.466601] ? sel_write_load+0x199/0xfb0 [ 256.470791] ? vmalloc+0x60/0x80 [ 256.474191] ? sel_write_load+0x199/0xfb0 [ 256.476788] binder: 16206:16209 ioctl c0306201 200002c0 returned -14 [ 256.478353] ? sel_write_load+0x199/0xfb0 [ 256.478380] ? sel_read_bool+0x240/0x240 [ 256.478403] ? trace_hardirqs_on+0x10/0x10 [ 256.487189] binder: unexpected work type, 4, not freed 03:50:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[], 0x0) [ 256.489058] ? check_preemption_disabled+0x35/0x1f0 [ 256.489086] ? __vfs_write+0xf9/0x5a0 [ 256.489095] ? sel_read_bool+0x240/0x240 [ 256.489106] ? HARDIRQ_verbose+0x10/0x10 [ 256.489117] ? kernel_read+0x110/0x110 [ 256.489152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 256.494935] binder: undelivered TRANSACTION_COMPLETE [ 256.497438] ? rcu_read_lock_sched_held+0x10a/0x130 [ 256.497460] ? vfs_write+0x17f/0x4d0 [ 256.497482] ? SyS_write+0xc0/0x1a0 [ 256.497494] ? SyS_read+0x1a0/0x1a0 [ 256.497505] ? do_clock_gettime+0xd0/0xd0 03:50:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:39 executing program 2: [ 256.497518] ? do_syscall_64+0x43/0x4b0 [ 256.497531] ? SyS_read+0x1a0/0x1a0 [ 256.512273] binder: undelivered transaction 196, process died. [ 256.515661] ? do_syscall_64+0x19b/0x4b0 [ 256.515688] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.588558] binder: 16205:16208 transaction failed 29189/-22, size 24-0 line 3117 [ 256.613261] binder: undelivered TRANSACTION_ERROR: 29189 [ 256.642799] binder: 16217:16218 ioctl c0306201 200002c0 returned -14 [ 256.648016] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 256.654862] binder: unexpected work type, 4, not freed [ 256.660303] CPU: 0 PID: 16219 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 256.672009] Call Trace: [ 256.674612] dump_stack+0xb9/0x10e [ 256.678182] warn_alloc.cold+0x91/0x1ab [ 256.681340] binder: undelivered TRANSACTION_COMPLETE [ 256.682164] ? zone_watermark_ok_safe+0x250/0x250 [ 256.692096] ? lock_acquire+0x10f/0x380 [ 256.694307] binder: undelivered transaction 201, process died. [ 256.696082] ? avc_has_perm+0x9c/0x350 [ 256.696107] ? avc_has_perm+0x1b7/0x350 03:50:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000080)=""/94, &(0x7f0000000140)=0x5e) sendto$unix(r0, &(0x7f0000000240)="9a994a4ad80d6adc40be5cb125a3dad23086075b93710a97f46c812dd218501725f3ebd4a8ab634251d11dae5907ebccc32ed2fdc397f9b11a34ad8551355ebef1c29d3efa01bd79c2a67dc40bab162a61b770ef8416b929c4c31c589d6081312368857438430bb3a3263cf67980861a9b45dbe1dcaea8d4dd3f2167dcb881ed302b026b019c49c5386300e364eda9eccb3c915117cac3dfb97ee149844cb707015dbf7e0c56526d38d8be9369642dffa9e36cc73e581381409e0dff4d6af965c0798fbcd8b4dc03", 0xc8, 0xc001, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:39 executing program 4: [ 256.696121] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 256.714704] ? __vmalloc_node_range+0x390/0x690 [ 256.719386] ? check_preemption_disabled+0x35/0x1f0 [ 256.724422] ? sel_write_load+0x199/0xfb0 [ 256.728597] ? vmalloc+0x60/0x80 [ 256.732006] ? sel_write_load+0x199/0xfb0 [ 256.736170] ? sel_write_load+0x199/0xfb0 [ 256.740346] ? sel_read_bool+0x240/0x240 [ 256.744431] ? trace_hardirqs_on+0x10/0x10 [ 256.749992] ? check_preemption_disabled+0x35/0x1f0 [ 256.755127] ? __vfs_write+0xf9/0x5a0 [ 256.758939] ? sel_read_bool+0x240/0x240 [ 256.763578] ? HARDIRQ_verbose+0x10/0x10 [ 256.767661] ? kernel_read+0x110/0x110 [ 256.771588] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 256.777063] ? rcu_read_lock_sched_held+0x10a/0x130 [ 256.782119] ? vfs_write+0x17f/0x4d0 [ 256.785825] ? SyS_write+0xc0/0x1a0 [ 256.789466] ? SyS_read+0x1a0/0x1a0 [ 256.793106] ? do_clock_gettime+0xd0/0xd0 [ 256.797239] ? do_syscall_64+0x43/0x4b0 [ 256.801365] ? SyS_read+0x1a0/0x1a0 [ 256.804981] ? do_syscall_64+0x19b/0x4b0 [ 256.809134] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:50:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:39 executing program 2: 03:50:39 executing program 4: 03:50:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:50:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:39 executing program 4: 03:50:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:39 executing program 2: [ 256.908685] binder: 16230:16235 ioctl c0306201 200002c0 returned -14 [ 256.923365] binder: unexpected work type, 4, not freed [ 256.928677] binder: undelivered TRANSACTION_COMPLETE [ 256.946479] binder: undelivered transaction 205, process died. [ 256.956208] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 256.966832] CPU: 1 PID: 16239 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 256.974129] Call Trace: [ 256.976735] dump_stack+0xb9/0x10e [ 256.980285] warn_alloc.cold+0x91/0x1ab [ 256.984266] ? zone_watermark_ok_safe+0x250/0x250 [ 256.989144] ? lock_acquire+0x10f/0x380 [ 256.993129] ? avc_has_perm+0x9c/0x350 [ 256.997042] ? avc_has_perm+0x1b7/0x350 [ 257.001037] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 257.005726] ? __vmalloc_node_range+0x390/0x690 [ 257.010424] ? check_preemption_disabled+0x35/0x1f0 [ 257.015456] ? sel_write_load+0x199/0xfb0 [ 257.019631] ? vmalloc+0x60/0x80 [ 257.023109] ? sel_write_load+0x199/0xfb0 [ 257.027275] ? sel_write_load+0x199/0xfb0 [ 257.031446] ? sel_read_bool+0x240/0x240 [ 257.035541] ? trace_hardirqs_on+0x10/0x10 [ 257.039792] ? check_preemption_disabled+0x35/0x1f0 [ 257.044843] ? __vfs_write+0xf9/0x5a0 [ 257.048650] ? sel_read_bool+0x240/0x240 [ 257.052995] ? HARDIRQ_verbose+0x10/0x10 03:50:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:39 executing program 4: [ 257.057099] ? kernel_read+0x110/0x110 [ 257.061033] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 257.066532] ? rcu_read_lock_sched_held+0x10a/0x130 [ 257.071654] ? vfs_write+0x17f/0x4d0 [ 257.075393] ? SyS_write+0xc0/0x1a0 [ 257.079039] ? SyS_read+0x1a0/0x1a0 [ 257.082689] ? do_clock_gettime+0xd0/0xd0 [ 257.086857] ? do_syscall_64+0x43/0x4b0 [ 257.090843] ? SyS_read+0x1a0/0x1a0 [ 257.094493] ? do_syscall_64+0x19b/0x4b0 [ 257.098579] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.122402] binder: 16246:16251 ioctl c0306201 200002c0 returned -14 [ 257.125231] warn_alloc_show_mem: 2 callbacks suppressed [ 257.125236] Mem-Info: [ 257.146991] binder: unexpected work type, 4, not freed [ 257.148914] active_anon:65645 inactive_anon:35 isolated_anon:0 [ 257.148914] active_file:4632 inactive_file:12071 isolated_file:0 [ 257.148914] unevictable:0 dirty:215 writeback:0 unstable:0 [ 257.148914] slab_reclaimable:5800 slab_unreclaimable:59071 [ 257.148914] mapped:58802 shmem:62 pagetables:2542 bounce:0 [ 257.148914] free:1432109 free_pcp:321 free_cma:0 [ 257.153811] binder: undelivered TRANSACTION_COMPLETE [ 257.186406] Node 0 active_anon:262580kB inactive_anon:140kB active_file:18528kB inactive_file:48284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235208kB dirty:860kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 257.205473] binder: undelivered transaction 209, process died. [ 257.217068] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.249528] lowmem_reserve[]: 0 3437 3437 [ 257.254515] Normal free:2648940kB min:5476kB low:8996kB high:12516kB active_anon:262680kB inactive_anon:140kB active_file:18528kB inactive_file:48284kB unevictable:0kB writepending:860kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5568kB pagetables:10168kB bounce:0kB free_pcp:1312kB local_pcp:748kB free_cma:0kB [ 257.284333] lowmem_reserve[]: 0 0 0 [ 257.288175] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 257.304023] Normal: 5893*4kB (UME) 2777*8kB (UME) 2997*16kB (UME) 730*32kB (UME) 379*64kB (UME) 164*128kB (UME) 77*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 4*2048kB (ME) 595*4096kB (M) = 2649388kB 03:50:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x100000000, 0x0, 0x0, 0x100032, &(0x7f0000000340)=ANY=[@ANYBLOB="6c1c96a1420ba9355b8c76ee53b1610e41d65599630bcccb17b048f18662180e206d3ccb8d0ca80919f8ff167a90d74e06065b83c013b58de05ed8e8a907b9dd6e6da98039271cb67d275eeb56897e29ca5694ea3e5c8c5d49dfdc26983b145c02e4c786a0d9ea15fbdb7a1aec24162ee38236225e4eb312c9a6bbdaf520f82ac96729b16f323fdf5d7fcc8ff66c59b1e4a7ef466ef5e5549e15fe375d40efd9c72de3e368a9f7f04d2269341f4fd514ea7d07c5b7ced2758ab339bb05d5dad64a205f0e5d164adb4f6974f2ae6227aeef2b478cbbcf", @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESOCT]) 03:50:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:40 executing program 4: 03:50:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 257.322896] 16766 total pagecache pages [ 257.326988] 0 pages in swap cache [ 257.330586] Swap cache stats: add 0, delete 0, find 0/0 [ 257.336027] Free swap = 0kB [ 257.339131] Total swap = 0kB [ 257.342291] 1965979 pages RAM [ 257.345454] 0 pages HighMem/MovableOnly [ 257.349494] 315697 pages reserved 03:50:40 executing program 4: 03:50:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:40 executing program 2: [ 257.375157] binder: 16262:16266 transaction failed 29189/-22, size 24-0 line 3117 [ 257.397863] binder: undelivered TRANSACTION_ERROR: 29189 [ 257.407122] binder: 16264:16267 ioctl c0306201 200002c0 returned -14 [ 257.415691] binder: unexpected work type, 4, not freed 03:50:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 257.426998] binder: undelivered TRANSACTION_COMPLETE [ 257.432823] binder: undelivered transaction 214, process died. [ 257.468456] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 257.498540] CPU: 1 PID: 16278 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 257.505770] Call Trace: [ 257.508408] dump_stack+0xb9/0x10e [ 257.512010] warn_alloc.cold+0x91/0x1ab 03:50:40 executing program 4: 03:50:40 executing program 2: [ 257.516093] ? zone_watermark_ok_safe+0x250/0x250 [ 257.520968] ? lock_acquire+0x10f/0x380 [ 257.524995] ? avc_has_perm+0x9c/0x350 [ 257.528908] ? avc_has_perm+0x1b7/0x350 [ 257.533241] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 257.537932] ? __vmalloc_node_range+0x390/0x690 [ 257.541533] EXT4-fs: 2 callbacks suppressed [ 257.541548] EXT4-fs (sda1): Unrecognized mount option "l–¡B ©5[ŒvîS±aAÖU™c ÌË°Hñ†b m<Ë ¨ øÿz×N[ƒÀµà^Ø詹Ýnm©€9'¶}'^ëV‰~)ÊV”ê>\Œ]IßÜ&˜;\ädž ÙêûÛzì$.ã‚6"^N³ɦ»Úõ ø*Ég)±o2?ß]ÌölY±ä§ïFnõåTžþ7]@ïÙÇ-ããh©÷ðM"i4OÕê}Å·ÎÒuŠ³9»ÕÚÖJ _]JÛOitò®b'®ï+GŒ»Ï0177777777" or missing value [ 257.542618] ? check_preemption_disabled+0x35/0x1f0 [ 257.578607] ? sel_write_load+0x199/0xfb0 [ 257.582810] ? vmalloc+0x60/0x80 [ 257.586190] ? sel_write_load+0x199/0xfb0 [ 257.590387] ? sel_write_load+0x199/0xfb0 [ 257.594654] ? sel_read_bool+0x240/0x240 [ 257.598737] ? trace_hardirqs_on+0x10/0x10 [ 257.603085] ? check_preemption_disabled+0x35/0x1f0 [ 257.609534] ? __vfs_write+0xf9/0x5a0 [ 257.613351] ? sel_read_bool+0x240/0x240 [ 257.618590] ? HARDIRQ_verbose+0x10/0x10 [ 257.622679] ? kernel_read+0x110/0x110 [ 257.626602] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 257.632077] ? rcu_read_lock_sched_held+0x10a/0x130 [ 257.637120] ? vfs_write+0x17f/0x4d0 [ 257.640855] ? SyS_write+0xc0/0x1a0 [ 257.644499] ? SyS_read+0x1a0/0x1a0 [ 257.648143] ? do_clock_gettime+0xd0/0xd0 [ 257.652305] ? do_syscall_64+0x43/0x4b0 [ 257.656294] ? SyS_read+0x1a0/0x1a0 [ 257.659938] ? do_syscall_64+0x19b/0x4b0 [ 257.664034] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.672369] binder: 16277:16281 ioctl c0306201 200002c0 returned -14 [ 257.680100] binder: unexpected work type, 4, not freed [ 257.685557] binder: undelivered TRANSACTION_COMPLETE [ 257.699732] binder: undelivered transaction 218, process died. 03:50:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/50, 0x32) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) 03:50:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:40 executing program 4: 03:50:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) 03:50:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 257.736908] EXT4-fs (sda1): Unrecognized mount option "l–¡B ©5[ŒvîS±aAÖU™c ÌË°Hñ†b m<Ë ¨ øÿz×N[ƒÀµà^Ø詹Ýnm©€9'¶}'^ëV‰~)ÊV”ê>\Œ]IßÜ&˜;\ädž ÙêûÛzì$.ã‚6"^N³ɦ»Úõ ø*Ég)±o2?ß]ÌölY±ä§ïFnõåTžþ7]@ïÙÇ-ããh©÷ðM"i4OÕê}Å·ÎÒuŠ³9»ÕÚÖJ _]JÛOitò®b'®ï+GŒ»Ï0177777777" or missing value 03:50:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x200) [ 257.836545] binder: 16299:16302 got transaction with invalid offset (0, min 0 max 0) or object. [ 257.845994] binder: 16299:16302 transaction failed 29201/-22, size 0-8 line 3348 [ 257.854361] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 257.869718] binder: 16299:16302 ioctl c0306201 200002c0 returned -14 [ 257.876666] CPU: 1 PID: 16303 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 257.883869] Call Trace: [ 257.886504] dump_stack+0xb9/0x10e [ 257.890075] warn_alloc.cold+0x91/0x1ab [ 257.894154] ? zone_watermark_ok_safe+0x250/0x250 [ 257.899017] ? lock_acquire+0x10f/0x380 [ 257.903010] ? avc_has_perm+0x9c/0x350 [ 257.907020] ? avc_has_perm+0x1b7/0x350 [ 257.911011] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 257.915703] ? __vmalloc_node_range+0x390/0x690 [ 257.920391] ? check_preemption_disabled+0x35/0x1f0 [ 257.925420] ? sel_write_load+0x199/0xfb0 [ 257.929580] ? vmalloc+0x60/0x80 [ 257.932974] ? sel_write_load+0x199/0xfb0 [ 257.937133] ? sel_write_load+0x199/0xfb0 [ 257.941310] ? sel_read_bool+0x240/0x240 [ 257.945391] ? trace_hardirqs_on+0x10/0x10 [ 257.949665] ? check_preemption_disabled+0x35/0x1f0 [ 257.954709] ? __vfs_write+0xf9/0x5a0 [ 257.958518] ? sel_read_bool+0x240/0x240 [ 257.962582] ? HARDIRQ_verbose+0x10/0x10 [ 257.966648] ? kernel_read+0x110/0x110 [ 257.970565] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 257.976033] ? rcu_read_lock_sched_held+0x10a/0x130 [ 257.981098] ? vfs_write+0x17f/0x4d0 03:50:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) [ 257.984823] ? SyS_write+0xc0/0x1a0 [ 257.988542] ? SyS_read+0x1a0/0x1a0 [ 257.992209] ? do_clock_gettime+0xd0/0xd0 [ 257.996373] ? do_syscall_64+0x43/0x4b0 [ 258.000350] ? SyS_read+0x1a0/0x1a0 [ 258.003987] ? do_syscall_64+0x19b/0x4b0 [ 258.008065] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.018405] binder: undelivered TRANSACTION_ERROR: 29201 03:50:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) [ 258.134272] SELinux: failed to load policy [ 258.153697] binder: 16310:16316 got transaction with invalid offset (0, min 0 max 0) or object. 03:50:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 258.178438] binder: 16310:16316 transaction failed 29201/-22, size 0-8 line 3348 [ 258.187992] binder: 16310:16316 ioctl c0306201 200002c0 returned -14 [ 258.200625] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.213346] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 258.243112] SELinux: failed to load policy [ 258.322035] EXT4-fs (sda1): Unrecognized mount option "d" or missing value 03:50:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) 03:50:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) 03:50:41 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getdents(r0, &(0x7f0000000380)=""/154, 0x9a) getdents(r0, 0x0, 0x0) 03:50:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) [ 258.421301] SELinux: failed to load policy [ 258.424072] binder: 16336:16339 got transaction with invalid offset (0, min 0 max 0) or object. [ 258.457594] binder: 16336:16339 transaction failed 29201/-22, size 0-8 line 3348 03:50:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85}], 0x0}}}], 0x0, 0x0, 0x0}) 03:50:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 258.468064] binder: 16336:16339 ioctl c0306201 200002c0 returned -14 [ 258.480106] binder: undelivered TRANSACTION_ERROR: 29201 03:50:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) [ 258.518733] SELinux: ebitmap: truncated map [ 258.523842] SELinux: failed to load policy 03:50:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:41 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 258.596118] binder: 16353:16358 transaction failed 29189/-22, size 24-0 line 3117 [ 258.597245] binder: 16352:16357 got transaction with invalid offset (0, min 0 max 0) or object. [ 258.614802] binder: 16352:16357 transaction failed 29201/-22, size 0-8 line 3348 [ 258.627825] binder: 16352:16357 ioctl c0306201 200002c0 returned -14 [ 258.633701] binder: undelivered TRANSACTION_ERROR: 29189 [ 258.637225] SELinux: ebitmap: truncated map 03:50:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 258.646501] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.662677] SELinux: failed to load policy 03:50:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) 03:50:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYBLOB="7bd00c9fd69ef5bdae288cb23ab6b8dafa91d06ad8ccf0ef89c60608d4"]) [ 258.720830] SELinux: ebitmap: truncated map [ 258.734049] SELinux: failed to load policy 03:50:41 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 258.765221] binder: 16371:16374 got transaction with invalid offset (0, min 0 max 0) or object. [ 258.791269] binder: 16371:16374 transaction failed 29201/-22, size 0-8 line 3348 [ 258.800715] SELinux: ebitmap: truncated map [ 258.805192] binder: 16371:16374 ioctl c0306201 200002c0 returned -14 [ 258.812132] SELinux: failed to load policy [ 258.817301] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.857374] SELinux: ebitmap: truncated map [ 258.862234] SELinux: failed to load policy [ 258.910978] EXT4-fs (sda1): Unrecognized mount option "{Ð ŸÖžõ½®(Œ²:¶¸Úú‘ÐjØÌðï‰ÆÔ" or missing value [ 259.005694] EXT4-fs (sda1): Unrecognized mount option "{Ð ŸÖžõ½®(Œ²:¶¸Úú‘ÐjØÌðï‰ÆÔ" or missing value 03:50:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) 03:50:42 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:42 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getdents(r0, &(0x7f0000000380)=""/154, 0x9a) getdents(r0, 0x0, 0x0) 03:50:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2001001, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80800) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 259.337480] binder: 16395:16400 got transaction with invalid offset (0, min 0 max 0) or object. [ 259.348737] binder: 16395:16400 transaction failed 29201/-22, size 0-8 line 3348 [ 259.366492] SELinux: ebitmap: truncated map [ 259.368022] binder: 16395:16400 ioctl c0306201 200002c0 returned -14 03:50:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:42 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) [ 259.381442] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 259.382424] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.392582] SELinux: failed to load policy [ 259.404691] SELinux: ebitmap: truncated map [ 259.410934] SELinux: failed to load policy 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:42 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x7, r1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x27}, @dev={0xfe, 0x80, [], 0x15}, @dev={0xfe, 0x80, [], 0x11}, 0x2, 0x6, 0x0, 0x500, 0x8001, 0x620000, r2}) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x40, 0x4, &(0x7f0000000500)=[{&(0x7f00000002c0)="c5da5049efcb5899be1a7bf928d5bc9f937813f48c2128523a7c306965a01009d81f401bf04005f98d07f2de2341327f5a8c1838fe8064540b24dde3ccb58b3f0917b69d3b34bd76234a33d594cb06dd7dab051c591b5d2ce866097e24a8bc2b34b699c73739c6d167c3cd9a65278ab5cf0f9c11ea99487d2581ee4c10bc09cbe508e97175236abe01e6cc45140fdce21c504adf1545e0d175722032d947a807ad1269ff569aca6c69", 0xa9, 0x3}, {&(0x7f0000000380)="5aa8c971511d9fbd714de7913d577c5622a8ff953e0d245a53a4a02c5969b203299bef25e2f7b9a2cfa94d6c8f7c3e0b4fbf53ff9b0d28885153", 0x3a, 0x85b}, {&(0x7f00000003c0)="b8b5d85b39f14b9159c074378addf88e6e43082ffd1e2c56b024043802bc95d6649bf26167816b377b06ac9129dfd4edbcce66c5f362741e7a44884abf90fa3aadc0aadec57ef67ba529bcba1e60575bb3ce8c032baa199a91f5423e739c895b97e99c4f73f4a8b2fd4921", 0x6b, 0x9f}, {&(0x7f0000000440)="49f4cac5c7a7df02813babfe5216daa8ad17038b96c223c81af44476bb65af4c62dd853daf9e56ef42a3e59e625b5049982596f15cac1e9102e30b513e0bcf07eb1ace9a0b2113b4a983fd805cf3e23f64efb810584c647c04f709ae80133e4cd1e713833bfadf6df4b9ceb98b0a60a9ffebc984c1afca33ee50e11cc1440bdc3c21e23d87642e469792112a599b2ec759cd45fc407291bb7ea41db12ce1", 0x9e, 0x6}], 0x1000, &(0x7f0000000580)={[{@nobarrier='nobarrier'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@smackfsdef={'smackfsdef', 0x3d, 'trusted&\\self{@@'}}, {@permit_directio='permit_directio'}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'proc:mime_typevboxnet0'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYBLOB="d6ea165d9d4874f7857ba983eff560e50ec120ac1376c59ca9bd88f19e9626baf6cb5384a59725e494556181ea26462d9b6113239a5238f01ad5b1088b4352d75a"]) 03:50:42 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 259.495258] binder: 16413:16418 got transaction with invalid offset (0, min 0 max 24) or object. [ 259.517835] SELinux: ebitmap: truncated map [ 259.533163] SELinux: failed to load policy [ 259.533565] binder: 16413:16418 transaction failed 29201/-22, size 24-8 line 3348 03:50:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) [ 259.552411] binder: 16413:16426 ioctl c0306201 200002c0 returned -14 [ 259.572368] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.580308] binder: unexpected work type, 4, not freed 03:50:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 259.603055] binder: undelivered TRANSACTION_COMPLETE [ 259.616260] binder: undelivered transaction 236, process died. 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 259.663017] SELinux: ebitmap: truncated map [ 259.691854] binder: 16436:16439 got transaction with invalid offset (0, min 0 max 24) or object. [ 259.714721] binder: 16436:16439 transaction failed 29201/-22, size 24-8 line 3348 [ 259.742848] binder: 16436:16444 ioctl c0306201 200002c0 returned -14 [ 259.758404] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.764582] binder: unexpected work type, 4, not freed [ 259.775550] binder: undelivered TRANSACTION_COMPLETE [ 259.784025] binder: undelivered transaction 241, process died. 03:50:42 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getdents(r0, &(0x7f0000000380)=""/154, 0x9a) getdents(r0, 0x0, 0x0) 03:50:42 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) 03:50:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000600)=ANY=[@ANYBLOB="c8612e8478d7931c5c79cad1586e52c7b887eb7db0bb152acba4a29805166803e27a085ecca6c47e920000545485947e780f058ac900c88a0aa30699e08093fa16ad7ffe3dd44d118423e5658ad95247357951fc9154d9096f6f44683d7ff873dd85eeb02b4e67ea293a81ac38ba5f9a21cace8315429d4b94cb726106bd20e15bab1c28cf18c459f714f24154fce3c1963408685b7c8d9f2e40618825bd8e8ab32f94ca8f8a6f0131a9019a1df85f"]) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x4000, 0x0) unlinkat(r1, &(0x7f00000005c0)='./file0\x00', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000080)='!cgroup\'\x00', &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', &(0x7f0000000340)='syz0\x00', &(0x7f0000000380)='TIPC\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='TIPC\x00', &(0x7f0000000440)=']GPL\xdb/[,keyring\x00']) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x414, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 03:50:42 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 259.968705] SELinux: ebitmap: truncated map [ 259.977581] binder: 16457:16467 got transaction with invalid offset (0, min 0 max 24) or object. [ 259.981626] EXT4-fs (sda1): Unrecognized mount option "Èa.„xד\yÊÑXnRǸ‡ë}°»*ˤ¢˜hâz^̦Ä~’" or missing value 03:50:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) 03:50:42 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 260.033995] binder: 16457:16467 transaction failed 29201/-22, size 24-8 line 3348 [ 260.040275] binder: 16457:16473 ioctl c0306201 200002c0 returned -14 [ 260.055944] binder: undelivered TRANSACTION_ERROR: 29201 [ 260.064528] SELinux: ebitmap: truncated map [ 260.065057] binder: unexpected work type, 4, not freed 03:50:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 260.106003] EXT4-fs (sda1): Unrecognized mount option "Èa.„xד\yÊÑXnRǸ‡ë}°»*ˤ¢˜hâz^̦Ä~’" or missing value [ 260.118248] binder: undelivered TRANSACTION_COMPLETE [ 260.142345] SELinux: ebitmap: truncated map [ 260.155052] binder: undelivered transaction 246, process died. 03:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 260.183969] binder: 16488:16493 ioctl c0306201 200002c0 returned -14 [ 260.203337] binder: release 16488:16493 transaction 250 out, still active [ 260.214171] binder: undelivered TRANSACTION_COMPLETE [ 260.224918] binder: unexpected work type, 4, not freed [ 260.232248] binder: undelivered TRANSACTION_COMPLETE [ 260.276691] binder: send failed reply for transaction 250, target dead [ 260.287823] binder: undelivered transaction 251, process died. 03:50:43 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:43 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getdents(r0, &(0x7f0000000380)=""/154, 0x9a) getdents(r0, 0x0, 0x0) 03:50:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) 03:50:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="38d78867511f6b009d32ec0faf7ed527f9a68a46a84ff55fb8efd82e8567ad22ca91beeba0c1096d1e79b6ec974156c90b9dac4502ad93c5f2baa7db4ccfe91fc0f54b5028ea48a7ad5b82404b866d802fd3f0bb551abc918bb8dd904c001b78f11d11a064ecb48f990a2a4204797e3fa49226620480d8d2d4af8ae898c7cea18b089e3ae63c9215e20a7bc98cc9d933560e07b25c921f66b9a5b7f7c32155fb0a6920374bd9ed90dab281f55bfc7b13562e89ea23d9004f541210e313b2843102a6ef1fa0f63b01a97c4fae71a2d42e83507af1144f6b9bcaf4f60a"]) open$dir(&(0x7f0000000040)='./file0\x00', 0x101000, 0x180) 03:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:43 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) [ 260.525290] SELinux: ebitmap: truncated map 03:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 260.549448] binder: 16508:16513 ioctl c0306201 200002c0 returned -14 [ 260.563079] EXT4-fs (sda1): Unrecognized mount option "8׈gQk" or missing value [ 260.572009] binder: release 16508:16513 transaction 255 out, still active 03:50:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:43 executing program 4: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 260.605084] binder: undelivered TRANSACTION_COMPLETE [ 260.611969] binder: unexpected work type, 4, not freed [ 260.619396] binder: undelivered TRANSACTION_COMPLETE [ 260.633047] binder: send failed reply for transaction 255, target dead [ 260.634201] SELinux: ebitmap: truncated map 03:50:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) [ 260.655291] binder: undelivered transaction 256, process died. 03:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 260.704414] binder: 16524:16530 ioctl c0306201 200002c0 returned -14 [ 260.734607] binder: release 16524:16530 transaction 260 out, still active [ 260.754259] binder: undelivered TRANSACTION_COMPLETE [ 260.762232] binder: unexpected work type, 4, not freed [ 260.768809] binder: undelivered TRANSACTION_COMPLETE [ 260.774435] SELinux: ebitmap: truncated map [ 260.801869] binder: send failed reply for transaction 260, target dead [ 260.828547] binder: undelivered transaction 261, process died. 03:50:43 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getdents(r0, &(0x7f0000000380)=""/154, 0x9a) 03:50:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:43 executing program 4: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) 03:50:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)='/selinux/enforce\x00', 0xffffffffffffffff}, 0x30) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x7, 0x7, 0x6, 0x1, 0x0, 0xcd, 0x8, 0x1, 0x6, 0x2, 0x809, 0x5, 0x5, 0x3, 0x9, 0x8, 0x7, 0x7, 0x1000, 0xc3, 0x0, 0x3, 0x154f, 0x0, 0xa6, 0xfff, 0x2, 0x18c7, 0x5, 0xffffffffffff7067, 0xda97, 0x5, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x80, 0x4, @perf_config_ext={0x1, 0x3}, 0x8048, 0x6, 0x2, 0x4, 0x401, 0x2, 0x8}, r0, 0x1, 0xffffffffffffff9c, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYBLOB='d']) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x442682, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/205) 03:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:44 executing program 4: openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 261.067494] SELinux: ebitmap: truncated map [ 261.082786] binder: 16549:16557 ioctl c0306201 200002c0 returned -14 [ 261.103671] binder: release 16549:16557 transaction 265 out, still active 03:50:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 261.124565] binder: undelivered TRANSACTION_COMPLETE [ 261.142748] binder: unexpected work type, 4, not freed [ 261.155937] binder: undelivered TRANSACTION_COMPLETE [ 261.162704] binder: send failed reply for transaction 265, target dead 03:50:44 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 261.180321] binder: 16561:16566 transaction failed 29189/-22, size 0-0 line 3117 [ 261.190940] binder: undelivered transaction 266, process died. [ 261.193453] binder: 16565:16570 ioctl c0306201 200002c0 returned -14 [ 261.208171] binder: undelivered TRANSACTION_ERROR: 29189 03:50:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 261.224306] binder: release 16565:16570 transaction 271 out, still active [ 261.266645] binder: undelivered TRANSACTION_COMPLETE [ 261.284655] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 261.289571] binder: unexpected work type, 4, not freed [ 261.296670] CPU: 1 PID: 16580 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 261.307445] Call Trace: [ 261.310055] dump_stack+0xb9/0x10e [ 261.313615] warn_alloc.cold+0x91/0x1ab [ 261.314024] binder: undelivered TRANSACTION_COMPLETE [ 261.317595] ? zone_watermark_ok_safe+0x250/0x250 [ 261.317606] ? lock_acquire+0x10f/0x380 [ 261.317618] ? avc_has_perm+0x9c/0x350 [ 261.317641] ? avc_has_perm+0x1b7/0x350 [ 261.317655] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 261.332208] binder: send failed reply for transaction 271, target dead [ 261.335483] ? __vmalloc_node_range+0x390/0x690 [ 261.335502] ? check_preemption_disabled+0x35/0x1f0 [ 261.335516] ? sel_write_load+0x199/0xfb0 [ 261.346450] binder: undelivered transaction 272, process died. [ 261.350826] ? vmalloc+0x60/0x80 [ 261.350842] ? sel_write_load+0x199/0xfb0 [ 261.350852] ? sel_write_load+0x199/0xfb0 [ 261.350874] ? sel_read_bool+0x240/0x240 [ 261.350893] ? trace_hardirqs_on+0x10/0x10 [ 261.350908] ? check_preemption_disabled+0x35/0x1f0 [ 261.361300] binder_alloc: 16581: binder_alloc_buf, no vma [ 261.364829] ? __vfs_write+0xf9/0x5a0 [ 261.364841] ? sel_read_bool+0x240/0x240 [ 261.364852] ? HARDIRQ_verbose+0x10/0x10 [ 261.364863] ? kernel_read+0x110/0x110 [ 261.383553] binder: 16581:16583 transaction failed 29189/-3, size 24-0 line 3254 [ 261.386814] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 261.386831] ? rcu_read_lock_sched_held+0x10a/0x130 [ 261.386850] ? vfs_write+0x17f/0x4d0 [ 261.420537] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.425785] ? SyS_write+0xc0/0x1a0 [ 261.425799] ? SyS_read+0x1a0/0x1a0 [ 261.425811] ? do_clock_gettime+0xd0/0xd0 [ 261.425826] ? do_syscall_64+0x43/0x4b0 [ 261.425835] ? SyS_read+0x1a0/0x1a0 [ 261.425849] ? do_syscall_64+0x19b/0x4b0 [ 261.468462] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.476729] warn_alloc_show_mem: 2 callbacks suppressed [ 261.476732] Mem-Info: [ 261.485972] active_anon:66062 inactive_anon:37 isolated_anon:0 [ 261.485972] active_file:4634 inactive_file:14087 isolated_file:0 [ 261.485972] unevictable:0 dirty:2220 writeback:0 unstable:0 [ 261.485972] slab_reclaimable:6638 slab_unreclaimable:58380 [ 261.485972] mapped:58827 shmem:62 pagetables:2504 bounce:0 [ 261.485972] free:1429764 free_pcp:273 free_cma:0 [ 261.520805] Node 0 active_anon:264248kB inactive_anon:148kB active_file:18536kB inactive_file:58248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235308kB dirty:10880kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 261.546260] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.573907] lowmem_reserve[]: 0 3437 3437 [ 261.578334] Normal free:2633844kB min:5476kB low:8996kB high:12516kB active_anon:264240kB inactive_anon:152kB active_file:18536kB inactive_file:61588kB unevictable:0kB writepending:14072kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5472kB pagetables:9956kB bounce:0kB free_pcp:856kB local_pcp:656kB free_cma:0kB [ 261.608676] lowmem_reserve[]: 0 0 0 [ 261.612510] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 261.627943] Normal: 2167*4kB (UME) 2782*8kB (UME) 2935*16kB (UME) 743*32kB (UM) 395*64kB (UME) 165*128kB (UME) 76*256kB (UM) 25*512kB (UME) 10*1024kB (UME) 3*2048kB (M) 595*4096kB (M) = 2633820kB [ 261.645716] 20092 total pagecache pages [ 261.649727] 0 pages in swap cache [ 261.653282] Swap cache stats: add 0, delete 0, find 0/0 [ 261.658736] Free swap = 0kB [ 261.661836] Total swap = 0kB [ 261.664909] 1965979 pages RAM 03:50:44 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="640d58f6480f827970e84d96e593c45040b455ccd8339b0bf6cf90457232ae05afe6004254f40647e17b13425e0a3ee89bffb2d252a42fae9c316e6b1a89f5d482497a3d56b9ffb246a90f3c8769076c02a48243fb0e4aba14b821135c681ebc5bd49aa317aa8fd4612c07d5d7d04c1287f7e96120b52f1fea9568ba3ca129a1429ab6a1bad1cbf636df893d161d3d32cd5aa6a99be51be03c8a5e5f677c93cee8f735b5e11b8420f56a9219eb2299fafbb4bf4979d5f5b66dc128cc000000000000000000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80, 0x30) ioctl(r0, 0xfe5, &(0x7f0000000080)="e57de877136fdfce5539d94390be89") 03:50:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@nogrpid='nogrpid'}]}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2010002, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xff}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:50:44 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 261.668038] 0 pages HighMem/MovableOnly [ 261.672118] 315697 pages reserved [ 261.744285] binder: 16589:16595 ioctl c0306201 200002c0 returned -14 [ 261.752595] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 261.765996] binder: release 16589:16595 transaction 278 out, still active [ 261.773267] CPU: 1 PID: 16597 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 261.780507] Call Trace: [ 261.783122] dump_stack+0xb9/0x10e [ 261.786770] warn_alloc.cold+0x91/0x1ab 03:50:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 261.788202] binder: undelivered TRANSACTION_COMPLETE [ 261.790758] ? zone_watermark_ok_safe+0x250/0x250 [ 261.790771] ? lock_acquire+0x10f/0x380 [ 261.790784] ? avc_has_perm+0x9c/0x350 [ 261.790808] ? avc_has_perm+0x1b7/0x350 [ 261.790823] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 261.790846] ? __vmalloc_node_range+0x390/0x690 [ 261.790865] ? check_preemption_disabled+0x35/0x1f0 [ 261.790880] ? sel_write_load+0x199/0xfb0 [ 261.790896] ? vmalloc+0x60/0x80 [ 261.790909] ? sel_write_load+0x199/0xfb0 [ 261.790920] ? sel_write_load+0x199/0xfb0 03:50:44 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 261.790945] ? sel_read_bool+0x240/0x240 [ 261.790978] ? trace_hardirqs_on+0x10/0x10 [ 261.804647] binder: unexpected work type, 4, not freed [ 261.804893] ? check_preemption_disabled+0x35/0x1f0 [ 261.804919] ? __vfs_write+0xf9/0x5a0 [ 261.804929] ? sel_read_bool+0x240/0x240 [ 261.804940] ? HARDIRQ_verbose+0x10/0x10 [ 261.804962] ? kernel_read+0x110/0x110 [ 261.827825] binder: undelivered TRANSACTION_COMPLETE [ 261.831373] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 261.831389] ? rcu_read_lock_sched_held+0x10a/0x130 03:50:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@nogrpid='nogrpid'}]}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2010002, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xff}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:50:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 261.831408] ? vfs_write+0x17f/0x4d0 [ 261.831423] ? SyS_write+0xc0/0x1a0 [ 261.831434] ? SyS_read+0x1a0/0x1a0 [ 261.831446] ? do_clock_gettime+0xd0/0xd0 [ 261.831459] ? do_syscall_64+0x43/0x4b0 [ 261.831468] ? SyS_read+0x1a0/0x1a0 [ 261.831491] ? do_syscall_64+0x19b/0x4b0 [ 261.831514] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.929536] binder: send failed reply for transaction 278, target dead [ 261.936979] binder: undelivered transaction 279, process died. 03:50:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 261.950265] binder: release 16605:16606 transaction 283 out, still active [ 261.957379] binder: unexpected work type, 4, not freed [ 261.977865] binder: undelivered TRANSACTION_COMPLETE [ 261.984879] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 261.998835] binder: send failed reply for transaction 283, target dead [ 262.015980] CPU: 1 PID: 16613 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 262.023553] Call Trace: [ 262.026159] dump_stack+0xb9/0x10e [ 262.029719] warn_alloc.cold+0x91/0x1ab [ 262.033699] ? zone_watermark_ok_safe+0x250/0x250 [ 262.038557] ? lock_acquire+0x10f/0x380 [ 262.042542] ? avc_has_perm+0x9c/0x350 [ 262.046458] ? avc_has_perm+0x1b7/0x350 [ 262.050630] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 262.055318] ? __vmalloc_node_range+0x390/0x690 [ 262.060005] ? check_preemption_disabled+0x35/0x1f0 [ 262.065040] ? sel_write_load+0x199/0xfb0 [ 262.069217] ? vmalloc+0x60/0x80 [ 262.072592] ? sel_write_load+0x199/0xfb0 [ 262.076841] ? sel_write_load+0x199/0xfb0 [ 262.081014] ? sel_read_bool+0x240/0x240 [ 262.085118] ? trace_hardirqs_on+0x10/0x10 [ 262.089366] ? check_preemption_disabled+0x35/0x1f0 [ 262.094403] ? __vfs_write+0xf9/0x5a0 [ 262.098213] ? sel_read_bool+0x240/0x240 [ 262.102277] ? HARDIRQ_verbose+0x10/0x10 [ 262.106376] ? kernel_read+0x110/0x110 [ 262.110298] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 262.115791] ? rcu_read_lock_sched_held+0x10a/0x130 [ 262.120823] ? vfs_write+0x17f/0x4d0 [ 262.124556] ? SyS_write+0xc0/0x1a0 [ 262.128217] ? SyS_read+0x1a0/0x1a0 [ 262.131849] ? do_clock_gettime+0xd0/0xd0 [ 262.136006] ? do_syscall_64+0x43/0x4b0 [ 262.139995] ? SyS_read+0x1a0/0x1a0 [ 262.143646] ? do_syscall_64+0x19b/0x4b0 [ 262.147816] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.183594] binder: release 16615:16624 transaction 287 out, still active [ 262.209250] binder: unexpected work type, 4, not freed [ 262.224210] binder: undelivered TRANSACTION_COMPLETE [ 262.238426] binder: send failed reply for transaction 287, target dead 03:50:45 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:45 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) 03:50:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000080)={[{@nogrpid='nogrpid'}]}) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2010002, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xff}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:50:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000009380)=[{{&(0x7f0000000080)=@rc={0x1f, {0x101, 0x9, 0x9, 0x9c54, 0x9eba, 0x8}, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="25e684b353018abc1cefed58fe841e983f521b423c2df2d8afc2cabdd91be89515edc0e79d462460173580abf90201279b5747bdb75f79e7d042945f173b0fd05627f4dd0d19fdd72ebbad71e88a635fc1eafdf8dfbcab42f4fbb6c5e86c2ac553f73eda847a4e05c112ec5c626db603f76568882da7422007f02d8d112334382c287730bc7f4a8399e025b256e8171c26896964af7cd59b1a", 0x99}], 0x1, &(0x7f0000002640)=[{0x1010, 0x0, 0x6, "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"}, {0x1010, 0x110, 0x0, "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"}, {0x1010, 0x10b, 0x5, "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"}], 0x3030}, 0x1}, {{&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f00000056c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="5503558dd3eea2d04d6beec94db059c85439d8c0be7e573d14f5415c3027faa8c36cb2acdc5d6653bb29f54868d6e2ae96ecdefb71cce8d16ce30c83f4bba9f2eaec002c89c5d1e0ddfec4b631d61d7b54f2893a28f511bc9f7cda9eb8901e90fe261fea8b8d600ce8f3124b067258000416e1dd37e86c3b531bd3e5522c4ff8e03bfe9d9fdc21852f464ae8cc98adb91234ab557193f918d71a1b36600a9a178770396ca295cb65516c5608161465490548f00dcb1610aa399aa8cadfd634c8930485fa3094c6ac1a7306f46c3e1ea511be53fb06148205", 0xd8}, {&(0x7f0000001400)="85dfa87626b68710ffc066626f08bab174df088e210894673f3b43462562d65ac241694fec2c8d6850e2733f31f1a15362de813a52c5bd8cc471941314e018a31731869a177eddf26208aa19e8e65ba72b78daf2263e8ef3e0f83443dffb4520e4a8a5a584ad7c435aa371c8f2e902e9e6c8c9746207c05c4ae0d10b5d5cac9babeb0eadcc96197d46d5920144b4dd4cafd4bde0fac84c1cea651ee89b5b4fb7cf5b998cb89e0af4702d745e1e2da7cc35e9bcd79f5511355c1b777854368f2fa8db7839712a6705a3ea02c262590698895762331861efb0d88d2920bf418ecfafe8d5d4afbb378b18afb8dfbc1bcd456bd15145e48a82ba", 0xf8}, {&(0x7f0000001500)="00237761a572105c93191f751868381ad4fb114664cacc7dde842b0084153d16774e6c59bbbea8b52e7984534867ea0e4022ea2048c914d97e8a80c5b41d769be9dd9d37315b201d29e901ac358b0faed8e93d495f7433af34341b1f350df558b49cfb3da6bd3198eb48aec0e7fc78014ccf2c3cce1019712ba4945e358d02fc3c483e5b999c2b8ea2ca665d4e2f3882a159c94b75e95c45d602056fd93cc52cd01539f5397cd7ce65a3667bf8f848cb72a4c451981fa53d4723a47c05653d1546ca01392bc1f093afc18c563dbe22ec575653fa46617ef8f48d64b3a12e99fbbe62de33a4501a75f3313e80d93b66ed3509b254dad52140d6d8c59c15c2011cf332d8efb29797204a261f89205ab9acc4306ac14a720bbd16a64ecaca8afc3133ab152c7cc4d4669566f4646c27ab097bc8bbc361d1d20eff34c17560137dfab87abc93eb289f48a1128e06bfe5b13d480350a42b9e993fc23aa854a83b9f91b44df435ce3f1daad6eabc2c1ff57358c8bd57acb185c6c0baf3dc1600233fbe26afa687fe0f7a685e5831fcaf1700422d2eea91bd771d65e16787f321bfc34c9782716d62a76ff75c54e0f7d1e2e6de15b771e021b157c9f5a3325a5cf12c8bab6deae53540c54bc2f4a0e8d6a8d6050730cdeb1ff38b65f5b782e8a01d902d4ab402efa6326f2bc58ba7e2fa77c19a3f723f2ae3790efa6fbc7e5b6b3f5a4e8891596923356faef874e2b90c43375f3a21d9a5249c546fc0a03755e53bd13200fac09a6a25ea452f400d546eb48cbe938cb2aeb6d427077ff655a53dfa50ccc8bd578a724aa7a7bdba6c4d8e10cc5db7d44701febc7ae52d2b9549e34a24b261bf65f6173cfa2d59e2b0c0bde056748dc59358009bbdfc2e01eb40415d0beaa63517126a5a3bf4393f47247dea3180e011d0ee5112e8f8f3de1de61926b3e91fcb651becde95474fe214bd7e306e9c35d4cbd1e19657a32c78741505c73b9b7b10f4179d534a4211a3641a57d4f2795bd8a9b8f54fb2f0ef5653d575d9a5134e458b66884b822d2f5c14d118d99f328714ff78d80277452ecafa801ec0a391af796878a6ba47749ed6377653b30acdf34de3f189c973b7d29df1e81f4a587d2a3c5a0566152f03314cf674140728298854f407fce81eded393f4af8207b04a2172c056fed04a1b39bd772fe1a3e786d67b113260948a7d808256810f8f2cc08f8fc3fa9996ddc40c4db4b5a39df6e9e3cc81af6822f910d4a7ad7a4ab9128a1fa2f2101dd401526223665867ed6687b361f879e43d683a29fbb4a738fbe5eafb9da4bb17f15b8a0b81e4ddcccb63fbed706f91ba861d5781f837bcf81ec223e92a0a9a10ff402d8ee8a4930a781f0459d3bda59d63130436eeb9643d979319280160a8c86fb81148215202ed751bd24138d749dea5b16394b74f3591dc2637b4f881621f47f9d49a0ec2cc63059fb94821598a2afd843d18d13193687f3fb63bde3218324f1535ac7385c790f64f60aef72879f8f27a25bab3359792a43572de8a439a396b14e3697a76ee2643a2f0bc609ca3cf0dcbbad7b718e26e3cf270182fe43567d04382f1623c63c447ef67e16935e796ed059d6444a29af075d0f7e3a366ebd453672850e1fc1c2fd778a616d250a9e445dc8049b8c8a452b7b92e440bec6bc38be425f5954842b805589cbe439fa37791d788b5a0cbc828f07ec4bb526687cdb4b3773a31b8f49d4f924fe97d820a35cdfb6f2f7a28e6f01563c63971e62700d9584d447d12374f6e17732bf8f0b1bbb168abf066086b29a15f3b9ea754c32773ed0046a874cd6600795b0b80ca63f876eb254d0e24c7939ea11aca3c38f6dd744095e07ceb88675bf99a8fe4962867e53f058bff48fba136099ea6395eb0c47a1faa81cf854d7132d7bc86dd021b9db1b143ae64fb94aecad5516925d8435d178169900e2e6c967909e6bdfb206effdb87151fe24b5bae1dc419a43b6e9cfcc6f136ea5bb9b6a1199e584bd8ab63d4f2313abc44907f24df219918d7284f792f60153ec1e7a9473a3e90aa563d4c004d0865a74c1758d2e4c6e82c813d38395556e3d56a566e661fda61903d01cea9c7c5881ee7ac03adb0d9b2f2db8ea0df37205e9295d38fd3569c172732eacb6568138148f8254b3334591311cfb307a3163b742dd544d4378c9d4cab0e390f4a45cb6ef87e656dec29236286161ada6238a37a0df2a22e40b3a2fbee87e2d65af07977849ae12820fa74219cef8d5f981ff68827dd023671bd084bd77d823c5675deb462d104162a97698bb5083f226396864c5171315e9a4d831d72c2af0341e154993bc2a196ecd53044c4ef1353bd15103388a5aadc51fe7d7311ccb5678e77ecacea1ff34b5bd78c7de38f73e4cfe8d69bb53233b6c2c6cfdef9b57af85d45e937cc57a455e63aaa56bf8f8ca51d43d0fac8e3b0db9fc14ca7516169d4263ff3ba28780547e33717bd05f729d62111f016691b03dbda2556f084438473e5bbb86a165b3926478d85e123149dad56498d0917913add508bd11756b0732b997b9ff115f89e6dc5b650589f119506c3febc05a0b17203bd7e790ce0092150a85da8d3f436d89244a379dc6cd5afe2afb23dbdf496d23197376e9f198ca1491001cbe6ef2f492cd7d0f8a7f22c41aaaf4376245dd79e6b16a3f3750c7f6b38984fbcd35a7539c4fd3b684e5aabb98c7781773516264b09f1e570bf295a187b38fd1a9b33d1a04b125b9c24ac6f7c79e2ad226d7b6f6d647d3293125ae6aa1096812b8400b0c7e28197173803d2f8d80fdeaf7945fac33acfef206751e0fd8b80a459f0dc133f5ef964dbf0e3c0fd669b1776dd15e12fa660828f6395b05afdc9534cac5afa9a27bafcbf6fc7ac93fea245d0f62bfd058160861d303860619dfb5fae35552eea0dc21674fd9993e9ad80ef5f755c6b66048d9f18e195a1e03ece8986dbec4cb520b396306be86ea90087c9bb3a69c7c6ace9e1bba00e57a0144bc33486b51ae20565f04a7f6fcd9445604b75f8bb340381b8741da3b52b3b8cf07ab16ea2c2458a943a06798c265acd713cc9cac5fca47977a03757d63d82137cf1f8fbd0f84f6b0466060dafb7b9b09b2e864179360811091ba674a22fabd3efc161843f7f8597fce7be481b9a080ea71ccd7df5310f613004b58afbb3d53aba6478ea3ce791b010ff33e4576533bba091d8e29587ef905c76d7ecbd98288bdd87c360fd092c8a7decff73f2089529e59fef01df8eb15dee8adab82442a5f0438b7d9d4ed053ebbb0adcddbfc4067ee1cc597619050989ce0ebec55f02680fec73a987ee61b2493ca55c1dd8be770250be9ff0f6f02790460a87b4ae6de28fbc3f34d295a2ed0d3a6fc3deb4ac04f65ed8cc4b17f0f833903707a030e3f92dc0ff3c8af059a2c83709cdbcb54a32fe8aac80522015c502090d46e683ad76022b190fbe009e8fe91df07ca32c851f31c6baaeed92a229e6a37206209a5000cab266147670c262dfe201c299a0e4da5b1665e5bf5bddeb9c3bf05ccac886d3a15d63f028f32ef60c9d99530f36b43f4dbb31998e1187f1829581be5d3f6fe16bb8bb2d0cb336d301ecf99b845b3a120a39fff53fd06a6daabd11ff5a5a9d182baa1124f0b1a77032f405c3de8b1d1ab4cff205c398120a23dadb722ebdbc4f87233abc368a586402eea9ffa2865d6803276251bf681d0812cccc08f2ce33bc40569c6bfaeb9118e28c05794e61426b84d58c3660d09a244e93589ffb3f154900560d0e217901feba4a0535a1341a90791c1f7598f6565e2f684feb635d9689008810886c9ed536799839782f552caefecce7537886c64a79cad8918bfacc996af4fb40640775a78ed6eef275ee2e956015275ecfaa74441b54ffa577c5db70cad6c8d38881a0687fd6416ae8f1225444de262db62497a86dacd5f0294cb8c7bc3eb42d698660f3f5e89c8e6d14f9207d993ffca642bc47dc1c926d3eb3070d01cc9b8434bf55026a917b5a1af563abbf48788f1921c009a137a990be916157d41947dd41aa29c21b220ec0c993f077f018fb1c52be79e9c079c596bc3aaee9468aeac34ec895a886fecc3ffafa635da2e0469d4b889cee066d66be9e900632af10522a84302485e05870355ebf45942bccb0842727838bccc908ca94a39c297cedc6a663faa8a09ad4c46dc322d599d9bf27007f5dc6657c8320ee279c37bc6a3d00b9e81b74d485e88db74637ffc3f843c146585500a838c5de8f2359e75b566052b24f294c3d7b2521bc5bc2f7dafa77561af49e47a3728c1d27ed9668257f5deee42e54b480c55e29781cae6cea8e77eda2c00baf469668efbc28be14c3d2e4adb56d69a59b2adede2c0d228e632366b25ae012aaf23d5aee4522a0c804092339a0824817cda73a8bb9c772d1ae1306b2d5eec99bab589ce16bff38755b30ab4507d088917ad5ba1549f2f64db92246802993b9363f6597fe269997138f08b304364ff2f9cfe20c30454abbabbb01a21515c2973a475fbbca9ef21b0fcdb76589e60e808b867976c8aa51f20ca050df3f860e8002ba6d66ddb63bf7de16ef752a21eb1076a8f282fd6e506a08bc91f77360898340c268dd8888f65c81001a0551e3c05a53baf23dfb80c33de9617875d5eba8a5887ca5ca10851af14bf8620b00c3b8c9d4c13bab054c7d1a4466f167b1676bf49f2e4b9ef0b473e948d7df89b751aa35b33e1d845b65aa575475d9fa427d5fe2adc1f0298356f1e9925839eb3a3adc817b29c87fc4d63745f50ce32f51efc51af185797c2ab405803a8eedc8331c5c4ebd9194f42b4f80f859f2f46fa8ec4a8cd06e97682753fdfa034e85becab4e9e9bca1d1e0f1181cfd43d3d880431d570ffb9a078c9defd6ab137fd4488057c0eb5955696e7c9332e392ffe5b281dba587694cff3f0d85e500db522a3ba28e4ea42988b939a6d8b19f5480f6351275aa88fe7c1559409cff569cb8cce421f890ad08201ad812e6483bf0accdca89790a44e52084fb088f236067664f3e1c38e5514622516938d3a7f08a25b78a0b7f207e2f51455c9a2de8b5d6afa4f1219a83dfc82416d95537ec73ad401aa0d00fa6aaddeb04fc137ebe91b3aad52bac92a7ac1f29e612e6df18e9c38dd090062ed92424edb6e5a7b16c9f6a756ad1147f44799bb6e4a2f54763726ac905da6af3280b9553f983b0540d95bc2bd6a2251655f028fa4c769535758c5d27b53718abc693dbfafbbf2614b9e4024cf71120c5666fdca2d492466462a85a2685871e6e215c97b1f24bda7bcca83ec3ab2bba526437023f061589ff7c32bafe98aa65364785e38e20b75f4070c52f5c34fa6b6167a358e189469e8a57aa129e5ae2fae48fcbf568dce57705025708a81256b197f996ca5f964da559812f00b7458ec42bb9e70cb3892e2073cb85067a9ae2abf790972722d342caea98f17267a71752aa1dc3a130029f614c936e74c7466c84916afa65d028ff7cd7bca7f32b20ab1655372f28c4f3f69701d064e22598d053bff8aee56099bc3124cbb1065bdc1b387f74e3a7e755d5576931ab494953bc2b1529db4ab3d854e95bab620a9525192084f803b11824d0cc861e08e59713ef72f52c42bda479c0955d59aef1e57c4800e5e057f4561eff464ce49d3647eeb9a37bbddeed2ca51d9a5a74269a3333541705de34a59aa82e6886f9808040bc635f4e1f0426b56f12d07b3db39807dc7718c371633e5f6e263575366b2ae6e7db3abacfe9215fd75879aae8", 0x1000}, {&(0x7f0000002500)="5a9332561f62e2ca9ea3d28b5a5d812bf3e81c13cfe370c5ec2f06d2131f06fcafad57557f8e133c7b14deca4134a93f4cc910e25826e3bb091586aa87841b4191cfe58fd5501ae9cb318fa038230e426a3ce4fca67d52792e2cca3ef15b8999b0a450743d28ff2bbc33ea1adaa261aa4dfdb5bc5e3c08bec0ab0c44dcdeec64ea23ccd2bf07c64eafecd3a7ed5f0de0c1d2abc730172c982a0bafe570e196b527191e4c19502f7389207202fdc3235bb791c7455f7c0ed8f81347aabe4e663b2159adcc865232e7b05672a8ef305171d5586b6df5062ef2103d63de1257a73578d50e26e1fbfe2274952689603f", 0xee}, {&(0x7f0000005680)="fc3d7f324e0513f2b48a971d9091b06e05495b17669b13aa", 0x18}], 0x6, &(0x7f0000005740)=[{0x100, 0x102, 0xe5a, "df27a34fbd145b1ad6581f6499b271907d4c6f7697427b3af71b0fbff9d7709d83199f367453d2042146ada0ae4e8ec0a1801a8801902c2d984267de259fafb136718a11cf38da53d02f679ee4b331dba84f9f95c4f7d5247c5b9be00b654ad36d871e820c4c0a08c29fa8d27f006d0b5e22f7a0b251a532d06eb537cd25d7ef4e2cc48f4fe08a2d8bd728e3f759dc208ec10c804952072e867bd916faffb0c930bb453eb4031fff77f0113c29076364ad507c78560798b9f84d6ed6a7d1050b3c99b21d0af9c6778bf6dd6470a71f53c3ddc481e7f8efbb25ebca3a689e9f78e20af3803851247cd8"}, {0x80, 0x1, 0x4, "3453d780691280063a04934131440b486ced5a8b57311ac4ca33bd4a1748ae9dcf3e55177d35a73e68c068e0a24ec8ad2a304958b20fde81223737dfc3b88ed5a19e3ab9df5b017d89cfad65181a2a031d587f87c1ca99874108694e5509fce56e5164ce3ced43368154791d0bae21"}, {0x30, 0x103, 0x100000001, "a2c6e84c515fb7b58b56d2d28201f963bc7620e4cc7f25ce923602b6fe8a87"}, {0x70, 0x104, 0x1, "22f56a6fd4cf6149d20a4c5900fddcd3ecb7d3d6f0173ffa2a6dfc1ad61fe015ae6dfd2cac707831c5230fba945957426c83ddc5202ede6e20b5f80f40a07c18d9874a37be0e7b9c3f495e72c234637dad16d54337e48a98122998540c"}, {0xb0, 0x10f, 0x1000, "385ae3bfbe9a8ff9d917de07596dec4398a3ecfa79be5e30e4c29e10caf926cd887b26c1f47774cded8b5c883a67e2dc76c9d828ec2ac06255ef8e11cf284a29934e4fac65334fa8bf28b718e424e35717ec607c2b755a999da76027aae4f14976f858b9faca6c3a265c51dde9f2e5f6697a25b9f53105eba1e093abf3dfbc25df8883c6b289baac9c7f72304f87235df73b6ccd1051fc2b796995232a"}, {0xe8, 0x111, 0x8, "0db88292247a59ecefc4f5b1f768136eb7fb7c8ace98f41b9de26bea1d700ca5ff2b70e63d2445075a47aafc753cf192fced53b55e6ee1bc9f8f810746655f721ab56758bcce0b6bf30c866bac3492ae5a32e33b6142e4dd93c0f5645b24cc1fdc8748fc49adeeb5d339c75654874648ee85d95e7828dc4ac1f7f43f35e927c1260eb7e94ce9aa4cfc0eb9e43299b8b7c5c427d9dfc5e66a4a107a11a7987c370d6538744d5d6294bd84ff3db3b8ba402ff11d7766159b2234cd698501b1cab76b2b5a672e0991249528f84fe1e970cd9bba"}], 0x3b8}, 0x4}, {{&(0x7f0000005b00)=@caif, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005b80)="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", 0xfa}, {&(0x7f0000005c80)="1dce74cc56d521802e49511d5a147baaa2dea7899131de2d5452ce2d1ac357b49503c2bfb6e121e3530428d89e6aff80297665563a9aba1eddfbe5a7c98b275ad3824a3246f281f1f219aa4f3494d595d4d8a9ce707d06d744303e670b2dde52a4dd70b6bff580b289549875", 0x6c}, {&(0x7f0000005d00)="1169ade1871347bb6ca76c2a3b49ede09d972383e2ebc30e22b5bcf517d05e81d6db37eec27e4224faa69d79fb9d685df414defe50a4003bf6326560c2caba26f16fcbc54954ca825267f52dd7ac6c46563326f23b9a37fa68c63f16507908cc389b8db638227f8cbe7de755adb450f2c74bbad51463c1a394e5013b8b7f1bd274167cd5bd1e20e7d73197497a7f11edc1b2dda69a788020726adf0381c6a06fd206d6863a917eaf014515b49b2dd42623421e15b4efc9a62c8ab7e78cb21a010b6c5043f2b1d35887f8ee275da608f001", 0xd1}, {&(0x7f0000005e00)="d1829402e9276f207bd0c2db09434450e5ece3445479374bd2a01ed45e4dcf580b8452a8c457229f9c8c701a22eb", 0x2e}, {&(0x7f0000005e40)="b3bff26eef0176d7ff0527abcf5fc0d25e3fdb405af67cbb9837873b8b788c8c70f8bfbe51df3794bb6047b89f17fc78e8996074b18be2f44f34609ee4576da548332c98543a77e741e0f85a6a62bbe2cd282ddad1b4a3e62999104306075933b798715c71ee4b7f1f587bf0b8", 0x6d}, {&(0x7f0000005ec0)="d24f8d351cdaa252208af4c3209c3265691dcfc3ed4c844ab5fb4eaca663e34c8a131afb4869b434b98fdfb441d3c2753c2377541dc74d85e252076adbe3c6228aeeb8b17960090f2a99fb14d97bfa8e5b3901b9b242fd3b08d1a937983ce98b7b10dc1385b176440b32d0a6e6a65cf607a71537a1ac270706702ef8", 0x7c}], 0x6, &(0x7f0000005fc0)=[{0xb8, 0x0, 0x2, "e71bc8763df559ea3d6380fd17264fb960e424b025ae6c314ed4a3457218da1442ff86502135b5fa6d195eb93c409e4646c0925abed5aad27ff1e9b1d8fc2e6b2990f61c9149e66cf6ee71a4a4f0f3ee222d87047b540e2d9bc8e6b6ededb0577f13f261074beace298995d447fbefedd40937a7678ae945f7c5ba271866051cdda02f5627a6688ebef64a34d296d53fbb7e7f08a11fecd765a51301294d0e4e04dcedbe78"}, {0x78, 0x1ff, 0x2, "a0ffe512da330e5dad378c3d933417c68dae8aa3f7911ce9a117ad3599ce0ebd601d6147ceae8f5d4ffecde7baedcd7c56db45bfb46dfa08ac62e80eaace2cf656f9f382848c41d47628198017a52deea7754335ce5ef2a324690fa9885266827a"}, {0x1010, 0x13f, 0x9, "b202d461ef910169a01e05a75c9b349a76811d3200b9435006388e700386285dbc6e0921c9d59f0eba96b6c44663e823cece8afdef43ece9556abf9fb3c9c7438c805f3c5072b1f7c1c1ed8d36d5b763c5b05da6bec2c0c71e490e05c9f0cbc4b787255b45c31ff3165a3db6830c0650fbc07d2559ce6d241f50271f6bfbc0b58a25741b1c63600fc4350a913e683ca035502efc365720334e7b6044e63736955c6bfbb043ec1a3467c5f51e93fd2bdfb3361e089f4249070eee392f4cc9103b202f4854e081e30114f97a1ec2ba343f388377a487eb2397ba841bc65e30785f03e58535ad355647027ef8ee7c3747642a1040afe01e1995817d91dd1b880a9162901c7622178690e20581b69e414db239bbd37d9888ceebf51b2ee2bae14dabde81b3edd8e75fa0460edfa4a7a4325064c3df371aa18db0b475a41a37e42e3dc9b6ea53742d3945d493ce409ccaef17fdec6584ed76211e290f9590d3a9ed927807afe4f6e0f776c18c626dbe06306a0bfd47b7b60499c9c6954c27675b0935bc24517342ea185390163f98c40fecb4a3ac53fb2098b76e3c5ffdf0482b55ecf8b463215d3ea30b027804f5192e33258230753358aa7604795e8bb045ac6431fb91d74e5ec6e9b296cce483641e60e67adbadc75d82a0d0d8799f8e20eb08438d3c5f6462ff57d1cfd190824850a6bac1a3e56a48876964a4afb5842b106b5f2ab7bfca52d7af357f22943f12b457184fc2ad7dbdf0c616ed31044f9d592e1b2e8f96193d4cf5c8f3a17e16f065b079a1347ba7705d74a175bd36f925be49603e0c38226de9007f54d9deb4c4bf3795c044c4285e0980e38d88785d4b51c9a219d24d5516efdfc23c2eb7f12c074363139539b09d3a30fdae50fc66f3e663ecd8141f118c551254607d59938b507fd804462141b62ed46ebe50b5f2618b53783403e9a36ed190793029ed34c6ff8e1b9c565a21e31e06c254117dcee5e4f2eaada78bbbf6779e8c5fb7150fbd4cfc5ff178b6301dcceb0803bdeb4f7f24d3ea0beef7ca2bbd926505e20bddf75c8c3d93bc3996bb8333a54d2f1577b97fe50325bc53295663bcd02a9ace498257ef1f9549bf5e0d9bdfbe23b852e00823ef784798178effa1f1da0f6850c60ad198669ea6341d0460e4af4c0f68dd4769c4b45f266a28dcc6a5761f6dabb3306d2273707ebb1840867f81fce6b6f93ccf519926dcbae640e49962e80e3e169f9803025dec4fe6dde4dad4de6b1071d379b322e5c7831297fddb760b8ef5a30b2636c8afb74c3ab31a06c7c905989178b98e498eee99966eef73a8018c9052bd51a251649987d7198ff0b989c6bac0deb39207224c3a5101da94c84eb77e3cd4164ffde8f55f42bf90416522acdf7d6ac681b88343ebf91a351f7b1f4256b05f6bd877975fe91763e22ccec503d353084d4984f1f7de97d45f8f351d52252fa5eca467349aefacd4cc68352fb54a14f5e688ebb06d971e25f64e758a083cb7ff69096954f5607411a071c954aef771b2121425a3fd0a971d5c32b481dc91b12dee2385574591b3b0452b4a26d4f2d7c49bcc4d2b2f480df0f0bcfea49125c9ad93e7a15bd45977d607fa8794ed5edc6fceb33292f3058d33d2acce765c8201d684f35457616ef4700c9e503342871a62558675d5e8dab923b4995aa1a8b95d50af4e4e8d5217f7a0eed3003179eadba486f3bb23b2ee9dc6f9512de740b8e6c82217a69d5cfdd78c32d743184b1e7223380227120806ec97d2e4a2e27c3f6acdea9e85ffa584a227efa3deccd435b83bb3e40d7a810357e9f35b5cf8b23899539768e6db4c19c1b5db21e3469b200b1497d7510fc055e6237359c7ed44c40760f2457a64679db5ea10ff51337658bbdcd35315574bbf8b32a30577ab5f8ceecd3e50a8e2dc94c61a50027fe497534b3012f24942ab6fe7176c1655e4f51d742fb4ba6297ea8e55a9d0aee0b7f7722eed9d0c2f3973625918c8e10af0e5b468ad073552d8c6110aed1882f8dedf3ac96a9b38527bc2894bba1582bdbedff6b78785c9f7f390011a40a236964158a1f62ca249742a473957dc3a51bc0f708f8974a78951a87398cb81a1cd2f98f7b18c5f7b45fd6d206e95d467a8e3d10eef29985a01b2df5e42ba069e9aada77a0db7235b342c73983bf2929a97a56b5d26f309dd0448a702581ce6d9ace522b273164ce69e8b32159e1a9b4aa36f9bc5d7f5226395c0466e02157665d87b74ccc12fcde1abc9bd4f60b8ea098c1e948926b827b54beb754162236e5e72ca7a7fb3943b17c3429fc0746925a98620d10ac6f838d57a26e3315743b47fa2450b2f09135ab79f6bcf2f08b34cf84538e8f3ae7197f706602499e774f98a9135b9e756667bc22dd84fe35e2f6720cc04d56f9067b88e2090980c763a91e65fa992b0b6ba5353d2f4273b9ef20afca0db2766224f8a1443a44884bf0f5ed7c1e5a96d4cff5728da1c45ae00cc9e2d6f448c1bf8881053d09c5edb14dea172b8dc265828517e1fcfd69aba18656ea0f93b5661d75e6772aac17f8a90dbe0669ac91e5639cb7afd9928fb959f1f1638079425db993c39648c3ce730ec2a4c738dbcbbb937fa2d258ba7c84d5a9ae75a08baf7b3368f1a6c66aa6f41f287a88ee858f3c941616b0bc2c56c78984c17cabb6b7db218062ba4fd9e8fb8812944468dcdbbf216db900f2689e639177bb60d478f8ad0366906a03203d26de4f2c34b4978af41af8a45ea0d5eabe4251918fe013d9545d624a4cc6a10b5e4aa7880699fb19b28bbc17aaad7623c07f48da7a73b439eb024e56e0eb66adfb59148c2b8dc58d29a940fed96437c17abddd8d840e2b1ca5dd6fa068d7ab2e357b8eee421264d23c6e4632349a64b5fe826cff4243077bb1c10b0d74717c2679cd45807a4363a93f8570400b0e6d409b8e26d153222aa39aedfad73034e419b946121c1e468a08bd767f9b77e61f95c56c5c092f5575fcaaae2d0542ed76b060a0761388108af35046b5aeb4e98da43ab3385223f3353b61abc4b3f6f5469c7c5957f25c3afde1ef1c965ecca2f2fb32dd31d74e7b6289292e7383e26cf6df8e84e8de18e88bb5b4cff044bb16aef533326cffc4f6add02d5f9d73f90d6829f0e0793778ac97bbc48da113b680f0ad02a4dcf22068971bc6221f396f4d0bb94934aa80c49ec4772a8c47e9d0e79859ae769dd4008f1c54b810b2b06f3f66816ff20d66269769b9921c452bc3365ca9641861f0eb125fbbdb42e9df144da3e58d522b7b553cdc32772d76304aa3c3efe058edf54a8805ea0b648e11843552f59c8c84144d717cb1886ad37d54d2094ef9b60ff4e3128f5bb845f784c881bc0d4713566334bd27db8f2fc61f0230572251e6f760132bd5e100d63d2cc950f1865d48714ebbc0952a9efe53648d89750ff67e4abb72d58d4b9b72d02c9790616609f58209102a371e2ca8d155dcace97bb538336e8e949806f92db1a70b25cda3146bace5de5a85da7433764e2025642fa375a1e5d33f6462ed54f06b538079ec252549116b0d34464d23db203bd7eb7f5ac0f01b554d97717a911ca1fcf114cf37eda2c298a80a006fb0c50161352a14c3b1838d563a70ce16f45691f27431bae40ba0789ae63c1247875a847c8a716464d62c95ff1976c744b584572ba141bf48f4e5097310152f835c535775cc06dda36a0a0822689e229ef80b4c5500004eba8894521757f4cbba0e783c2f2d47aa8fb40298b64c28e9ac8a3d3a907e56c0efa76771b386d505668116383b36a18d048419d470d674200899d583a971a33e46088a68f20cde4ab20b0e5802b72636d2560eb16e8616d1cc59be1443435d4a2c2b5bcb8f0987f85daecc768098ca08565cbdc0e91385f77638e76d4376b1d0790b780e20c111437f73a3cd0e568bacc9670c878cdd966d74b0a7cd8d32b77a04439f0903e0f35c317ae5c7c89bf647f194dd77c9368837600d24be1ec96f1b054ce90c39edf6454bb8180d12e311445fb10dd0d12201f23456b0c9d18843caa91f56f134c380a1438caf553eb40ae035d6d8f5889f64cd40460cc286dc4d66cfb0d020af8c22303ee413de82a1a964572c898f647703c00ea3dd9c89c312c4fcab3f67c5927ea00712ca77de546e3719dd9cb209b960d069e4929a7d8e2c3e1988985755ed97fc9aec173a55a2b09ce4560d7d7b81588680b98fd6d9beb46d5a28c9437e866196018268b0549a75af21139b6ee754fa98ce8adb85c7821f1740d79b79917e3e24e5d99d74f6c876a85ec3b6ead3be1cacb64f903b5d7fcc85a25b701ca1c3fbb3164616846a66be6cb237a22d9d9bf7fc79e311e0ed863f0ab39e8abbc25f10fc7ad65b54d372f91290a732cc3b9e50e39a4c137b9d8cdf467998c268de15784f161f76fc91bcf79e8b992abc3edc350b32603eac56537342ddd8a9719d929fd48e05577df7a0f11128533e266b204a392495761642c46c8d600795146590894b5769284a270b3777ab29412e713c59b3558b79e6291003b73c0ed70fc21ee8f43ccd3c0856745bdfa81390bacfe41036e496286c3a65e16b2588a814c5604d128508f5aef4116934216cb17f8f97700e204ebcf93ebb6b654698954ee5bc6a6119d4b306bc691f239b5aac0c5015ae46becb5d46e699f6cca0d92cb8f7a1f8ceb7c4a7a2f273b69eebb10cdea2c8a5b80cc46a69d7b7b0da980df32137258445ab3659a289b78e9567616f63cf5846972562439ecb9553721e08b5638d5cd1c0673e1921c2193998bd86205f466482ed0fcddd042f5936fbd22aa22ead322866761827f7484cab64d7bb5062b815ca0fd1a2b3663766cbf66e116f6814616595f14c9298f96408cc4e6dd876366792cda2182309d26ac5d086f22a85f201edad4004e0b89a3400399e14f46f9f36ec294a398fc2e4a3eb2b8078443046e2145f1b0864bb1de3ca4897af181c8bd9204bb662957f7206e665ef50c477120e378720eac68b5d9ce28532e34a9ef8569cd445bc7f3094e89728bc33b1f1f9f8023932d605b2f99736eb22be46a83a40388988479b7161a6e100b7a4f47b65046eb73a7574bf044d66d1ee236cea7621ce52c076cc2134a8dedf6cf2eb00e20d7d3c60c2d74a67423da245d4e389119a099810077966a18eaeebe42d92d223321799331652377addc5e93374484fca952e92599809157d87575f03626712b1c90234e62d0796e930795c9d90ddab0665550fe214b83025c8ba826500d6a68bbea6a8dd2904c4c6c9f95179a1be5952270d100d7ea1370c1d76de12378691f23f1b6a2e91a78773d5b5137eceaebf50911b48f4911eb77f8a713a402cc37dbd151487a4eebccc8aa98e818f308f45b36bb19d129ac0efab61442e8409e31cadd15ac99181b4d5b4e0c84f4c4cfe71e61a2ee6df6b323018eb026c73dac31c087752cd927df69f92caeb026d69247412d5128ef5f77ea36a6fb2bd6a837252a6d092e837838d788a43dc7a2a190f3b1680443bf7be09bde46e1eee8b728deb3b1a68b16cb7aa6bea581d8a9cf0fc45aac8ea245dad7029ff2ba85de726a58f754edad9d8b33a92dd0c1cbec072c6267b0850379739cbd33c3cb2875543045af7e835bc3dfb367a595f61680885601d0b0e9bb676aa2d241dfdc5db7c2bd05b9b8a8d83383565f983b7825e8972aa3eb7cc4eed1ce207eeee3fcc1324de36c310c6371c85972a082b8846bfa8189309e55fd2c69fd7e88f27408a0583a9c67147910901a1f3536b13abaad"}], 0x1140}, 0xcf}, {{&(0x7f0000007100)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x400, 0x800, "0da6321e036725a5c3369bc82cc405ce4e590b5126aa933a4d894a6c41261217c88adec1b092328c97701fd6103552b4931acd21ab82b6393e10908390c12d", 0x8}, 0x80, &(0x7f0000009180)=[{&(0x7f0000007180)="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", 0x1000}, {&(0x7f0000008180)="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", 0x1000}], 0x2, &(0x7f00000091c0)=[{0x20, 0x108, 0x4, "e745b78cfbb993aa47ec301b"}, {0x100, 0x11, 0x8000, "7bba6726216bf53c6c9913a5f16cb806d51bab5dd0b9b637f44a73a533eab0e799d1b3a30a9e61f9f09bc0e268c3244e986e5812fe3a9b88e00eea5b825ddf598055d77650de3429bde6f438e220b94f4f16dbe7aad6fb814662e95f47139e3e78fdae9c74feafb06ab86ef21099a081c774c672cf0bc78ff88605af3e4491c359cc9be24f1d6096f806ea5c18880acc6650616ee2d7bbd843c06df4999673474602a9f0ddab18ec836704b92b45d751ec2fccdb189679e0ae055bdf1d8bede9a626783ebd1c8805c9dadd4bbd68bae4b7c572d6b7788fcdac124a3f86f84a5ca279ec2d7a4e182ec8"}, {0x90, 0x101, 0x0, "ebbe4c636d64d68eff0e635d654956613a5237b1e4fed45e5761d372b2de5f815dbb784b5cc6446ca21e0e13f6525483b4e4bbca8eb6ee8f6371edb0751c62c81c99e5db458f0e663a5a65ff60ce4ce7e62cda9174bcfeeeec08ca6388826dcfcaaef14ea2dd869eea234074355cb88e37525196df895d48a765c387"}], 0x1b0}, 0x4}], 0x4, 0x20000000) [ 262.455347] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 262.467167] CPU: 0 PID: 16636 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 262.474387] Call Trace: [ 262.477000] dump_stack+0xb9/0x10e [ 262.481202] warn_alloc.cold+0x91/0x1ab [ 262.485194] ? zone_watermark_ok_safe+0x250/0x250 [ 262.490041] ? lock_acquire+0x10f/0x380 [ 262.494021] ? avc_has_perm+0x9c/0x350 [ 262.498998] ? avc_has_perm+0x1b7/0x350 [ 262.502333] binder: release 16632:16639 transaction 291 out, still active [ 262.502993] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 262.509905] binder: unexpected work type, 4, not freed [ 262.515031] ? __vmalloc_node_range+0x390/0x690 [ 262.515047] ? check_preemption_disabled+0x35/0x1f0 [ 262.515060] ? sel_write_load+0x199/0xfb0 [ 262.515074] ? vmalloc+0x60/0x80 [ 262.515084] ? sel_write_load+0x199/0xfb0 [ 262.515094] ? sel_write_load+0x199/0xfb0 [ 262.515118] ? sel_read_bool+0x240/0x240 [ 262.515136] ? trace_hardirqs_on+0x10/0x10 [ 262.528414] binder: undelivered TRANSACTION_COMPLETE [ 262.530068] ? check_preemption_disabled+0x35/0x1f0 [ 262.530093] ? __vfs_write+0xf9/0x5a0 [ 262.530102] ? sel_read_bool+0x240/0x240 [ 262.530114] ? HARDIRQ_verbose+0x10/0x10 [ 262.534333] binder: send failed reply for transaction 291, target dead [ 262.537709] ? kernel_read+0x110/0x110 [ 262.590742] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 262.596196] ? rcu_read_lock_sched_held+0x10a/0x130 [ 262.601212] ? vfs_write+0x17f/0x4d0 03:50:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 262.604915] ? SyS_write+0xc0/0x1a0 [ 262.608528] ? SyS_read+0x1a0/0x1a0 [ 262.612142] ? do_clock_gettime+0xd0/0xd0 [ 262.616302] ? do_syscall_64+0x43/0x4b0 [ 262.620324] ? SyS_read+0x1a0/0x1a0 [ 262.624283] ? do_syscall_64+0x19b/0x4b0 [ 262.628338] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.636442] warn_alloc_show_mem: 2 callbacks suppressed [ 262.636446] Mem-Info: 03:50:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 262.650693] active_anon:66341 inactive_anon:38 isolated_anon:0 [ 262.650693] active_file:4635 inactive_file:12097 isolated_file:0 [ 262.650693] unevictable:0 dirty:229 writeback:1 unstable:0 [ 262.650693] slab_reclaimable:6861 slab_unreclaimable:58284 [ 262.650693] mapped:58804 shmem:62 pagetables:2504 bounce:0 [ 262.650693] free:1431333 free_pcp:299 free_cma:0 [ 262.686144] Node 0 active_anon:265372kB inactive_anon:156kB active_file:18540kB inactive_file:48388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235216kB dirty:916kB writeback:8kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 262.710554] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.738097] lowmem_reserve[]: 0 3437 3437 [ 262.742526] Normal free:2646080kB min:5476kB low:8996kB high:12516kB active_anon:265440kB inactive_anon:156kB active_file:18540kB inactive_file:48388kB unevictable:0kB writepending:928kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5600kB pagetables:10056kB bounce:0kB free_pcp:1160kB local_pcp:508kB free_cma:0kB [ 262.763925] EXT4-fs: 4 callbacks suppressed [ 262.763935] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 262.779022] lowmem_reserve[]: 0 0 0 [ 262.796545] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 262.813861] Normal: 5071*4kB (UM) 2799*8kB (UME) 2943*16kB (UME) 752*32kB (UME) 395*64kB (UM) 165*128kB (UME) 76*256kB (UM) 24*512kB (UM) 10*1024kB (UME) 3*2048kB (M) 595*4096kB (M) = 2645476kB [ 262.832364] 16793 total pagecache pages [ 262.836791] 0 pages in swap cache [ 262.840710] Swap cache stats: add 0, delete 0, find 0/0 [ 262.846823] Free swap = 0kB [ 262.850262] Total swap = 0kB 03:50:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000040)=ANY=[@ANYBLOB="743878a2bdc5f2d117cca4cc9de9be7c9c107b57ae4102a3d1b7a3539d6905000000cdeab66d5c630d6a428202f69cebbc1d1c2341f34e63ec4cdc1a68e8768d2c4bb252a2c5a3f9e2fe902c2d7ca42871a0c340"]) 03:50:45 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 262.859069] 1965979 pages RAM [ 262.865203] 0 pages HighMem/MovableOnly [ 262.871930] 315697 pages reserved [ 262.875312] binder: 16652:16656 ioctl c0306201 0 returned -14 [ 262.882359] binder: release 16652:16656 transaction 295 out, still active [ 262.889334] binder: unexpected work type, 4, not freed 03:50:45 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) 03:50:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:50:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 262.910520] binder: undelivered TRANSACTION_COMPLETE [ 262.916786] binder: send failed reply for transaction 295, target dead [ 262.977501] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 262.980664] binder: release 16661:16667 transaction 299 out, still active [ 262.997990] CPU: 0 PID: 16668 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 263.004261] binder: undelivered TRANSACTION_COMPLETE [ 263.008249] Call Trace: [ 263.008274] dump_stack+0xb9/0x10e [ 263.008296] warn_alloc.cold+0x91/0x1ab [ 263.013657] binder: send failed reply for transaction 299, target dead [ 263.016028] ? zone_watermark_ok_safe+0x250/0x250 [ 263.016040] ? lock_acquire+0x10f/0x380 [ 263.016052] ? avc_has_perm+0x9c/0x350 [ 263.042892] ? avc_has_perm+0x1b7/0x350 [ 263.046887] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 263.051565] ? __vmalloc_node_range+0x390/0x690 [ 263.056230] ? check_preemption_disabled+0x35/0x1f0 [ 263.061244] ? sel_write_load+0x199/0xfb0 [ 263.065389] ? vmalloc+0x60/0x80 [ 263.068755] ? sel_write_load+0x199/0xfb0 [ 263.072888] ? sel_write_load+0x199/0xfb0 [ 263.077027] ? sel_read_bool+0x240/0x240 [ 263.081077] ? trace_hardirqs_on+0x10/0x10 [ 263.085309] ? check_preemption_disabled+0x35/0x1f0 [ 263.090337] ? __vfs_write+0xf9/0x5a0 [ 263.094121] ? sel_read_bool+0x240/0x240 [ 263.098703] ? HARDIRQ_verbose+0x10/0x10 [ 263.102767] ? kernel_read+0x110/0x110 [ 263.106654] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.112096] ? rcu_read_lock_sched_held+0x10a/0x130 [ 263.117104] ? vfs_write+0x17f/0x4d0 [ 263.120805] ? SyS_write+0xc0/0x1a0 [ 263.124436] ? SyS_read+0x1a0/0x1a0 03:50:46 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/load\x00', 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r4 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in, 0x0, 0xff}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x669}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) write$selinux_load(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xea) setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xe9u\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00', 0x46, 0x1) fcntl$dupfd(r1, 0x0, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32dd18742b9ee46984c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13520e705c9290dc569dfcb330262532ebf8b64053c2997951777942cc1647d6bdb627a30e3be741a9160f0591b064789addb55e1c0af02000000000000cf89fb"], 0x70) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() r5 = creat(&(0x7f0000000080)='./bus\x00', 0xc1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000680)) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) sendmsg$netlink(r5, &(0x7f0000002180)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="10000000370000042bbd7020fddbdf2569ad69432ef7a5226626be4d7d697ef6913559aee9dd3c734df3f13b4bf738c9995343138d717535932fa5ace1a2774d3d0dc7fbbd8b8f1c0a91141b93fe3250555ae2ab22252c1af96b57b63d802d60bb18ba7304c66c3f370d3553e3fb579a155ebc86c488f9831ecaf72f6bf0b5487158c0ff7f2496f4a702fbf054bb8f0797c34a5995dd3e0d104d64c806247445385a968666d4910534f008617e6c0be426f369fa4812e78386b49943df89a67aa95b9b84ba49945e13dbe80c353a0c51b7040b18d6bf4af667b586d1ffd004"], 0x1}], 0x1}, 0x20000000) creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@local}}, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/239) request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd) socket$inet(0x2, 0xfffffffffffffffe, 0xffffffff80000001) 03:50:46 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:46 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) [ 263.128081] ? do_clock_gettime+0xd0/0xd0 [ 263.132225] ? do_syscall_64+0x43/0x4b0 [ 263.136199] ? SyS_read+0x1a0/0x1a0 [ 263.139824] ? do_syscall_64+0x19b/0x4b0 [ 263.143895] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.152805] binder: 16663:16672 ioctl c0306201 0 returned -14 [ 263.163735] binder: release 16663:16672 transaction 301 out, still active [ 263.172654] binder: unexpected work type, 4, not freed 03:50:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 263.185411] binder: undelivered TRANSACTION_COMPLETE [ 263.201272] binder: send failed reply for transaction 301, target dead 03:50:46 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 263.270557] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 263.282373] CPU: 1 PID: 16689 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 263.289581] Call Trace: [ 263.292189] dump_stack+0xb9/0x10e [ 263.295750] warn_alloc.cold+0x91/0x1ab [ 263.299754] ? zone_watermark_ok_safe+0x250/0x250 [ 263.304598] ? lock_acquire+0x10f/0x380 [ 263.308580] ? avc_has_perm+0x9c/0x350 [ 263.312480] ? avc_has_perm+0x1b7/0x350 [ 263.316454] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 263.321135] ? __vmalloc_node_range+0x390/0x690 [ 263.325812] ? check_preemption_disabled+0x35/0x1f0 [ 263.330837] ? sel_write_load+0x199/0xfb0 [ 263.334998] ? vmalloc+0x60/0x80 [ 263.338367] ? sel_write_load+0x199/0xfb0 [ 263.342519] ? sel_write_load+0x199/0xfb0 [ 263.346682] ? sel_read_bool+0x240/0x240 [ 263.351448] ? trace_hardirqs_on+0x10/0x10 [ 263.355690] ? check_preemption_disabled+0x35/0x1f0 [ 263.360741] ? __vfs_write+0xf9/0x5a0 [ 263.364538] ? sel_read_bool+0x240/0x240 [ 263.368592] ? HARDIRQ_verbose+0x10/0x10 [ 263.372656] ? kernel_read+0x110/0x110 [ 263.376569] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.382031] ? rcu_read_lock_sched_held+0x10a/0x130 [ 263.387501] ? vfs_write+0x17f/0x4d0 [ 263.391257] ? SyS_write+0xc0/0x1a0 [ 263.394984] ? SyS_read+0x1a0/0x1a0 [ 263.398612] ? do_clock_gettime+0xd0/0xd0 [ 263.402781] ? do_syscall_64+0x43/0x4b0 [ 263.406762] ? SyS_read+0x1a0/0x1a0 [ 263.410391] ? do_syscall_64+0x19b/0x4b0 [ 263.414462] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:50:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x7f}) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:46 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 263.438640] SELinux: policydb string SE ÌÀvÐã does not match my string SE Linux [ 263.457064] binder: 16690:16695 ioctl c0306201 0 returned -14 [ 263.473353] sel_write_load: 8 callbacks suppressed [ 263.473372] SELinux: failed to load policy 03:50:46 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00'}) 03:50:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 263.475902] binder: release 16690:16695 transaction 305 out, still active [ 263.493023] binder: unexpected work type, 4, not freed [ 263.507796] binder: undelivered TRANSACTION_COMPLETE [ 263.515060] binder: send failed reply for transaction 305, target dead [ 263.558645] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 263.570492] CPU: 1 PID: 16706 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 263.577701] Call Trace: [ 263.580312] dump_stack+0xb9/0x10e [ 263.583883] warn_alloc.cold+0x91/0x1ab [ 263.587881] ? zone_watermark_ok_safe+0x250/0x250 [ 263.592742] ? lock_acquire+0x10f/0x380 [ 263.596747] ? avc_has_perm+0x9c/0x350 [ 263.600671] ? avc_has_perm+0x1b7/0x350 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 263.604668] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 263.609364] ? __vmalloc_node_range+0x390/0x690 [ 263.614341] ? check_preemption_disabled+0x35/0x1f0 [ 263.619381] ? sel_write_load+0x199/0xfb0 [ 263.623548] ? vmalloc+0x60/0x80 [ 263.626926] ? sel_write_load+0x199/0xfb0 [ 263.631090] ? sel_write_load+0x199/0xfb0 [ 263.635265] ? sel_read_bool+0x240/0x240 [ 263.639344] ? trace_hardirqs_on+0x10/0x10 [ 263.639442] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 263.643584] ? check_preemption_disabled+0x35/0x1f0 [ 263.643609] ? __vfs_write+0xf9/0x5a0 [ 263.643618] ? sel_read_bool+0x240/0x240 [ 263.643631] ? HARDIRQ_verbose+0x10/0x10 [ 263.667575] ? kernel_read+0x110/0x110 [ 263.671515] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.677012] ? rcu_read_lock_sched_held+0x10a/0x130 [ 263.682047] ? vfs_write+0x17f/0x4d0 [ 263.685788] ? SyS_write+0xc0/0x1a0 [ 263.689429] ? SyS_read+0x1a0/0x1a0 [ 263.693069] ? do_clock_gettime+0xd0/0xd0 [ 263.697235] ? do_syscall_64+0x43/0x4b0 [ 263.701229] ? SyS_read+0x1a0/0x1a0 [ 263.704871] ? do_syscall_64+0x19b/0x4b0 03:50:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 263.708974] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.723232] warn_alloc_show_mem: 2 callbacks suppressed [ 263.723237] Mem-Info: [ 263.731783] active_anon:66495 inactive_anon:37 isolated_anon:0 [ 263.731783] active_file:4635 inactive_file:12129 isolated_file:0 [ 263.731783] unevictable:0 dirty:109 writeback:0 unstable:0 [ 263.731783] slab_reclaimable:6859 slab_unreclaimable:58399 03:50:46 executing program 2: creat(0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 263.731783] mapped:58854 shmem:62 pagetables:2603 bounce:0 [ 263.731783] free:1430907 free_pcp:254 free_cma:0 [ 263.767915] Node 0 active_anon:265876kB inactive_anon:148kB active_file:18540kB inactive_file:48432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235336kB dirty:440kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 263.791806] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.807309] binder: release 16726:16727 transaction 309 out, still active [ 263.818627] lowmem_reserve[]: 0 3437 3437 [ 263.829976] Normal free:2644384kB min:5476kB low:8996kB high:12516kB active_anon:265928kB inactive_anon:148kB active_file:18540kB inactive_file:48436kB unevictable:0kB writepending:440kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5568kB pagetables:10156kB bounce:0kB free_pcp:792kB local_pcp:384kB free_cma:0kB 03:50:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:50:46 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0) syncfs(r0) fsync(r0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0xa0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) [ 263.837172] binder: unexpected work type, 4, not freed [ 263.860732] lowmem_reserve[]: 0 0 0 [ 263.867410] binder: undelivered TRANSACTION_COMPLETE [ 263.868549] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 263.890951] Normal: 5038*4kB (UM) 2820*8kB (UM) 2953*16kB (UME) 733*32kB (UME) 395*64kB (UM) 165*128kB (UME) 76*256kB (UM) 24*512kB (UM) 10*1024kB (UME) 3*2048kB (M) 595*4096kB (M) = 2645064kB 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 263.927151] binder: send failed reply for transaction 309, target dead [ 263.927335] 16805 total pagecache pages [ 263.950194] 0 pages in swap cache [ 263.960216] binder: release 16734:16736 transaction 313 out, still active [ 263.960886] Swap cache stats: add 0, delete 0, find 0/0 03:50:46 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 03:50:46 executing program 2: creat(0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 263.989687] Free swap = 0kB [ 263.989707] binder: unexpected work type, 4, not freed [ 263.994634] Total swap = 0kB [ 264.001938] 1965979 pages RAM [ 264.005132] 0 pages HighMem/MovableOnly [ 264.005378] binder: undelivered TRANSACTION_COMPLETE [ 264.009293] 315697 pages reserved [ 264.011008] SELinux: ebitmap: truncated map [ 264.017819] binder: send failed reply for transaction 313, target dead [ 264.020295] SELinux: failed to load policy 03:50:46 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x86b) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:50:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:46 executing program 2: creat(0x0, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 264.059106] SELinux: ebitmap: truncated map [ 264.064156] SELinux: failed to load policy [ 264.124658] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 264.125919] binder: release 16750:16751 transaction 317 out, still active [ 264.142018] CPU: 1 PID: 16752 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 264.142024] Call Trace: [ 264.142049] dump_stack+0xb9/0x10e [ 264.155353] warn_alloc.cold+0x91/0x1ab [ 264.159348] ? zone_watermark_ok_safe+0x250/0x250 [ 264.164211] ? lock_acquire+0x10f/0x380 [ 264.166971] binder: unexpected work type, 4, not freed 03:50:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 264.168196] ? avc_has_perm+0x9c/0x350 [ 264.168221] ? avc_has_perm+0x1b7/0x350 [ 264.168236] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 264.175047] binder: undelivered TRANSACTION_COMPLETE [ 264.178757] ? __vmalloc_node_range+0x390/0x690 [ 264.178776] ? check_preemption_disabled+0x35/0x1f0 [ 264.178790] ? sel_write_load+0x199/0xfb0 [ 264.178804] ? vmalloc+0x60/0x80 [ 264.184236] binder: send failed reply for transaction 317, target dead [ 264.187454] ? sel_write_load+0x199/0xfb0 [ 264.187467] ? sel_write_load+0x199/0xfb0 [ 264.187499] ? sel_read_bool+0x240/0x240 [ 264.187517] ? trace_hardirqs_on+0x10/0x10 [ 264.232946] ? check_preemption_disabled+0x35/0x1f0 [ 264.237996] ? __vfs_write+0xf9/0x5a0 [ 264.241795] ? sel_read_bool+0x240/0x240 [ 264.245842] ? HARDIRQ_verbose+0x10/0x10 [ 264.249897] ? kernel_read+0x110/0x110 [ 264.253804] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 264.259249] ? rcu_read_lock_sched_held+0x10a/0x130 [ 264.264265] ? vfs_write+0x17f/0x4d0 [ 264.267981] ? SyS_write+0xc0/0x1a0 [ 264.271685] ? SyS_read+0x1a0/0x1a0 03:50:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 03:50:47 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 264.275300] ? do_clock_gettime+0xd0/0xd0 [ 264.279450] ? do_syscall_64+0x43/0x4b0 [ 264.283417] ? SyS_read+0x1a0/0x1a0 [ 264.287040] ? do_syscall_64+0x19b/0x4b0 [ 264.291116] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.315414] SELinux: ebitmap: truncated map 03:50:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000300)='./file1\x00') [ 264.328335] SELinux: failed to load policy [ 264.338729] SELinux: ebitmap: truncated map [ 264.346204] SELinux: failed to load policy 03:50:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000080)='md5summd5sum{vboxnet1bdev(.#vmnet0}ppp0cgroup[\x00', &(0x7f00000000c0)='vboxnet0*em0wlan1-lo:&:proc)\x00', &(0x7f0000000140)='.@GPL\x00', &(0x7f0000000180)='#@/user\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='ppp1wlan1ppp0[ppp1\\+em0\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='vmnet0GPL#wlan0proc!\x00', &(0x7f0000000300)='r}selinux\x00', &(0x7f0000000340)='em0+/#!uservmnet1\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='[+\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='selinuxeth0#\x00', &(0x7f00000004c0)='!!\x10\x00', &(0x7f0000000500)='self\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='1/\x00']) 03:50:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x5, &(0x7f0000000000)="ba1d0a340ce467e2f6433d5de36347b977c158727aab617b9dbb09a9d95a4ff5aab220ade76a5682ce1cb4a183d7213f30d3136b1cf6713e0a3b06acdd8f28d90c690697c94634ab6252d7869c0391013bd7ae830c2d70b03af9903330860cac203e0a683294daad66fdcd435fee5e0395779bcb389bba8b94d841c635670ba2ce293083c5a6b4e28ddf65e753603bef2199b4de5e52445141ea105f0eba045b0266955b835e92aa8c75aca9077805fd53") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2ae835e224978ab767b0e00000000ff01e5ff0000000000000000000000000000000000"], 0x3c) 03:50:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 264.380512] binder: release 16771:16772 transaction 321 out, still active [ 264.394565] binder: unexpected work type, 4, not freed [ 264.419802] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 264.440244] binder: undelivered TRANSACTION_COMPLETE [ 264.445249] CPU: 1 PID: 16779 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 264.452563] Call Trace: [ 264.455167] dump_stack+0xb9/0x10e [ 264.458727] warn_alloc.cold+0x91/0x1ab [ 264.462726] ? zone_watermark_ok_safe+0x250/0x250 [ 264.465312] binder: send failed reply for transaction 321, target dead [ 264.467578] ? lock_acquire+0x10f/0x380 [ 264.467593] ? avc_has_perm+0x9c/0x350 [ 264.467620] ? avc_has_perm+0x1b7/0x350 [ 264.467636] ? avc_has_perm_noaudit+0x2d0/0x2d0 03:50:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 264.490801] ? __vmalloc_node_range+0x390/0x690 [ 264.495499] ? check_preemption_disabled+0x35/0x1f0 [ 264.500535] ? sel_write_load+0x199/0xfb0 [ 264.504701] ? vmalloc+0x60/0x80 [ 264.508082] ? sel_write_load+0x199/0xfb0 [ 264.512240] ? sel_write_load+0x199/0xfb0 [ 264.516414] ? sel_read_bool+0x240/0x240 [ 264.520500] ? trace_hardirqs_on+0x10/0x10 [ 264.524752] ? check_preemption_disabled+0x35/0x1f0 [ 264.529862] ? __vfs_write+0xf9/0x5a0 [ 264.533657] ? sel_read_bool+0x240/0x240 03:50:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000300)='./file1\x00') [ 264.537729] ? HARDIRQ_verbose+0x10/0x10 [ 264.541795] ? kernel_read+0x110/0x110 [ 264.543320] binder: release 16788:16789 transaction 325 out, still active [ 264.545715] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 264.545732] ? rcu_read_lock_sched_held+0x10a/0x130 [ 264.545749] ? vfs_write+0x17f/0x4d0 [ 264.545765] ? SyS_write+0xc0/0x1a0 [ 264.545776] ? SyS_read+0x1a0/0x1a0 [ 264.545788] ? do_clock_gettime+0xd0/0xd0 [ 264.545801] ? do_syscall_64+0x43/0x4b0 03:50:47 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) 03:50:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000200)) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000240)={0x4, {{0xa, 0x4e22, 0x7, @rand_addr="f4227f64f056b7b3d82985db42f4b7b9", 0x8}}}, 0x88) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8040, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000000400200) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="56585ec403586ac5418dcbc0d01939b0", @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESOCT=r0], 0x3b) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x4, 0xf, 0x11, "5268d5f6f1a65643216872b185a6c60d66018d096af8c554c47b7c2bbf426796e191b45ea7bfab4f907a88dc5c327e7cc6ae6d68e031c709b20f988f4e1e34ef", "3cff061f1f1c689128fac18b3e22dd6f05c3018d632c9ec72f760040c092b456031b95d02e3ffde0343b3b5e375cd70348f53cbc340ffc199eba1816e7847c9a", "42f89ddd9bcb6f1c76140880665e512d300f9edf5a1671b6b413b296faa09d7a", [0x2, 0x101]}) 03:50:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 264.545810] ? SyS_read+0x1a0/0x1a0 [ 264.545824] ? do_syscall_64+0x19b/0x4b0 [ 264.561858] binder: unexpected work type, 4, not freed [ 264.563236] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.579876] SELinux: ebitmap: map size 949110 does not match my size 64 (high bit was -16777216) [ 264.592745] binder: undelivered TRANSACTION_COMPLETE [ 264.611805] SELinux: failed to load policy [ 264.622586] binder: send failed reply for transaction 325, target dead [ 264.676866] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 264.698259] binder: 16797:16805 got new transaction with bad transaction stack, transaction 329 has target 16797:0 [ 264.720221] SELinux: failed to load policy 03:50:47 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) 03:50:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) setrlimit(0x0, &(0x7f0000000040)={0x7f, 0x6}) 03:50:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000300)='./file1\x00') 03:50:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) 03:50:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 264.730891] binder: 16797:16805 transaction failed 29201/-71, size 24-8 line 3144 [ 264.751537] binder: 16797:16805 ioctl c0306201 200002c0 returned -14 [ 264.768382] binder: release 16797:16805 transaction 329 out, still active [ 264.775466] binder: unexpected work type, 4, not freed 03:50:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 264.789446] binder: undelivered TRANSACTION_COMPLETE [ 264.797038] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.802887] binder: send failed reply for transaction 329, target dead 03:50:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', 0x0) 03:50:47 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad2708"], 0x1e) 03:50:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345404c696e7578c6ad0000fff90003e2f490ad270800004000000020ff01e5ff00000000671193f334387c9f244d260e0000ca542400000055"], 0x3c) [ 264.834334] SELinux: failed to load policy [ 264.870624] binder: 16822:16825 got new transaction with bad transaction stack, transaction 334 has target 16822:0 [ 264.882761] binder: 16822:16825 transaction failed 29201/-71, size 24-8 line 3144 [ 264.897216] binder: 16822:16825 ioctl c0306201 200002c0 returned -14 03:50:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 264.920756] binder: release 16822:16825 transaction 334 out, still active [ 264.927001] SELinux: failed to load policy [ 264.932314] binder: unexpected work type, 4, not freed [ 264.952986] binder: undelivered TRANSACTION_COMPLETE [ 264.958388] binder: undelivered TRANSACTION_ERROR: 29201 03:50:47 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', 0x0) 03:50:47 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:47 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) [ 264.966693] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 264.978525] binder: send failed reply for transaction 334, target dead [ 264.988318] SELinux: policydb string SE@Linux does not match my string SE Linux [ 264.996839] SELinux: failed to load policy [ 265.021457] binder: 16841:16844 got new transaction with bad transaction stack, transaction 339 has target 16841:0 [ 265.034168] binder: 16841:16844 transaction failed 29201/-71, size 24-8 line 3144 [ 265.058146] binder: 16841:16844 ioctl c0306201 200002c0 returned -14 [ 265.064627] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 265.083041] SELinux: ebitmap: truncated map [ 265.089309] binder: release 16841:16844 transaction 339 out, still active [ 265.107986] binder: unexpected work type, 4, not freed 03:50:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000280)) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB="85"]) 03:50:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r2, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x32, 0x3, 0x5}}, 0x14) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:48 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) 03:50:48 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:48 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', 0x0) 03:50:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 265.128994] binder: undelivered TRANSACTION_COMPLETE [ 265.137093] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.144264] binder: send failed reply for transaction 339, target dead [ 265.168818] SELinux: ebitmap: truncated map [ 265.175606] SELinux: ebitmap: truncated map 03:50:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)='/selinux/load\x00', 0xe, 0x2) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:48 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000"], 0x2d) [ 265.202331] SELinux: ebitmap: truncated map 03:50:48 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:48 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000003f80)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000003fc0)=0x14) sendmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5eca20ee", 0x4}, {&(0x7f0000000040)="80e461eb73ac1b1be1a1014c9b8549e411343e0eac99e341b08d44a9037e74827d7c7354b54be7fd81c01b89942d473fba35601c5e6f75885eb0dec32cdc95", 0x3f}, {&(0x7f0000000080)="ffa9331bdff682e12474bc7aa689166466419b66a586fe5b51c25065d4425180e12f0ddf679b7e6bd3cf785820657915e15e1570c3495b1c1d417133b262d2ae9c0456b4fa6ca332cca5ba387c09f601ffa21a022edc717f125b225d06987eaa536500a111f12347019e840e4a085d99bb47e2bbe56a9ef3599a4204335c9fd71c5c95b82d3ef5a3578ede8ca3566237a436d8bf72ba9d2d751134bff858c21b018295c8b018358f8b5dd49fe731df06b7790eb37f2b21706ef3e9f0602de43ddd1133ff08ee003e61ff78fee15326699b", 0xd1}, {&(0x7f0000000200)="d429e0fcf7fa94847f61a92997edc747009cf66d46a527102b87e904d2393308227c8925cac373f7ddc9832d97e0656893630383c87d3abdef06280a794ac2e6243d590c8d5d22faf17b779470a8bbfa822c3cf952925d18373ec9b48631c14e7d5e23e06019dca61cc1527c4f8911a84f20e26f13ff1f090c2e052a7d27d381ca14a6a11e6453360c3c82424316e24468a4fa1c5629f1ee603077d3f9d5bb65ae444e3bd788286cb0877b6ab6cfa6c4af4ead3c7e065e70e6639c530f14d21158e1b42f67483db52a13ffb5b07636f387e1f56fd91632a86376d5", 0xdb}], 0x4, &(0x7f0000000380)=[{0x78, 0x109, 0x1f, "6dea12adfbce6cfbd47fa1260a91b53dc5a0833f01096b03cd876d69099e6e59c5d99b74b3f5e122e30c77a0fad040e0545d3e1d896005ef72899e85f57751fbd9e9e2803bd87e3db6b401cc368ce21d5fccf2e9adcc0cb897c2cea4b634b1fc70eb8af5edf7"}, {0x30, 0x10a, 0x7fff, "419e3c33b981a35510d29bb5bb3d093b7da94cff1f3e6af54724e6d6"}, {0xe8, 0x3a, 0x7, "c1323fdcb510f90004d3b043b3774cf5cb15dbdefac023a1e983df7d87ca66ff4cdfa68fc531b2b0590307b422012cb0210b4fe149d1299c5cc9cb3f6a0d0a6bca7df03910d3b912395766c9cc7efb1381d52280babf2015fe58cb7964d0f96108cbfc743841e12129da2b95a1970c9d288af77fdda4c406a55a8fb7b3d69ac7d83c690fc512dd9cbddfd5ba36aaf871dffb479542c4bcfd7ed14d73689bbf108289d5bac899a3705ec0b251111e240115fb59945f83dae0a15c8eef57a95e2623f4b627ed0f029da9041dadd5fbb9d624"}], 0x190}, 0x15}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="07e201d655edad62cd882d47a36a64423b32a00026ca653c5985b98d763c449f25d524ea01ddec24ed69048e93fe168cea3430993e6dfdcbbc3803794e959767f0d159832838d5d07537b712913ed9ffb4075f52de3dbfc704fb67378ac4563281240c103ae7f6fd0b23a6ebe6da738f8af07a7eca9cf9463fd8e48f612ae793e1249c32e629598df7416359153a0fe108ca16b732bcead468b9b51aff969043e5e54775b1b3633065202fbd750153660283d746de9ad9f628af30acd1b2e612185f28d92738fdc055c472ad", 0xcc}, {&(0x7f0000000640)="fa4a912fea98bb7e1d3f6f199b5250583a66451074878ff6fbcc6ded8d9d2afbea2c29004c2e866b65b2b085dcab0d88b0a282263f2d6c8b0edbdebf4f3a51b5eb", 0x41}, {&(0x7f00000006c0)="a2d0252d8db72ac64ad1046f53b4c5d125f59e1c611643683ac94eba8155dad6f0208ec00984ba5cee3c600acf24ad02d44f731efa3ca7c3f9674573996ccf2db2ac0ba3b3d426ed5a2fd3dd16326e8802a8ef0f5b7cbf3870", 0x59}, {&(0x7f0000000740)="a232a1637705810bdcd303d53f99df61a43c5bb1adbda6520a3f3fdcb73fa4de5fe0d7efb20dc42319b0982be63892c2da480816f55ec2821b871912b822b4b9926f960653c592fd345a017df888b46b61716e4e553718abacb03be987129a7f640e2be0fdfca8f3bce16ac3cb78", 0x6e}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="fae60df3bfff6098f4c6e7f1ef46046d9b6b076c9ac0d313481d54ded285f3013db53d4c7e424f6d65b1654433a814612187c2ae50cad85c909cadba50abbf96e3778beec731288987fc22158d77b5dacd7f8afd9f3cf6e4c4c8b8a664e07bfdcba7477ccf0c2164600be9350588fad1d0f10489231d162e1ecd30117a7b6ea5829f596e713b016e91c593151849d36fafcd0e2c69e0364daead", 0x9a}], 0x6, &(0x7f0000000940)=[{0x1010, 0x11b, 0x400, "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"}, {0xf0, 0x11a, 0xa4a, "00010c2def245f556e43d14d7d7ee99216e3a730b006954602f6e32a9bfbd99df961977b76f02e5bf21e6815f0f9f63d023786400c960253b98ca312510f84b59aee1caf012ac9537a92aaf4329d23bff276f0cbb8b026baff46384de252e3abedcefcf0e0e3267f48cf5a445b35f2155c1ef54ec52b5da5929249aeb5b6e6701576fd587a6126306ab45edad7dc32006b76bd9a7ca8243f92fdc312c499c92cdb6dcd25ae973a79c9e264cbfe8b92d3e7035eae196a79aeb9d5fe16d7ae8adef9e78cf60378978622fd9e108b8bcd957a2727c49f1a837d4103"}, {0xd0, 0x119, 0x2, "ce05b8ff3b0e48425f0710096aac4f2f182355a82f72d073485c5d92ff11bbf9d9897b7231b20798e920060609a3b8b8b3bd13681c570d04a508fa7fdd1ef93e4106d35ac20c9bca0b48a24bfda829ae5b9ce8ce2e090eccb9fa8247900c066437f641c2a5ed734063da54d7e7a5a6bda4784a485da29f1ffbfe1d49a7bf54ffe44ec806975e1946a98bfd9366152b7e48854df3ffedfad6339275f8ad26c254bb5829140ad43dd951faeded3e22d54cd97d7bee27e64912e7"}, {0x88, 0x11b, 0x7fffffff, "cd73d11237482cb6718a84b72b0d92457d6eb0b365ccad4ba68dba8ee2c83039904af54da9d48482452dfded89c75188d496f6449985558877f4c432007c09cd6b270ad0956306b3777b6a8ad375e01c69a6a7f1ff712bad6d67972182d073c39cd163639e1cb2f509a9545eddfd10d0ca34"}], 0x1258}, 0x8}, {{&(0x7f0000001bc0)=@rc={0x1f, {0xffffffff, 0x9, 0x6, 0x3, 0x3, 0x9}, 0x3}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001c40)="0faef3627c042bf0453c430c354c902d86dc4c68", 0x14}], 0x1, &(0x7f0000001cc0)=[{0xb8, 0x12d, 0x1, "74ec9c7ae7b05f8b6785afebe30e088d4144e1a5659a8cc8ada7f539b3a8e51d5610c72c89b2fae4ad0360525a7dce9677502a607fa2872c3e854d0447ce68b9903e44852b100e2142703a35b6088273aa1b5523f6e336fab3626a68ddaa56629fc2c9e6a67a29cc40f552e6eb875ac3823f00ab341ae9fa7f9ea85f14b93106e6af6ed3779af0cb4611706c57400e06907eeba39ac23e74809c2a02c44c3fc280"}, {0x48, 0x10f, 0x49f, "8948c1b2a912ee7c159a81ffacccf663200d6edbbffaf55986849ce80300bd8ea24377a22aca080859ff0b9fa38f0395ff"}, {0xf8, 0x115, 0x7fff, "3f00bc3f20c4d5c4618982444eff050fd50ba0b78e530028c28bb265d28fa16591c031f4f7c3a519f596f9c5ce59caa88c8345a61ba4584c8d83f06342b6770843de07e1b1f4e90f0a49741abf0148e4f9a215ff6a41d7db2a7f3766482eeae3fd984ca47107d88b3d62ced2cf622027be023b4d669cba54a652b65df86179fbe7b75bdd985138d3543ede53a1ec20fc4d7bfbf55b989dd339ee99733cbf46591c234d3c9f7b18cdb7beef22ed954dcba1beef85b2dc79629023ecc778affe0554560f5791bd3131e80aff321effbcc6aa63cacc6a1993b70052e772ff5bc87fed369448"}, {0x1010, 0x101, 0x7f, "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"}, {0x40, 0x11d, 0x5, "451d7c50b183075499a78cae64f2a206dfa6b784dfd56268e37f7f8d64ad9c05ee5243d3373bb11f415b65f14af1f8"}, {0x40, 0x11f, 0x5, "e3e66862d72012cb85d550f8765f6722fdb7342a6115524b34cb754d3e3cda8aeb731bc64c1018603f0e682d3b77c9"}, {0x1010, 0x84, 0x9, "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"}], 0x2298}, 0x5}, {{&(0x7f0000004000)=@hci={0x1f, r1, 0x2}, 0x80, &(0x7f0000005280)=[{&(0x7f0000004080)="83f384bc9770f623bb248f198bd9d25c2f9be6f3f0f7054be1c547dd9c95a29805c0f419e31b0954e95c3942c44121f40484a7acef65af850267e16bab6ae6d8a40417ee53dabe3892ec86d7aff9947d190409ad970b778ef1677b6e632ff30804bd1bcddb9bd9e218d3", 0x6a}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000005100)="2a3e7102869ad9949639e9ef11e75edac026f2d0ff7f9d6d16ffc1624550aaef4553eb9e1f0bd0b424ac1b9e0074a7bf78acfd808bcbb1254f7ab7888a7e87987fced424d044584875c344ba6219ed277c48f4dbc635b95015853c6130bb9343fae9583010ede14d6983bbba47c7164b3a4b5f83eb6e1b2cb779c96a29e2243fba0065a82d00b1e3b23efa8c55c3de0f9a152dc4fb7a9fe42348a3ffe66f1aa25211867222613721866df201639f858dd7f8f24c8cd1be6f1c3bd2d3b7a1fd76ce5df123b61672e745bad3b9f7f26259475785bb5557eec90614d11ff937bf267f3aa66d4102725c9c137f01f40d11d464ee0c66e4", 0xf5}, {&(0x7f0000005200)="6a2f85058206355956763a2fa1be9fbe3759139ba7af42fef476ba760e843de8d8263b66b77822", 0x27}, {&(0x7f0000005240)="d95cf59d0ac5ca4b76f53c70cfdef496365c2276", 0x14}], 0x5, &(0x7f0000005300)=[{0x108, 0x108, 0x6, "3efdef8daed088ae0007be048c50b3e9db020153fa645071e79ba78200e6c9b7758aa2250301935b3606d4811fe88727d111cabbbf5cf4675417750d71946acc87d5b47c3b2ec866e5bfb9a200a67a6882c9a27ad67eda29c1f79639716a7506a6cfc34afd0ef008f6fcbe6b16969c8d99420a89cdc0d807473abaae88d112f870fe9cf514a489cf39c5b48f8d8465418124fdfca9d13b4f6d70b9df83cdad9784ce863417eef1aa44aa74e4e8f96fca2fc86ac95963d67336ba05d25e48e0c3b848312771d8c6f59f3e1df682a3caa8d591536abfaa7f6370eb9b89034f577f63088296d20e11cf439341da60737deb58fcc5909050b7"}, {0x18, 0x0, 0xffff, "5fc4cefb118d2901"}], 0x120}, 0x1}, {{&(0x7f0000005440)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x80, &(0x7f00000065c0)=[{&(0x7f00000054c0)="308fb6fab78e25eb629cdbe8919e3960f883065cc10dbb8774093f92190054be7c577e71643b73c5f01d9b70e3090f05548c1dcde941674d12a066a18aa97fee6f3e403b7f744e8d52", 0x49}, {&(0x7f0000005540)="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", 0x1000}, {&(0x7f0000006540)="aec225336f571886140b60fe6cd2bab922c9ad13e9bc308eeb56d24289e4bf7543f06f7dcb4f2dd9b5383064f40dac9be63c3652415c758e84e5b9dcf6c14d2e30622afdeb290074cfd944dd804c0c5c47347a2ca2d8ea6bdd4ae9cf93fc270b94287b06e923655c77be9b5193566b40784cf2a3c205143cfd271ab469164b", 0x7f}], 0x3, &(0x7f0000006600)=[{0x80, 0x119, 0x3f, "1016e2e302568d32dc6daf9431a06d71e927acd6444bd680e22e4b0caa2e0330be0ba4ffc6531375f10b6d9076e92efc80e6daf4df0234d66d0fe599f25d366707f017eda3128258d3592103febaffa56259087cfa55614b215b7fa25962e26b541efc951910b51e66eb"}, {0x70, 0x11f, 0x100000001, "77cb6251579f36992f38174bdca310e19ed21970948573e63798f6849618261990ef8c3505883db976ac5c3ac75fe88206d02be03c6ced8a7098809dbe757d7c73d61cddfbe8b549f0f184569ba1d0eecf50bef53ef2746a528e72a31f"}, {0xa8, 0x10b, 0x0, "bc2a1e72e83a84d35bc7f32f53d4ee128d9e7b430e66a754a8ab9a06bc2e74518c63a29484e34c3915d49533b64ca7a275ae37000006dedbd11b70ff743468845542ccff4b659d95cb8de509f536a546c4d86b500f775d3445f7ae66d3c1a1b8d6a722561f60c04bb73175ca98c3252e0f8aaf5296ecb17c053087c2ea09131e4c20b32c0e11ad3672016ac6b5753d3a48d3ffb85b57d09b"}, {0x58, 0x116, 0x7, "a8d28a59b7f861a0f493adb8a787ebc2c17086a33ace0c9fe75cce72a6429ccc4bc0a0d568be9334773f9968ca292696561a97d5ce9d549b9f45358e207022df60f3a2739a11"}, {0x78, 0x10c, 0x40, "0b1625f3adb327e5fa2f4f2bc8f8ac963400a25b604ffe047fc7325db99c0d001a8ef0b389b2ad11ff249447e29aae73dbb19650c21de22d9154e3b3efc280bdc6cd91700c4cade4aeda103798b4ffbde3b12da2dfc947ae655acf07308f90e96b480535"}, {0x50, 0x113, 0xfffffffffffffbff, "245df3d27d7271431fc91b3dd7ed952e362d57ce7be60799379c7c02d43b10f38c06e0c9c91f2b9961282f5cf23aca2365fe028ff3dc827eac99c9e634"}, {0x18, 0x101, 0xfffffffffffffffa, "25fa819162783107"}, {0x1010, 0x112, 0x3, "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"}, {0x78, 0x19f, 0x800, "630bf5aa69d9fa647e616a35cc97858302ffdc3a8244725126ce506febe40b3e176a3816faf0db33d80fb8a111c3a087cca78fbea055488c3c5dfa8eadf16fef8c564a59f68eecbefb4c8dd1881551c5c97ed2441bae8d3d8aafb1320d074b31ed5b40b8eb"}], 0x1358}, 0x6}], 0x5, 0x40) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 265.232891] binder: 16861:16870 got transaction with invalid offset (0, min 0 max 0) or object. [ 265.252129] binder: 16861:16870 transaction failed 29201/-22, size 0-8 line 3348 [ 265.263076] binder: release 16861:16870 transaction 344 out, still active [ 265.271458] binder: unexpected work type, 4, not freed [ 265.277542] binder: undelivered TRANSACTION_COMPLETE 03:50:48 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 265.284136] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.289872] binder: send failed reply for transaction 344, target dead [ 265.296159] SELinux: ebitmap: truncated map [ 265.303852] SELinux: ebitmap: truncated map [ 265.345000] SELinux: ebitmap: truncated map [ 265.364179] binder: 16880:16885 got transaction with invalid offset (0, min 0 max 0) or object. [ 265.373801] binder: 16880:16885 transaction failed 29201/-22, size 0-8 line 3348 [ 265.388613] binder: release 16880:16885 transaction 349 out, still active [ 265.395683] EXT4-fs (sda1): Unrecognized mount option "…" or missing value [ 265.405063] binder: unexpected work type, 4, not freed [ 265.412075] binder: undelivered TRANSACTION_COMPLETE [ 265.417753] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.424622] binder: send failed reply for transaction 349, target dead [ 265.427392] SELinux: ebitmap: truncated map [ 265.473391] EXT4-fs (sda1): Unrecognized mount option "…" or missing value 03:50:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:48 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) 03:50:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:48 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/53) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:48 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000480)=""/84) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x10) write$selinux_load(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf90800002bdb005345204c696e757816001000ff00004000000000ff01ceeb6dd1a0852676000000000000ca54240000"], 0x3c) 03:50:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 265.593090] binder: 16905:16910 got transaction with invalid offset (0, min 0 max 0) or object. [ 265.598771] SELinux: policydb string length 721420296 does not match expected length 8 [ 265.603519] binder: 16905:16910 transaction failed 29201/-22, size 0-8 line 3348 [ 265.622511] binder: release 16905:16910 transaction 354 out, still active [ 265.632699] SELinux: policydb string length 721420296 does not match expected length 8 03:50:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480), &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f0000000080)="f20bddcc97ee08880e9a4748c39ba9071ba437b14549f985935c9cc46671521f8b4d1bbb02a47983dfc4600d9f", 0x2d) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000140)=""/154, &(0x7f0000000200)=0x9a) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[], 0x0) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0x8c3be895d9828e90) 03:50:48 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) 03:50:48 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 265.640745] binder: unexpected work type, 4, not freed [ 265.647050] binder: undelivered TRANSACTION_COMPLETE [ 265.652707] SELinux: ebitmap: truncated map [ 265.657716] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.663815] binder: send failed reply for transaction 354, target dead 03:50:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 265.725697] binder: 16919:16924 got transaction with invalid offset (0, min 0 max 0) or object. [ 265.747700] binder: 16919:16924 transaction failed 29201/-22, size 0-8 line 3348 [ 265.756623] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 265.758380] binder: release 16919:16924 transaction 359 out, still active [ 265.777436] CPU: 1 PID: 16930 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 265.784663] Call Trace: [ 265.785387] binder: unexpected work type, 4, not freed [ 265.787293] dump_stack+0xb9/0x10e [ 265.787316] warn_alloc.cold+0x91/0x1ab [ 265.794018] binder: undelivered TRANSACTION_COMPLETE [ 265.796147] ? zone_watermark_ok_safe+0x250/0x250 [ 265.796159] ? lock_acquire+0x10f/0x380 [ 265.796170] ? avc_has_perm+0x9c/0x350 [ 265.796192] ? avc_has_perm+0x1b7/0x350 [ 265.796206] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 265.801095] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.805325] ? __vmalloc_node_range+0x390/0x690 [ 265.805343] ? mark_held_locks+0xa6/0xf0 [ 265.805354] ? finish_task_switch+0x1b7/0x620 [ 265.805364] ? sel_write_load+0x199/0xfb0 [ 265.805378] ? vmalloc+0x60/0x80 [ 265.805392] ? sel_write_load+0x199/0xfb0 [ 265.810968] binder: send failed reply for transaction 359, target dead [ 265.814210] ? sel_write_load+0x199/0xfb0 [ 265.814230] ? __schedule+0x924/0x1f30 [ 265.814243] ? sel_read_bool+0x240/0x240 03:50:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 265.814259] ? mark_held_locks+0xa6/0xf0 [ 265.814273] ? retint_kernel+0x2d/0x2d [ 265.821419] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 265.822131] ? trace_hardirqs_on_caller+0x37b/0x540 [ 265.896126] ? __vfs_write+0xf9/0x5a0 [ 265.899925] ? sel_read_bool+0x240/0x240 [ 265.904009] ? kernel_read+0x110/0x110 [ 265.907973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 265.913449] ? rcu_read_lock_sched_held+0x10a/0x130 [ 265.918494] ? vfs_write+0x17f/0x4d0 [ 265.922212] ? SyS_write+0xc0/0x1a0 03:50:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:48 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') prctl$PR_SVE_SET_VL(0x32, 0x24afb) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) fcntl$getown(r0, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file1\x00', 0x0, 0x18}, 0x10) 03:50:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480), &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 265.925846] ? SyS_read+0x1a0/0x1a0 [ 265.929504] ? do_clock_gettime+0xd0/0xd0 [ 265.933675] ? do_syscall_64+0x43/0x4b0 [ 265.937751] ? SyS_read+0x1a0/0x1a0 [ 265.941451] ? do_syscall_64+0x19b/0x4b0 [ 265.945546] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.955084] warn_alloc_show_mem: 2 callbacks suppressed [ 265.955088] Mem-Info: [ 265.964363] active_anon:66964 inactive_anon:37 isolated_anon:0 [ 265.964363] active_file:4635 inactive_file:12187 isolated_file:0 [ 265.964363] unevictable:0 dirty:86 writeback:0 unstable:0 [ 265.964363] slab_reclaimable:6974 slab_unreclaimable:58086 [ 265.964363] mapped:58829 shmem:62 pagetables:2527 bounce:0 [ 265.964363] free:1430577 free_pcp:179 free_cma:0 [ 265.999028] Node 0 active_anon:267780kB inactive_anon:156kB active_file:18540kB inactive_file:48496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235316kB dirty:344kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 266.023993] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.050893] lowmem_reserve[]: 0 3437 3437 [ 266.055275] Normal free:2642140kB min:5476kB low:8996kB high:12516kB active_anon:268212kB inactive_anon:144kB active_file:18540kB inactive_file:48700kB unevictable:0kB writepending:352kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5792kB pagetables:10404kB bounce:0kB free_pcp:1168kB local_pcp:660kB free_cma:0kB [ 266.065574] binder: 16944:16952 got transaction with invalid offset (0, min 0 max 0) or object. [ 266.086845] lowmem_reserve[]: 0 0 0 [ 266.095929] binder: 16944:16952 transaction failed 29201/-22, size 0-8 line 3348 [ 266.105977] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 266.123149] binder: release 16944:16952 transaction 364 out, still active [ 266.124707] Normal: 4423*4kB (UME) 2806*8kB (UM) 2958*16kB (UME) 746*32kB (UME) 400*64kB (UME) 165*128kB (UME) 76*256kB (UM) 25*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 595*4096kB (M) = 2642796kB [ 266.141648] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 266.148288] 16835 total pagecache pages [ 266.159404] 0 pages in swap cache [ 266.163224] Swap cache stats: add 0, delete 0, find 0/0 [ 266.168777] Free swap = 0kB [ 266.172235] binder: unexpected work type, 4, not freed 03:50:49 executing program 2: setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00fbdb02069d606d146d37a827ba8fd73c7c15637957bbd5140a7f0c57875e65a7de7bde9385f6a3cc54b062a8f113a6cc3e9b11346d0eb62715eb972126d8b73961ee188f5aae971a6d6018275dc90872396ab581590f92302b72a1b6801f11b277ad2b62554f7f3e22322a77eeb132a0da2c566f450b0cc2cba8270aba527138c7f2b77d7d7331f7f1b441f1a18dddfa71c9c76b46310434d673239bc32e865c9191c575d7f10f6bb7dc3754319dca36769cf1e66618fef86aa110127214ccfe85eeb0d8bedeb0a3a043c40fd2964e13"], 0xdb, 0x1) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x53, &(0x7f0000000040)="46c89129130bf4a85a6d81052e23efebc2592b1780953e8b6f7b4ed019274fc7e94496347887ec40263311046809543e91111071c87c90305593730c92b8719e1a46299c89150a9f92c18eda9af81100f0eb8d"}) r1 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="46bd32f8690a6805aa2e2536c838dd85bb93500c785ecacfcb7c3e45f8a7337c5f0cd189bd6a8b39ccf55892912d1ade1e98280f51a5baddeb644f62f5a19b5901a09d773b197ad64177de8c192c0cd76f8b1003c03d60852c46ece4971ba6a35f4086c469e4df1be6119d29e92514f9aff3052c8059bd5a46974b4d46f0b45a5c696520513a3ecc41e303e6a0e44232b65110a67f01b283eda08768fa6e06d431", 0xa1, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f0000000340)=""/249, 0xf9) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000540)={0x3, 0x4, 0x7fffffff, 0x100000001, 0x6, 0x1}) 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480), &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 03:50:49 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) write$P9_RWALK(r0, &(0x7f0000000180)={0x3d, 0x6f, 0x1, {0x4, [{0x2, 0x0, 0x3}, {0x3, 0x0, 0x1}, {0x20, 0x4, 0x8}, {0x20, 0x2}]}}, 0x3d) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000"], 0x35) 03:50:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "da5ed8af069f18d141657725fb1984d445ed997c71b0e2de2d09a18755e0324f8dc0d4f93fc08b5b5dff"}, 0x3a) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x140, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, [], 0x16}, @in6=@rand_addr="647b8e1c621d6d66d1c14637e2184c68", 0x4e21, 0x3, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, r3}, {0x36, 0x0, 0xb9, 0x800, 0x1, 0x0, 0x3f, 0x10000}, {0x1, 0x0, 0x4, 0x401}, 0x2, 0x6e6bbb, 0x1, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d3, 0x32}, 0x2, @in=@multicast2, 0x0, 0x3, 0x0, 0x10001, 0x33, 0x3f, 0x9}}, 0xe8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x10) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x880) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75a836d78069dd1e6a03e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 266.173181] Total swap = 0kB [ 266.181387] binder: undelivered TRANSACTION_COMPLETE [ 266.189974] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.192303] 1965979 pages RAM [ 266.198902] 0 pages HighMem/MovableOnly [ 266.201851] binder: send failed reply for transaction 364, target dead [ 266.205050] 315697 pages reserved [ 266.213913] SELinux: ebitmap: truncated map 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 266.273605] SELinux: ebitmap: truncated map [ 266.289269] SELinux: policydb version -1344774438 does not match my version range 15-31 [ 266.297052] binder: 16963:16970 got transaction with invalid offset (0, min 0 max 0) or object. [ 266.312194] SELinux: policydb string SE Linu¨ does not match my string SE Linux 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) 03:50:49 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file1\x00') fcntl$setpipe(r0, 0x407, 0x7fff) creat(&(0x7f0000000000)='./file0\x00', 0x82) 03:50:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(r0, 0xc1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 266.329089] SELinux: policydb version -1344774438 does not match my version range 15-31 [ 266.339530] SELinux: ebitmap: truncated map [ 266.344390] binder: 16963:16970 transaction failed 29201/-22, size 0-8 line 3348 [ 266.354272] SELinux: policydb string SE Linu¨ does not match my string SE Linux [ 266.360478] binder: release 16963:16970 transaction 369 out, still active 03:50:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x0, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 266.384550] binder: unexpected work type, 4, not freed [ 266.393876] binder: undelivered TRANSACTION_COMPLETE [ 266.407794] binder: undelivered TRANSACTION_ERROR: 29201 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 266.432935] binder: send failed reply for transaction 369, target dead [ 266.453815] binder: 16988:16991 got transaction with invalid offset (0, min 0 max 24) or object. [ 266.457091] SELinux: ebitmap: truncated map [ 266.475866] SELinux: ebitmap: truncated map 03:50:49 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="03f9a703d20c14921d452f1ec97c9c781bc8383dc909b0400d3ad33d575f30", 0x1f) 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400"], 0x39) [ 266.479233] binder: 16988:16991 transaction failed 29201/-22, size 24-8 line 3348 [ 266.488772] binder: 16988:16991 ioctl c0306201 200002c0 returned -14 [ 266.499007] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 266.508222] SELinux: ebitmap: truncated map [ 266.512383] binder: release 16988:16991 transaction 374 out, still active [ 266.520394] binder: unexpected work type, 4, not freed [ 266.551312] binder: undelivered TRANSACTION_COMPLETE [ 266.564972] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.582160] binder: send failed reply for transaction 374, target dead [ 266.599770] SELinux: ebitmap: truncated map 03:50:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2f, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'veth1_to_bond\x00', 0xc00}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff07f90800e1ffbda83a865923e351ac6b5413f4b25345204c616e4c7816000000fff90003e2f490ad2735be1921000000ff01e5ff0000ff6e0600002bec0000000000ca542400000055f988"], 0x6c) 03:50:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x0, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) 03:50:49 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 03:50:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000ac0)=ANY=[@ANYBLOB="81a7833c01e5da4f12e5836368943306239e6688273617477aa09ea675c4fb104f964218b243279248dfcd1c35e1301d8140aeaceca1019528e9c37b0fe8d58e0cc711a2566654d31fbf92c5a12551066e7f1668e06fea8b6889e44f119b97368f967b1cea45dc1fb3316941ad000000000000000000008435295a673ffb9049f169443947274eab1149c42408d7a80638861bc830ea9e3ae1e757129c53a481e10ca7d0a4edf3e2cec375bad52d1b4764f415e682f99d"]) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@empty, @dev, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'tunl0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @dev}, &(0x7f0000000980)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000009c0)={@loopback, 0x0}, &(0x7f0000000a00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d40)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001000)={@loopback, 0x0}, &(0x7f0000001040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001100)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000800)={@broadcast, @broadcast, 0x0}, &(0x7f0000001180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004e00)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000004f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005040)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000005140)=0xe8) accept(0xffffffffffffffff, &(0x7f0000007800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007880)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000078c0)={@multicast1, @dev, 0x0}, &(0x7f0000007900)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007940)={'erspan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007a40)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000007b40)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000007c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007c80)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000007cc0)={@rand_addr, 0x0}, &(0x7f0000007d00)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000600)={@empty, @empty, 0x0}, &(0x7f00000007c0)=0x1) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000009540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000009500)={&(0x7f0000008a00)=ANY=[@ANYBLOB="f00a0000", @ANYRES16=r1, @ANYBLOB="01032dbd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="200102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400ff071d06050000005a05010305000000ffff3f5b09000000ef00010703000000b100ff030200000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r4, @ANYBLOB="7c0002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7001020040000100240001007072696f72697479000000000000000000000000000075000000000000000000080003000e000000080004003f00000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r10, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040007000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400071a000008000100", @ANYRES32=r11, @ANYBLOB="640102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="ec00020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400fffeffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="b00102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ff07000008000600", @ANYRES32=r18, @ANYBLOB="4000010024001deb71756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400030000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="f400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004004000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000008000100", @ANYRES32=r23, @ANYBLOB="5402020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r25, @ANYBLOB="40400100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff030000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004007ea200003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400004001000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004ad9a27608000600", @ANYRES32=r26, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ffff0000"], 0xaf0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) 03:50:49 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') renameat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') [ 266.728107] binder: 17020:17023 got transaction with invalid offset (0, min 0 max 24) or object. [ 266.738854] binder: 17020:17023 transaction failed 29201/-22, size 24-8 line 3348 [ 266.741502] SELinux: policydb magic number 0xf907ff8c does not match expected magic number 0xf97cff8c [ 266.747094] binder: 17020:17023 ioctl c0306201 200002c0 returned -14 [ 266.758452] SELinux: ebitmap: truncated map [ 266.767573] binder: release 17020:17023 transaction 379 out, still active 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 266.791442] binder: unexpected work type, 4, not freed 03:50:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xa00) 03:50:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x0, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 266.812170] binder: undelivered TRANSACTION_COMPLETE [ 266.823682] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.842532] binder: send failed reply for transaction 379, target dead 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca5424000000"], 0x3b) [ 266.879204] SELinux: ebitmap: truncated map [ 266.886992] SELinux: ebitmap: truncated map [ 266.900361] binder: 17043:17051 got transaction with invalid offset (0, min 0 max 24) or object. 03:50:49 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file1\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) 03:50:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x101040, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000006c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000700)=0x0) r7 = getuid() getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001c40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001c80)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) r11 = getgid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001dc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001e00)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000001f00)=0xe8) getgroups(0x7, &(0x7f0000001f40)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01]) r15 = getpid() r16 = getuid() stat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002040)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) r20 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000033c0)=0x0) lstat(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000034c0)={0x0, 0x0, 0x0}, &(0x7f0000003500)=0xc) r24 = fcntl$getown(r2, 0x9) r25 = geteuid() getgroups(0x5, &(0x7f0000003540)=[0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0x0]) r27 = fcntl$getown(r0, 0x9) getresuid(&(0x7f00000037c0), &(0x7f0000003800)=0x0, &(0x7f0000003840)) getresgid(&(0x7f0000003880)=0x0, &(0x7f00000038c0), &(0x7f0000003900)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003940)=0x0) lstat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000003a40)=[0xee01, 0xee01, 0xee00, 0x0, 0xee01]) sendmmsg$unix(r2, &(0x7f0000003b00)=[{&(0x7f0000000080)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="fdf75049fd39ac4918a56a77d0ea8101e422180e9f4c09e57cffb620cc07a6da32d2b73dead56c039d93f48556f34c09b6630bb5972b2b569d2c6b63ad58d18f0982aa85b9a7ccc9d58da9278ebdcb998fcb622a827aeb77501f38aa7ea5853c8facfe28e39bf955fadca5523353b3790fdabe3534dd7b794b1a884a5a21a8ad0d0468ee4a475cd9134b43f86f0059c9358e6bee009013ad054f2f5a25d1d18bfc45c5928230a0ef858a600da1651386ba7b32b4174d4d0b3278ab03baec6076ae376472c18b3986eca43db491d37352c739644e20b25d8bf0fe46837afe2dc6fc93f9d7ba916678fe83472d605c788a4dbcb4d9445d8a07484112ebed", 0xfd}, {&(0x7f0000000240)="0e3cf618a6a03be94c7ca2810b33fc7e94509dd489db41e7e975d0d59dfe0b50f4bbae4ba02b87613ced37ad5dacf64712d25361aa90b029c94e8de24f7be949b30be6d843cae892b28f9ec1eb1203856a98cecd29e36929be6e7f7610eaa5f66acdde35f64cb5d03bc57490a30724ce4de71f0dddf15a597b613f280e9793c171ce83f9bb8e005ecbf786dc5d4fd4c185294494c468fa9e49865770274e86ed865142a93175219f264f978954e2", 0xae}, {&(0x7f0000000300)="ffadd74c631859fb3ea07a76aa7e8015b94a94a174354a2716020a6530174c92356604fd5f4a9ab5ae9200c31c56a61b2d8002b8d4a2fb6b73e266dc1936deb45ca76379a67908b1adfa5f6c4720ad69afbe60eed055806d8ebd84a590611a0552fc87586f1c10ef3e9daec4380e72243c1c6d322893f92829eacc8129a4501a01160ec420513e2b43404ed2a32d6e3d2aa62498d8098526508ae42e1714566b2271ad", 0xa3}, {&(0x7f00000003c0)="ab8c9a91614c0110007cbbe1cb07d52d81ce28e54f6191eb8a1883dc7e82ff3232cff1e5409849e156a1042509e249f4f7ed6fe7951c5aa149257d841b24e7e59e8a375b34342fdedd432faffe3b9131cf2cf2aee52ef2e816b8e87cc5241ded71bf5ff9", 0x64}, {&(0x7f0000000440)="1ece2ba127917346b91336a191d4ce2a238e5ad3ef7f721cee8065af605c2c0ddd2551fb23b14c59395de5f9a602011de68b34871b8192cc81a84b9bce0837ada4332479ef29941996ff9312bb9cc47fceda289b64d6ad3bdc87f818927770050610516ac4be1292f608b52df22e82388bd5ab888b3c208fb483f86fac64caaff0a1e414d9d09f2a994fc17270a1ab4b2e7b2bf104ea8123e051c7393b7723bbc62293623a174d373eb1272e1b9c954980a4511a8f6ba749bc17f69ffd824e6ce2e045c7cf7daa09616f1f079f42ed8e90f429f566d09a9272be", 0xda}], 0x5, &(0x7f0000000800)=[@rights={0x38, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x78, 0x20000844}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="51d1d5f6e413a6a6679c3c0691d95bc1d82d9a0b2570fbbf7b79fa1e1a36b787390ed1ae16c2c5c7dbdd87407c2f89ceb78352332212387c032c9b51c0e9a933ceef9418fb5c9c89a8744e2f8ef2c1fdb51e96bd26c8b017732811936ecec0", 0x5f}, {&(0x7f0000001980)="ee988f3f881f4caa364d87f1642ce5d2739a95e6e3647dd7d664e176ff4cbd35e0772a2e9632b06b152aa93b0babb030911c794c0bc7cd9fc4af3704399d700582bb3ee4ea640c6f480e650f8ea390783b3cdac7396d9e04cd30b7440d6c22f2b7279a9c58fb78392b84fcd9bd6d31cfa355f1d22dc3b8d9ef857453148222e24b8e64c6f5dd60b7e3a049cedbb8d2954bcb62874d23d78c3d07c2d482b953fd0f743466e44977335b07799bb98bb8e9ff60fa646e0d3d22d4fa34f4", 0xbc}, {&(0x7f0000001a40)="57ede0a9b5449aeb42cb53f47de3845ab3d606bc0ae9c6a3d0c9d7f848ef7d0a387abf272e46b7fe8b5c0f0f71903f79665e3699481ccd77e28928a914de9631551e874b5ad43203181a5618f2f31c95c55ee0cdb705129261c03f03e52bc0", 0x5f}, {&(0x7f0000001ac0)="b0b0e11ed1a8ed53a712d57259895d5f04de4e56d6eee65c99be52c818c8", 0x1e}, {&(0x7f0000001b00)="9eb7469067b2716061214d62aca3e6cf457e283c8983b77c9e7d3ed8e5e454ebfc34475af7d36545a98efef8556bc541d982bed911d06533477573ce2c9403201dbbcecf5e16a354ab4bfc3f4b7cb665f0c92afeb7479880879fa345ae40cb4aeb5fe942dfa5efcba3871b0fd52a5eeda587a44e91536a8998a161b3c50425be1b6915ef5e3494e0f2de239546176b91351d25848911dbf3c72b46190a02c88ad31a60744f3c1c322351d19cb49b78", 0xaf}], 0x6, &(0x7f0000002180)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0xb8, 0x4000}, {&(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f00000022c0)="591791482dcec94db908330661467892a6d0582afa863b6cb124c2a2e419ae55cd2a11213e38008d43de06a60a259ac30fadeb7e347d6d09a5bcb62bac89cb0faf56a6b84d2ca63eae1c0ef4f4350fb1ab0af93ce1069177512ab27054d5e0016e307f8d5822b1b8f1", 0x69}, {&(0x7f0000002340)}, {&(0x7f0000002380)="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", 0x1000}], 0x3, &(0x7f0000003580)=[@rights={0x20, 0x1, 0x1, [r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r2, r2, r0]}], 0x98, 0x40}, {&(0x7f0000003640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f00000036c0)="ad7b9cfcf6d4f8e17b86709a99e78eee049e2305cc5f67ee12387fe03f2f64871273b84d59f14df5c71c8211a64a67634922d0b4505f91d692df7438948efeae812730662f6d70361c6aaf2c6a8d8a4ba6950bbed416473b72aa43f1e6790b56920521da36347de5abd0c89352a7fba3b4da9d1cc949bb9be54456ec8797d3a52f24bdb4512a", 0x86}], 0x1, &(0x7f0000003a80)=[@rights={0x28, 0x1, 0x1, [r1, r2, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}], 0x80, 0xfb8a6ba8b6af6f90}], 0x4, 0x4000000) write$selinux_load(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 266.924846] binder: 17043:17051 transaction failed 29201/-22, size 24-8 line 3348 [ 266.934794] binder: 17043:17051 ioctl c0306201 200002c0 returned -14 [ 266.945751] binder: release 17043:17051 transaction 384 out, still active [ 266.965426] binder: unexpected work type, 4, not freed [ 266.972502] binder: undelivered TRANSACTION_COMPLETE 03:50:49 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x9) [ 266.980888] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.996905] SELinux: ebitmap: truncated map [ 267.008223] binder: send failed reply for transaction 384, target dead 03:50:49 executing program 5: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0xc0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) fsync(r0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="6470969b1d9fb53e730c739fdf739402b8cc9e8cc78da06f26c171439958dcb05a1b8409ddeac41421496420fbcff10c5c4c2a8c6c4895101d2aa7bbf34cb822bfa2f152fb6712e2199f0ce43a05a9a07e048d9d6b60d49f18670b96f3dcc163e56d194e6920972b90ea0dc473528604a0757b552f9d556f51c187e410d22ac31529de000000000000000000000000000000"]) [ 267.056124] audit: type=1400 audit(1553658649.944:47): avc: denied { map } for pid=17064 comm="syz-executor.1" path="socket:[51011]" dev="sockfs" ino=51011 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1 [ 267.060811] SELinux: ebitmap: truncated map [ 267.092315] binder: 17068:17073 ioctl c0306201 200002c0 returned -14 03:50:50 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = getuid() bind(r0, &(0x7f0000000400)=@llc={0x1a, 0xffff, 0x90c4, 0x40, 0x8000, 0x7f, @remote}, 0x13) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x448, 0x130, 0x130, 0x130, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000240), {[{{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fa94b08aa661557ae24fa9790cb03e7c034fa1a5d10f4ce266a2d69b452"}}, {{@arp={@local, @remote, 0x0, 0xff000000, @mac=@dev={[], 0x21}, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x99, 0x10001, 0x7fffffff, 0xffffffff, 0x7, 0x8, 'veth1_to_bond\x00', 'team0\x00', {}, {0xff}, 0x0, 0x112}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x498) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setresuid(r1, r2, r3) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 267.106614] binder: release 17068:17073 transaction 389 out, still active [ 267.121601] binder: unexpected work type, 4, not freed [ 267.134598] binder: undelivered TRANSACTION_COMPLETE [ 267.141004] SELinux: ebitmap: truncated map [ 267.141097] binder: undelivered TRANSACTION_COMPLETE 03:50:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:50 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x412000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000001) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800396c0eee9c46004000000000ff01e5ff000000000600000000100000ca542400000055"], 0x3c) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x20000) [ 267.153084] binder: send failed reply for transaction 389, target dead [ 267.161861] SELinux: ebitmap: truncated map [ 267.166934] binder: undelivered transaction 392, process died. [ 267.181144] SELinux: ebitmap: truncated map [ 267.212573] binder: 17086:17090 ioctl c0306201 200002c0 returned -14 [ 267.220108] binder: release 17086:17090 transaction 394 out, still active [ 267.234864] binder: unexpected work type, 4, not freed 03:50:50 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:50 executing program 2: r0 = socket$unix(0x1, 0x7, 0x0) r1 = dup2(r0, r0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0\x00') 03:50:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRES64, @ANYRES64=r0, @ANYRESHEX=r1]], @ANYRESHEX=r1, @ANYPTR], 0xffffffffffffffec) [ 267.259870] binder: undelivered TRANSACTION_COMPLETE [ 267.271333] binder: undelivered TRANSACTION_COMPLETE [ 267.277263] binder: send failed reply for transaction 394, target dead [ 267.291640] binder: undelivered transaction 397, process died. [ 267.291684] SELinux: ebitmap: map size 2632846956 does not match my size 64 (high bit was 4194374) 03:50:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:50 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x80800) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], 0x0}}}], 0x0, 0x0, 0x0}) [ 267.345077] binder: 17105:17111 ioctl c0306201 200002c0 returned -14 [ 267.354437] SELinux: ebitmap: truncated map [ 267.365001] binder: release 17105:17111 transaction 399 out, still active [ 267.379589] binder: unexpected work type, 4, not freed 03:50:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x4005, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) [ 267.409524] binder: undelivered TRANSACTION_COMPLETE 03:50:50 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 267.432159] binder: undelivered TRANSACTION_COMPLETE [ 267.437970] binder: send failed reply for transaction 399, target dead [ 267.449237] binder: undelivered transaction 402, process died. 03:50:50 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x19}, 0x4e22, 0x21c5, 0x4e23, 0xce17, 0xa, 0x80, 0x20, 0x0, 0x0, r4}, {0x6, 0x774, 0x5, 0x9, 0x5, 0xffffffffffffff3e, 0x8b, 0x20}, {0xfffffffffffffe00, 0xa9, 0xa, 0x3ff}, 0x81, 0x6e6bbd, 0x3, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x4d2, 0x3c}, 0xa, @in=@rand_addr=0x1, 0x3507, 0x1, 0x2, 0x79ae08ad, 0x7, 0x4, 0x6}}, 0xe8) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x101, 0x9}) write$selinux_load(r3, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x3, 0x3, 0x592f, 0x5465dc3b}) 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], 0x0}}}], 0x0, 0x0, 0x0}) [ 267.476370] binder: release 17128:17134 transaction 404 out, still active [ 267.490777] binder: unexpected work type, 4, not freed [ 267.499418] binder: undelivered TRANSACTION_COMPLETE [ 267.512365] binder: undelivered TRANSACTION_COMPLETE [ 267.518667] SELinux: ebitmap: truncated map 03:50:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2c) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@local, @multicast2, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@remote, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001a40)={0x0, @broadcast, @broadcast}, &(0x7f0000001a80)=0xc) getpeername$packet(r0, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f00000020c0)={0x11, 0x0, 0x0}, &(0x7f0000002100)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000021c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000022c0)=0xe8) accept4$packet(r0, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002340)=0x14, 0x80800) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002380)={@remote, 0x0}, &(0x7f00000023c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000024c0)={'veth1_to_bridge\x00', 0x0}) accept4$packet(r0, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002540)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002580)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000025c0)={'ip6_vti0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002640)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002680)={@mcast2, 0x0}, &(0x7f00000026c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002cc0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r1, @ANYBLOB="02002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000008000100", @ANYRES32=r4, @ANYBLOB="3001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400faffffff08000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ffffff7f3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000600000008000100", @ANYRES32=r9, @ANYBLOB="240102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7800020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400810000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r17, @ANYBLOB="fc00020040000100240001006c625f686173685f7374617473000078cd8fab928b66083fc879680000000000000000000000000000000000080003000b000000080004000101000008005cb5a93bb81d225417f41dc4150700000000003800011b240001006e6f746966795f70656572735f696e74657276616c00070800000000000000000800030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f", @ANYRES32=r18, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x4d0}, 0x1, 0x0, 0x0, 0x40}, 0x20000085) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000140)={@loopback}, &(0x7f0000000180)=0x8) 03:50:50 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x18}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x11) [ 267.519372] binder: send failed reply for transaction 404, target dead [ 267.531885] binder: undelivered transaction 407, process died. [ 267.557724] warn_alloc: 1 callbacks suppressed [ 267.557729] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 267.573017] CPU: 1 PID: 17141 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 267.580239] Call Trace: [ 267.582842] dump_stack+0xb9/0x10e [ 267.586395] warn_alloc.cold+0x91/0x1ab [ 267.590376] ? zone_watermark_ok_safe+0x250/0x250 [ 267.591636] binder: release 17143:17146 transaction 409 out, still active [ 267.595227] ? lock_acquire+0x10f/0x380 [ 267.595240] ? avc_has_perm+0x9c/0x350 [ 267.595264] ? avc_has_perm+0x1b7/0x350 [ 267.595278] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 267.595301] ? __vmalloc_node_range+0x390/0x690 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], 0x0}}}], 0x0, 0x0, 0x0}) [ 267.595319] ? check_preemption_disabled+0x35/0x1f0 [ 267.595333] ? sel_write_load+0x199/0xfb0 [ 267.624730] binder: unexpected work type, 4, not freed [ 267.629738] ? vmalloc+0x60/0x80 [ 267.629752] ? sel_write_load+0x199/0xfb0 [ 267.629764] ? sel_write_load+0x199/0xfb0 [ 267.629789] ? sel_read_bool+0x240/0x240 [ 267.629807] ? trace_hardirqs_on+0x10/0x10 [ 267.629819] ? check_preemption_disabled+0x35/0x1f0 [ 267.629841] ? __vfs_write+0xf9/0x5a0 [ 267.629848] ? sel_read_bool+0x240/0x240 [ 267.629857] ? HARDIRQ_verbose+0x10/0x10 [ 267.629866] ? kernel_read+0x110/0x110 [ 267.629899] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 267.637095] binder: undelivered TRANSACTION_COMPLETE [ 267.639319] ? rcu_read_lock_sched_held+0x10a/0x130 [ 267.639342] ? vfs_write+0x17f/0x4d0 [ 267.639360] ? SyS_write+0xc0/0x1a0 [ 267.639372] ? SyS_read+0x1a0/0x1a0 [ 267.639383] ? do_clock_gettime+0xd0/0xd0 [ 267.639397] ? do_syscall_64+0x43/0x4b0 [ 267.639406] ? SyS_read+0x1a0/0x1a0 [ 267.639420] ? do_syscall_64+0x19b/0x4b0 03:50:50 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 267.646735] binder: undelivered TRANSACTION_COMPLETE [ 267.646949] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.672501] Mem-Info: [ 267.700204] binder: send failed reply for transaction 409, target dead [ 267.700215] binder: undelivered transaction 412, process died. [ 267.736588] binder: release 17155:17160 transaction 414 out, still active [ 267.752396] active_anon:68109 inactive_anon:36 isolated_anon:0 [ 267.752396] active_file:4635 inactive_file:12134 isolated_file:0 [ 267.752396] unevictable:0 dirty:111 writeback:0 unstable:0 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)}}}], 0x0, 0x0, 0x0}) 03:50:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getcwd(&(0x7f00000002c0)=""/231, 0xe7) write$selinux_create(r0, &(0x7f00000003c0)=@access={'system_u:object_r:etc_runtime_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5d) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000240)=ANY=[@ANYBLOB="64ac1b9ed8329d80412cdb2275ebd30176011132fc8b7c1b71a586623b01000000a595829e40442334c92df91b11e9e57141ae670812c8afdc5d4fb821681167bb9eec6d8a1dd910eb3f763c974e2c04d3ea3cf8526ce573b52ce6ffe1b5aeea97fad1648eeab1d207c5901b9c68a80a026366f422da38ac455630f4af07f7dac9f683dc192ec7d20ab990fa2bdc34d34d558cdbdb32f6ef2bdd05397eaff00693511d5f2cbc70a034dd0f3b305f1d721f5195dafec314e024bf8e3887f3ccac6b998b2aca7cd440b423d68b7ae06d4e80329dfe931f4424c8f00d7a0dfeb4ad010000000000000038480823e021d69a9a61f5e416cac8a46e88b7ed04b62ffcf9acb06be444"]) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x108, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x943, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004050}, 0xc001) [ 267.752396] slab_reclaimable:6966 slab_unreclaimable:58022 [ 267.752396] mapped:58834 shmem:62 pagetables:2590 bounce:0 [ 267.752396] free:1429555 free_pcp:130 free_cma:0 [ 267.781030] binder: unexpected work type, 4, not freed [ 267.804855] Node 0 active_anon:272236kB inactive_anon:144kB active_file:18540kB inactive_file:48536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235236kB dirty:444kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 03:50:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 267.809521] binder: undelivered TRANSACTION_COMPLETE [ 267.834298] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.865338] lowmem_reserve[]: 0 3437 3437 03:50:50 executing program 2: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) sendmsg$unix(r0, &(0x7f0000001480)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="ccfe3f45b2e6f04bcc752ed0d8dbc9aa2ee9ccd5f11745166684ddac7c7ce4c0133be6c77c127de8029f2d7be597ab5ed090d0a5d10c8297ac191dab6253f3532ebf07762e5b2ddfbf17999745043725469afba3c57829", 0x57}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000100)="05923d7d63", 0x5}, {&(0x7f0000000200)="048db3128681a09e83afdefeae2092b1e793b1b35cc94837803c9b48c3905acd839415d260b3120122838c996bb044ad3df4d4596d060f8234f6b6b0ca748cb2e0807cce62910cd3c5c52a22709527743eb255c20f8d68ef3af3a7d70c20e6b8f9f023f618f31b2d2ca916d4b68933cb86217e5bad71ac8b828ebc7156a4ff43b588f7a3d6e6401bf4b2fe8bbf142749aa6e3bedf9a1cf4853d02366aa8f685bbd54fc6f9a9d97fdc7fead843717e119ce9d4c7a6a29392dc63dd1f51e9bb323f2f5bf8408b71b79f5ccfb622a3edb8dc8d1b80263318fcd0ac78b4f95cdbde22e997c8bbe97898d25a3016e1aa0596f8b6d6ac020fcd9e8f7", 0xf9}, {&(0x7f0000001380)="e454b3a75c9f4dcf01a3d858eaa721eb638b917b9a27c0211b930ba0b2a08d3a08ef5f8afb3963da8bf5f9922d17f715950e8c9b8b71898c831c1b2f1318719ce0067ba5bb782ddb351f14c4e29838cca2a60e990318dd3eb0eff246bab01be4e51859b45dc77174f2b804e0f19e83343b9494a8b4b29035de9cda8d59926bd5308505ef82059ca8286f30ffcec966337d06da324b37c8751fb77a8151535940fc597f3519fdce2cae660c4caa01cc4cdaad7f7b6c861e970692d55307f253eb28f8b8aed812525ce2105b82829f7fe5c76fc643f738", 0xd6}], 0x5, 0x0, 0x0, 0x24044085}, 0x1) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 267.869992] Normal free:2638592kB min:5476kB low:8996kB high:12516kB active_anon:272336kB inactive_anon:144kB active_file:18540kB inactive_file:48736kB unevictable:0kB writepending:444kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5600kB pagetables:10064kB bounce:0kB free_pcp:980kB local_pcp:544kB free_cma:0kB [ 267.872942] binder: undelivered TRANSACTION_COMPLETE [ 267.920493] binder: send failed reply for transaction 414, target dead [ 267.933119] lowmem_reserve[]: 0 0 0 [ 267.937219] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 267.942510] binder: undelivered transaction 417, process died. [ 267.953477] Normal: 3317*4kB (UM) 2850*8kB (UME) 2958*16kB (UME) 734*32kB (UME) 400*64kB (UME) 165*128kB (UME) 75*256kB (UM) 26*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 595*4096kB (M) = 2638596kB 03:50:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)}}}], 0x0, 0x0, 0x0}) [ 267.978448] binder: release 17168:17173 transaction 419 out, still active [ 267.989705] binder: unexpected work type, 4, not freed [ 268.004679] binder: undelivered TRANSACTION_COMPLETE [ 268.029850] 16891 total pagecache pages [ 268.029973] binder: undelivered TRANSACTION_COMPLETE [ 268.044727] 0 pages in swap cache [ 268.046879] binder: send failed reply for transaction 419, target dead [ 268.058917] Swap cache stats: add 0, delete 0, find 0/0 [ 268.063699] binder: undelivered transaction 422, process died. [ 268.072889] Free swap = 0kB [ 268.080157] binder: release 17181:17186 transaction 424 out, still active [ 268.087115] binder: unexpected work type, 4, not freed [ 268.100229] Total swap = 0kB [ 268.103281] 1965979 pages RAM [ 268.106416] 0 pages HighMem/MovableOnly [ 268.123749] binder: undelivered TRANSACTION_COMPLETE [ 268.128885] binder: undelivered TRANSACTION_COMPLETE [ 268.142516] 315697 pages reserved [ 268.146446] SELinux: ebitmap: truncated map [ 268.148578] binder: send failed reply for transaction 424, target dead [ 268.154966] SELinux: ebitmap: truncated map [ 268.158519] binder: undelivered transaction 427, process died. [ 268.178782] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 268.188974] CPU: 1 PID: 17141 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 268.196175] Call Trace: [ 268.198775] dump_stack+0xb9/0x10e [ 268.202339] warn_alloc.cold+0x91/0x1ab [ 268.206333] ? zone_watermark_ok_safe+0x250/0x250 [ 268.211183] ? lock_acquire+0x10f/0x380 [ 268.215164] ? avc_has_perm+0x9c/0x350 [ 268.219069] ? avc_has_perm+0x1b7/0x350 [ 268.223051] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 268.227741] ? __vmalloc_node_range+0x390/0x690 [ 268.232426] ? check_preemption_disabled+0x35/0x1f0 [ 268.237454] ? sel_write_load+0x199/0xfb0 [ 268.241703] ? vmalloc+0x60/0x80 [ 268.245074] ? sel_write_load+0x199/0xfb0 [ 268.249229] ? sel_write_load+0x199/0xfb0 [ 268.253394] ? sel_read_bool+0x240/0x240 [ 268.257467] ? trace_hardirqs_on+0x10/0x10 [ 268.261717] ? check_preemption_disabled+0x35/0x1f0 [ 268.266752] ? __vfs_write+0xf9/0x5a0 [ 268.270564] ? sel_read_bool+0x240/0x240 [ 268.274631] ? HARDIRQ_verbose+0x10/0x10 [ 268.278697] ? kernel_read+0x110/0x110 [ 268.282705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 268.288175] ? rcu_read_lock_sched_held+0x10a/0x130 03:50:51 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)}}}], 0x0, 0x0, 0x0}) 03:50:51 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10040, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) 03:50:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffffc, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB]) [ 268.293304] ? vfs_write+0x17f/0x4d0 [ 268.297053] ? SyS_write+0xc0/0x1a0 [ 268.300690] ? SyS_read+0x1a0/0x1a0 [ 268.304324] ? do_clock_gettime+0xd0/0xd0 [ 268.308490] ? do_syscall_64+0x43/0x4b0 [ 268.312472] ? SyS_read+0x1a0/0x1a0 [ 268.316117] ? do_syscall_64+0x19b/0x4b0 [ 268.320205] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:50:51 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x10) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 268.358246] SELinux: ebitmap: truncated map [ 268.365567] SELinux: ebitmap: truncated map [ 268.374135] binder: release 17203:17208 transaction 429 out, still active 03:50:51 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'caif0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@initdev, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000a80)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000c00)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005b00)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000005c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005c40)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000005d40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005d80)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000005e80)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000005ec0)={@multicast2, @empty, 0x0}, &(0x7f0000005f00)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000006080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000006500)={&(0x7f0000000180), 0xc, &(0x7f00000064c0)={&(0x7f00000060c0)={0x3dc, r2, 0x708, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c708fc1}}}]}}, {{0x8, 0x1, r4}, {0x16c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x100, 0x1, 0x800, 0x80000000}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xc3a, 0x101, 0x5, 0x1}, {0x0, 0x3, 0x8, 0x95}]}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r18 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x8800, 0x0) setsockopt$SO_BINDTODEVICE(r18, 0x1, 0x19, &(0x7f0000000100)='nr0\x00', 0x10) 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 268.408657] binder: unexpected work type, 4, not freed [ 268.426122] SELinux: ebitmap: truncated map [ 268.439840] binder: undelivered TRANSACTION_COMPLETE [ 268.445904] binder: undelivered TRANSACTION_COMPLETE [ 268.451745] binder: send failed reply for transaction 429, target dead 03:50:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf908000000ff45204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff0000997bb6cd3016ea4d60de128db5da00030000000000000000ca542400000055"], 0x3c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 268.458759] binder: undelivered transaction 432, process died. 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, &(0x7f0000000100)=ANY=[@ANYBLOB='d']) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) [ 268.507666] binder: 17224:17230 ioctl c0306201 200002c0 returned -14 [ 268.519035] binder: release 17224:17230 transaction 434 out, still active [ 268.531210] SELinux: ebitmap: truncated map [ 268.536277] sel_write_load: 39 callbacks suppressed [ 268.536281] SELinux: failed to load policy [ 268.547927] binder: unexpected work type, 4, not freed 03:50:51 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x5) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 268.571345] binder: undelivered TRANSACTION_COMPLETE [ 268.572214] SELinux: policydb string ÿE Linux does not match my string SE Linux [ 268.578470] binder: undelivered TRANSACTION_COMPLETE [ 268.594462] SELinux: failed to load policy [ 268.605512] SELinux: policydb string ÿE Linux does not match my string SE Linux [ 268.606784] binder: send failed reply for transaction 434, target dead 03:50:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 268.617871] SELinux: failed to load policy [ 268.623888] binder: undelivered transaction 437, process died. [ 268.643890] SELinux: ebitmap: truncated map [ 268.653209] SELinux: failed to load policy 03:50:51 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r1 = socket$inet(0x2, 0x0, 0x4) getsockopt(r1, 0x48e7, 0xb474, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) 03:50:51 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x9, 0x5}) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 268.707282] EXT4-fs: 3 callbacks suppressed [ 268.707293] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 268.731812] binder: 17248:17252 ioctl c0306201 200002c0 returned -14 [ 268.740913] binder: release 17248:17252 transaction 439 out, still active 03:50:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 268.754550] SELinux: ebitmap: truncated map [ 268.762451] binder: unexpected work type, 4, not freed [ 268.777599] SELinux: failed to load policy [ 268.783478] binder: undelivered TRANSACTION_COMPLETE [ 268.791227] SELinux: ebitmap: truncated map [ 268.792539] binder: undelivered TRANSACTION_COMPLETE [ 268.799717] SELinux: failed to load policy 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 268.805929] binder: BINDER_SET_CONTEXT_MGR already set [ 268.814994] binder: 17266:17269 ioctl 40046207 0 returned -16 [ 268.816084] EXT4-fs (sda1): Unrecognized mount option "d" or missing value [ 268.821909] binder: send failed reply for transaction 439, target dead [ 268.836449] SELinux: ebitmap: truncated map [ 268.842116] SELinux: failed to load policy 03:50:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7, 0x4, 0xff, 0x101, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:51 executing program 2: syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/26) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0'}, 0x89) rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000100)='./file1\x00') 03:50:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000010001"]], 0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) dup(r0) [ 268.851608] binder: 17266:17269 transaction failed 29189/-22, size 24-8 line 3117 [ 268.864586] binder: undelivered transaction 442, process died. [ 268.878510] binder: 17266:17269 ioctl c0306201 200002c0 returned -14 [ 268.889929] SELinux: ebitmap: truncated map [ 268.893303] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.894873] SELinux: failed to load policy 03:50:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:51 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x304, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x100, 0x4, 0x6, 0x100]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 03:50:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r3 = dup(r1) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x80083) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) write$binfmt_elf32(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x887) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x180) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) [ 268.942268] SELinux: ebitmap: truncated map [ 268.949013] SELinux: failed to load policy [ 268.957200] SELinux: ebitmap: truncated map [ 268.973464] SELinux: failed to load policy 03:50:51 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 269.011941] SELinux: ebitmap: truncated map [ 269.012844] binder: 17289:17295 transaction failed 29189/-22, size 24-0 line 3117 [ 269.023047] SELinux: ebitmap: truncated map [ 269.026525] binder_alloc: binder_alloc_mmap_handler: 17289 20001000-20004000 already mapped failed -16 [ 269.043448] binder: 17289:17297 transaction failed 29189/-22, size 24-0 line 3117 [ 269.046336] SELinux: ebitmap: truncated map [ 269.080299] binder: 17289:17295 transaction failed 29189/-22, size 0-0 line 3117 [ 269.088242] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.094414] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.112061] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.119004] SELinux: ebitmap: truncated map 03:50:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000000)='\x00', 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000009f140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:50:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:52 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000bae400ca542400000055"], 0x3c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/21, &(0x7f0000000140)=0x15) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) 03:50:52 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x154, r1, 0x0, 0xdc, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ae944d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7164}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf052}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffff001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfcf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 269.128954] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.144418] SELinux: ebitmap: truncated map [ 269.168050] binder: 17305:17311 transaction failed 29189/-3, size 24-8 line 3254 [ 269.180876] binder: 17305:17311 ioctl c0306201 200002c0 returned -14 [ 269.192426] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.192573] binder: BINDER_SET_CONTEXT_MGR already set [ 269.200240] binder: 17316:17318 transaction failed 29189/-3, size 24-0 line 3254 03:50:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 269.229888] binder: 17305:17317 ioctl 40046207 0 returned -16 [ 269.229921] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.248715] SELinux: ebitmap: truncated map [ 269.254517] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.263112] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.266605] binder: 17316:17318 transaction failed 29189/-3, size 24-0 line 3254 [ 269.269599] binder: 17305:17321 transaction failed 29189/-3, size 24-8 line 3254 [ 269.281296] SELinux: ebitmap: truncated map [ 269.284859] binder_alloc: 17305: binder_alloc_buf, no vma [ 269.294011] SELinux: ebitmap: truncated map [ 269.299413] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.305526] binder: 17316:17328 transaction failed 29189/-3, size 21474836480-0 line 3254 [ 269.315022] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.321323] binder: 17305:17330 transaction failed 29189/-3, size 24-8 line 3254 03:50:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000380)=0xc) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getgroups(0x7, &(0x7f0000000a80)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) r12 = getgid() fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000000bc0)=[0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee01, 0x0]) getresgid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000d80)={{}, {0x1, 0x6}, [{0x2, 0x5, r1}, {0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x5, r7}, {0x2, 0x3, r8}, {0x2, 0x1, r9}], {0x4, 0x3}, [{0x8, 0x4, r10}, {0x8, 0x2, r11}, {0x8, 0x2, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}, {0x8, 0x1, r15}, {0x8, 0x2, r16}], {0x10, 0x7}, {0x20, 0x4}}, 0xa4, 0x2) r17 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r17, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r17, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000300)={0x80400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x19, 0x4, 0x4}, 0x1}}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf908786130b3b37ccbc7836f9b414982a145204c694e757816004000000000ff01e5ff00887673060000f70000000000009b6f46bd55"], 0x3c) 03:50:52 executing program 4: write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:52 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000a) [ 269.326780] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.329609] binder: 17305:17330 ioctl c0306201 200002c0 returned -14 [ 269.351531] binder: undelivered TRANSACTION_ERROR: 29189 03:50:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 269.400877] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.413683] binder: undelivered TRANSACTION_ERROR: 29189 03:50:52 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x8) [ 269.442394] binder: 17345:17351 sending u0000000000000000 node 456, cookie mismatch 0000000000000004 != 0000000000000000 03:50:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x30, 0x81, 0x6}}, 0x14) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x3, 0x8}}, 0x14) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:52 executing program 2: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x48800, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040)=0x3f, 0x4) creat(&(0x7f0000000080)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:52 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/44) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 269.485068] binder: 17345:17351 transaction failed 29201/-22, size 24-8 line 3364 [ 269.498356] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 269.498824] binder: 17347:17360 got new transaction with bad transaction stack, transaction 459 has target 17345:0 [ 269.512333] binder: 17345:17351 ioctl c0306201 200002c0 returned -14 [ 269.525184] binder: 17347:17360 transaction failed 29201/-71, size 0-0 line 3144 03:50:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x1f, 0x400}, {0xa8a, 0x80}], r1}, 0x18, 0x1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x242, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$input_event(r2, &(0x7f0000000280)={{0x77359400}, 0x17, 0x9, 0x80000001}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8c8316f9190000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000060000000000f400ca5424003141de18469b7ce88996c546c2273e3d22a98f4baf05ba795b89c4d9b856d423ed8b099651ef08ed7b27f224a3a5e2ed3b56419011b09f26e0a5f146bb3f773b24e32dd9f0aa24db120d255ae9f1704f87cd54382ad0addba1ece21189a5f53a5935e0ae000000000000000000000000000000"], 0x3c) [ 269.543139] SELinux: ebitmap: truncated map 03:50:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000001c0)) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 269.568451] binder: BINDER_SET_CONTEXT_MGR already set [ 269.568497] binder_alloc: binder_alloc_mmap_handler: 17345 20001000-20004000 already mapped failed -16 [ 269.590582] binder: 17345:17365 ioctl 40046207 0 returned -16 [ 269.604562] binder_alloc: 17345: binder_alloc_buf, no vma [ 269.610522] binder: 17345:17351 transaction failed 29189/-3, size 24-8 line 3254 [ 269.611904] binder_alloc: 17345: binder_alloc_buf, no vma [ 269.625923] binder: 17345:17365 transaction failed 29189/-3, size 24-8 line 3254 [ 269.628122] keychord: invalid keycode count 0 [ 269.634370] binder: 17345:17365 ioctl c0306201 200002c0 returned -14 [ 269.641822] SELinux: ebitmap: truncated map [ 269.651092] binder: send failed reply for transaction 455 to 17345:17351 [ 269.656383] SELinux: policydb magic number 0xf916838c does not match expected magic number 0xf97cff8c [ 269.658018] binder: send failed reply for transaction 459 to 17347:17360 [ 269.658069] binder: undelivered TRANSACTION_COMPLETE [ 269.669297] SELinux: ebitmap: truncated map [ 269.686513] keychord: invalid keycode count 0 03:50:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xe00, 0x0) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x0, 0x2, 0x6}}, 0x14) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:52 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:50:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x4, 0x7) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 269.714283] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.724902] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.731497] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.737310] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.784514] binder: 17384:17389 sending u0000000000000000 node 465, cookie mismatch 0000000000000004 != 0000000000000000 [ 269.805786] binder: 17384:17389 transaction failed 29201/-22, size 24-8 line 3364 [ 269.813829] binder: 17384:17389 ioctl c0306201 200002c0 returned -14 [ 269.819615] SELinux: ebitmap: truncated map [ 269.822858] binder_alloc: binder_alloc_mmap_handler: 17384 20001000-20004000 already mapped failed -16 [ 269.828241] SELinux: ebitmap: truncated map [ 269.834814] binder: BINDER_SET_CONTEXT_MGR already set [ 269.844684] binder_alloc: 17384: binder_alloc_buf, no vma [ 269.850687] binder: 17384:17393 transaction failed 29189/-3, size 24-8 line 3254 [ 269.860201] binder: 17384:17389 ioctl 40046207 0 returned -16 [ 269.863063] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.877075] binder: send failed reply for transaction 464 to 17384:17389 [ 269.885297] binder: undelivered TRANSACTION_COMPLETE [ 269.894913] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.900642] binder: undelivered TRANSACTION_ERROR: 29189 03:50:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/55, 0x37) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000001c0)) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file1\x00') 03:50:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000040)=0x1c, 0x80800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) [ 270.232313] binder_alloc: binder_alloc_mmap_handler: 17347 20001000-20004000 already mapped failed -16 [ 270.242878] binder: 17347:17397 transaction failed 29189/-22, size 24-0 line 3117 [ 270.251181] binder: undelivered TRANSACTION_COMPLETE [ 270.256313] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.261866] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.267339] binder: undelivered TRANSACTION_ERROR: 29189 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0x2, &(0x7f0000000000)={0x0, 0x28}, &(0x7f0000000040)) write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f44b00000000f384df2bf6dc94f8000000000000ff01e5ff000000000000ca542e000e0055c149c9e7087161e030284722521c5e6159daff53fdd7f64122607be1ab93260019313eaae6381e5a7acbe9ea786057f54a4598d66e0db9959b1f7e16c2b5542b96c8da4468a9d1f755312ecb8c1942e5f7bd34174e2c1a5d9657480f803086288e4549cb60fdc4689b6159118e2e1cb94a62944efd4e3e1a7161937364f1"], 0x3c) 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000001c0)) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 270.300599] SELinux: ebitmap: truncated map 03:50:53 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/50) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0xa000, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x99e) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca6fd800000055"], 0x3c) [ 270.337923] binder: 17399:17409 got transaction to context manager from process owning it [ 270.352912] binder: 17399:17409 transaction failed 29201/-22, size 24-8 line 3108 [ 270.365020] binder: 17399:17409 ioctl c0306201 200002c0 returned -14 [ 270.372445] binder_alloc: 17399: binder_alloc_buf, no vma [ 270.381103] binder_alloc: binder_alloc_mmap_handler: 17399 20001000-20004000 already mapped failed -16 [ 270.392199] SELinux: ebitmap: map size 4130070404 does not match my size 64 (high bit was 16291036) [ 270.394752] binder: 17407:17410 transaction failed 29189/-3, size 24-0 line 3254 [ 270.403347] binder: BINDER_SET_CONTEXT_MGR already set [ 270.425094] mmap: syz-executor.4 (17411): VmData 18546688 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 270.439360] binder_alloc: binder_alloc_mmap_handler: 17407 20001000-20004000 already mapped failed -16 [ 270.439801] binder_alloc: 17399: binder_alloc_buf, no vma [ 270.455649] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.460904] binder: 17407:17419 transaction failed 29189/-22, size 24-0 line 3117 [ 270.461331] binder: 17399:17409 ioctl 40046207 0 returned -16 [ 270.480492] SELinux: ebitmap: truncated map 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, 0x0) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7f) write$selinux_load(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3c) [ 270.482040] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.493183] binder: 17399:17415 transaction failed 29189/-3, size 24-8 line 3254 [ 270.503157] binder: undelivered TRANSACTION_ERROR: 29189 03:50:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x7fffe, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6, 0x5, 0x4, 0x4, 0x0, 0x7fff, 0x2, 0x9, 0xf799, 0xae9, 0x400, 0x2, 0x1f, 0x80000000, 0xfffffffffffffffe, 0x5, 0x4, 0x9, 0x3, 0x1f, 0x6915, 0x1, 0x5, 0x10001, 0xa4, 0x1, 0x77, 0x10000, 0x40, 0x1, 0x8, 0x0, 0x1, 0x2c, 0x1, 0x9, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x2, 0xff4f0b37bc04f4f2, 0x3, 0x3, 0x5107}, r1, 0xb, r2, 0x8) r3 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000180)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000380)={0x3c, @multicast1, 0x4e20, 0x1, 'fo\x00', 0x2, 0x5, 0x30}, 0x2c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 03:50:53 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x8}) 03:50:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SVE_GET_VL(0x33, 0xd7) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 270.530903] SELinux: ebitmap: truncated map [ 270.547071] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.561934] SELinux: ebitmap: map size 2047103296 does not match my size 64 (high bit was -1874391490) 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, 0x0) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:53 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0\x00') [ 270.602142] binder: 17432:17439 sending u0000000000000000 node 477, cookie mismatch 0000000000000004 != 0000000000000000 [ 270.612218] SELinux: ebitmap: map size 2047103296 does not match my size 64 (high bit was -1874391490) [ 270.618665] binder: 17432:17439 transaction failed 29201/-22, size 24-8 line 3364 [ 270.625250] binder: 17438:17443 got transaction to invalid handle [ 270.634605] binder: 17432:17439 ioctl c0306201 200002c0 returned -14 [ 270.641221] binder: 17438:17443 transaction failed 29201/-22, size 0-0 line 3117 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7c17090000005345204c696e757816000000fff90003e2f490ad670800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 270.661073] binder_alloc: binder_alloc_mmap_handler: 17432 20001000-20004000 already mapped failed -16 [ 270.666831] SELinux: ebitmap: truncated map [ 270.671786] binder: BINDER_SET_CONTEXT_MGR already set [ 270.692451] binder: 17432:17447 ioctl 40046207 0 returned -16 [ 270.696805] SELinux: ebitmap: truncated map [ 270.699423] binder_alloc: 17432: binder_alloc_buf, no vma 03:50:53 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 270.703281] binder_alloc: binder_alloc_mmap_handler: 17438 20001000-20004000 already mapped failed -16 [ 270.710247] binder: 17438:17452 got transaction to invalid handle [ 270.728120] binder_alloc: 17432: binder_alloc_buf, no vma [ 270.739725] binder_alloc: 17432: binder_alloc_buf, no vma [ 270.746259] binder: release 17438:17443 transaction 480 out, still active 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, 0x0) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 270.755831] binder: 17432:17439 transaction failed 29189/-3, size 24-8 line 3254 [ 270.764305] binder: 17432:17445 transaction failed 29189/-3, size 24-8 line 3254 [ 270.774371] binder: 17438:17450 transaction failed 29189/-3, size 24-0 line 3254 [ 270.779770] SELinux: policydb magic number 0x177cff8c does not match expected magic number 0xf97cff8c [ 270.784503] binder: undelivered TRANSACTION_COMPLETE [ 270.800723] binder: 17432:17445 ioctl c0306201 200002c0 returned -14 03:50:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r1 = accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x800) io_setup(0x80, &(0x7f0000000100)=0x0) io_submit(r2, 0x3, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000140)="4f264a21f2bc392da213f3ef880c4432a10e06cd69bf34fb72ea328b3f79b0f8340beecb231d1ffbca0671a5e66afa6f132d8da91ba23a931209e0e616a21459f3131feb59aa5a5c2b2f83313335caca605124044aba62368e87c8b2479e5263fc5d0f7ad439bb3c47a47e9ddc208a50a4d793f02fa6829ccbec88fa88502869407c05b95f184e340799703b727876a035755f9fcdfe8bf38febb103b34c44ec90f9e9", 0xa3, 0x7ff, 0x0, 0x2, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000240)="fab16e23784182ca1c7985af7a42d039a070cc3460b3423c7fd13d52f33dcd71d8629830234b6a56911cfdd52040125e297b963130f84f673565bdf60f2b22141845c6c2da54bacb6fe926e5f7a73f25e3a1de91f198654b16919c12a783ec06a524429c8bb381c10fd771ab1f3f420144fc298166b91ab194658dd5adb43a61e3b403d69b7f132113087cf3015aec639ec603c5ca4efd85bad34fc9b5cbefb79d9ea1e2deb7e862a67935f069354a2a92dca7d674d2e5bd", 0xb8, 0xf0d, 0x0, 0x0, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="240a64dbbf73a00553a5711184486b141c055d4407f3859c98c1f0afeacf167fa266e294677e851f8ffd272f0298b6d0623002c7860d05fdeb061a8688d3391db8f2edc81548a57a924a1812f04e2127737eea82f69a09c6f132937a81d1020fc476d0293d8d1d102067324ab0bfaa06fe019b12067e63dbbf18d0618aa786c19994333631a857839a1eedf543046281124080e4abb149d9624156", 0x9b, 0x8, 0x0, 0x0, r0}]) 03:50:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 270.807916] binder: 17438:17452 transaction failed 29201/-22, size 0-0 line 3117 [ 270.815749] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.825142] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.836545] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.850479] SELinux: ebitmap: truncated map [ 270.855977] binder: undelivered TRANSACTION_ERROR: 29189 03:50:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0xfc2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf8ef0000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff900e5ff0000000006000c0000000300ca542400000055"], 0x3c) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x401) [ 270.865576] SELinux: ebitmap: truncated map [ 270.873218] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.891044] binder: send failed reply for transaction 476 to 17432:17439 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 270.912280] binder: send failed reply for transaction 480, target dead [ 270.919630] binder: 17467:17470 ioctl 540c 0 returned -22 [ 270.927474] binder: 17467:17470 transaction failed 29189/-22, size 24-0 line 3117 [ 270.937087] binder: undelivered TRANSACTION_COMPLETE [ 270.947210] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.955152] binder: 17472:17478 ioctl 5473 20000000 returned -22 [ 270.962453] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.966410] binder_alloc: binder_alloc_mmap_handler: 17467 20001000-20004000 already mapped failed -16 [ 270.969283] SELinux: policydb magic number 0xf87cff8c does not match expected magic number 0xf97cff8c [ 270.988317] binder: 17472:17478 sending u0000000000000000 node 489, cookie mismatch 0000000000000004 != 0000000000000000 [ 271.002717] binder: 17472:17478 transaction failed 29201/-22, size 24-8 line 3364 [ 271.010444] binder: 17467:17470 ioctl 540c 0 returned -22 03:50:53 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) eventfd2(0x7aab, 0x80000) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') 03:50:53 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)=ANY=[], 0xfffffede) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x5) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0xbf, 0x6, 0x3ff, "3f1c338083c8c0005c61c23853bbec99", "7055413d14589da4e45c6376714a8495566da5c56e8d183afeca433cb269007500010496b2e34c8e62ac0723dd2de4f7ed1da555292d6c672448c91942efb8146253c3cfbd681aba70eab16175c0ef81e53997bdb48c074ff8a1c9257b1a1e8652aa1d232d52215e3d59716b39fa21775f8a896bec6b0a8007f1966c0817e509f2fa7d4cf90ccafa35c1fabd088ec757a48d7a5acf0b3604655d595d8d4008300c0be936642707f7a3ef"}, 0xfffffffffffffd1c, 0x3) 03:50:53 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 271.011219] binder: release 17467:17470 transaction 493 out, still active [ 271.025906] SELinux: ebitmap: map size 50331648 does not match my size 64 (high bit was 609536512) [ 271.041956] binder: 17472:17478 ioctl c0306201 200002c0 returned -14 [ 271.050347] binder: undelivered TRANSACTION_COMPLETE [ 271.056510] binder: 17472:17487 ioctl 5473 20000000 returned -22 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x50d200, 0x0) write$P9_RLERRORu(r1, &(0x7f00000003c0)={0xf, 0x7, 0x2, {{0x2, '^$'}, 0x10000}}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64=r0, @ANYRESDEC=r2, @ANYBLOB="50a0e9909c8b7e20c737f8f968484033a0c50ae8741b55e1add871d3a29d3c946f6ddfc774ca4993aa7883447c32df5c8ca2fabc9b8a70a13cc25f59391ff39d6eca6091905704503b0ec80eff2858ab79103f86f2180ba6ac05ea1b16611e68edbf163331e2eae38644526baf106843807eb2807b2805b1bdc294586230e1a6b31ebaff7f1a5b44c5809a3bc3d7121d20a08e925afc2c931442847e21ecc5a5eaa2f34b55d4f1007b42fa0efe8d70d590e599c90cc53eaf439ab928d60245e2544f7d300099a458d0c543ccc780de66fecfd48ca23674", @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES16=r2, @ANYPTR64]], 0x34df2c3ea8e30b81) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x2000, 0x0) getpeername$unix(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) [ 271.083199] binder: BINDER_SET_CONTEXT_MGR already set [ 271.089782] binder: release 17467:17479 transaction 492 out, still active [ 271.096293] binder: 17472:17487 ioctl 40046207 0 returned -16 [ 271.104868] binder_alloc: 17472: binder_alloc_buf, no vma [ 271.115602] binder: 17472:17478 transaction failed 29189/-3, size 24-8 line 3254 03:50:54 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) 03:50:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x4, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80801, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={r3}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20020090}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_getrule={0x20, 0x22, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x4, 0x1, 0x0, 0x0, 0x6, 0x10}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4054}, 0x24000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') readlink(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)=""/141, 0x8d) [ 271.125737] binder: undelivered TRANSACTION_COMPLETE [ 271.125840] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.146567] binder_alloc: 17472: binder_alloc_buf, no vma [ 271.153106] binder: send failed reply for transaction 488 to 17472:17478 [ 271.162397] binder: send failed reply for transaction 492, target dead [ 271.171615] binder: 17472:17487 transaction failed 29189/-3, size 24-8 line 3254 [ 271.183501] binder: send failed reply for transaction 493, target dead [ 271.185048] binder: 17492:17500 transaction failed 29189/-22, size 24-0 line 3117 [ 271.192667] binder: 17472:17487 ioctl c0306201 200002c0 returned -14 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xffffffffffffff01) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 271.224116] SELinux: ebitmap: truncated map [ 271.224725] binder: undelivered TRANSACTION_COMPLETE [ 271.238020] binder: 17492:17509 transaction failed 29189/-22, size 0-0 line 3117 [ 271.249921] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.255855] SELinux: ebitmap: truncated map [ 271.263942] binder: undelivered TRANSACTION_ERROR: 29189 03:50:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) write(r1, &(0x7f0000000100)="dc282d3bc5a0f457e9b3c0bd33f28c2e325a3fd89578f9660a416c379546cda8a0aebe0b0718d5284697f2dc2d00fbee749f2a64aaf88bd22aa946baf4617f2767c30cff865400bdccf5e68c789fdc79dd753d8612beddcce3faf5276a133c10e37a24c5fe4193f627b3cb895a88325f08d7fd02e963e765b057ce8077f37778f6f2f9906166f8e259c201dc48dd3af8", 0x90) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x22, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x38, 0x78, 0x28, 0x0]}, 0x10001}}], 0xffffffffffffff1c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="b876e12aff931445"], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xe4, 0x0, 0x0}) 03:50:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:54 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff00000000fcc3000000000000ca542400000055"], 0x3c) [ 271.269671] binder_alloc: binder_alloc_mmap_handler: 17492 20001000-20004000 already mapped failed -16 [ 271.276555] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.284810] binder: 17492:17509 transaction failed 29189/-22, size 24-0 line 3117 [ 271.293199] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.302015] binder: 17492:17514 transaction failed 29189/-22, size 0-0 line 3117 [ 271.316372] binder: undelivered TRANSACTION_ERROR: 29189 03:50:54 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') fcntl$setstatus(r0, 0x4, 0x2c00) write$binfmt_aout(r0, &(0x7f0000000000)={{0x1cf, 0x400, 0x6, 0x26d, 0x340, 0xda71, 0x37f, 0x9c55}, "3e871f312d13438747143b1755edc41ffeb018ebf314a297a28b7852d18c5247f0ace367826fcb393a"}, 0x49) 03:50:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r4 = fcntl$dupfd(r0, 0x406, r1) r5 = getpgid(0x0) ptrace$poke(0x4, r5, &(0x7f0000000100), 0x101) sendmsg$unix(r4, &(0x7f0000000180)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000033ee99d975c5e0e4560000"], 0x40, 0x20004004}, 0x80) sendfile(r0, r0, 0x0, 0x4) [ 271.333429] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.340315] SELinux: ebitmap: truncated map [ 271.362603] binder: undelivered TRANSACTION_ERROR: 29189 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001240)=0x0) fstat(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)=0x0) sendmsg$unix(r1, &(0x7f0000001400)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000140)="7efe41899a6fc6ff17913e89704d99d1fa4361a9edeeffb94c86db023edf795cf4d1c8a00d91286401214d10c010a6fda00f1b4076d2d9f14aefc4f2363586e4ffe895fa277843f3c8241bdbc7fe9c676a7581635d8471bdeb", 0x59}, {&(0x7f00000001c0)="1e4994", 0x3}, {&(0x7f0000000200)="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", 0x1000}], 0x3, &(0x7f00000013c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x40000}, 0x20008804) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:54 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)) [ 271.389786] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.393755] binder: 17524:17527 transaction failed 29201/-28, size 0-0 line 3254 [ 271.403721] SELinux: ebitmap: truncated map [ 271.414574] binder: 17524:17527 ioctl c0306201 20000440 returned -14 [ 271.427455] SELinux: ebitmap: truncated map [ 271.443426] binder: 17524:17533 ioctl c0306201 200002c0 returned -14 [ 271.454095] binder_alloc: binder_alloc_mmap_handler: 17524 20001000-20004000 already mapped failed -16 [ 271.464847] binder_alloc: 17524: binder_alloc_buf, no vma [ 271.473644] binder: 17530:17534 transaction failed 29189/-3, size 24-0 line 3254 [ 271.486244] binder: BINDER_SET_CONTEXT_MGR already set 03:50:54 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x6, 0x3, 0x99a}, 0x1ff, 0x5, 0x800000000000000}) [ 271.496209] binder: 17524:17533 ioctl 40046207 0 returned -16 [ 271.502518] binder_alloc: binder_alloc_mmap_handler: 17530 20001000-20004000 already mapped failed -16 [ 271.518825] binder_alloc: 17524: binder_alloc_buf, no vma [ 271.524750] binder: 17524:17527 transaction failed 29189/-3, size 0-0 line 3254 [ 271.536153] binder_alloc: 17524: binder_alloc_buf, no vma [ 271.536397] SELinux: ebitmap: truncated map [ 271.551456] binder: 17524:17533 transaction failed 29189/-3, size 24-8 line 3254 [ 271.556755] SELinux: ebitmap: truncated map [ 271.559145] binder_alloc: 17524: binder_alloc_buf, no vma [ 271.559177] binder: 17530:17534 transaction failed 29189/-3, size 24-0 line 3254 [ 271.575475] SELinux: ebitmap: truncated map [ 271.578221] binder: undelivered transaction 502, process died. [ 271.584706] SELinux: ebitmap: truncated map [ 271.587415] binder: undelivered TRANSACTION_ERROR: 29201 03:50:54 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) iopl(0x1f) 03:50:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, [], [{0x3, 0x3ff, 0x9, 0x78, 0xfffffffffffff771, 0x5}, {0x266, 0x2000000000, 0x1ff, 0x800, 0xffffffff7fffffff, 0x7f}], [[], [], [], []]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r2 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x4, r2}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 271.587431] binder: undelivered TRANSACTION_COMPLETE [ 271.603866] binder: 17530:17542 transaction failed 29189/-22, size 0-0 line 3117 [ 271.616270] binder: 17524:17527 ioctl c0306201 20000440 returned -14 [ 271.624313] binder: 17524:17533 ioctl c0306201 200002c0 returned -14 [ 271.631585] binder: undelivered TRANSACTION_ERROR: 29189 03:50:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/68) 03:50:54 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1c0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 271.650683] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.656550] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.679028] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.692545] SELinux: ebitmap: truncated map 03:50:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) r2 = mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000080)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000000)=[@fda={0x66646185, 0x8, 0x3, 0x33}], &(0x7f0000000040)=[0x18]}}, @acquire_done={0x40106309, r2, 0x4}, @dead_binder_done], 0x1000, 0x0, &(0x7f0000000780)="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"}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 271.700918] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.711701] SELinux: ebitmap: truncated map [ 271.736850] binder: 17559:17564 got transaction to context manager from process owning it [ 271.739140] SELinux: ebitmap: truncated map [ 271.754326] binder: 17559:17564 transaction failed 29201/-22, size 24-8 line 3108 [ 271.769847] binder: 17559:17564 ioctl c0306201 200002c0 returned -14 [ 271.785504] SELinux: ebitmap: truncated map [ 271.788393] binder: BINDER_SET_CONTEXT_MGR already set [ 271.797573] binder: 17559:17574 ioctl 40046207 0 returned -16 03:50:54 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x801, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') 03:50:54 executing program 2: creat(&(0x7f0000000000)='./file2\x00', 0x182) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 271.797884] binder: 17567:17571 got reply transaction with no transaction stack [ 271.805657] binder_alloc: 17559: binder_alloc_buf, no vma [ 271.819399] binder: 17559:17564 transaction failed 29189/-3, size 24-8 line 3254 [ 271.829027] binder_alloc: 17559: binder_alloc_buf, no vma [ 271.838044] binder: 17567:17571 transaction failed 29201/-71, size 32-8 line 3025 [ 271.838424] SELinux: ebitmap: truncated map [ 271.853068] binder: 17559:17574 transaction failed 29189/-3, size 24-8 line 3254 [ 271.853546] binder_alloc: 17559: binder_alloc_buf, no vma [ 271.863848] binder: 17559:17574 ioctl c0306201 200002c0 returned -14 [ 271.867879] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.884359] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.884573] binder: 17567:17578 transaction failed 29189/-3, size 24-0 line 3254 [ 271.890260] binder: undelivered TRANSACTION_ERROR: 29189 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) getgid() r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) 03:50:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000001004b1f6900"], 0xe4, 0x0, 0x0}) 03:50:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 271.900755] binder: 17567:17571 transaction failed 29189/-22, size 0-0 line 3117 [ 271.923846] binder: 17567:17571 got reply transaction with no transaction stack [ 271.924886] binder: 17567:17582 transaction failed 29189/-22, size 24-0 line 3117 [ 271.931916] binder: 17567:17571 transaction failed 29201/-71, size 32-8 line 3025 [ 271.945400] binder: 17567:17578 transaction failed 29189/-22, size 0-0 line 3117 [ 271.960534] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.968464] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.986383] SELinux: ebitmap: truncated map [ 271.987947] binder: undelivered TRANSACTION_ERROR: 29189 [ 271.996355] SELinux: ebitmap: truncated map 03:50:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001800e8ffffffffffff0000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x11}, 0x7, 0x1, 0x1, 0x3, 0x101, 0x5}, &(0x7f0000000280)=0x20) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e01001600000000400000000900002e7bd09029fec92e00020056000000ca5400000000"], 0x3c) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x400900, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000200)={'veth0_to_bridge\x00', @ifru_hwaddr=@remote}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000180)=""/25) [ 272.013899] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.024000] binder: 17590:17596 transaction failed 29201/-28, size 24-8 line 3254 [ 272.036220] SELinux: ebitmap: truncated map [ 272.041890] binder: 17590:17596 ioctl c0306201 200002c0 returned -14 [ 272.052232] binder_alloc: binder_alloc_mmap_handler: 17590 20001000-20004000 already mapped failed -16 03:50:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/34) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl(r0, 0x4, &(0x7f0000000140)="8ed79391edecabcd7f1df00c74cd69d53de210d5e02247cc23bdd60279a67bcc4f358499e81213c8d345af6f812a28fd71fc7f46ea") ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)=0x1) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7816000000fff90003e2f490ad270800004002000000ff0600000000000000ca542400000097312e337ec451cc08adcaa9f606130155000000000000000000000000000000000000000000000000000000"], 0x3c) setsockopt(r0, 0x4, 0x3f, &(0x7f0000000080)="c25b0a0297866bbce9036b0490200bfb069a970055ac06c464f34bbb67472354cfa889aeab7e8ed05919e6848e4cbe28dd818d3b9788b8bc80cca3ca01349dfd39f6e8d750807435", 0x48) [ 272.063316] binder: BINDER_SET_CONTEXT_MGR already set [ 272.068643] binder: 17590:17596 ioctl 40046207 0 returned -16 [ 272.075625] binder_alloc: 17590: binder_alloc_buf, no vma [ 272.088936] binder: 17590:17599 transaction failed 29189/-3, size 24-8 line 3254 [ 272.104164] binder_alloc: 17590: binder_alloc_buf, no vma 03:50:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:55 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) faccessat(r0, &(0x7f0000000000)='./file1\x00', 0x73, 0x200) set_tid_address(&(0x7f0000000240)) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 272.112356] binder: send failed reply for transaction 521 to 17590:17596 [ 272.119396] binder: undelivered TRANSACTION_COMPLETE [ 272.124050] binder: 17601:17605 transaction failed 29189/-22, size -1572840-144115188075856127 line 3117 [ 272.125829] binder: 17590:17596 transaction failed 29189/-3, size 24-8 line 3254 [ 272.141922] binder_alloc: binder_alloc_mmap_handler: 17601 20001000-20004000 already mapped failed -16 [ 272.142759] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.153792] binder: 17601:17606 transaction failed 29189/-22, size -1572840-144115188075856127 line 3117 [ 272.157518] binder: 17590:17596 ioctl c0306201 200002c0 returned -14 [ 272.178134] SELinux: policydb string SE Lin does not match my string SE Linux [ 272.185925] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.197482] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.206883] SELinux: policydb string SE Lin does not match my string SE Linux 03:50:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="3f000000000000009014ad0daec95de38c43d80f132eca91ad8e881202a8cdc86f54066520d30911b075d329e19ea1e5333981f668463b4ff72c9e6685865dae1776454dfaddcf696e27fed58bfcfcdb88662860361d23780731f6235db72a20bf83c22a6cdfcccb8eae6399a2efb6d1a5f38d2f20098b85aacb16eb53630b4605bfa6e7dbd204c840d8ce1327b3bda225beb4906eefeedc81708a9fa435dc771655dcba816f862d834653c23c9336fa31b773dc937a044276402933c016e645806a30592d5b1298bf2332acb5d8977fbed73b95ad20a48359fbf275e3454d70ee1c31bb4eb7"], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xe4, 0x0, 0x0}) timerfd_create(0x8, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bcsf0\x00', 0x100}) write$binfmt_elf64(r2, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x3a89800000, 0x4, 0x3ff, 0x3, 0x3e, 0x7, 0xf9, 0x40, 0x369, 0x8, 0x3, 0x38, 0x2, 0x8, 0x101, 0x1}, [{0x7, 0x90e2, 0x85, 0x9, 0x3, 0x1ff, 0x6, 0x5}, {0x6474e557, 0x6, 0x2, 0xfffffffffffffc01, 0x81, 0x81, 0x1, 0xa1e}], "ad5b756ef8e053eb5db15aa913695d10672725586d3a5f127997e3c1a9951e8044f0da5f5baf01e01eeef249a66671fe8f899b6872bb6b40aef59bd543af7a04c5265e4ecfeb162c4298", [[], [], [], [], [], [], []]}, 0x7fa) close(r2) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f00000001c0)) 03:50:55 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x4) 03:50:55 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x200000000000) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "72865685e568e9ae9249f790d06e7d4e"}, 0x11, 0x2) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 272.215447] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.229389] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.235326] SELinux: policydb magic number 0x1678ff8c does not match expected magic number 0xf97cff8c [ 272.238855] binder: undelivered TRANSACTION_ERROR: 29189 03:50:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x40) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000080)=[r2]) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) bind$packet(r3, &(0x7f0000000300)={0x11, 0xfd, r4, 0x1, 0x800, 0x6, @dev={[], 0x16}}, 0x14) [ 272.295504] binder: 17618:17623 transaction failed 29189/-22, size 24-0 line 3117 [ 272.311785] binder_alloc: binder_alloc_mmap_handler: 17618 20001000-20004000 already mapped failed -16 [ 272.329793] binder: 17622:17626 sending u0000000000000000 node 532, cookie mismatch 000000000000003f != 0000000000000000 [ 272.344262] binder: 17618:17627 transaction failed 29189/-22, size 24-0 line 3117 [ 272.363678] binder: 17622:17626 transaction failed 29201/-22, size 24-8 line 3364 [ 272.373676] binder: 17622:17626 ioctl c0306201 200002c0 returned -14 [ 272.376509] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.387083] binder: undelivered TRANSACTION_ERROR: 29189 03:50:55 executing program 4: r0 = getpgrp(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x15e, 0x4, 0x1ff, 0x26dc, 0x0, 0x2, 0x4020, 0x2, 0xffffffffffffff7f, 0x7, 0x436, 0x3, 0x3, 0xffffffffffffff8f, 0x9, 0x9, 0x81, 0x7, 0xfa, 0x1, 0x1c, 0x8000, 0x8001, 0x80000001, 0x6, 0x3, 0x5c96, 0x7, 0x401, 0x10001, 0x80000000, 0x6da8, 0x2, 0x8, 0x1c5, 0xfffffffffffffffa, 0x0, 0x0, 0x4, @perf_config_ext={0xfc00000000000, 0x3ff}, 0x0, 0x0, 0x8, 0x7, 0x3fb, 0x40, 0x100}, r0, 0x6, r1, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) timerfd_create(0x0, 0x800) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000180)={0x100, 0x5cb7f5c1, 0x1}) 03:50:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x10000, 0xff}, {0x40, 0xfffffffffffffffa}]}, 0x14, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:55 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x8000, 0x1) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000040)="c31ccc07dc000fb1fe2504c7b842998785725f0becf6568584e38ed5dc4a448aad3c88d78d6e310b2bed2b0dd6c5f42e387d19e3aa33882e70104813c27e22a3f0f1033e74a457f9cee9a834e50f2333285de9aa9f9ce7d14ec5", 0x5a}, {&(0x7f00000000c0)="0f20458d0128e3a302dee3258e4b787a4fbecfbb6e009ad1c5d70627405e8ae9d9ccd95dc207e1b7945b487c05e193ebd2da52a87800dbb5e3bfb76d228184f5589112a9ac4b268e52d289372de236136d213dc06c6d9c0a9b63bcefd94811965fa61c4eba09183e01957ac82b40c13803c2cdeebdb5fc3c000965760c5de9b8c4f86167", 0x84}, {&(0x7f0000000200)="e50d952202c1e011a22298514f9662028eb9c0a856b9e770df6482372ce6b1e5075f86ea3d4cf12de26001e9994a3bfe34ef4496f912611b1ca607b986358a4bff0199ee28105ce1a7699c8b7a5a20f059fd396a450ac2247f9ab7b03cacc4a1e74864ade491cd82eed9e3a0a585d3715b451b1694f4ef869123e85243c0495e7d8a11460eac0251eae3133e31311c5095479dc1ca8e90d64f38b4d93f526265a4c4491b7f9435a3c168ddb1e2514cf2da0d390c0a9488b19cd02f31a6c93226ddb863d09eb4184390cb898fadffb6", 0xcf}, {&(0x7f0000000380)="83ff4f2c8f3eebf7da08ed6d4f0c759f493573dc060ea75099f4b8d982db572be29cace22edd7438233778299f1b7294343b23d9319e02b7ebd4fe6d430a3ebe980723163bfa5f208443", 0x4a}, {&(0x7f0000000400)="39168b5677f2c3c8a042e2fa787ecaada19d8d9ccd9d6ceb08c5b4d387401e30a4e8e3828e8d89e3d0996bae446580d540a652983737865309c44786a2977b2bbbde63972d724728e8de00800218f09156c7d6ca6a634573bb9eaf33a6bc718caf726af7193b99bba8c92baa6ec4a3cb3654d410952a9d81df9c2e6ec17aba08a9bec652c8aef69c679c43", 0x8b}, {&(0x7f00000004c0)="58360c982df3b92bc8a8f722e30bcda2e58fc197310708f5b2c86ec0bf04578e9074d2c2c589b19595029d52b0101690d5e25919dd2da98d9ba4098daac79576ee0820d24ca57176d266efe77429f7b7bfba3a70b274", 0x56}, {&(0x7f0000000540)="7519b04f8bcbb0790555fe314ca25da45d27f793c994814994d25d1148d034054d4e68815d45b0b32296d4794746513bd55e00e8ff483387e2eba2330865f9dd2d230c8781c144f61b6da5f149f99aeb739b9591cc15c26050ba4e3b749bf91898f62b5c98d539f97eb9759e0ceee659b8084d6137ace8cad698b64dc108b65472561c9f99cdf1f870c19fb701f0", 0x8e}], 0x7, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) [ 272.393810] binder_alloc: binder_alloc_mmap_handler: 17622 20001000-20004000 already mapped failed -16 [ 272.409541] binder: BINDER_SET_CONTEXT_MGR already set [ 272.417918] SELinux: ebitmap: truncated map [ 272.419161] binder: 17622:17637 ioctl 40046207 0 returned -16 [ 272.426125] SELinux: ebitmap: truncated map [ 272.437264] binder_alloc: 17622: binder_alloc_buf, no vma [ 272.446522] binder: 17622:17639 transaction failed 29189/-3, size 24-8 line 3254 [ 272.455542] binder_alloc: 17622: binder_alloc_buf, no vma [ 272.462478] binder: 17622:17626 transaction failed 29189/-3, size 24-8 line 3254 [ 272.468259] binder: send failed reply for transaction 531 to 17622:17626 [ 272.478363] binder: undelivered TRANSACTION_COMPLETE [ 272.484422] binder: 17642:17647 transaction failed 29189/-22, size 24-0 line 3117 03:50:55 executing program 1: rmdir(&(0x7f0000000040)='./file1\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000080)='./file2\x00', 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x1ca) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf90c003114b1af204c226e757916000000fff90003e2f490ad270809004000000000ff01e5ff000000000680000000000000ca542400000005faafdd9a1758bb7baf299a39b48806030000002db97fb0a47b9ed09f53b4db4c16d2c830762609951f270f5af9c2bfb14a3b7eb7c204407c78e61e7d890b8cc07be011f3682c1d120680f148c7b927195a3d63"], 0x3c) [ 272.489376] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.493883] binder: 17622:17626 ioctl c0306201 200002c0 returned -14 [ 272.504831] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 272.518506] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.522015] binder: 17642:17647 transaction failed 29189/-22, size 24-0 line 3117 [ 272.532256] binder: 17642:17652 transaction failed 29189/-22, size 0-0 line 3117 [ 272.536757] CPU: 1 PID: 17649 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 272.540617] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.546990] Call Trace: [ 272.547011] dump_stack+0xb9/0x10e [ 272.547032] warn_alloc.cold+0x91/0x1ab [ 272.547045] ? zone_watermark_ok_safe+0x250/0x250 [ 272.547056] ? lock_acquire+0x10f/0x380 [ 272.547066] ? avc_has_perm+0x9c/0x350 [ 272.547087] ? avc_has_perm+0x1b7/0x350 [ 272.547102] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 272.547125] ? __vmalloc_node_range+0x390/0x690 03:50:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x400) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="bc1810fd96e964a882ee7de899dffe06fb6a3174cd2d2436fa7a654669325bbbc3804bb9823ef86223bb512aef022abca93180de34f235f2f8f349565be9164837ad4e9603f2dc22a9fbad155e68e8e2fccab9aa6dd47a859ddd1a59539a47a0f4ebba85550fd9a3a31e31c4b460a21f15d8d95b3d4c5583c0624c7dff3a4057c439ee4d51a325ee777c5d58a21ae33c623adfc1b5ab93738c5f6e055b0b38040222f317e9e109ddbb585331f3283c1c2b", 0xb1, 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r3, 0xbdd, r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000040), 0xffffff26, 0x0, 0x0}) [ 272.565128] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.568702] ? check_preemption_disabled+0x35/0x1f0 [ 272.568719] ? sel_write_load+0x199/0xfb0 [ 272.568735] ? vmalloc+0x60/0x80 [ 272.568747] ? sel_write_load+0x199/0xfb0 [ 272.590287] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.592755] ? sel_write_load+0x199/0xfb0 [ 272.592778] ? sel_read_bool+0x240/0x240 [ 272.592796] ? trace_hardirqs_on+0x10/0x10 [ 272.592809] ? check_preemption_disabled+0x35/0x1f0 [ 272.592833] ? __vfs_write+0xf9/0x5a0 [ 272.592841] ? sel_read_bool+0x240/0x240 03:50:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 272.592852] ? HARDIRQ_verbose+0x10/0x10 [ 272.599505] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.603591] ? kernel_read+0x110/0x110 [ 272.603628] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 272.603643] ? rcu_read_lock_sched_held+0x10a/0x130 [ 272.603659] ? vfs_write+0x17f/0x4d0 [ 272.603675] ? SyS_write+0xc0/0x1a0 [ 272.603686] ? SyS_read+0x1a0/0x1a0 [ 272.603697] ? do_clock_gettime+0xd0/0xd0 [ 272.603710] ? do_syscall_64+0x43/0x4b0 [ 272.603718] ? SyS_read+0x1a0/0x1a0 [ 272.603730] ? do_syscall_64+0x19b/0x4b0 03:50:55 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1, 0x17}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="17d7eef25cd30b985e97e7ec8166ee4247ac2678a1b69ff8381e71f341418306e8d953ace51b682406ab752857c4250b4804b29548a9be7ef32a3f12eadf803195e39fe30d6202", 0x47}, {&(0x7f0000000200)="e7eef2802277943860931ce11098fcc443394642894bb300c097351dafbb2257497daf99ddb822b563391785d0b44727bba25c2fbefaebe4128d01d92c6cd2cc8a75538066cb83056a8f79e74297b23412f716b0a0df5bc4329444cc16feb2aefafbea48dab677956c7326521b5e74a25c370bef26", 0x75}, {&(0x7f0000000180)="9c59a522458f790f6d4e43fd154bb17990941dd025fabff8904270cfdb5064475689", 0x22}, {&(0x7f0000000280)="a3e0fb5af91c81550d942a71c1f41f663d1dbeb4e84604ab4022df26ca56fecb8435b98c02", 0x25}], 0x4, &(0x7f0000000380)=[{0x48, 0x0, 0x4, "35e076831aef2869fc5056e53ff47e4deed4860d37a72eda5f1ee5ecd9d8d494ecaea2970b6392c7f1d8c549c74fb2b431bc9900d1ee"}, {0xa8, 0x13b, 0x67d8, "b24c77917a71498a9e33a0cdd0e30dd80039bb2193e4da8f258d894630f1d9909477ddf0d3ec8be47243bd406bf1e7fb6f73f13910bf4d7c8a1030f381091d15e81518d7c7a0c1b8779dff837a7874f551937e5a070e8c126839870dfae3e9900d3d59800fa72eb7143ca2c569bf8db16ad0078f414aee1be07aecab02e01012d7ab0134ded0916c1f1257eebc9f09a41449e200cb28d2"}], 0xf0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)="d86ac3270fb5281d928f15d187dfd19d3992a1c68157eef821eb91dbd36a6dbb26d8ae453189a50dbcb409bfbdd4d84304a7b3fddd718d51bf09f087612b", 0x3e}, {&(0x7f00000004c0)="593c3ae8b4b01f8d3745739d8f13e53e48c3ccfc0fecb0986a162baae3354fe5b0fb1235b42f732f674694a18d45df5f73ef33311041c3bca5940f126714c1d98d6806ae4cff95d002b19ef516e5d9982a72387dab09d89c82cf2b4b7119905212d44773c138d300f81ee6022b94a92076acf3a8b159b43be038c9bd02bfa85254169025bd4735bf8205bd93c1a2b3c2a193989477e3ff3cf74422987e879c4fe294901b775beeac0462fe8247db96dc1690adc613291e53254e046c40e800d97c7745973ed0dfbaf794edf03509a5d344deea792b149dbfefc720c0adb9bdbfd6eb47e8c7e668088e39d5d8e8b51e34b66dcb1557", 0xf5}, {&(0x7f00000005c0)="4df7798e9824", 0x6}, {&(0x7f0000000600)="31793c02146d4c19020c09b739dff2661b305a4ff2cdde421f8c7849d036c5651319cbc7932269256d9c67c2ba1f32f2f3c37f9eea6553a6ea6183c9f74230b6582f27af5e309742b3cbb6414173dfbe7941df83e0ec43739abd", 0x5a}, {&(0x7f0000000680)="d6b15e7339872f5f3b953683a119837fdb9907747dde8859b82d1333bde99adee120b2f01d3d334f8d5509b11cd79502f86473e7fa6ab4e2d4be06b3f69624551a91b3747f2379e926bc7d63350993edfb8d89f354de98016c1e9f866b1c982ff0aeb4dd316e7e8ac71dd69fc67862927c7e338386d1aaa60a66c7f277d7814247ff545385183140503f845886ad711889c44e18363504a76155b3901ae5ebbf611f68953d5d817697bbf409978333ad6e1f8b26594b690e120650c15e5f38f51149b68d2be6826c845df313a66b4ae60ac8672b9471b9c0b40dfb004007", 0xde}], 0x5}, 0x8}, {{&(0x7f0000000800)=@isdn={0x22, 0x6, 0x1, 0x9, 0x4}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)="ca14f7020936cd1cf862f690a36e2389e7384d156c1d1f742b704973dff7a6ab612e854fd2658b9519aa310efb881f74a7d44b2f793e5410e5212e7ff60c32e918c483eb56db86cc7a96476a49b3d76fa4a80d7bfdee4404ebf22a2d5286a98ba8afa723233f0d62d06716166c01643c868897b0424f665aa886e2c833c6a756a05cc8380be4d0", 0x87}, {&(0x7f0000000940)="4318df668c6c848538793405e992ece8fcfc307c4883a6f004350e686c59df34ae91f25466b8b21361c0819c77b0165b5187a0c9bc0af976d76b3386eb97d0be981c48c8099b3db19369dec95527a00656fa202b732514d4542408a5e1b4ae145c5722c84347d0d928bdf2b29765ad4d7cd189b2f412d6f3405a9898561b5cf039b4224e373c94d4cc30e1fb9ce84c52b1e85d81b042155f811e4b3282328ef638dc95491d1348c9", 0xa8}, {&(0x7f0000000a00)="04587f5898481b744e2e09d62a9e4272aaf4ad3f0dd18daf8e4fe5b5cf05c45e369aff0e5a1928568d26722da62fec52af4db83d73218a68e7bc2d2cc23226febd4782dfafef6fce9a1498fa7022769163025678e5b9315588cf587277f2cb316f58b78f2e5d26ed9d6c40621baa8e", 0x6f}, {&(0x7f0000000a80)="5d120f62e523ecfaacb9b084f2309cf15faebdccaffd10f4ec23ceab91b1305055e185dadb4ebea05bd172d86ae8b2ba6e1da1683f26af90fb121533d6b1dd1da9acb837974b5fb0cbacc2466caecdf4f9ebe41804b9777cd361b6c4e81e121b2ca30bcff26845a7fda95926edc9b7237d75a85a47c7299ef89af30cc2412bb1291433d51d6dbb75c4e980aa68281499adc7ffb0f891a3441d544f9d6e2067e690a4a5bdf4c28fab94b10c85ab3e5d8da8e4dfc2d2aae916", 0xb8}, {&(0x7f0000000b40)="d10efb2b52926104eabd967a160daa7abc9c0a7124782887e701820e931e5bb211048c8952602c10beebf8ed0ebc6d45a09cb4e673e778a664b03e8872e81cf66249a6b73cd34ed799a6d9c50d11e87096a87dd8caa44f3d3db46bcc78a25b60d3a8313efec2c6c4d339b1624d7a74bb7fede1178bf8dbc34d0da2f61440b89aaae44eb8477e1761ba47a5b31b15814b8f67db9a700a91a9b5671494e357bcb0f754d51a26d32d99750b581f2f", 0xad}], 0x5}, 0x1}, {{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x4, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="239177667b1a7a66e3d525dcc20485515d047b8b3d970e73b8191e4586bfc37f9a6135221cbee258f444858165dfec50e8a1de3faeb4bbaa2089273741d9c3d342fd2abb914bde1ea8d1c07fd0e1c7c4c94fb781bff2c753554c25cf5fa2ad08ad42a7672d320b586eeb1828d951f47771bb2131a5f1f24cb40b64dcaa8c6a0f7a154c9b08d7f325832e4065987b16f37b88b2fd06457266c8e17b4392772242604488baab20e181660057bc2ae87ea06f67eafc56e65ae2db2bfe", 0xbb}, {&(0x7f0000001dc0)="fc", 0x1}, {&(0x7f0000001e00)="6284072d44e9e5972201e3e10fec694f06f490498df6aa11bb743017abae4027d564b47e86201de399c6ca3e016ff8b36d60cc1772081254c2344c2cb6e86ea48ce9c88c8b0e0f940306e10caf84aeb112f730a8458c9f8ed4cff5b4a8add0387a377cd53d1a9d87fb4755798e2fd1c03b19b1cf73b9e9f90f54dbe4e66ef2b653a5e50487998eed041baa45019707619db3ce2364631356", 0x98}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="355fe17344135b3d3ad4afd1eb87ea6e534411bf777948ccf8617ff50e376b8ee1ea6f038a35a54f0b4481d7f7543494913ece276cbf02628dc24f63b4d30d6ad0d553f005780db44efef8ccd359eddc02a62489c2b785ec0a66220245171644cae909e094fbd725a2bc8bfc1c4ea3c5d0efd6416adb700dcd41031b32be013ed2c460ce60f40e44ddffe8218f9c1d5c21044b3b06fc2bc8ff82f92d344cc87ab83a979ce5526c757a5e21107755dd02d3acd2caa4fb79ce930b33e95f6ca8d739bf79211676e72389a3bd7a2adc1c", 0xcf}], 0x6, &(0x7f0000003040)=[{0xc0, 0x118, 0x4, "70ce9a8bc4e1b1a285ef3a4e7207a05100a046d5afa9a7551624adfc813c43b6851ccd640820a86d031d880ac44c723e62f829a39ac8a09a088a9d02c092eedb55e44944518e343055bc52e1fc66c44ed27a2660902cefbda95d41fe79de2b6db3b728fcfa1a1da0f13d3d713fdc7f6632de8bc0ad74d83bb65ba16ff36689043f813d3da6891a416b43cc6d5ddf734e2bcbd749495ac4efc5d8125fb8a42ca758605aec595b521697cb"}, {0x90, 0x10d, 0x8001, "3d5a3ce79ec961d86fb757c4a03e95aac2fc8896ae815d68dce62f31fcabfa3e479b6146ce907e089e600409422890175be66fd31a89465388a3630684554f71538f5d4352036bffc302b054cebcb91481e336f39293a57a492d5996f669245e6a72eb2b70fb13c69bcd263306c21dd5e5a24bb9da9b57e581fc"}, {0x1010, 0x116, 0x0, "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"}], 0x1160}, 0x1000}], 0x4, 0x840) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 272.603750] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.607540] warn_alloc_show_mem: 1 callbacks suppressed [ 272.607544] Mem-Info: [ 272.610959] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.617514] active_anon:69407 inactive_anon:38 isolated_anon:0 [ 272.617514] active_file:4635 inactive_file:12160 isolated_file:0 [ 272.617514] unevictable:0 dirty:172 writeback:0 unstable:0 [ 272.617514] slab_reclaimable:6959 slab_unreclaimable:58093 [ 272.617514] mapped:58819 shmem:62 pagetables:2553 bounce:0 [ 272.617514] free:1428358 free_pcp:205 free_cma:0 [ 272.683386] binder: 17658:17661 sending u0000000000000000 node 543, cookie mismatch 0000000000000004 != 0000000000000000 [ 272.704061] Node 0 active_anon:277728kB inactive_anon:152kB active_file:18540kB inactive_file:48640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235276kB dirty:688kB writeback:0kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 272.715471] binder: 17658:17661 transaction failed 29201/-22, size 24-8 line 3364 [ 272.719064] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.753189] binder: 17658:17661 ioctl c0306201 200002c0 returned -14 [ 272.767351] lowmem_reserve[]: [ 272.836650] binder: 17659:17669 unknown command 0 [ 272.850600] 0 3437 3437 [ 272.853785] Normal free:2632280kB min:5476kB low:8996kB high:12516kB active_anon:278228kB inactive_anon:152kB active_file:18540kB inactive_file:48940kB unevictable:0kB writepending:688kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5664kB pagetables:10360kB bounce:0kB free_pcp:792kB local_pcp:504kB free_cma:0kB [ 272.855162] binder_alloc: binder_alloc_mmap_handler: 17658 20001000-20004000 already mapped failed -16 [ 272.890221] lowmem_reserve[]: 0 0 0 03:50:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:55 executing program 2: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x2f, @multicast1, 0x4e24, 0x0, 'ovf\x00', 0x11, 0x67d00000000, 0x60}, 0x2c) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x100000001, 0x20, 0x7f, 0x619dc97f, "1f710baefd435eeff5e1342540071dd4a03f0502e3123d66b8de1b93f0e7e1ee"}) [ 272.893001] binder: BINDER_SET_CONTEXT_MGR already set [ 272.896886] binder: 17658:17661 ioctl 40046207 0 returned -16 [ 272.903249] DMA32: 2*4kB (UM) 0*8kB 1*16kB (M) 1*32kB (U) 3*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 750*4096kB (M) = 3079672kB [ 272.921651] binder: 17659:17669 ioctl c0306201 20000080 returned -22 [ 272.924387] Normal: 1895*4kB (UM) 2855*8kB (UME) 2953*16kB (UME) 695*32kB (UM) 406*64kB (UM) 166*128kB (UME) 76*256kB (UM) 26*512kB (UME) 9*1024kB (UM) 3*2048kB (M) 595*4096kB (M) = 2632388kB [ 272.933208] binder_alloc: 17658: binder_alloc_buf, no vma [ 272.949303] 16889 total pagecache pages [ 272.958005] binder_alloc: 17658: binder_alloc_buf, no vma [ 272.958161] binder_alloc: binder_alloc_mmap_handler: 17659 20001000-20004000 already mapped failed -16 [ 272.970499] binder: 17658:17670 transaction failed 29189/-3, size 24-8 line 3254 [ 272.976205] 0 pages in swap cache [ 272.981675] binder: send failed reply for transaction 542 to 17658:17661 [ 272.988929] Swap cache stats: add 0, delete 0, find 0/0 [ 272.992116] binder: 17658:17661 transaction failed 29189/-3, size 24-8 line 3254 [ 272.999015] Free swap = 0kB [ 273.006358] binder: send failed reply for transaction 546 to 17659:17669 [ 273.011002] Total swap = 0kB [ 273.016204] binder: 17658:17670 ioctl c0306201 200002c0 returned -14 [ 273.017860] 1965979 pages RAM [ 273.027076] binder: undelivered TRANSACTION_COMPLETE [ 273.028469] binder: 17659:17676 transaction failed 29189/-22, size 24-0 line 3117 [ 273.039435] binder: undelivered TRANSACTION_ERROR: 29201 03:50:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000000}) [ 273.048516] 0 pages HighMem/MovableOnly [ 273.052986] 315697 pages reserved [ 273.058446] binder: 17659:17669 unknown command 0 [ 273.063334] SELinux: policydb string length 338755596 does not match expected length 8 [ 273.067391] SELinux: policydb string length 338755596 does not match expected length 8 [ 273.078130] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.093426] binder: 17659:17669 ioctl c0306201 20000080 returned -22 [ 273.096084] syz-executor.4: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 273.103880] binder: undelivered TRANSACTION_COMPLETE [ 273.121627] CPU: 1 PID: 17654 Comm: syz-executor.4 Not tainted 4.14.108+ #38 [ 273.125377] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.128836] Call Trace: [ 273.128857] dump_stack+0xb9/0x10e [ 273.128875] warn_alloc.cold+0x91/0x1ab [ 273.128889] ? zone_watermark_ok_safe+0x250/0x250 03:50:56 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000002ca542400000055"], 0x3c) write$selinux_load(r0, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "2e021a35a6b16860ef0728056819292259bde605bd4b655853e05675a8f23e87b53d579822c6b09bd61739c37b2cf37102d9f0e2b9677d725c2e03fea511bf0ce1eab3b3043c6fe4e336bc5c3a61ac4332504eed81296dd470264d406bcd36838b48ba4b83212309830d2c8fd844b2f900956bcde958aab162332530873660b47af6886b6ea1479c7f3f513d61a76212ba913ccb505af9373579a992204ae985024b14aae92bbb1f0d6a09b863ee2638fe004a2bdb7019c84b2b9262d314803bebf173381bb3f4"}, 0xd7) 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80) r2 = syz_open_dev$binder(0x0, 0x0, 0x10000001fffffffe) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x8}, 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) write$selinux_load(r2, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "3d3448602924f08d9138f176c94db91b662b507798fc67f8fb3e4e7aab83eb8c3b11e6340ffbd650c7223039cbbb66ac6efb539baaf2f25c4a029a66ded1b4832f9e218895bd12fdb8c2d5a2ef737751d43bcc086a2633aedd88c831fff4db343ade485458e0307acfdc2bcab999f4f6fd9d56105d7b963be9e49496fabc2a3690d2239387cd0e63fffa836376e7e050ffe66d69d83dd778dd043893edde25dc58a4636d7a0fba607dc01fd6a99056f66d411dff7ba18d81c88ad920fcef3d834d516aa412d15f9fe11afa9c23849aeaaf825779b422e23696dea09d482068e513b2bbef35869e5b079b8db5489ac348e6621b"}, 0x103) listen(r0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 273.128900] ? lock_acquire+0x10f/0x380 [ 273.128910] ? avc_has_perm+0x9c/0x350 [ 273.128934] ? avc_has_perm+0x1b7/0x350 [ 273.128950] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 273.128982] ? __vmalloc_node_range+0x390/0x690 [ 273.145258] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.149366] ? check_preemption_disabled+0x35/0x1f0 [ 273.149382] ? sel_write_load+0x199/0xfb0 [ 273.149398] ? vmalloc+0x60/0x80 [ 273.149409] ? sel_write_load+0x199/0xfb0 [ 273.149419] ? sel_write_load+0x199/0xfb0 [ 273.149443] ? sel_read_bool+0x240/0x240 03:50:56 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{}, {r1, r2/1000+10000}}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1/file0\x00') [ 273.149463] ? trace_hardirqs_on+0x10/0x10 [ 273.149475] ? check_preemption_disabled+0x35/0x1f0 [ 273.149507] ? __vfs_write+0xf9/0x5a0 [ 273.158511] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.161312] ? sel_read_bool+0x240/0x240 [ 273.161327] ? HARDIRQ_verbose+0x10/0x10 [ 273.161338] ? kernel_read+0x110/0x110 [ 273.161374] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 273.161389] ? rcu_read_lock_sched_held+0x10a/0x130 [ 273.161407] ? vfs_write+0x17f/0x4d0 [ 273.161424] ? SyS_write+0xc0/0x1a0 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 273.161435] ? SyS_read+0x1a0/0x1a0 [ 273.161447] ? do_clock_gettime+0xd0/0xd0 [ 273.161461] ? do_syscall_64+0x43/0x4b0 [ 273.161470] ? SyS_read+0x1a0/0x1a0 [ 273.161483] ? do_syscall_64+0x19b/0x4b0 [ 273.161512] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.201425] binder: 17684:17688 sending u0000000000000000 node 552, cookie mismatch 0000000000000004 != 0000000000000000 [ 273.239728] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.259860] SELinux: ebitmap: truncated map [ 273.306039] SELinux: ebitmap: truncated map [ 273.312211] binder: 17694:17696 got new transaction with bad transaction stack, transaction 555 has target 17684:0 [ 273.313059] binder: 17684:17688 transaction failed 29201/-22, size 24-8 line 3364 03:50:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x529002, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x2, 0x1, 0x8, 0x80000000}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000004fff90003e2f490ad27080073ce740b0000ff01e5ff000000000600000000000000ca54240000005547b0260cf2e98beb95fce83e98cda5c07b9615a69ecdbe1b7ac4ca458ed8da6ab67b8c90811b5792efe178056bda28331d48627fc571dc074c1888cdd06d11bd64467730d45e914087d7fc77d432b71cfc"], 0x3c) 03:50:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') [ 273.350554] SELinux: ebitmap: truncated map [ 273.351619] binder: 17694:17696 transaction failed 29201/-71, size 0-0 line 3144 [ 273.360602] binder: 17684:17688 ioctl c0306201 200002c0 returned -14 [ 273.370219] SELinux: policydb version 890896942 does not match my version range 15-31 [ 273.379639] SELinux: ebitmap: truncated map [ 273.385065] binder_alloc: binder_alloc_mmap_handler: 17684 20001000-20004000 already mapped failed -16 03:50:56 executing program 4: unshare(0x4000200) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) [ 273.385751] SELinux: policydb version 890896942 does not match my version range 15-31 [ 273.403169] binder_alloc: 17684: binder_alloc_buf, no vma [ 273.408741] binder: 17694:17707 transaction failed 29189/-3, size 24-0 line 3254 [ 273.410751] binder_alloc: 17684: binder_alloc_buf, no vma [ 273.416377] binder: BINDER_SET_CONTEXT_MGR already set [ 273.416390] binder: 17684:17688 ioctl 40046207 0 returned -16 [ 273.430575] binder: release 17694:17696 transaction 555 out, still active [ 273.441712] binder: undelivered TRANSACTION_COMPLETE 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 273.451738] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.463027] binder: 17684:17692 transaction failed 29189/-3, size 24-8 line 3254 [ 273.464230] binder_alloc: 17684: binder_alloc_buf, no vma [ 273.476851] binder_alloc: 17684: binder_alloc_buf, no vma [ 273.486075] binder: 17684:17688 transaction failed 29189/-3, size 24-8 line 3254 [ 273.494430] binder: 17694:17696 transaction failed 29189/-3, size 0-0 line 3254 03:50:56 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') socketpair(0x1, 0x0, 0xf7a, &(0x7f0000000000)) [ 273.506313] SELinux: policydb version 67108886 does not match my version range 15-31 [ 273.514562] binder: send failed reply for transaction 551 to 17684:17688 [ 273.522826] binder: 17684:17688 ioctl c0306201 200002c0 returned -14 [ 273.534453] binder: send failed reply for transaction 555, target dead [ 273.543877] SELinux: ebitmap: truncated map 03:50:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xffffffffffffff00) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000480)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000600)=[0x0]}}}], 0xe4, 0x0, 0x0}) 03:50:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x406, r0) 03:50:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@local}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="989d5b0c080000005345204c696e757816000000fff90003e2f490ad270800004000005340ff01e5ff000000000600000000000000ca54240000005587a843258e38fa"], 0x43) 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 273.557377] sel_write_load: 61 callbacks suppressed [ 273.557382] SELinux: failed to load policy [ 273.558266] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.595535] binder: undelivered TRANSACTION_ERROR: 29189 03:50:56 executing program 4: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x111) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000240)=""/27) splice(r0, &(0x7f0000000180), r0, &(0x7f00000001c0), 0x9, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0x9, 0xfffffffffffffff7, 0xffff, 0x7, 0x4, 0x4}) shutdown(r1, 0x1) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400008ab9cb0294d34c7338413b77583501db8b5e46a62df62c91a8a8cf84b565dcae594fe4e1af70419fc65d853a35c7ac68e6c9df6733753220a0723c06606d9535b805ecbe3f97945fd615d7237420c37b6d015da3ee12c347db3f49fc0da09b1a28d1b0c7e5a98a4c309451876a07efdeea1386ea9f5424224245020c57cf4e8a53dc51c9aee64d82c38511b8663f3880901a21ab2772b1ba996317b88a7f96a02dacdead6c68213cf15e30912a67fc2970ef19376013b18512"], 0x3c) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) [ 273.604289] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.611649] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.623723] binder: undelivered TRANSACTION_COMPLETE [ 273.635737] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.651471] binder: 17725:17731 transaction failed 29189/-22, size 24-0 line 3117 [ 273.656733] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.685398] binder_alloc: binder_alloc_mmap_handler: 17725 20001000-20004000 already mapped failed -16 [ 273.686094] SELinux: policydb magic number 0xc5b9d98 does not match expected magic number 0xf97cff8c 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 03:50:56 executing program 2: r0 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='trusted.overlay.redirect\x00', 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000200)="38121cf84e28b0c82b7daed1e1b460ad654cb9e9dba9c829a9724b6d67698ca60828f6d8756b8aa95685ab043e9866d7f7bf087960f84ae915ad24b9e4d89358d426f2b809e9eebaef0c54445b79b84a08daaf0c9fe2ac83f03464b1cecf1a33963f5575146bc81c1caaa1de18f4c8aab07e961d3538d3a2cf758b65429145823cf8e6d403e23d43818ca623439f6e8aaa63a345c8e7936b47ff784fab48347c5723b78a1db8ef", 0xa7) creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', &(0x7f00000000c0)='./file1\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x3) [ 273.707811] binder: 17730:17735 sending u0000000000000000 node 564, cookie mismatch 0000000000000004 != 0000000000000000 [ 273.723641] binder: 17730:17735 transaction failed 29201/-22, size 24-8 line 3364 [ 273.727661] binder: release 17725:17731 transaction 568 out, still active [ 273.732889] binder: 17730:17735 ioctl c0306201 200002c0 returned -14 [ 273.740572] binder: undelivered TRANSACTION_COMPLETE [ 273.747560] SELinux: failed to load policy 03:50:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x801) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 03:50:56 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x22) r3 = fcntl$dupfd(r1, 0x406, r2) write$selinux_create(r3, &(0x7f0000000000)=@access={'system_u:object_r:ptchown_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x401}, 0x5e) write$selinux_load(r2, &(0x7f00000001c0)=ANY=[], 0x0) [ 273.756338] SELinux: ebitmap: truncated map [ 273.766553] binder: release 17725:17741 transaction 567 out, still active [ 273.767197] SELinux: failed to load policy [ 273.779226] binder: BINDER_SET_CONTEXT_MGR already set [ 273.780853] binder: undelivered TRANSACTION_COMPLETE [ 273.785733] binder: 17730:17743 ioctl 40046207 0 returned -16 [ 273.792742] binder: undelivered TRANSACTION_ERROR: 29189 03:50:56 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/4096) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000fff90003e2f490ad270800004000000000ff01e5ff000000000600000000000000ca542400000055"], 0x3c) fdatasync(r0) [ 273.815562] SELinux: ebitmap: truncated map [ 273.821767] SELinux: failed to load policy [ 273.828277] binder_alloc: 17730: binder_alloc_buf, no vma [ 273.834768] binder: 17730:17735 transaction failed 29189/-3, size 24-8 line 3254 [ 273.849049] binder_alloc: 17730: binder_alloc_buf, no vma [ 273.858436] binder: 17730:17752 transaction failed 29189/-3, size 24-8 line 3254 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 273.867762] binder_alloc: 17730: binder_alloc_buf, no vma [ 273.873744] syz-executor.1: vmalloc: allocation failure: 0 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 273.875359] binder: send failed reply for transaction 563 to 17730:17735 [ 273.885865] CPU: 1 PID: 17757 Comm: syz-executor.1 Not tainted 4.14.108+ #38 [ 273.893096] binder: 17751:17756 transaction failed 29189/-3, size 24-0 line 3254 [ 273.898083] Call Trace: [ 273.898106] dump_stack+0xb9/0x10e [ 273.898125] warn_alloc.cold+0x91/0x1ab [ 273.898139] ? zone_watermark_ok_safe+0x250/0x250 [ 273.898148] ? lock_acquire+0x10f/0x380 [ 273.898158] ? avc_has_perm+0x9c/0x350 [ 273.898180] ? avc_has_perm+0x1b7/0x350 [ 273.898193] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 273.898216] ? __vmalloc_node_range+0x390/0x690 [ 273.898233] ? check_preemption_disabled+0x35/0x1f0 [ 273.898247] ? sel_write_load+0x199/0xfb0 [ 273.898261] ? vmalloc+0x60/0x80 [ 273.898272] ? sel_write_load+0x199/0xfb0 [ 273.898288] ? sel_write_load+0x199/0xfb0 03:50:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="008b03272ad8829e630d636b64af3e47e8cec9cdb34db742bc903d8c4695b6ebd0708efa82e02185a6fbcb6459ba94d84b3244828702bba446fe58692964fac7bd0bd72f34a4d7105b2bf1155b99b7df0e9b303f30cb8291fce32a14362303b6c7f2c1468252eb620acc7f67e2d7d8a9500bfc3613676d1506828db85dcb05ce0528d2913c0774cae205ab7d612e"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="852a62585ad515a4", @ANYRES64=0x0, @ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xe4, 0x0, 0x0}) [ 273.908282] binder: 17730:17752 ioctl c0306201 200002c0 returned -14 [ 273.908449] ? sel_read_bool+0x240/0x240 [ 273.908469] ? trace_hardirqs_on+0x10/0x10 [ 273.908484] ? check_preemption_disabled+0x35/0x1f0 [ 273.908523] ? __vfs_write+0xf9/0x5a0 [ 273.927120] binder: send failed reply for transaction 567, target dead [ 273.928719] ? sel_read_bool+0x240/0x240 [ 273.928734] ? HARDIRQ_verbose+0x10/0x10 [ 273.928748] ? kernel_read+0x110/0x110 [ 273.928783] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 273.928798] ? rcu_read_lock_sched_held+0x10a/0x130 03:50:56 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x50000, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl(0x200, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)="16e53d3f81feb917a10b063c40a125c42575ca6c6d03af6ca62fd0a17e97e06cd2c43a0f") 03:50:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 273.928817] ? vfs_write+0x17f/0x4d0 [ 273.928833] ? SyS_write+0xc0/0x1a0 [ 273.928845] ? SyS_read+0x1a0/0x1a0 [ 273.945292] binder_alloc: binder_alloc_mmap_handler: 17751 20001000-20004000 already mapped failed -16 [ 273.947154] ? do_clock_gettime+0xd0/0xd0 [ 273.947171] ? do_syscall_64+0x43/0x4b0 [ 273.947182] ? SyS_read+0x1a0/0x1a0 [ 273.947197] ? do_syscall_64+0x19b/0x4b0 [ 273.947219] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.951910] binder: send failed reply for transaction 568, target dead [ 273.993371] warn_alloc_show_mem: 1 callbacks suppressed [ 273.993376] Mem-Info: [ 274.010123] binder: 17751:17765 transaction failed 29189/-22, size 24-0 line 3117 [ 274.039054] active_anon:69750 inactive_anon:37 isolated_anon:0 [ 274.039054] active_file:4636 inactive_file:12245 isolated_file:0 [ 274.039054] unevictable:0 dirty:174 writeback:0 unstable:0 [ 274.039054] slab_reclaimable:6778 slab_unreclaimable:58369 [ 274.039054] mapped:58864 shmem:62 pagetables:2535 bounce:0 [ 274.039054] free:1427735 free_pcp:189 free_cma:0 [ 274.047008] binder: 17751:17756 transaction failed 29189/-22, size 0-0 line 3117 [ 274.060900] ------------[ cut here ]------------ [ 274.085027] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.115189] kernel BUG at drivers/android/binder_alloc.c:1130! [ 274.118998] Node 0 active_anon:279036kB inactive_anon:144kB active_file:18544kB inactive_file:48804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235300kB dirty:696kB writeback:8kB shmem:248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 274.127425] binder: 17766:17774 got transaction with invalid offset (0, min 0 max 24) or object. [ 274.150472] DMA32 free:3079672kB min:4792kB low:7868kB high:10944kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3079672kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.164005] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.175277] lowmem_reserve[]: [ 274.201017] binder: 17766:17774 transaction failed 29201/-22, size 24-8 line 3348 [ 274.206741] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 274.208631] binder: 17766:17774 ioctl c0306201 200002c0 returned -14 [ 274.215950] Modules linked in: [ 274.215975] CPU: 1 PID: 17770 Comm: syz-executor.5 Not tainted 4.14.108+ #38 [ 274.215982] task: ffff8881d5edde00 task.stack: ffff8881c7fc0000 [ 274.215997] RIP: 0010:binder_alloc_do_buffer_copy+0xc7/0x500 [ 274.216002] RSP: 0018:ffff8881c7fc75d0 EFLAGS: 00010216 [ 274.216011] RAX: 0000000000040000 RBX: 0000000020001000 RCX: 0000000000000342 03:50:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 274.216017] RDX: ffffffff82237477 RSI: ffffc9000d450000 RDI: ffff8881ca4063d8 [ 274.216022] RBP: 0000000000000020 R08: ffff8881c7fc78b0 R09: 0000000000000028 [ 274.216027] R10: ffffed1038ff8f06 R11: ffff8881c7fc7837 R12: ffff8881d084e698 [ 274.216032] R13: 0000000000000028 R14: 9e82d82a27038b00 R15: ffff8881c7fc78b0 [ 274.216039] FS: 00007ffa304aa700(0000) GS:ffff8881d7700000(0000) knlGS:0000000000000000 [ 274.216045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.216050] CR2: 0000000000940004 CR3: 00000001cff72002 CR4: 00000000001606a0 03:50:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/uts\x00') getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/75, &(0x7f00000001c0)=0x4b) r4 = dup(r2) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x73c, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="007e644ae1f9ed79b2f386f60cf0337468456ea0f1c76cab5fec62d13cd12fbea44e1591f767535ad6123ac738bec85456c1493c9f8c78bbd033258256a820464d1491cfc2d8e16a46035c5239bbbf0ec80dfccb21ab82b8c82a201117749154d0f7a53d57dd7211bd35c0dce9d649dbd7b843761a7becc4bfb40882748477ad269cdd78a21f2a1329db6e05321ae67bf7f14eb6ba7a8a44fc77c4cb5640d6c3e9bce3bb0162a9587e7af1e37c87f6ed87f5ecaa51209dc7a3c4f938edccec3cc45bed8cb373c556c9c37ff58f1f86be89a1c884d710f4d2723c33065dd72d1c100662", 0xe3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x61, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000200)=0x2, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r5, 0x80083) sendfile(r4, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 274.216059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.216063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.216066] Call Trace: [ 274.216083] ? binder_alloc_do_buffer_copy+0x1ef/0x500 [ 274.216098] binder_get_object+0x90/0x190 [ 274.216109] binder_transaction+0x1e2d/0x5640 [ 274.216138] ? binder_inc_ref_for_node+0xba0/0xba0 [ 274.216155] ? perf_trace_lock_acquire+0x122/0x4e0 [ 274.216169] ? HARDIRQ_verbose+0x10/0x10 [ 274.222740] binder: undelivered TRANSACTION_COMPLETE [ 274.228837] ? __might_fault+0x104/0x1b0 [ 274.228852] ? lock_downgrade+0x5d0/0x5d0 [ 274.228860] ? lock_acquire+0x10f/0x380 [ 274.228868] ? __might_fault+0xd4/0x1b0 [ 274.228882] ? __might_fault+0x177/0x1b0 [ 274.228897] ? binder_thread_write+0x512/0x1f90 [ 274.228917] ? binder_transaction+0x5640/0x5640 [ 274.228924] ? HARDIRQ_verbose+0x10/0x10 [ 274.228942] ? lock_downgrade+0x5d0/0x5d0 [ 274.232489] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.239340] ? lock_acquire+0x10f/0x380 [ 274.239352] ? __might_fault+0xd4/0x1b0 [ 274.239369] ? __might_fault+0x177/0x1b0 [ 274.239383] ? binder_ioctl+0xd48/0x14ea [ 274.239396] ? binder_poll+0x230/0x230 [ 274.239405] ? __lock_acquire+0x56a/0x3fa0 [ 274.239413] ? trace_hardirqs_on+0x10/0x10 [ 274.239425] ? check_preemption_disabled+0x35/0x1f0 [ 274.239437] ? perf_trace_lock_acquire+0x122/0x4e0 [ 274.246061] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.251294] ? binder_poll+0x230/0x230 [ 274.251310] ? do_vfs_ioctl+0xabe/0x1040 [ 274.251319] ? selinux_file_ioctl+0x426/0x590 [ 274.251326] ? selinux_file_ioctl+0x116/0x590 [ 274.251336] ? ioctl_preallocate+0x1e0/0x1e0 [ 274.251348] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 274.251356] ? __fget+0x1ff/0x360 [ 274.251367] ? lock_downgrade+0x5d0/0x5d0 [ 274.251375] ? lock_acquire+0x10f/0x380 [ 274.251384] ? __fget+0x44/0x360 [ 274.251395] ? check_preemption_disabled+0x35/0x1f0 [ 274.251417] ? security_file_ioctl+0x7c/0xb0 [ 274.251430] ? SyS_ioctl+0x7f/0xb0 [ 274.265302] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.271788] ? do_vfs_ioctl+0x1040/0x1040 [ 274.271803] ? do_syscall_64+0x19b/0x4b0 [ 274.271821] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.271837] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0d 04 00 00 48 8b 6d 58 48 29 dd e8 33 33 0d ff 49 39 [ 274.280120] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.286496] ed 76 07 e8 29 33 0d ff <0f> 0b e8 22 33 0d ff 4c 29 ed 49 39 ee 77 ec e8 15 33 0d ff 41 [ 274.286588] RIP: binder_alloc_do_buffer_copy+0xc7/0x500 RSP: ffff8881c7fc75d0 [ 274.292882] 0 [ 274.295603] binder: undelivered TRANSACTION_ERROR: 29189 [ 274.306262] 3437 [ 274.329212] ---[ end trace 5d1726c8e01d36fb ]--- [ 274.331036] 3437 [ 274.331061] Normal free:2631436kB min:5476kB low:8996kB high:12516kB active_anon:278972kB inactive_anon:144kB active_file:18544kB inactive_file:48912kB unevictable:0kB writepending:696kB present:4718592kB managed:3521456kB mlocked:0kB kernel_stack:5664kB pagetables:10268kB bounce:0kB free_pcp:1172kB local_pcp:664kB free_cma:0kB [ 274.331064] lowmem_reserve[]: 0 [ 274.335594] Kernel panic - not syncing: Fatal exception [ 274.339042] 0 [ 274.343547] Kernel Offset: 0xfa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 274.630575] Rebooting in 86400 seconds..