8608b184fd6acc576ce15d11ac331569540676f263f4d5fc84f3132413bd2c85892b9de06077c7984d9754f3c5b51b68982d30288f149f817c580b02330290d899d05216c1aa8d92500f649ede7f412fe55c33f2ba85244d0d43cf6ba97c1b33c16a91fa1b4db2cc7e672d0b1d815831b4468e6f950a396323f330f75b1267cba906733fe847988e9f63567ae9944ef394d15463ba007cda254ea170c74572", 0xbf}, {&(0x7f0000006340)="9c558afa9a936c3c2b0ca98a95c336fa239ed95407808af5497eeac35c37ee303f49a22ca58bb7d29a3db64c08f161c977ba60846aa65e440eed00c8db3c4d3d31a35125ea7beb55323378f3b9a056999a1382d26de30ddeabadae8d48337f72b2b1b875114d8f5dc2f0ae7845f1bded6f11f3c909ae9be1b6a9fba5d3cd79341b86561c419394277a7a9cce9d95b5a8ac5a548e93b55b67e657aa426823f4052c4bebdba79af88d82e0748d916d76ac2aa2e43e4e86ad0354ca6970710dad75ac9570b3f685e541b7fc7c98b4c29337da7ab94b6f993073368d30f26ff64db3def765b3f47cc4", 0xe7}, {&(0x7f00000017c0)="88c4ef78ab7a79d3a4a7e4fb5b857a4ce268c3c4fff8", 0x16}, {&(0x7f0000006440)="c587d33264e4aec88a5f738801efa73c379f3632cd6aff897c8a43b6dd2c68e4c7350d913f814927140a63e3e19da7157864b5ba327620386790e262d15d21fa2a3b5093184e46e40f563c03ed5da631cf7e056daa3c", 0x56}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000006940)=[{&(0x7f0000006500)="89e333a50db8a0fe7cef799ee9be6179c2396bb623a4571d37aac93c2137764267125347eac5a92be2b65f7f6229cfcd90e9822b37c01a918eacf7aa579cd148e4240723927860222019e69a07b99ec4462dcb926677f8701b18752830270db095ba670b1501fd7f", 0x68}, {&(0x7f0000006580)="23670f8a46b07a79f966cbbaa91e3dee31173af1", 0x14}, {&(0x7f00000065c0)="308566fb424c5a08247ddc6d0c043571d5d061cc19189d8948fe903b7e3139340abf2358cb2398a82132ebe97b7a13951701d08d2be4bd20de19fb0bf4ef041d9e5fd88880e2ae3e89444cc1721d2b5800c136dd5c8fe0b469562186efae07031811ac5fb4875b24b4b63517227604609e3489168c560c0b239f43e7a0cc63ea4199b6e53d6f20c040863bbc7bfbe814d97d24f87bfc356a20b8e78ceb06047a0b06f3daf1600f997340f781bbe1e9c6566135ea8e846830f39122b34e", 0xbd}, {&(0x7f0000006680)="3fb55fafb3d332e44592beda6e3e2cf202b2d04106a955a08c994cc02faf12d68b8d8314ef3e62d905e53924f1165e319c1db411a6d04d53fa2faabd2ccbd944a2f374029a573ed3e59b8b6bc885363f2417dc113eab6f4f0d50c8c749b49f2eff57b0d559ab86133673a07579cdb7e7385f8a8dc93d31451dcdc8", 0x7b}, {&(0x7f0000006700)="fff8d7cffe4d26dfa65157b993b45663893491d4ec097af0d8fbf2673cb275679af0b798d8bfa24c088b2fe32ac52ed4a96288935d8fc8784b5a1de2ac8bdda94a37c583e352a1ebca940c1346801f3f0295b8ac984062c7b2d69d6dee1f84b0087a535ac64b0c8660194bbe60fd044fbb", 0x71}, {&(0x7f0000006780)="262b428142716ad061f1acf6327cdfa5a819fae5c16b1d51375483ccbfb7257c68380c3c1a948128b9b242f7225f97106b713f8298cf3f7557ad3af2e97e8cae32db3227e82b15271db0675929b27986e35d3c8987add35c587a8bbcb55c70d9b38e942804367d3c375cb3ada93d62b78f3d335ec455ea1509668c90e16ac165cfa8", 0x82}, {&(0x7f0000006840)="fc3b679bad260e871ef34e61880ca303456985dd52a24ceb78f23d9ab8f6441c95826ff385353b20babaf8d02f55d5f9fc79cfd549b7abd870c01865f1d83fd6518abf1ea9f66708b421aceb29b261216d8d08cc2705f03e613995110e365f0ca9ae081e3b6f235da1f59034192210063c1be92e613daf09093b8a3823dbec3bc9706c4550ab0b53d4d059e2dbb29da5f7289fe88368b157d0b169bb347007f0e40a6039d820e6b70150dc61a5a82cfc5a1abce434ae2b0bfbddbb08e76e75edb88826", 0xc3}], 0x7, &(0x7f00000069c0)=[{0x70, 0x115, 0x3ff, "6c0da9d992501f7f14ae7171e2a4b97a3ef510a734d537f411cf896762c70c49c83b17a69bdf9facf033f895e689ff50ee36d539169f666df8457abee6a94ec9e2758b8cc4853f243ca75f08595af6fd7413430a1e7b918d6c6740"}, {0x58, 0x107, 0x3ff, "d196090edac424064c41971ffd56d9d8c870edbe9d5f530cc42b359776ae4f4114ac3ab566e4a63e3b5665689805e9163037e337eedcb0636241bd759ff858ef75e199ae0a"}, {0xe8, 0x0, 0x0, "a0c0a21349da6fe4786aad9a327325556ddc672ee8ab53fef8c2dad42ac62db2e91d5394bb5c203b9bfdf851e15818237b6fade81cc36d5a039ac809dc68e5b7a55f56a307156dce8e3877e92406916ffe1977aaabcaa47eb42b2ccefe56d0c4cdff24bcc86c56a310d6cb764a9374f38c5d70790895a37c5c8e7181ee5a9ebe3f37bd5ba438187f593ec545e30f2bff1df21b2a20ade5ced464f00025f2e5ed37b9aa20059b91e007c95acd8dcec6d3d8026620f5d45d146b953f676b8e6ab4a9ddfc61d33d6d9e1a0e1b56a823afdfc19b3d9718343360"}], 0x1b0}, 0x1}], 0x6, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x45) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='veth0_to_bond\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000e00000010000000000000000ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a5f74756e0000000000000000006272696467653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000007f8dd2630a50000000000000000000007f000001ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077dbde911050f59e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000aaaaaaaaaabb0000000000000000000000000000e00000020000000000000000ffffffff000000000000000000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069705f767469300000000000000000006970646470300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434f4e4e5345434d41524b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x9, 0x1ff, 0x9, 0x1, 0x9}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) fsync(r3) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x6, 0x2a0, [0x0, 0x20001800, 0x200019d0, 0x20001b70], 0x0, &(0x7f0000000140), &(0x7f0000001800)=[{}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0xd, 0x2, 0x88f5, 'ifb0\x00', 'irlan0\x00', 'erspan0\x00', 'sit0\x00', @random="d6e4c5e67aaa", [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={[], 0xc}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x4, 0x5}}}}, {{{0x11, 0x1, 0x8848, 'vcan0\x00', 'rose0\x00', 'bond_slave_1\x00', 'tunl0\x00', @dev={[], 0xe}, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x16}, [0xff, 0x0, 0xff, 0x0, 0xff], 0x120, 0x120, 0x150, [@rateest={'rateest\x00', 0x48, {{'eql\x00', 'ip6gre0\x00', 0x2, 0x1, 0x4, 0xd446, 0xb1a, 0x4, 0x1, 0xff}}}, @devgroup={'devgroup\x00', 0x18, {{0x0, 0xfc5a, 0x0, 0x0, 0xffffffff}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x318) socket$nl_netfilter(0x10, 0x3, 0xc) write$selinux_load(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578c87125f49b22128d97fbfd695be69fa0a830408d70d6bbe68541e209343ace77632f5e4823e646056c841b8378a6789fd30c1d3bc51e37c48cbd3fdc863dcad7698febd8fb90b408afcc5732"], 0x5c) write$P9_RRENAMEAT(r4, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000040)={@local, @rand_addr=0x2}, 0x8) 03:57:00 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'nr0\x00', @ifru_names='veth0_to_hsr\x00'}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000540)='/dev/keychord\x00', 0x470080, 0x0) clock_gettime(0x0, &(0x7f0000003300)={0x0, 0x0}) utimes(&(0x7f0000000780)='./file0\x00', &(0x7f0000007040)={{r2, r3/1000+30000}}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x22b00, 0x0) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz0\x00', {0x400, 0xfff, 0x1, 0x9}, 0x23, [0x8001, 0x4, 0x5, 0x9, 0x177e, 0x7f, 0x7, 0x401, 0xf2c5, 0x3ff, 0x70, 0x7, 0x0, 0x0, 0x1, 0x5, 0x8, 0xffff, 0x8000, 0x8, 0x15, 0xfffffffeffffffff, 0x100, 0x0, 0x3, 0x0, 0xfffffffffffff801, 0x5, 0x1, 0x1000, 0x100000000, 0x40, 0x5, 0xfa, 0x10001, 0x81, 0xfffffffffffffffc, 0x7fff, 0x5, 0x9, 0x4, 0x8, 0x5, 0x1000, 0x7fff, 0x1, 0x7d7, 0x7, 0x9, 0xfff, 0x9, 0x40, 0x6, 0x4c7, 0xa1d, 0x9d5, 0x5b75c9e7, 0x6, 0x100000001, 0x7f, 0xff, 0x1, 0x9, 0xfffffffffffffe55], [0x9, 0x401, 0x6, 0x2, 0x8, 0x9, 0x10001, 0x3ff8000000000, 0x4, 0x6, 0x0, 0x3, 0x8, 0x8, 0x9, 0x8001, 0x9, 0xbf, 0xffff, 0xecac, 0xffffffffffffff91, 0x1, 0x68b2, 0x1000, 0x1f, 0x5, 0x101, 0x0, 0x1, 0x6, 0xba4f, 0x7fffffff, 0x7, 0x18a2, 0x1, 0x3, 0x3, 0xf7, 0x290f, 0x9, 0x5, 0x0, 0x4, 0xc0, 0x9, 0x9, 0x2d, 0x9, 0x5, 0x3, 0x9, 0x80, 0xb2b, 0x1c000000000000, 0x865, 0x3, 0x101, 0xfffffffffffffffc, 0x3, 0x8, 0x4, 0x4, 0x752, 0x100], [0x5, 0x22, 0x1, 0x0, 0x0, 0x5, 0x323b, 0x1000, 0x7, 0x6, 0x4, 0x3f, 0x79c, 0xa9, 0x70, 0x1000, 0x9, 0x80000001, 0xffffffffffffd8bb, 0x2, 0xd042, 0xfff, 0xff, 0x8, 0x200, 0xffffffffffffffff, 0x9fc, 0x3ff, 0x3, 0xfffffffffffffffd, 0x100, 0x5, 0x72b2, 0x5, 0x6, 0x5, 0x74, 0x6, 0x1000, 0x2, 0x40, 0xff, 0x4, 0xe28, 0x200, 0x1c, 0x2, 0x401, 0x101, 0x0, 0x7b1e, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x1ff, 0xffffffffffffff81, 0xa6, 0x80, 0x4, 0xc23, 0x8d89, 0x1, 0xfffffffffffffdea], [0xfff, 0x2, 0x3ff, 0x7, 0x480000000, 0x7, 0xb3c3, 0x6, 0x0, 0x3, 0x1, 0x6, 0x1, 0x9, 0x5, 0x7, 0x2, 0x3000000000000, 0x2ec, 0x2e, 0xfffffffffffffff7, 0x8, 0xd, 0x9, 0x1, 0x4, 0xff, 0x3, 0x7c8, 0x80000001, 0x3, 0xfffffffffffffffc, 0x101, 0x8001, 0x40, 0x0, 0x7f, 0xfffffffffffff801, 0x49, 0x0, 0x4, 0x101, 0x5de6, 0xbedd, 0x8dcb, 0x7f, 0x2, 0x0, 0x2, 0x7fffffff, 0x2, 0x80, 0x7fffffff, 0xa15, 0x8, 0xc4, 0x9, 0x20, 0xd3, 0xae, 0x3, 0x0, 0xffffffffffff97bd, 0xff]}, 0x45c) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) accept4$packet(r0, &(0x7f0000006dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006e00)=0x14, 0x800) sendmmsg(r4, &(0x7f0000008600)=[{{&(0x7f0000000600)=@ll={0x11, 0xf5, r5, 0x1, 0x8, 0x6, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)="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", 0xff}, {&(0x7f0000000780)}], 0x2, &(0x7f0000000800)=[{0x1010, 0x13f, 0x4, "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"}, {0x40, 0x117, 0x100000001, "10214243abd704566db8acc97c46529fac88361e5c42122f73fba02d7461b52058b437e3629a8ec4605685"}], 0x1050}, 0x1}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001900)="e6f932dbe0f7d29ed155d4cd69a8eb3fbd71ce529644ce37e71e74b61742698a3e4d5df157e3bc35fa43829328e89370bafe0a4e097babff949a4773816527784c5670ea4455446dcd3fc0ecf9fd2c95611d4371b8f08519ce76586649ae83a329356a19b3ea47aa7fd89993da17", 0x6e}, {&(0x7f0000001980)="5bfcd7e5cf81f4642147791b2d3c37a7ccef8a48bf7392e929a13cf322f94d321c78bf2fbae05ccab3a06396d9cc1dedb1ac72a554c7e87cfa5c2f97c99ccc862644447e1bf934f76418cdab008daa1c29d4d1abbf9e15b891bdd1bbe811cbbad5f6b8cc6cd66e39f6c3f962c1125e600aba90a07a3091ca434c93c761fbff3c7701a18c5b126027a7f54e0dfcbfa7", 0x8f}, {&(0x7f0000001a40)="7a4f13bb037c9a20b610eb80c8fbaf971cebedd5519b3c90e2fd51b17df18f62478218d538b4827d59edf0526f5bba18362c42dddedc4e5e82fde93f9fbf1dd1f2e7b83f0e41eb79d49aaa76d3932b3bfd1e52184fe08cc446c1010074a10a98cc6ebe01a53e6f0821a2e8decf037d7530f5be1228eaaf6adb29436037acd1f375d7a382c99d6f0ba51df411cc6c3d70fed80290bc189f7a3e03", 0x9a}, {&(0x7f0000001b00)="3f9665227a477c0d7de71fc210a2bce5a6936914bfca1680f9a76a7a933a97f765b0bc5231ec9c123162ca30837c8203076214622ac20ddbe3fac8a6dde70be96f10056b7c84b4aeb2440ae82837a5083aeebf84e637248b3a86aa481035cade2a4d9844e4383317b7945fa1188a4212471b3dd099ac56cd33f096c0e4854d36e85364cfff4e886315fc9215a04b50de109c3d4f1c7210c7fdf2ecef1e816da62ec23073446842b05568e8d7ba9c1bdc31e0d3716624d6a8d17f7bcff3a2", 0xbe}, {&(0x7f0000001bc0)="c6071cf4f0f1eaa5b45a2eeead40bee66f5c2f113cf6e9c4b22520630c721d1d616ecd13b1f30c6b6c4292c3bcb31b35b720fcf182a21763e5e38c0b456c5d23dc28b4541c6f5efbd88b733b3066cadc82071d1300614b84d54e69709446e51b11ac1dfe06759659933a459246a626536288a122b3e0013379dbe55ebfb42ad0f7ed5d219e54f6058436bcc8d6343d06e7d035255de07e6252a7a0c1f55493bae66065d8ae20a08596b54211ac0151056f91175fde6c2a7bcf620ba2a5345e3b1bede98f38c20e5ff0c251a9", 0xcc}, {&(0x7f0000001cc0)="0bde0c303bd6bc", 0x7}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="0b04512b5f714d899b7fc45b1d70627d55af4e5e5f511c7f7c9af07d14dfe01fce8d763dcdc7d619a9834d182ceaff59dd3c5650006db2589d012ea7a4ecf616f6dfeb172eafcf5a1d5e48b5badc5ba4b460067df4bd114b848269481674ffeda2ae6eb5f2ec78252a03898bdb00d467b6a10ea5e24dcedd99d4da205793eef38f546e272e9734bae0808baad8e00d32a082cf3ab4ba181638aa67d68c211c12fd1cb04dc2486228688ca4db84c2facee66f672a7b931e484bcf27a1ad15b76b0cd748aba2161bcfb5b21f939ceeb7d795ae511f04", 0xd5}, {&(0x7f0000002e00)="c26a7c7035fa559cae48e7a1195b002929f2a6db450b694d37e4a152ea66ab6b19df3cb9ee30300ce4d6e941f6375d06dea6606b9d78d3e23db4b9360d74c617c7ee838ea32291952c633cb99d61c9b01b106827a06da475e9a2bf6e6ecb1b7c50498aedef06eb1a", 0x68}], 0x9, &(0x7f0000002f40)=[{0xc8, 0x11f, 0x6, "b867165eea844b3151c6717c5c7ad973636d20ef4c70969cc4dc99f4c9fc4460a65d93446802b619845878516f0f5ea5f96b79b1e326d55a740b55ffa9d147f2c92fa149733c37577240459f8da912f5169cf3b4fc65cd04726ee07774c67237d7c372b88b1bc011636ff71707c3f5d0ffffd42b304bf12322d50bdb140a9b178da070c6968f5d40c087a70a71c9d9467e90930fe7c4cec450cccb4fc145f2a66e53772a7755a9da4fb8f0d7e6b38f1cee1e1f54"}, {0xb0, 0x117, 0xfffffffeffffffff, "324e2c1bc4a41bb454d46b890932cfadad2c764f15e1712393b3e553a9833fc2bd84ecea04ecde011c473c383815d17ffe35c3ee5fec220cab35113c7fed36225d29f8b1f22a3bfe9fe03f31b8099275d0380de7b115218fedbef72f23b2cb804169ef1236b45aadd3a91c12ed1c9a610c3e1c5f9dd171a43c6e683ce250bb7a1e967e725ba3b3f9eb9fe73dd2b547d0f9429754b6bbf5ff7be84ec756"}, {0xf8, 0x11d, 0xffffffff00000001, "457864a50340eb15ecfad318dc2aac710da5b779ff288af8fcf6626f02fe2a6cfbc89f5ecb4a3dc14b317fea7efc79c84dcb48c9ffda066fb8a25870dd57efc31fa03973d97d1166f493759ae182758b56499be826213c6d060519855e99dc7960c2c8b44d1de2cee337b8a30bab01385b51d4b2bb9439b99252a71ee94f949c9024591dbdad15ddaac8240d8595741cda67bce6a9a0dcce9ba6103ddb41f613692e2c59ba30d6575296d97672c37ce67140a0ea9750d5d535a3c5b17e5324935f6b69e10b190a239fdcfa1b781e05b5ad8b082d27ba6da827be60ab278984841fc42b0a33"}, {0x28, 0x112, 0x1f91, "31554474e81b27385279545cb134770c675707"}, {0x90, 0x0, 0x5dd, "8ae1675b1dc4438d3e6ae276812417ebbf89dd4e599d964dfb9f34b6f5c85a0e443bdc9523bd7d06ebbf29fd741216bb01c7ad97044d74502f171fe3152fb335d72c5533eae0815e0c9b388fb282755f817ae6d94a431179e219242175267de9275958118edd6a76eea8817c512a91cc6b39988080e50685e1"}], 0x328}, 0x4}, {{&(0x7f0000003280)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast5)\x00'}, 0x80, &(0x7f0000003300)}, 0x7f}, {{&(0x7f0000003340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x2, 0x1, {0xa, 0x4e20, 0x40, @local, 0x693}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000033c0)="b0571a862d8a3ef0161959cb346a96bd630871ba42215502e56a4739e7431ba3430da9375ee36a632c26fe3db7251071847f6400f74dd0461ae02989cda4290f42c1770ddb971f83baba96b4327ad84bb26474d365dd20", 0x57}, {&(0x7f0000003440)="414947e73f1cf3c77da1de3e7e73ead978730566a777c4cb2e30a373d55eea8a292b471b8bd3f8fa752b9a7c2f951e00cd7c322478633b238f1a17fb790f64424008dc521c224be22245888524a24e4f299cf6d8277ef51a775c1435397387f09ea9de51f1440153de884d2e752bd8fff162421c9059122ddadbd71796b714b587455590aad7e9f6b9d002bbae9869a4d8b22baaf659e33528018ad1a9619a9ff709ee7720c82b6e8ccc2b40e69be3d2c8bf26ad7e", 0xb5}, {&(0x7f0000003500)="3182431334decde5b500db7146d7b37772a0e79bdc85d83cbddd125eb6de20297eead7487aba38015ba20268a4639517dfcf69d958ea513e800583e81c4815f86e031508bedaf163e25515dea261d0378438fe70119878bf9ee584abf993bc98b090d33482f25b0600b0c57fbb0428f9433a97fb7b7fd318aafaab3a4b5f2e6b74ff0d02d84d5a618e0ce6159bfa87530f4fa4f449d3acfb903ca7100812eaa5f06780651b475fcc55145b1fd59c900bd67924c1cc3dc0fb40cdc0fd350673b488b5b4a261600c5a5dfdfe7bac", 0xcd}, {&(0x7f0000003600)="8d5c56bef1e0fa262f6a5f79b120fe66dfe0295bcc3c75d31bc65bad2747837501933a22522a46a125d81ddb88b08713824869d9077e98b2a04a6efd49205c5e0961f1d8eb7c5f0d20c04c1a7fc331c1b079016222b27953b0c5c8bf41b2abcfdf9ed8a4a96020ef49b4d97bff76603ee902f856a74e08484020fdc640cd9f2f7e9c8d53f9d5f3", 0x87}], 0x4, &(0x7f0000003700)=[{0x88, 0x1ff, 0x5, "f603c0f88628a04e3ca066d00e743d97ae185a43b7d6d5f03f838cf93b8868429560fda2789ed54a8e21a67850962c859208f015c086bf604d5efb26742dc4500b88ee45d823e62dfcd96746cfa5fed80520d8405b7b02969968bf3c79ecf920b6c8ea2788e84cd12d01e8e02332e4388061"}, {0x10, 0x0, 0x3}, {0x78, 0x117, 0xdb4, "4dfd1b8c9f6f119e822b1c61fad215c97495d91ae44a032a0f1f8904659bcf76df05e07d8915e267fe575c4d363ae07988900032e6537550f7f169b9ea91b335b0fa8b575105dc70be1925e7d4d069708205440018f8372bfa442be5ed0b1542dff28b21d008"}], 0x110}, 0x4}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000003840)="c132c6baa94b098706824e7ddde2d96236d94b33c19d0ae5df7e6e651f50a856eff8cfb074fc45207a398657635c6214e05294d3e0022660bb1d5f868fa98e58550677f6ea462b9e28213185e23425e53e5dc9ca27d3c9831c7ae99589f8190327f1340b218905db3707bf93abfad4756778f4cf72e4d2c333abff9876e8ed250a3292e1efe5bda4bc70663b74ba4698a1a37a51b377d51bc48e86a2f4872ccd81945de8e2b4ca30741fbc283874f6", 0xaf}, {&(0x7f0000003900)="55d55bb20b006015933d8c1b5072d840113adb87135d134033e3da93909e6a698b266150b2ef0118f0d098cbba0e02ed6f5f7217608997069c9be9680b8bc2ac4ce525f11512b4abcb3e673574ee4a5d8a3dc11a7664189bfb6ba332a39a9b3d92d4db69982307c9b40f2e57e33b84e9529ee48766ca26912a3e44bd294c005019befa28d5c020f199c4416555b9bc2e5bdd140100eca188bd8f052b36e1512bfac2240006d6392e8b7277a98e79583560", 0xb1}, {&(0x7f00000039c0)="fb69d2591a5065986d579bd6098e4ed95fdbcc778b4c8ce7823cb8fdd8f172ea82a80dc2cca511c67f19ab9d3a83f7b06c7c050acf6261e9e70be9ad2c68968b9bbc49c167eee9c42c2aa586b536283e2fcdc60d877c64b160eff74c793ffce39b57d18d177b1db04e35aa58a1eb116ba88a3cfba69e867fea606cc08cc6556c0d2e8bff1c107c0131080c1e790fce83b6e3b5b468976dfe317f219cc73130281b24323eaf31da37ab53f42adb14", 0xae}, {&(0x7f0000003a80)="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", 0x1000}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="a8a5293d776625e262556e39f4bee2a3563766c9141da0ede303c71bfba0283657d2434cb889adc4f584f48e31ce2efecfe382e67b10afb0849c751433ca4eb5ba77ce0830c3a01b218755a041c62a8031a5cca8b44ffad8e651207d615a8da2e65f149c962f06df6c014bdb49fc73b67e1d49ee05bfe7a51ee4692cc2bc136d8c8b874a26c768656e8b1187f7b698e65039d1c9a6d6539a013eab618668fcfb48ce8b79beb610250028a69c3b839698b406c7dcb08e1b2a1ec2ef40b6a5e1f8cc2433831feee8c773df00df07eb3d3a8712b5ced867a54953", 0xd9}, {&(0x7f0000005b80)="32eea06d0a805bbdbfa361bc79fcab5c57e1a920178480f0166f7ee2f381e9cd387a1f9dc27be70f2af7310a8c16a8dd93c18d959b26ccb135f3c715df5a61d1d8a7ebd9da06bd9bd5ee3a1f6d0da424d65dd909083c5ecbface4e5424a6619455e8c6f688cdd2faeaff9801ae1868fc96eaeda7dba10f3381768f779ee7251f07612ee5581c73cec1e59fbd3784f30ea9f8d3b1cc70e547be3b4fc61c7d7299713d64e89d25b90147b8886ca2206932750803ca435ca434fd63e2674fac2f4ce9b7124c7289d79901d1745ba03b722b8d24da5dc4031e1fffa9083e58db62e952e244465f53db8199ed9f467174a560821043d825fe2771eb8cfba1d4996a7dd71a77077f9f48c81522cf91578f021c4032d4bd96823a3f1232da876be6585f97db969dd9422b975e51ae61bc4c023964d926b3b66e57029340ca161dda9cbc624ee98424ed75999b94a858728423c33503e2d75f2e7e90ab9d7d1227de0a48960828dd2ea55bf79d68e3d50d8107ab234811c876f859891bd81cf307418e1bc919c3964c05de869aa759f1cd0c211adeea04841cbee688ec62d282c0ffa0eeaed12e2a8410bc9dd06c00444a110ca4679f3b34cc1f0c3411f6680d0817349cfdc4bebe411165d5f89d7e03eea54d7012143743f13f318be9fcaa5aadc0b9d3851bc7c0bcd9a0b44f06887440a4b7abe6c699c263a842e1408092be2adaa0681c957ecf64ac494d3853f2692de62062336f00c8405069ef9e69bcd1cf03f189843d2d1c8c22fbf9f62258dbb0118293e22e744aa3a01fdc267a7ccc23ab8cb9df45d1f2d7eaf177f07b083ef61ebaa3a79f897197dabc4d0041ddfcb3ef3656b1d571ec57bbec3e340c59f70fd33a622940294061af9671671c4bd656f64e3f2542e6d4445e0884814ce3a909af1f22dd56af5fbc19b7147962bd384b2fdefac2c9c3df8bda59bc7626813f8f6424764b88db3767e2dcb76b1fc024ebaca6618c2e96c4019e19f734aaf817257013ca87eb6b995f5045e74b87151ceb14c455d141f98f60650df37188b9e2dfa1ce62cc58cd9431a1215ef09ecca5f2b33d28e94bae36e81caa8999c9ec34de940c1670205fc12c09e146b11aba41155c320a1946bb735117ea6bc012c55c0c412e7fad5f9af21fab41fba2fe61b0b613fad5762774d39e7f21b8c9c5c0ed40c90c0ec9221ef6f1ff5bdd03ec1ddcd7609b92be1fa70911dfa2d170d0d2348cb60c77888593076f92fafe700e94c4dd6733d23dbfdd02828d47f5c3157d08235930b3184cf69c429c609bc44b630183a66c8171c7dbd34c31b353a822bb30bc6ff214fda5a0230d096b045af438a91d9aadba7f74650addc2da79204ef4cda6f257c9aa9ef60dbc5b2735cf509dff58b48cdde44a81b89e3dd6df8fa478e3290d2fa23fd6c5164e47edf955430b79e1808f7d34fa8351a4ed3ef1caf0e317b6ff57a5c7257f7b55f451bb8002d7f54c12310ada2fdea0d392ded9e42f1ea9e763cc451e5189adb282a3d4676b6d721dc515b39a741f57ccbf5f91022a73a2546dbfe19b0fead77be06062395c83ebc8e03228a447f283a33b4d9430f6554ac2f8c2cf01bee7e85a7ace413a2ca1a2377e3f91b4b6a2202a6b8bf121c8e945d660fa1601b10a80a3a16a6d6f3fe2a1b4af120ff9ea3ecd8734135116cc89591f3e4a1321fb3872ad087fb494851f6e20f3c6a4ea6e91f8def9479f11b3eb477c58fcd6fba8b4c7b9733442966b254bc3f5317d0c91723b6bc5dfa981b3f9a7af77d7693493aa3ed2555250424cddc4120808f26c03b550f0a7036420d6839ade06f7db050f32ea3480a5aa118a15cfc45c61e4d35ee981196feb85667819fc655fddb8f545c83ef018792960f94c0abeabb89e8617e0ea12bf75145c204d4d14ec28e20c670850f8ed1e502fcfcf66569295a82c4a46d2f4256af92b2691617fd5f6a34803091e8c8482feafeb386ba6f502dc16bd3238ff44e58f530089aee466feecf04fa9c2cb6c672ef08379a058d135713d7585a8ffc4593332302d226bc0bedb3218e130cce211173d34a961babbd00832c804495250daef8467baac242c6b4e2a7d76018ad9f8b8aea578c8aeaf2b3a96d8ab37540168f758147448a4f4a84ac9022db4d7cc60a4f4e5b47d4e1bf948301067f66f86a9fa72fd7c9934041c06970c26c35a5cac5d58587fa1358bc176506b190fad0efac5f90557bbc11c260b83ca6ba6dc41a4bbd6047872b1f13dc10376fe677cc7f809ced9dd7518ed4ef7754b2d2f3100b9ca5867992fcda36a5cdc8fb9ad3e37dfe84013e68665ae375dcdacc59bc745e1eafc031bdd74b0dfd0d227a4dcb16a5e662dce941fce733a212da06ae4bba3184cfac173a774f91998610fa675822bfd69586425ce0d17b2d181284d008960269390b51bf5039de96223249b846b1a77410d937e6c597c8bd2c71ab05ec42191151c2609f12a63be1f05cd9ea16c15ca1a8198eb4e29a9c52ceba1584ed8bf6ed8373ab528f8b604a23408cfb5e8eb1e76717e3ed4bb982f1a43698214ffef3a3d80916b9d8dfaa90674290405bda2fcbd11439ffcf93162bc1f0532d382e25191311e511bb0f29a329cf506d76bbcea266ecfac27e9885b7155adb4d1bdce173a55ab9eef7d20dfbafa2a9c1ed73565d9a1db027835c47f6f6c0f7aed2de3e2f07256e3abe2c6920bbcb72ddf0bb2ca486215ff813d5269d4169b6595f42a93bf6079d852cb8612c0380e8a7da431b7756c480f87939cdb260069609f63a07b2d3828ca7c60a3c0df1bc7fa4126f35a52b921179bcbf94031662c432709ed18262c46fe25615c58a190f953b0a2a9b1e515a6d5ee572850ae6fae90690dd343bb9dfa38431f5e1b03a1714a581232f2a008655d21e8b69236ba15389c97f9025cab1ae0f88f8ca062e247b3d565dadebfa53a3e90c9f849d384eb2a8fdeb55aaa638a0c4eab256bf994ca3c87d4ebdaa9a5a567f610593d6434caaadda4cb60df0b234dfa43e3d08c81bca4245766c88a38d245d3f49a2677c721edf67a8393bd32207c3704f63bd0db861e28fc28a8dbf6ca11a4c709d216d6285e0920b06ea14dda87b1737a146c4b1502e15ded3462983deff1401a7e870c663dbc7e5efc0fdd0677dc2bfdf9b8b6ba179ed74288bc411faf302a98018e8ce163c18708dd5655d4ff8c4caaca13590b08f491675446f4c166cd989b7d8641fbde0f53bbf6aca6894d49e871c1b2be152412940a3c9c1fc3c9465bd2309c2bef71d3b839c58356245b60bed119b55b559aa4b70e3b10ef298639751b5f687c93a677f7f6f0fbe5af2c68f487184fa0228c97a4a9d0dc434ed836f77151579aed19144642c311e45bce5fad14fc716c047f93c9c342d15e4af7099372fd14f504d1a31491a4481ba36fd2cd9da09ba0cc26aa987741a401d11d766966b25ad50e5aa00a4eb9d9fa47e6c297613b6f0bdcffcac60bd6dc71f9027139ceec691900e6c0b07427890d362c6d1220d479b1a88414f1e3389eebdf7fada1aa6d66c730a84482b932fb1224ca92f6bda4bd46b9c06e745251406b55553cdeb57fe1aebfa1fd1f2526b4c0cd143153ab5cb594cc7882410b3062f4b510e1e6c398c21b1fb487b3103775c5e93f29e91bb24b64263198c6128c7ea56ec0265aff0380e19e7da391cf356857ee4ee895cebcef61cf434920a8db05a1bb9d8391443687fd308b996be8646dd77b92f8951275f3c8e5462c4639e3cc77417cb6163f4ab687a5a1178dcb1fedec3e42879533d4e05ca9da367ef3514a83593439ca17702487cb5b0560f322a52e0e20c99bd460472512962f8ce4f75e7f623ef61cd4c67039b6baa49626eae200bef445540a5a6e25be253e2778fe5f5c5209200738979c9b9f9fff9884a16abf681783a4dd7a49ece559a56d2b9429c624c8929bc9d37ae6a5c3e01ee2f39e1bf306c9b7f222caf7b1a1feea5387bff1afbe544bd232691cd188f7e13d1b0e696c923bdfdf7c4e7d33be8bca3ccc7894741a69c2ebaa3e2cc7e8b8a1a469e153a4fa0cd024135d8bea930e0be5152929bdbbe7831254feea3fdf97041654828eef0485f553f6f49d224320a4a8858430a0c1eecac5afa1e23ab8fe660cbd3af1d2a13b8830f5a50c21495826c8db0f177378b8a2f59c51730220d12d6eee37faafc228c1e3661147146200ae30cf65f40744173bed2cfb343f26dd7250f6dbb94dc1eb0b18453274b9498367d9f8492cf7c787b7521e5073f76239d0cbc11a03cc25d7bea8d43868c24a3777d929a33cdcde80ea57385057468663f327048f70ace660f4d638df56e66f89ecf5bf64981d653f97a45c3ccbde72517212dd95f61e1dd075204be412a1e57adb19db06ede81934e64d45447f25784045fd37df9c5f06102766a9f0f7ed365c0af2e5d536a9e1d9c25006c11c2ce8b234329ad5f63def0e92e0c8e8ca63c220a2357948389fd1ea498d16121352aaf630db1d4b6e70caab0a7c1013c714d37f11f28a62a8b1f8fb3b8cb0d74489c5da275b3032fd665b0d865fe4fd20b74b417908748ff29732546df76a6442d3aecde9139ea7e186ffda2ab0e0f5e07a6b6d17551c6d1d3604d82b55cecdd716d1d64e86c7e5876f7e5dbb8c327af94d2de02c211644743705f0ef2fcc5c03c4c7aa2b997f57b25ca57a554a9e5e62ee761347ea8584f1afa30334ba467295108a06b0d6d8bf228c63ba49f21282faf01c99ca717239e8003f24090dbde684b1a07efe7d839b6e046cbe116097322ad8cae56bda26fd0365f1a1d9fae08f96bacd553ffe9000c83d7299cce51afd73bd2bd206bbf18c85b4923be1c549e4ba535aa35dbd43e3b5cbdab0cac6dc9445d1dd7433fd53b2bf88da8c96b4ba3ddbb0cc74247bd3de07a3bec9204ee93cc1d798d1c03d855af0b84ddf20da5dce3d004e5058ce8b037ff61d28a863ec078786f352756e97cf47a375ca9fd952c3309979d179d4900e3fbe718d0820fbdbee206ef79f2a96df590027215257dda67c1a1e5a4f1a5810f33760c6d35641137066c576dbfbff735ff773e0678146d39d89cbe8633ec63fd1b39bae1b7aecbb2bdf93f2e0a92005b7ea141b0c684285795c2aed658c8c76060dd8fdccde4526a8cee918572820bf774c8556154ab1ee79b13bbd0c706997aaeac5e67811d937750544b94bff62291e2e7c0a3d2821e6dce50e9de5e351e8aba285085b2caa5c859fcd36bc39c331cccfffc0fe100b5bb9bd1223716adcf011c69801f340a5b22a110cd76609500a88e97c811926100669a98acc045b137b98dfc7e0c0e9c328320020f085d217c4a250e167b6bf760059317d242e93ba053f114e7f46afec19d703188bc4043738bf38baac19b8f84064b4fb9653d05d9345b40dad803755fe5dc85b9863c3aa4ba8268ccdbe3eba83e61e34ae8979a2e0fa5ed19e914777264d09f6e23d80abe376d58bc604ea47c4d1fcb5e279a78ea8743648cfa73fe23cd3a63d570e7bd000ae0bfec72d993a48ea707914b1d780d31c1cc7daa1b3a813ddefc483a892f45a464dedf9a1be846f47000cf49023bf85b581e8c6fc50ab1cd7f87ed90f571d39e8eac68e1519132e0d261dccb340d43236388d11219543353484a37dfd9768df55036772fbd4cf3b6df8674cd5f7091947fa824966342483c3947c9188f6e798302a1aa8a60ace7d7c8da37eadc9b5cc8f7c00ac2e9253bcd237a6b0228145798d199ee53301edc8c9a4773c0697e23edb7e01dafb03f4b9", 0x1000}, {&(0x7f0000006b80)="bcd4d82a4d4b93942e88de0692feac18b366efc62a41c54f3431ab46420ada71a91d2148ea846f287077e30ba7bfc7db70b7cd8eeba2e76393e700c536e540f4550d0f86e7a89b589a2685e55f56f2018c72678bc4380ed2d21d6eadabafafe65410b14adfcb8ffd2e5be786459da8d728c16fd2c60de1fc08738d7aaf4edbf2ec9db028776f", 0x86}], 0x8, &(0x7f0000006cc0)=[{0xe0, 0x102, 0x98, "2447c0e8936d5a3fbcfcf73e75f4d4004c7fbb8fa25cd284bce76f42b0ee662e12ca1aeae084d50b4541b1b2b24b38202747c404c071881a0068d2316275d9de933ab53376d55066531d49c360b871fa819b8f3dffbc39ed0c7ae45b171bfe72563f261b9126d9b417d9d67cde4657a26a2758ff1a010b095d63a2c98a17e753c22d137354174c0738931e9c9e867db3687a232d05f3a7aba07387ff9f3dd72688fbd3ee6f2064fde3aad8539f75ee064e235d947c4cdf4029ebe0d748256aa2cb9cb649d8d27b834328b28a654f"}], 0xe0}, 0x2e}, {{&(0x7f0000006e40)=@can={0x1d, r6}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006ec0)="6d53489c99a800f2bb524cac04be6c932c589cadb7994434117ca9cab658f45e369c7c2f4588152da7a3292d750bf04d74a81c694695315604e661acacf3eb42e2c17560b7148b9f084453464da643d50abdd6a9308b01111da4f1f9e7ab41b99312c67d0144488fe97e737a3b1677a18ca330ba28a15e94ff6f21911d6258af83dec75aa7991765f5142110402351d54f70ea65aaa1664f268ecdf2e0335180ff8084ed48bb195e", 0xa8}], 0x1}, 0x9}, {{&(0x7f0000006fc0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000007040), 0x0, &(0x7f0000007080)=[{0x90, 0x19f, 0x9, "41995826719cab2050b8ee5f30e4d2b7d80e82ef4065f1541647f4f93af90c3c571afc6f3b8d7b90179c15b4660da572817ace9c2a0442e33658f630ff2d8f01b8f2378ca159cb7b1a1400380552c0ca1a71d29bcc42ca5ceafbd58a0217a684da5252d913ca1ca1975473ac6674f018dc4a840a83d4b45a15a9cf565dc08819"}, {0x1010, 0x10f, 0x4f, "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"}, {0x98, 0x107, 0x0, "dd86e66e2e82ee90a0a7b8d3aab921e2b758aa9c8a55e99cf5fcb72dc5ac303c520721a71c6c02fb5660033e3a908b265e3daa7694e51b1e4d77c1e049a6a503efadeefc9b888aa1547fc063a749839816c2e14ef0624583331ceb89677dff9fc91d8333de7988cc84457c75dd2a6a15ed3126a331b8970014a4c8cbd927933d5d3c3a"}, {0xc8, 0x13f, 0x2, "e45775c1d728ceb1c5483b82e03ed3c05889370ee88cebd5f97d416f0b0119a942a3cfd362b29f9b7274fe48ea0a46bb82038ea74fa059595c8d23f770b3772d6bbf1e227bd7b8c2cbec98df8d3a8c1c2b321b091f4d90780d6dcfb95173681418a82575e7440a1d261683062b449d45662e1ee113cd1ab3b249693144fb7ff77a167fac6d92503e5ea113fae7ae620785a6d02c11b16ddc2207784af40206027c1f4682ed655980a51c841f37d5237ea065f47da75a0f77"}, {0xb0, 0x1ff, 0x0, "a62e9a375b43f87462df95f54ea3e782c8cef9e6a353161c5c67b9c6af95fa94feab9b944bdb0400328c2a1222723e70901230d0ebb14363f908760dd3385114fa119183fb8acabac2287b52c68a286e9c5bec6551f61c8da73d6dd3d3a1503f5f6dd807e15cd3684320ad6ff74efbea9e2f7fe7b8b2bd89c4e03b694d10d0d7244c207ee8de588a02e3aab135d262f24e4a8244626a748b065801"}, {0x60, 0x10b, 0x7ff, "9ea52376ae020f71c2ef54db22adf554c4d0a4875d76a22a4dc261471d0e76c4f663d892126a67a72ec5faec50692c8661318fbc2f0c670fb4e54176cff38c492e0b15d87ba2cf800a3e00"}, {0x68, 0x13f, 0xff, "56fe07f9ebcb2920c1355147bb583c4ee76de11565db2bbb893280a48d8377c58526ac5083526e648861e31b97f5eb5fafdacedb662b5e7036a1a6078e5dbe07d4101991564652a6f773a85bc2f2697ad1f5"}, {0xe0, 0x3e, 0x8, "aba1b84676cccef6bc57c4c1a0b14c291dc4a5ea4ee40bc7e856754750a1b0e5fcfe43f84bc1e045fbe7001b0824f4cf3cb12fee9b12783d762dbbc70226f7aa8ac1ff10cb80e54bb35fc7b08a83a2e1bcf95c3406446c57a0bfcdb952d1e2d4748eef4d96ac3e3ecf165f0a60054a79ed1cbaa3aa326d35a9da06fdd1898922057ebdb83c020c149bbdabe86227712f0275b9843dc2469ba17329f123c745684f481e54ac353e4b4b3ff7fbf3a0db2c6a4c63059f67393ee74b209ad8b4feb44da97aac8881dcfc133d33402f02ac"}, {0xf0, 0x13e, 0x79, "a8a76509fc4f6b05cb5fee133c4fdc119b9523afe86c354fed7c61ddf02019c9bc4070f7692103b12d3823b87042667a596d2aab98799a9eeac9e2ea5223118b7035abe128c95f393529e90cfa75818769c3df20750f2e13e3fc04433f045e0eee417609ca4d43b2e925dc32009fa90e8e8c4e6546e6ae6461c19c73f2f0cc9a832cd4e1402ad163156317d59ac16c3cb0a0cdcc73a40dd6064969c803b051c95771d5219e3a3d388b888bf8388c85b733a4eb7c715001011aa776971af3bff87c5a577eb73dffbc808861ebbf18222c00958a34bc2a6bcc4a01f90ff0d29c6e"}], 0x1548}, 0x1000}], 0x7, 0x800) 03:57:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x2, @multicast1}, {0x0, @link_local}, 0x48, {0x2, 0x0, @loopback}, 'veth1_to_hsr\x00'}) syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) [ 2992.543557] audit: type=1400 audit(1547611020.636:290300): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2992.548243] audit: type=1400 audit(1547611020.636:290301): avc: denied { create } for pid=3818 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:57:00 executing program 4: write(0xffffffffffffffff, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xffffffffffffff80) [ 2992.550406] audit: type=1400 audit(1547611020.636:290302): avc: denied { write } for pid=3818 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:57:00 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) fadvise64(r0, 0x0, 0x80, 0x5) 03:57:00 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x300, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='\f', 0x1}], 0x1, 0x0) 03:57:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000020000100000000000000000002000000000000040000000000000000"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev}, @IFA_ADDRESS={0x14, 0x8, @mcast1}]}, 0x352}}, 0x0) [ 2992.576468] audit: type=1400 audit(1547611020.666:290303): avc: denied { read } for pid=3818 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 2992.578462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3819 comm=syz-executor4 [ 2992.580097] audit: type=1400 audit(1547611020.666:290304): avc: denied { sys_admin } for pid=2115 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:00 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x4ad1, 0x867}) setsockopt$inet_opts(r0, 0x0, 0x4, 0xffffffffffffffff, 0xf) 03:57:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veti\xc4\xa2\x0e\x00\b\x00@\x00\xbd\xef\xff\t', 0x43732e5398416f1a}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000ab005f08000000000020000000000000534a83569cdbad0342fae54b8b3fb7acd287251e3919429456276d6302d6c352805bd06ed4ea66a7a642db25e2680f3f07c04a49f54e3669a2842a4b97a47249bdd1b0fca2be57c59354b6a2f54ed0e35ccc08b77b318057faf7ccfc615f732130ce0d859a078ab067ecc55e8a00cd41e65379551b4bd6a237c173f11d0961140ba93b553310d947172569bf", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) [ 2992.581639] audit: type=1400 audit(1547611020.666:290305): avc: denied { sys_admin } for pid=2115 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:01 executing program 4: r0 = socket(0x400000000000010, 0x80006, 0x0) write(r0, &(0x7f0000000040)="200000001a000b09ffed07000000d2a5dd7a9b7a21304b800071de0000000000", 0x20) [ 2992.610997] binder: undelivered TRANSACTION_ERROR: 29189 [ 2992.622262] audit: type=1400 audit(1547611020.706:290306): avc: denied { dac_override } for pid=3774 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2992.624781] audit: type=1400 audit(1547611020.706:290307): avc: denied { create } for pid=3818 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 2992.632401] audit: type=1400 audit(1547611020.716:290308): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2992.645669] binder: undelivered TRANSACTION_ERROR: 29189 [ 2992.805910] binder: undelivered TRANSACTION_ERROR: 29189 [ 2992.833509] nla_parse: 18 callbacks suppressed [ 2992.833515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2993.099794] binder: 3866:3867 ioctl c0306201 20000100 returned -14 [ 2993.153294] binder: 3866:3870 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2993.161830] binder: 3866:3870 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2993.172329] binder: 3866:3870 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2993.179376] binder: 3866:3870 transaction failed 29189/-22, size 0-0 line 3013 [ 2993.187854] binder: 3866:3870 ioctl c0306201 200002c0 returned -14 [ 2993.887642] binder: 3866:3870 ioctl c0306201 20000100 returned -14 03:57:02 executing program 5: getpgid(0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/stat\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x2000107c) 03:57:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffde6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff98, 0x0, &(0x7f0000000040)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) prctl$PR_SVE_SET_VL(0x32, 0x2798d) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x36, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) timer_delete(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634a40000000000000000000000000000000000000000000ab00504cacdedfff0000000000000000000000000000000000000000000000fd37908700000000000000000000000000000000"], 0xffffffffffffff92, 0x0, 0x0}) 03:57:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(0x0, 0x80) getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001a40)={{{@in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001b40)=0xe8) getgroups(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) ioctl(r1, 0x100000c912, &(0x7f00000001c0)="0ac62a5d13f5cf61e339e1a7b49ea070070000000000") syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:57:02 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x9, 0x9, 0x9}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x48001) 03:57:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e23, @multicast1}}) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000a7", @ANYRES32=0x0, @ANYBLOB="000000000000006585f7c80000"], 0x3}}, 0x0) 03:57:02 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r2 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) accept(r0, &(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'bond0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) getsockname$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) recvmmsg(r0, &(0x7f000000af80)=[{{&(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=""/104, 0x68}, 0x5}, {{&(0x7f0000001b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/239, 0xef}, {&(0x7f0000002cc0)=""/187, 0xbb}, {&(0x7f0000002d80)=""/67, 0x43}, {&(0x7f0000002e00)=""/96, 0x60}, {&(0x7f0000002e80)=""/125, 0x7d}, {&(0x7f0000002f00)=""/160, 0xa0}, {&(0x7f0000002fc0)=""/86, 0x56}], 0x8, &(0x7f00000030c0)=""/133, 0x85}, 0x80000000}, {{&(0x7f0000003180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003200)=""/183, 0xb7}, {&(0x7f00000032c0)=""/89, 0x59}, {&(0x7f0000003340)=""/254, 0xfe}, {&(0x7f0000003440)=""/13, 0xd}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/138, 0x8a}], 0x6, &(0x7f00000045c0)=""/202, 0xca}, 0x2}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000046c0)=""/115, 0x73}, {&(0x7f0000004740)=""/83, 0x53}, {&(0x7f00000047c0)=""/116, 0x74}, {&(0x7f0000004840)=""/77, 0x4d}, {&(0x7f00000048c0)=""/112, 0x70}, {&(0x7f0000004940)=""/6, 0x6}, {&(0x7f0000004980)=""/38, 0x26}, {&(0x7f00000049c0)=""/71, 0x47}, {&(0x7f0000004a40)=""/33, 0x21}], 0x9, &(0x7f0000004b40)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005b40)=@hci, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005bc0)=""/101, 0x65}], 0x1, &(0x7f0000005c80)=""/160, 0xa0}, 0x3aa0bf61}, {{&(0x7f0000005d40)=@ipx, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005dc0)=""/148, 0x94}], 0x1, &(0x7f0000005ec0)=""/241, 0xf1}, 0x7f8000000000000}, {{0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000005fc0)=""/105, 0x69}, {&(0x7f0000006040)=""/149, 0x95}, {&(0x7f0000006100)=""/139, 0x8b}, {&(0x7f00000061c0)=""/166, 0xa6}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x5, &(0x7f0000007300)=""/41, 0x29}, 0x9}, {{&(0x7f0000007340)=@in6, 0x80, &(0x7f0000009940)=[{&(0x7f00000073c0)=""/208, 0xd0}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/197, 0xc5}, {&(0x7f00000085c0)=""/4096, 0x1000}, {&(0x7f00000095c0)=""/117, 0x75}, {&(0x7f0000009640)=""/153, 0x99}, {&(0x7f0000009700)=""/13, 0xd}, {&(0x7f0000009740)=""/115, 0x73}, {&(0x7f00000097c0)=""/211, 0xd3}, {&(0x7f00000098c0)=""/102, 0x66}], 0xa}, 0x2}, {{0x0, 0x0, &(0x7f000000ae00)=[{&(0x7f0000009a00)=""/189, 0xbd}, {&(0x7f0000009ac0)=""/174, 0xae}, {&(0x7f0000009b80)=""/100, 0x64}, {&(0x7f0000009c00)=""/163, 0xa3}, {&(0x7f0000009cc0)=""/4096, 0x1000}, {&(0x7f000000acc0)=""/176, 0xb0}, {&(0x7f000000ad80)=""/105, 0x69}], 0x7, &(0x7f000000ae80)=""/199, 0xc7}, 0x101}], 0x9, 0x2040, &(0x7f000000b1c0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000b200)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000b240)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f000000b340)=0xe8) r16 = accept4$packet(r0, &(0x7f000000b440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000b480)=0x14, 0x80000) sendmsg$key(r16, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x16, 0x8572, 0x9, 0x2a, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x7, 0x0, 0x6e6bb0, 0x4, {0x6, 0xff, 0x100000001, 0x2, 0x0, 0xffffffffffffff80, 0x0, @in6=@dev={0xfe, 0x80, [], 0x28}, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x455}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_lifetime={0x4, 0x6, 0x0, 0x6, 0x6}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x7}}, @sadb_key={0xf, 0x8, 0x348, 0x0, "b9c3a1bf5c570735d6d38f4c829cb99733996b8db6f39e52e156b1a4182c8857ce9bc9696782af429a52cf0510b8e0808fc36c63bd066644d502b2362edd1b4e76be73addedb7e3f02bbeca20478714b08a1e45b235ef12caa04eebc68c177f0eba2de214d97bc9238"}, @sadb_x_nat_t_type={0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}]}, 0x150}}, 0x20004800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000d800)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000d840)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f000000d940)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f000000d980)={@loopback, @broadcast, 0x0}, &(0x7f000000d9c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000da00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f000000db00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000db80)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f000000dc80)=0xe8) accept4$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x7ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000dd80)={'syzkaller0\x00', 0x0}) fcntl$notify(r2, 0x402, 0x8000001e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000ddc0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f000000dec0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000df00)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f000000e000)=0xe8) getpeername(r0, &(0x7f000000fa80)=@hci={0x1f, 0x0}, &(0x7f000000fb00)=0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000010440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000010400)={&(0x7f000000fb40)={0x8b0, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9a}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5edf97e5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xd0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r17}, {0x12c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x70e6}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x693000000000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff9a9c}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r20}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r22}}}]}}, {{0x8, 0x1, r23}, {0x2b8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x7, 0x5, 0xfff, 0x80000001}, {0x100, 0x6, 0x4, 0x5}, {0x0, 0xffff, 0x0, 0x7}, {0x6, 0x100000000, 0x5, 0x8}, {0x8, 0x100000000, 0x80, 0x1}, {0x10001, 0x100, 0x0, 0xffffffff}, {0x4f7, 0x8, 0xa7f, 0x81}, {0x1000, 0x7, 0x72ffc87, 0x9}, {0xff, 0x1588400000, 0x73a60, 0xf5}, {0x10001, 0x2, 0x9, 0x74}]}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x1, 0x3e, 0xabc, 0x9}, {0x3, 0x44b9, 0x7, 0x7}, {0xfffffffffffff000, 0x4, 0x2, 0x8}, {0x10001, 0x8, 0x1, 0x8}, {0x7, 0x92, 0x4, 0x5}, {0xa6, 0xfffffffffffffffd, 0xfffffffffffffff7, 0x5}, {0x5, 0x10000, 0x5, 0x8}, {0x4, 0x4, 0x400, 0x95a0}, {0xffffffffffffff1d, 0x4, 0x3, 0x800}, {0x5, 0x48, 0x3, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r25}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x4}, 0x4) [ 2993.934823] binder: 3866:3875 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2993.942395] binder: 3866:3875 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2993.951361] binder: 3866:3875 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2993.958472] binder: 3866:3870 transaction failed 29189/-22, size 0-0 line 3013 [ 2993.965975] binder: 3866:3870 ioctl c0306201 200002c0 returned -14 [ 2994.013039] binder: undelivered TRANSACTION_ERROR: 29189 [ 2994.020969] binder: undelivered TRANSACTION_ERROR: 29189 03:57:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = openat$zero(0xffffffffffffff9c, 0xffffffffffffffff, 0x183400, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x8001, 0x6, 0xfffffffffffffffb, 0x6, 0x0, 0x8000, 0x146a1, 0xc, 0xfffffffffffffff9, 0x2, 0x1, 0x0, 0x7, 0x1000, 0xfffffffffffffeff, 0x5, 0x2e2055b6, 0xff, 0x0, 0xffffffffffff0001, 0x80, 0x8, 0x1, 0x1, 0x10000, 0x7f, 0x5, 0x5, 0x8, 0x6, 0x6, 0x100, 0x3, 0x4, 0x80000000000000, 0x80, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x2000, 0x1, 0x4, 0x7, 0x101, 0x4, 0x351}, 0xffffffffffffffff, 0x5, r4, 0x9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2994.032179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3886 comm=syz-executor0 [ 2994.068467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3890 comm=syz-executor0 [ 2994.166736] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:57:02 executing program 0: write(0xffffffffffffffff, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:57:02 executing program 4: r0 = socket(0x400000000000010, 0x2000000022, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2994.184469] Dead loop on virtual device ip6_vti0, fix it urgently! 03:57:02 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) 03:57:02 executing program 4: r0 = socket(0x40080001000000c, 0x2000000002, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2994.296507] Dead loop on virtual device ip6_vti0, fix it urgently! 03:57:02 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) tee(r1, r0, 0xc525, 0x0) r2 = dup(r1) socket(0x0, 0xe, 0x0) ioctl$TIOCEXCL(r2, 0x540c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='ppp0vboxnet1.GPL@:bdevsecurity\x00', r2}, 0x119) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x7) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/88, &(0x7f00000002c0)=0x58) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000640)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r1, r3, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000000200)=""/169, 0xa9}}], 0x1, 0x2000, &(0x7f0000003500)={0x0, 0x989680}) [ 2994.357535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:57:02 executing program 5: r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x408240, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$packet(r3, &(0x7f0000000500)=""/97, 0x3b, 0x40000102, 0x0, 0xca) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000c) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip6_flowlabel\x00') pipe(&(0x7f0000000380)) preadv(r0, &(0x7f0000000480), 0x0, 0x10400006) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="c3e0fb7b0af6707adef99f202396deb8dacd1ffd10475ca7a84b3364bf2dd3db614d57d34dd09b800b1038f2c5dfdcacbb92c56d532b", 0x36, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r2, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\x00\xfe>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000440)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 03:57:02 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0xc40, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000200)) r1 = socket(0x400000000000010, 0x2000000002, 0x0) write(r1, &(0x7f0000000000)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000240)=0x2) getgroups(0x7, &(0x7f0000000180)=[0xee01, 0xee01, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0]) setregid(r2, r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x4, 0x7, 0x1, 0xfffffffffffffffe}) 03:57:03 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x440000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000001c0)={0x7, 0xde}) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)=0x0) ioctl$TIOCNOTTY(r0, 0x5422) prctl$PR_SET_PTRACER(0x59616d61, r2) 03:57:03 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x3}}, 0x18) 03:57:03 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x10000, 0x5}, {0x200, 0x1f}]}, 0x14, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x90, "0913b313718f9d253278903348967dc6cd10f29ba49cd2d268ee9a4cb490075978c52f37a5fa267667e41650f86f592ba25bf72ce45984cc93432e5a291872864dfba2f45d171d1963cb9b7d7ad8e754c767b6360fc63f67b76e3d40bd79b4a57162f82cec7b8ef396f39ec9e0bb26de268572c924d0650dbb2485d150e124baf1c70760a9807688a4c82e4bb0de9582"}, &(0x7f0000000140)=0xb4) 03:57:03 executing program 1: r0 = socket(0x40080001000000c, 0x2000000002, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:03 executing program 5: r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x408240, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$packet(r3, &(0x7f0000000500)=""/97, 0x3b, 0x40000102, 0x0, 0xca) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000c) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip6_flowlabel\x00') pipe(&(0x7f0000000380)) preadv(r0, &(0x7f0000000480), 0x0, 0x10400006) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="c3e0fb7b0af6707adef99f202396deb8dacd1ffd10475ca7a84b3364bf2dd3db614d57d34dd09b800b1038f2c5dfdcacbb92c56d532b", 0x36, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r2, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\x00\xfe>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000440)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 03:57:03 executing program 0: pipe(&(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:03 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x20, @mcast2, 0x80000000}, 0x1c) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r2, 0x700, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x10}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x308, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'caif0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) [ 2994.982621] binder: 3959:3960 ioctl c0306201 20000100 returned -14 [ 2995.042667] binder: 3959:3970 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2995.072068] binder: 3959:3970 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2995.095523] binder: 3959:3976 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2995.123650] binder: 3959:3970 transaction failed 29189/-22, size 0-0 line 3013 [ 2995.133008] binder: 3959:3970 ioctl c0306201 200002c0 returned -14 03:57:03 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x42000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2995.177878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3977 comm=syz-executor4 03:57:03 executing program 2: r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x408240, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom$packet(r3, &(0x7f0000000500)=""/97, 0x3b, 0x40000102, 0x0, 0xca) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000c) fchdir(0xffffffffffffffff) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/exec\x00', 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip6_flowlabel\x00') pipe(&(0x7f0000000380)) preadv(r0, &(0x7f0000000480), 0x0, 0x10400006) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="c3e0fb7b0af6707adef99f202396deb8dacd1ffd10475ca7a84b3364bf2dd3db614d57d34dd09b800b1038f2c5dfdcacbb92c56d532b", 0x36, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000380)) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x2}, 0x28, 0x2) syz_open_procfs(r2, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\x00\xfe>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000, 0x400}, 0x2c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000440)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 2995.284401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=3984 comm=syz-executor4 03:57:03 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) r1 = socket(0x400000000000010, 0x2000000002, 0x0) writev(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="cee520b6b36d932fe5f46dc6f35ead86f070d4cb7ce3f2e3b032096c3fb0c43e3a3817865157adee72c8e86aadf39daeddd01a3c5d567837cbdfd7985fb924debe8dc0fe2834aaf4aa060d052dbd7900e71e9b8a0d35797a3b213c3ff1ddf88c5ece45d54c8185706f0d5e4d63727aeba752c96f03725142b54b87", 0x7b}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="e622eb1bde33c165271f79f5fa5220b289ba2d891e4c54f0fc", 0x19}, {&(0x7f0000001280)="5bf9f76fc0d74643e7e6a882a99511f8a91d8300a73984b0097c6d397572ee1af4dc48617678081c5a756cde49091a611d743cb6c9c947f6fb660a57899ecf33709d30ff634c70aa94a2e8afdb8d4b4b0a9304a5f989f7aac8bd18303ea66e0eab8dc3e68090df0072da823cbc5b1695e6cdd75870f2b0bece50081b9a989864ac5077543d32a1693625", 0x8a}, {&(0x7f0000001340)="625904cbbc40d7b7f7fee1c89477d95ead24f48feb6ad41cfa0f1786b237bb3a8c1f06cfdf11f64f4281a5b8a8d324bc59d637154ea0ce09584f649d665501f0e017d1581eef35ed99e3b3fa96c29d2897df801d35c36c88f95e3d05be93bd819e79a769a2", 0x65}], 0x5) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) write(r1, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 03:57:03 executing program 1: r0 = socket(0x40080001000000c, 0x2000000002, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:03 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000001100)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @multicast2, @empty}, &(0x7f0000001180)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000011c0)={r2, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0xfffffffffffffff9}, 0xc) [ 2995.776152] binder: 3959:3970 ioctl c0306201 20000100 returned -14 [ 2995.821960] binder: 3959:4024 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2995.835848] binder: 3959:4024 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2995.843468] binder: 3959:3970 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2995.861918] binder: 3959:4024 transaction failed 29189/-22, size 0-0 line 3013 03:57:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x410, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:03 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:03 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r2, 0x111, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x492}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48001}, 0xd5) 03:57:03 executing program 1: r0 = socket(0x40080001000000c, 0x2000000002, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:03 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x0, 0x0, 0x3, 0xc4}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4003, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x9) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:57:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast1, @initdev, @ipv4, 0x0, 0x0, 0x0, 0x800000000111}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x6) ptrace$cont(0x21, r2, 0x0, 0x0) [ 2995.869333] binder: 3959:4024 ioctl c0306201 200002c0 returned -14 03:57:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001400)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000017c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001780)='-{#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001800)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001900)=0xe8) r7 = getegid() r8 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001940)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000001a40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001b00)=0x0) r12 = geteuid() r13 = getegid() sendmsg$netlink(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)={0x137c, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x8c, @u32=0x9}, @generic="a7d398043df5b692c08dec434363c356de6e543dc862f205b0817af4ba23a3cecdec589658f16f2d2cfbebf2bac319cf6d70f81196fed880ae73ad93027eb29107e344ef5bdccc043020cce46dfae3fd78d73dde2e713349bd90120f99507b07977f43444b94dbeffdb818fd85f3a4fa0ee42e9d1e140f3b926a9f32a68b0d1ad348ce52fa8f0c8ee68b84e47050547f154da411fee04bcc3c6e7933cfadf2ace128f327367387b00ad3b0b34beb8cab27ace103468e89aa677adcac747a7a470f6245a5285b1290218ac4483a154491585c6c", @generic="ea7b84a928a8b542185503e482f6ebab0344c1787abf5f3a27cd00817ea5326633cab585cd06398661f228f083ae61357af8e50566f7fdeed4f3170a8febc9b54c7e97575c112fb47a9c8503926c25b68a593aba28512d72ae0517261510ad8aa4ffd6064464122818e22424094edd7e162e20596c7f0063788a87f46e901e06fb3ff9962c397a4903563b8a71587266fb0f53b3625e383903689be8329ac39d127eecdf742f66c4172e733d2e70687523c17f16229f368db0114e107e95b50c3e9e1cf6a8420c545201", @nested={0x10f8, 0x2a, [@generic="be084dc654b1dbb0cd2823f5bb00442b92448aadcfbe8a99dd14ae87bbaed68354c0adde063d35200675b3e5def22644534b4e37563839190a698f58ceb0bb3243f6656b8d90b6761fdbbebd72a8198e12c0c1a21cbbe71c44c5d30a14b3ed6c760c00e9c545a7db53400932d08c31e62e88fd41f581d9a875e4ab6c7a8025f4113197928532fe76d36157343b7df52c7d49232dbc15971efd9cb5bc966a9c66a98b605c84a6bb151f92c8739f2997f75634371f5e20f8ab86d498bccce5d96f9d3e9fe2c590c83abb656bab90cda71d81dc08d055f47e8a8b33ca3f7ad8d12ef37f94849e6c4fc56f40f5d2342ca9241de81fb7", @generic, @generic="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"]}, @generic="d8b0a44e4004ce56bc7db9d65259d83eac018bc0d9efbcf582aac66997bfb58052b35f9937212eb5c551428077562611da5b13d009fb6da329cd2e858e3da088c6ed26355a28cf18c3a1530e33f8922440ab06b996f3caabc833699d14a784c3d9bf7309b71f49472c7ffab8e966509040cfcd8f0b0b8957789cae131ea267494c3b87655c7b568639109c820468b72baa5475b03f02dce8656b6ae2cde49e4f25b05c9e9fe26de061d983ee11cad60dd3bb80edbb6c13b1a15031117729dc74c03855de792d28", @typed={0x8, 0x48, @ipv4=@empty}]}, 0x137c}, {&(0x7f0000001440)={0x2d4, 0x3f, 0x201, 0x70bd25, 0x25dfdbfe, "", [@nested={0x2b0, 0x6f, [@generic="6aaadcd2750701f11e9c44d87badf6fbe6a6d3dd09a8345957cb6b2ce1bc7cb518890ee1f91563f38adb1b967e93050c6b6a01e6c1c89f6c937ce3445dfcc81f7d508105183b8934bf1e5f5b853bdf4f224dbb644525fc89d5a739e52d554f14dad8abbe1d0dd58e2d6aa1577378eb8309bf66f8fc4ef159ffb751b0939259c779ca18ec4b4869dca4ed8ae46e8e1e56cbfdfd967152b3f026ad9bd84794c87edca4c66fdae46f6e4371e697ac7e2608b59b3e979a83b63a530477f6881b5e5bc5f38ae37a750e6c01bcb265b970042e13d88d76a2b8e47e83556381d6453edda3603c9f5b9346", @generic="a5c3586ddebeb1", @generic="5900c9ed908f23274388e01687eb27270163040d3d4ab2a0f295e9a9fb96af0d526b848862027801", @typed={0x20, 0x7, @str='usermd5sumlowlan1vboxnet1}\x00'}, @typed={0x8, 0x9, @pid=r4}, @typed={0x10, 0x23, @str='loself\xf5@\\\x00'}, @generic="8b3e0594fc16659884aed9035839f3d4381628f83d3669599e1a2b03b7ab4137c807baa333228c9a22e7b9eb93a9d27218220e17e443f13258bf406a779179bcced1dab8092ae35d5c63a48f37a1ad0efb3f314200c728a4f6b7e4cae3b94dbc605dd8ab9e2b928396ef04cc8708b0cfd10821ba50699a3de9f2f83e1d", @generic="68e98d71e83218117ca2377bab2609e973a8f7bc046f0dba3f0bc7e02ac6137d34f11995b3d208d9e3931415a65e6f5b29c9ce0aaae25174283a7a1f086431018c6a2ab458e88a05f776e245d886157ea43ca094361f4ffd2c068c1725b91fbb20f1585fb0e293290723d23a99e5cffbcbbaae266bce44496dc4300c10bc457a96d762f1e95ed4a4a5a49d6dd28471bb5f48bbbbac862547919a11cd8d33558953cc1c3464a8384f1a66ba9797348f8695c5cfda2084a492b35d71eeabb1092df753015e3932fe56777dbbc9401eca5fe92421ef93e1d5a2", @typed={0x8, 0x53, @fd=r0}]}, @typed={0x14, 0x92, @ipv6=@empty}]}, 0x2d4}], 0x2, &(0x7f0000001d80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="84720200903971cba2cc980568000000000000010039193e8541ef75ed4e3f80ce3ee73ec139bb6a4e397376a68c16f7511ea013c2b0c22332d593c919db2bce505df6ad1850a2a7a7b3a3136e7d82afe1e67b7b93b6b84e88369b06f757c39466912cfb54bc15fb31c285e1e825f1db", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4004000}, 0x4000004) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001cc0)={0xb1c, 0x5d, 0x302b, 0x8, 0x1000}, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000abaff9)={0x3, 0xfff}, 0x30) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001d40)={0x4, &(0x7f0000001d00)=[{0x80000001, 0x0, 0xfffffffffffffc01, 0x9}, {0x4, 0xfffffffffffffff9, 0x40, 0x5ae}, {0x1, 0x5, 0x80000000, 0x6}, {0xfff, 0x2, 0x800, 0x8}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x6, 0x4) 03:57:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = gettid() clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2000, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040)) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r0) fcntl$notify(r1, 0x402, 0x10) fcntl$setpipe(r1, 0x407, 0x1f) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="23e90ded1ebc449af0e738209dd498549f0a90f9080000000a45a04c696e7578"], 0xc) [ 2995.905549] binder: undelivered TRANSACTION_ERROR: 29189 [ 2995.920364] binder: 4034:4037 ioctl c0306201 20000100 returned -14 [ 2995.935944] binder: undelivered TRANSACTION_ERROR: 29189 03:57:04 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x11b) r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2995.991393] binder: 4034:4049 Acquire 1 refcount change on invalid ref 0 ret -22 03:57:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/236, 0xec}], 0x1, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = epoll_create(0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fchdir(r6) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) socket$inet(0x2, 0x0, 0x80000007fff) sendto$inet(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00005c8000), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001240)) fsetxattr$trusted_overlay_nlink(r5, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(r3, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\x00\xfe>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'd(\x00', 0xfffffffffffffffe, 0x100000000}, 0x2c) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") unshare(0x40000000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 2996.025053] SELinux: policydb magic number 0xed0de923 does not match expected magic number 0xf97cff8c 03:57:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="840000002e0101000f003b7a000000000000000000000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 03:57:04 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0x0, 0x9, 0x6, 0x10000}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x3, 0xedeb, 0x32, &(0x7f0000000040)="e649ca1e06c8f1fc8cf09d86806563f96ec50a581624662b16c1d6f50009bf8655da5497f8da05233a05adee74478035705c"}) [ 2996.041374] SELinux: policydb magic number 0xed0de923 does not match expected magic number 0xf97cff8c [ 2996.120616] binder: 4034:4070 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2996.120719] binder: 4034:4070 transaction failed 29189/-22, size 0-0 line 3013 [ 2996.120732] binder: 4034:4070 ioctl c0306201 200002c0 returned -14 [ 2996.218751] binder: 4034:4049 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2996.712251] binder: 4034:4049 ioctl c0306201 20000100 returned -14 [ 2996.757534] binder: 4034:4070 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2996.766276] binder: 4034:4070 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r3 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) r4 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:04 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 03:57:04 executing program 4: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7d, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = socket(0x400000000000010, 0x2, 0x1) recvmsg(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000380)=""/223, 0xdf}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2}) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) finit_module(r0, &(0x7f0000000000)='&\xec$:\x00', 0x1) 03:57:04 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:04 executing program 0: write(0xffffffffffffffff, &(0x7f0000000080)="200000001a000b09ffed0000000071de000000000000000000a7db0005000000", 0x20) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getresuid(0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000380)=[0x0, 0x0, 0xee01, 0xee00, 0x0]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000009c0)={0xffff, 0x5}) r7 = getuid() r8 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r11 = geteuid() getgroups(0x8, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xee00, 0x0, 0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)={0x3d0, 0x0, 0x5, [{{0x0, 0x3, 0x6, 0x1, 0x5, 0x5, {0x4, 0x7, 0x10000, 0x3, 0x3, 0xfffffffffffffff9, 0x8c00, 0x7, 0x5, 0x7fff, 0x100000000, r1, r2, 0x2, 0x418}}, {0x6, 0x4, 0x14, 0x2, 'GPL&wlan0bdev[vmnet0'}}, {{0x5, 0x3, 0x9, 0xc9e, 0x6d52, 0x2, {0x2, 0x8001, 0x5c0, 0x3384, 0x80000001, 0x4, 0xb0b, 0x7ff, 0x9, 0x4, 0x8, r3, r4, 0x8, 0x3}}, {0x1, 0xb6, 0x5, 0xffff, 'eth0:'}}, {{0x3, 0x3, 0x400, 0x6, 0x4, 0x7, {0x0, 0x4b21, 0x13f, 0x7, 0x1, 0x1f, 0x8000000000000, 0x80000000, 0xdd8, 0x9, 0x9, r5, r6, 0x2, 0x1ca74247}}, {0x1, 0x8, 0x2, 0x1, 'lo'}}, {{0x2, 0x2, 0x0, 0x0, 0x7f, 0x8, {0x6, 0x9a3, 0x3, 0x401, 0x80, 0x3f, 0x3f, 0x2aa7, 0x5, 0x80000000, 0x1, r7, r8, 0x10001, 0x6}}, {0x4, 0xffffffffffff0000, 0x0, 0xffffffffffffffe1}}, {{0x1, 0x3, 0x5, 0xa471, 0x3ff, 0x9, {0x5, 0x2, 0x7, 0xffffffff7fffffff, 0x4, 0x0, 0x4, 0x100, 0x8000000000, 0x1, 0x6, r9, r10, 0x9, 0x5540}}, {0x5, 0x7, 0x0, 0x8}}, {{0x6, 0x2, 0x9, 0x9, 0x9, 0x0, {0x0, 0x6, 0x6, 0x0, 0x6, 0xcd13, 0x8, 0x0, 0x8, 0x6, 0x3, r11, r12, 0x8, 0x3}}, {0x5, 0x40, 0x8, 0x6, '[-wlan1['}}]}, 0x3d0) [ 2996.798066] binder: 4034:4070 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) shutdown(r0, 0x2) socket$inet6(0xa, 0x2, 0xfffffffffffff709) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000000)={0x5}, 0x8) [ 2996.846355] binder: 4101:4103 ioctl c0306201 20000100 returned -14 03:57:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20000, 0x80) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req={0x65ccc78e, 0x7, 0x6, 0xc17}, 0x10) r1 = socket(0x40000000000000c, 0x2000000000, 0x0) write(r1, &(0x7f0000000000)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0xe9b) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x3, "140199d9298eb4e5"}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x3, 0x44, 0x4, 0x63b94d26, 0x1f, 0x8, 0x0, 0x1, 0x2, 0xb, 0x6, 0x8, 0x0, 0x9, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffff7, 0x2, 0x6f31, 0xff, 0x4, 0x10001, 0x19f, 0x6, 0x1000000000000000, 0x8, 0xf1, 0x0, 0x3f, 0x1, 0x5, 0x100000000, 0xf4e8, 0x3, 0x8, 0x400, 0x0, 0x5e, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0xc00, 0x0, 0x8000, 0xf, 0x2, 0xffffffffffffff52, 0x6}) rt_sigprocmask(0x2, &(0x7f0000000340)={0x3}, 0x0, 0x8) write$P9_RFSYNC(r0, &(0x7f0000000400)={0x7, 0x33, 0x1}, 0x7) rt_sigprocmask(0x2, &(0x7f00000001c0)={0x20}, &(0x7f0000000200), 0x8) clock_nanosleep(0x7, 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)) write$P9_RAUTH(r2, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x0, 0x3}}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') [ 2996.896547] binder: undelivered TRANSACTION_ERROR: 29189 [ 2996.931051] binder: 4101:4114 Acquire 1 refcount change on invalid ref 0 ret -22 03:57:05 executing program 0: r0 = socket(0x8, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x1d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) sendto$inet(r0, &(0x7f00000000c0)="b56827262fb6d7e2be78672e1d10bbaa5a7fac76928c7fc28fc70727ee52617c806fe181951503d22680271d6ac6dc1fbb7d1a2bd17da3cc0054c3470775030ab35e3a975a35ab9e6278a0b58aba92443d14e4bc5b09ed652015d507db3d1e06c650480619b6dec36b32411e3d1c5146e3e5666bd65978e9b3659687bbf6d1ee", 0x80, 0x20000000, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) [ 2996.963889] binder: 4101:4114 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2996.976306] binder: 4101:4124 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2997.002777] binder: 4101:4114 transaction failed 29189/-22, size 0-0 line 3013 [ 2997.010735] binder: 4101:4114 ioctl c0306201 200002c0 returned -14 03:57:05 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 2997.636865] audit_printk_skb: 1334 callbacks suppressed [ 2997.636876] audit: type=1400 audit(1547611025.726:290754): avc: denied { dac_override } for pid=4101 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.652569] binder: 4101:4124 ioctl c0306201 20000100 returned -14 [ 2997.654926] binder: 4101:4146 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2997.654936] binder: 4101:4146 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2997.654980] binder: 4101:4147 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2997.686028] binder: undelivered TRANSACTION_ERROR: 29189 [ 2997.704494] audit: type=1400 audit(1547611025.796:290755): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.730512] audit: type=1400 audit(1547611025.816:290756): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.756435] audit: type=1400 audit(1547611025.846:290757): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.782188] audit: type=1400 audit(1547611025.866:290758): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.811438] audit: type=1400 audit(1547611025.896:290759): avc: denied { net_admin } for pid=10487 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.812181] audit: type=1400 audit(1547611025.896:290760): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.813161] audit: type=1400 audit(1547611025.896:290761): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2997.814617] audit: type=1400 audit(1547611025.896:290762): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:06 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:06 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1c47, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000180)="87560338dbe8c6696d2c937c041ef7de38d61b87b45742ed15edbbe5758037e012d469e579ead9ab0a926de6f7ce1cb2f4ba47a655284b845b57d3f8120909346310b313e4264b66dff82de09fb33680600cae1529eee478e9dc3977badc8218f5a009dd3d95462817213c3860ce576aa2cc84c21c3e273bc6f3d95886b749d7856fdc61306084964895ed5e4ea3aecf764fb1a18dde448d9288a402217f9ff22238f5625908ceeeacc987086b00bf217300") write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000300)=""/249) 03:57:06 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)='TRUE', 0xfffffffffffffe93, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f00000006c0), 0xfffffea1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 03:57:06 executing program 2: inotify_init1(0x80004) clone(0x50040002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x65}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_SET_FPEMU(0xa, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:57:06 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') [ 2997.890073] audit: type=1400 audit(1547611025.976:290763): avc: denied { sys_admin } for pid=2113 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:06 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000040)="3fc98dcd2055fbcc7a23014ba00071de791958156550a8c90351582a32f9cf6e5a3e5405709a12d54ef94b8385f9", 0xffffffffffffff6b) 03:57:06 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f00000001c0)="0000001a96ef647501000086", 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc4080) clock_getres(0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) [ 2998.008138] binder: 4155:4157 ioctl c0306201 20000100 returned -14 [ 2998.076138] binder: 4155:4167 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2998.083695] binder: 4155:4167 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:06 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f00000001c0)="0000001a96ef647501000086", 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc4080) clock_getres(0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) 03:57:06 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f00000003c0)=0xe8) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0}, &(0x7f0000000880)=0x14) getsockname$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14) accept$packet(r0, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000021c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000002300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002340)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000002440)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002480)={@ipv4={[], [], @remote}, 0x0}, &(0x7f00000024c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002500)={0x0, @multicast1, @multicast1}, &(0x7f0000002540)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002b00)={&(0x7f0000000000), 0xc, &(0x7f0000002ac0)={&(0x7f0000002580)={0x53c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x16c, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xa44}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x1d4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x51}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xdbb}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x255cbf35, 0xffffffffffffff7f, 0x7, 0x1}, {0x101, 0x86d, 0x4, 0x7fff}, {0x4b8, 0x7f, 0x1, 0x7fff}, {0x8, 0x0, 0x3f, 0x3}, {0x80000001, 0x82aa, 0x2, 0x8000}, {0x100000001, 0x4fa, 0x12c000, 0x732}, {0x5, 0x8, 0x4, 0x401}]}}}]}}, {{0x8, 0x1, r11}, {0x104, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x90000000000000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) [ 2998.132631] binder: 4155:4175 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2998.168348] binder: 4155:4167 transaction failed 29189/-22, size 0-0 line 3013 03:57:06 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x1) pipe(&(0x7f0000000000)) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:06 executing program 2: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) [ 2998.182999] binder: 4155:4167 ioctl c0306201 200002c0 returned -14 [ 2998.370220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4197 comm=syz-executor4 [ 2998.404947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4199 comm=syz-executor4 03:57:06 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="68aa0ae4a9186f2df62343572446432ebb329612fc755f0d53fabf501a499b33af6e518ada6e7102b6d50c08f4ef9039b6e541da604bc483132680ca90caefa8130fd9590b795e3705117a81b0a0c57c3f45909ebef626aa6632adf529d70dad2c3b62a777eebc4afa3ed60049d4c7329fb152b0ed774b3e139eb7d5de69bc5570b130ca49d5e0cf52053eb02495829336279399f9fef82cc60f", 0x9a, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) keyctl$search(0xa, r1, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, r2) clock_nanosleep(0x7, 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0) [ 2998.807902] binder: 4155:4167 ioctl c0306201 20000100 returned -14 03:57:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=ANY=[@ANYBLOB="2b0ef6a5"], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:06 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) 03:57:06 executing program 0: r0 = socket(0x400000000000010, 0x2000000002, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) write(r0, &(0x7f00000000c0)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7ae5d74a4eefd323304b800071de", 0x26) 03:57:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigqueueinfo(r1, 0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x100000000000000, 0x3}) 03:57:06 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:06 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)='TRUE', 0xfffffffffffffe93, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f00000006c0), 0xfffffea1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 2998.853029] binder: 4155:4221 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2998.860716] binder: 4155:4221 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2998.867708] binder: 4155:4221 transaction failed 29189/-22, size 0-0 line 3013 [ 2998.868273] binder: 4155:4167 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2998.881824] binder: 4155:4221 ioctl c0306201 200002c0 returned -14 03:57:07 executing program 4: r0 = socket(0x400000000000011, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) poll(&(0x7f0000000000)=[{r0, 0x8000}, {r0, 0x8}], 0x2, 0x6) 03:57:07 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x840, 0x0) write$smack_current(r0, &(0x7f0000000180)=':-cgrouplo&#\x00', 0xd) r1 = socket(0x400000000000010, 0x2000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$UI_DEV_CREATE(r2, 0x5501) setsockopt(r2, 0x0, 0x8000, &(0x7f00000000c0)="7681bcddb27c1ee286711eb94dbd2de5e8b6970532c3ac90fd83d78b5626b2b1b2f9c359b9ac0650ae68c331bad76b21a0dd9c8512d70e0f1344d7e426f64398a679d3490f113a5ba411558e18d6677c5e7935834292850f71c855e5af2306254488578f3b6e2b5466c67dc1be8b20a9304e0471d00d55176b09486ef1539fb96544da9de4f27fef0730896a86fe93bc4d9e2114f9c5d80781a846e057bdbe22815f0093e73f9becb73d77e76e9911", 0xaf) linkat(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1000) syncfs(r1) write(r1, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2998.935923] binder: undelivered TRANSACTION_ERROR: 29189 [ 2998.956331] binder: undelivered TRANSACTION_ERROR: 29189 [ 2998.968158] binder: 4234:4236 unknown command -1510601173 [ 2999.005536] binder: 4234:4236 ioctl c0306201 20000100 returned -22 [ 2999.065107] binder: 4234:4245 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2999.106984] binder: 4234:4245 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2999.125398] binder: 4234:4248 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2999.158424] binder: 4234:4245 transaction failed 29189/-22, size 0-0 line 3013 [ 2999.173737] binder: 4234:4245 ioctl c0306201 200002c0 returned -14 03:57:07 executing program 4: r0 = socket(0x400000000000010, 0x2000004002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:07 executing program 4: r0 = socket(0x1b, 0x2000000002, 0x401) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000040)=0x1c) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) 03:57:07 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x2, 0x10000, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) unlink(&(0x7f0000000100)='./file1\x00') 03:57:07 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) r1 = dup3(r0, r0, 0x80000) write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0x148, 0xfffffffffffffffe, 0x3, [{0x3, 0x3, 0x7, 0x0, 'GPL[]*#'}, {0x3, 0xe98, 0xe, 0x16, 'systemvboxnet0'}, {0x4, 0x6, 0x3, 0x9, '[lo'}, {0x1, 0xbb, 0xb, 0x0, 'cpusetwlan1'}, {0x1, 0x7, 0x0, 0x71e8}, {0x6, 0x2, 0x14, 0xfff, 'a\\self)&ppp1vboxnet1'}, {0x1, 0x1, 0x23, 0xffff, 'selinuxself\xee\\\\^cpusetloprockeyring\''}, {0x4, 0x7, 0x8, 0x720e, '-*\xcf/em1}'}]}, 0x148) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fusectl\x00', 0x20, &(0x7f0000000280)) [ 2999.753388] binder: 4234:4245 unknown command -1510601173 [ 2999.761552] binder: 4234:4245 ioctl c0306201 20000100 returned -22 [ 2999.811939] binder: 4234:4364 Acquire 1 refcount change on invalid ref 0 ret -22 [ 2999.846014] binder: 4234:4245 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2999.846646] binder: 4234:4368 transaction failed 29189/-22, size 0-0 line 3013 [ 2999.846662] binder: 4234:4368 ioctl c0306201 200002c0 returned -14 [ 2999.902021] binder: undelivered TRANSACTION_ERROR: 29189 03:57:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, 0xffffffffffffff9c, 0x0, 0x14, &(0x7f00000006c0)='cgroupvmnet1system+\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)=r1, 0x4) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x5f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xb0, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x58, 0x40, &(0x7f0000000300)=[@flat={0x77622a85, 0xa, r2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x3, 0xc}], &(0x7f00000001c0)=[0x0, 0x48, 0x40, 0x68, 0x0, 0x70, 0x0, 0x38]}}, @request_death={0x400c630e, 0x1, 0x1}, @request_death={0x400c630e, 0x2, 0x3}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x70, 0x30, &(0x7f00000003c0)=[@fda={0x66646185, 0x4, 0x1, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x1, 0x4, 0x26}], &(0x7f0000000440)=[0x78, 0x30, 0x58, 0x38, 0x78, 0x38]}, 0x2}}], 0xaa, 0x0, &(0x7f0000000540)="c1c3456bfc0569acfeebee9494d1487ed51a01782242414f9035aeefa6e9359938828895bd24094cd9d92ff76faccdcc412a155df3aa4c1d3de07f9f40ac27bf3653135edc9901dc5227dd69b481441509fd449d4370764478b01bff610c7c5b348ac8ff2947fe483ceb3a50c4396f49e57b171044aae583063bf0f4274b4bf6c83a5e6c51584a8aa0b541d10ae9a9347ce041af971d04d516f5a9ab11492d3ceec1ae10cd87e58beeee"}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000640)='/dev/keychord\x00', 0x40, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000680)=""/18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:08 executing program 1: socket(0x40080001000000c, 0x2000000002, 0x6) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:08 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)='TRUE', 0xfffffffffffffe93, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f00000006c0), 0xfffffea1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 03:57:08 executing program 2: chmod(&(0x7f0000d3f000)='.', 0x5398fffb08fec7e9) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xb8, 0xb8, 0x0, 0xb8, 0x190, 0x190, 0x190, 0x190, 0x190, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xb8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff0000ff, 'hsr0\x00', '\x00', {}, {0xff}, 0x2e, 0x1, 0x10}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) creat(&(0x7f00000000c0)='./file0\x00', 0x7ffffffffffc) sendto(r0, &(0x7f0000000100)="d257de810f5d2518e4cee5b30f2b5c87ba523d0aba598afd064eb08e528f357757b063e8d805d517d3d9a4e804ee663af9a98eaf9e0c8dadb7661af8c4522b03577a96e9689970519a29158a4676055ba882f5add49698257df500129d4bfc0c5cfeced1cd3710300037ddb9b1d78863ee1db4f0652b313a1ff189175f77ad567facb13db75e7c48d346f2b9c9d744b6", 0x90, 0x0, &(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x80) 03:57:08 executing program 4: r0 = socket(0x2, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 2999.949136] binder: 4234:4364 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc7b\x02\x9c8\xca!\xc4N\x99Q4q\xdf\xfd\xf2\x99O\xf7\xf5', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0xfffc, 0x2b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x54000, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) 03:57:08 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0xaae6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "6ebe1e9792a817772d46ca1383bed6c5dd92ff992a0705dce917d9d30691eec67822371e54e5cf8c830584ec2c80c8cc63b09d660c3dfcd9d4b9e579c60807f0c93fbb0b992908bcfc152b6a7c623f4e"}, 0xd8) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0xe2) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3000.009156] binder: undelivered TRANSACTION_ERROR: 29189 [ 3000.037108] binder: 4376:4387 ioctl c0306201 20000100 returned -14 03:57:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xc7b\x02\x9c8\xca!\xc4N\x99Q4q\xdf\xfd\xf2\x99O\xf7\xf5', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0xfffc, 0x2b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x54000, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) [ 3000.060242] binder: 4376:4387 got reply transaction with no transaction stack [ 3000.079928] binder: 4376:4387 transaction failed 29201/-71, size 88-64 line 2921 [ 3000.156185] binder: 4376:4387 got transaction to context manager from process owning it [ 3000.189345] binder: 4376:4387 transaction failed 29201/-22, size 0-0 line 3004 03:57:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x1}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x0, @dev}, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x2) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x0, 0x0, 0x22}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000540)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40004) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet6(0xa, 0x2000000000002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{}, 0x0, 0x9}) poll(&(0x7f0000000500)=[{r0, 0x10}, {r4, 0x4408}, {r4, 0x1002}, {r1, 0x20}, {r4}, {r1, 0x4080}, {r4, 0x4000}, {r3, 0x201}], 0x8, 0x6) setns(r5, 0x0) capset(&(0x7f0000000340), &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) [ 3000.218021] binder: 4376:4387 ioctl c0306201 200002c0 returned -14 03:57:08 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0x9d, [], 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/157}, &(0x7f0000000380)=0x78) r1 = socket(0x400000000000010, 0x2000000002, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) write(r1, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) recvfrom$unix(r1, &(0x7f00000000c0)=""/105, 0x69, 0x2001, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 03:57:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) creat(&(0x7f0000000380)='./bus\x00', 0x0) getpid() r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="ef4a113e4a37b2"], 0x7) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendfile(r1, r2, &(0x7f0000000140), 0x8fff) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x1f) 03:57:08 executing program 4: r0 = socket(0x8, 0x2000000005, 0xfffffffffffffffc) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) [ 3000.806133] binder: 4376:4387 ioctl c0306201 20000100 returned -14 [ 3000.815444] binder: 4376:4420 got reply transaction with no transaction stack [ 3000.849883] binder: 4376:4420 transaction failed 29201/-71, size 88-64 line 2921 [ 3000.860950] binder: BINDER_SET_CONTEXT_MGR already set [ 3000.860958] binder: 4376:4387 ioctl 40046207 0 returned -16 03:57:09 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x1000028000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f00000000c0), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 03:57:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r1, 0x6, 0x800, &(0x7f0000000300)="54579cd529a8abc6193a8ce169ed9a881afd6d84974dbaee4169613bab3ede2165c2d0372d68b8d48d99dca48bf2d3ca6fa00e34d5b0d7f945e26cdc23826ed6167003085d8932e4bfb388806f2ad8082e1963367cbffac073ae9fb4e7b0dd495cf6356d073fa84442d22b2973c818b2edb8249c11ddad08cc9ecbfee3595ed220a27a6b29347bceb8", 0x89) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:09 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000000)="200000001a003626982f195357f80b09ffed0000005037d78367f1d2a5dd7a9b4f47f77a44b38b7e8eff212f6a6963c566f258fe03cc36ae7a236186e5b1a95cfc06e553", 0xaa) 03:57:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:09 executing program 5: openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) memfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)='TRUE', 0xfffffffffffffe93, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x90000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f00000006c0), 0xfffffea1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 3000.867841] binder_alloc: 4376: binder_alloc_buf, no vma [ 3000.867856] binder: 4376:4427 transaction failed 29189/-3, size 0-0 line 3136 [ 3000.867871] binder: 4376:4427 ioctl c0306201 200002c0 returned -14 [ 3000.870847] binder: undelivered death notification, 0000000000000000 [ 3000.870853] binder: undelivered TRANSACTION_ERROR: 29201 [ 3000.927936] binder: undelivered death notification, 0000000000000000 [ 3000.955692] binder: undelivered TRANSACTION_ERROR: 29189 [ 3001.002771] binder: 4443:4452 ioctl c0306201 20000100 returned -14 03:57:09 executing program 4: r0 = socket(0xd, 0x2000000006, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @mcast2, @rand_addr="416b7f9f2fd5f2d13bf824cfc41e6857", 0x80000000, 0x4, 0x401, 0x500, 0x7fffffff, 0x1000000, r1}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'vxcan1\x00', 0x10}) [ 3001.061577] binder: 4443:4456 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3001.090564] binder: 4443:4456 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3001.132518] binder: 4443:4460 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3001.153695] binder: 4443:4456 transaction failed 29189/-22, size 0-0 line 3013 [ 3001.165822] binder: 4443:4456 ioctl c0306201 200002c0 returned -14 03:57:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, 0xffffffffffffff9c, 0x0, 0x14, &(0x7f00000006c0)='cgroupvmnet1system+\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)=r1, 0x4) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x5f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xb0, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x58, 0x40, &(0x7f0000000300)=[@flat={0x77622a85, 0xa, r2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x3, 0xc}], &(0x7f00000001c0)=[0x0, 0x48, 0x40, 0x68, 0x0, 0x70, 0x0, 0x38]}}, @request_death={0x400c630e, 0x1, 0x1}, @request_death={0x400c630e, 0x2, 0x3}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x70, 0x30, &(0x7f00000003c0)=[@fda={0x66646185, 0x4, 0x1, 0x1b}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000380), 0x1, 0x4, 0x26}], &(0x7f0000000440)=[0x78, 0x30, 0x58, 0x38, 0x78, 0x38]}, 0x2}}], 0xaa, 0x0, &(0x7f0000000540)="c1c3456bfc0569acfeebee9494d1487ed51a01782242414f9035aeefa6e9359938828895bd24094cd9d92ff76faccdcc412a155df3aa4c1d3de07f9f40ac27bf3653135edc9901dc5227dd69b481441509fd449d4370764478b01bff610c7c5b348ac8ff2947fe483ceb3a50c4396f49e57b171044aae583063bf0f4274b4bf6c83a5e6c51584a8aa0b541d10ae9a9347ce041af971d04d516f5a9ab11492d3ceec1ae10cd87e58beeee"}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000640)='/dev/keychord\x00', 0x40, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000680)=""/18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:09 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000180)=""/4096, 0x3f1}) socket$netlink(0x10, 0x3, 0xe) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0xc635, 0x56ff, 0x0, 0xfff, 0x8, 0x6, 0x1, 0x4, 0x9, 0x6, 0x3, 0x3}) 03:57:09 executing program 4: r0 = socket(0x400000000000010, 0x2000000002, 0x0) write(r0, &(0x7f0000000080)="200000001a000b09ffed0000005037d78367f1d2a5dd7a9b7a23304b800071de", 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000100), 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000180)=""/4096, 0x3f1}) socket$netlink(0x10, 0x3, 0xe) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0xc635, 0x56ff, 0x0, 0xfff, 0x8, 0x6, 0x1, 0x4, 0x9, 0x6, 0x3, 0x3}) 03:57:09 executing program 2: r0 = socket$inet6(0x10, 0x2000000000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0) r1 = dup(r0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x0, @loopback, 0x4e24, 0x1, 'none\x00', 0x0, 0x5bb, 0x1d}, 0x2c) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000340)=""/15, 0xffffff16) [ 3001.706432] binder: 4488:4490 ioctl c0306201 20000100 returned -14 03:57:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x181001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xd42830c) recvmmsg(0xffffffffffffffff, &(0x7f0000009000)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x4e24, @local}}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @rand_addr="8acf83296b0168fa731b6a9b4efc5796", 0xa3}, 0x1c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:57:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)=')\x00', 0x2, 0x2) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x2000107c) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:var_log_t:s0\x00', 0x1f, 0x2) [ 3001.760391] binder: 4488:4490 got reply transaction with no transaction stack 03:57:09 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x100000000, 0x3, 0xf3}}) 03:57:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3001.787893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3001.787895] IPv6: NLM_F_CREATE should be set when creating new route 03:57:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='bdevkeyring\x00', 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x400000000003, 0x0) [ 3001.787901] IPv6: NLM_F_CREATE should be set when creating new route 03:57:10 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:10 executing program 2: io_setup(0x6, &(0x7f0000000300)=0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x70, &(0x7f0000000040)={0x7}, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000d83f60), &(0x7f00005cfff0)={0x4000000000001, 0x7}) [ 3001.787928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3001.787930] IPv6: NLM_F_CREATE should be set when creating new route [ 3001.798432] binder: 4443:4460 ioctl c0306201 20000100 returned -14 [ 3001.801653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3001.850346] binder: 4443:4460 Acquire 1 refcount change on invalid ref 0 ret -22 03:57:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4040000) r1 = socket(0x10, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000040)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(0x0) timerfd_create(0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/member\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x1000003c5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_getevents(r4, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="53e7", 0x3528ab9d}], 0x256, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 3001.850356] binder: 4443:4460 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3001.850447] binder: 4443:4456 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3001.850474] binder: 4443:4460 transaction failed 29189/-22, size 0-0 line 3013 [ 3001.850486] binder: 4443:4460 ioctl c0306201 200002c0 returned -14 [ 3001.850912] binder: undelivered TRANSACTION_ERROR: 29189 [ 3001.913205] binder: 4511:4517 ioctl c0306201 20000100 returned -14 [ 3001.926063] binder: undelivered TRANSACTION_ERROR: 29189 [ 3001.947762] binder: 4488:4508 got transaction to context manager from process owning it [ 3001.947773] binder: 4488:4508 transaction failed 29201/-22, size 0-0 line 3004 [ 3001.947785] binder: 4488:4508 ioctl c0306201 200002c0 returned -14 [ 3001.960432] binder: 4511:4523 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3001.960444] binder: 4511:4523 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3001.960535] binder: 4511:4523 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3001.960585] binder: 4511:4523 transaction failed 29189/-22, size 0-0 line 3013 [ 3001.960597] binder: 4511:4523 ioctl c0306201 200002c0 returned -14 [ 3002.228615] binder: 4488:4490 transaction failed 29201/-71, size 88-64 line 2921 03:57:10 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0x0, 0x0}) getpgid(r0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'team_slave_1\x00', 0x1}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getpid() get_thread_area(&(0x7f0000000380)={0x3, 0x0, 0x2000, 0x2, 0x8, 0x80, 0x6, 0x6, 0x66, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) lsetxattr$security_evm(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.evm\x00', &(0x7f0000000880)=@sha1={0x1, "b3d5e589cc9fca0c1ac4a897a13bfbc103ac764b"}, 0x15, 0x3) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)) recvfrom$packet(r1, &(0x7f0000000440)=""/224, 0xe0, 0x40, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x10004, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 03:57:10 executing program 2: mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="7b7dfdfd8411900db3bb26290307f64e0fb0b573ef92a31101fcb171acabc5b32065da97ea3701b9dc7bf06018c549235257c6fff51602464637f695129e426e72c0bcfa947778f26cb9e5aa11d5553983ee95b7d749ec51597a6ae089") openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) munlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) 03:57:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000078c0)={&(0x7f0000000000), 0xc, &(0x7f0000007880)={&(0x7f0000007580)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast1}, {@in6=@local, 0x0, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384-ssse3\x00'}}}]}, 0x13c}}, 0x0) clone(0x8000000, &(0x7f0000000040)="a12ca689a632c09a0d1e86f8514e451d80d11028207d275b85a372c8011d96", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="4331ae79b2339d6af5e53e4043952e44c9a6b9c68b9131a45ac355d574c6b19d0b7b0f606a980508e0cf4ade289e92cbf0a5c0d629409c3aafeb42aff98af968611dc3cd1cc1c40da43cbb6e03ef599b548fc0a895eabea1bca59dc040210e5dcb819965c0c62cf0d388b4093147c6cd71571d23cd0f66a2a4ded6ad8b7f60e361530d32092a78d11f409ef1a7c5cfe5f8be1c0113a447f044f89474e20d4a9f9540ab") [ 3002.465541] binder: undelivered TRANSACTION_ERROR: 29201 [ 3002.473349] binder: undelivered death notification, 0000000000000000 03:57:10 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = socket$inet6(0xa, 0x1, 0x7fff) bind(r0, &(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x10001, @rand_addr="65c369c50bcb537209b20cb48e843621", 0x2}, 0x80) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x5, 0x0, 0x1, 0x7}) setsockopt$inet6_buf(r0, 0x29, 0x80000000000008, &(0x7f0000000080), 0x0) 03:57:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x100003, 0x400032, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000001c0)={0x6b93, {{0xa, 0x4e21, 0x5, @rand_addr="145f51c97807086283e0457a39963ea4", 0x9}}}, 0x88) getitimer(0x2, &(0x7f0000000000)) ioctl$TIOCOUTQ(r0, 0x80045439, &(0x7f0000000180)) 03:57:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3002.649109] audit_printk_skb: 1320 callbacks suppressed [ 3002.649118] audit: type=1400 audit(1547611030.736:291205): avc: denied { dac_override } for pid=4565 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.692560] audit: type=1400 audit(1547611030.776:291206): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x9, 0xffff, 0x3}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x11433e) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) setsockopt$inet6_tcp_int(r2, 0x6, 0x8000000000a, &(0x7f0000000000)=0x102, 0x4) recvfrom$inet6(r2, 0x0, 0xfffffffffffffd91, 0xfffffffffffffffc, 0x0, 0x38a) [ 3002.692928] audit: type=1400 audit(1547611030.776:291207): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4040000) r1 = socket(0x10, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000040)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(0x0) timerfd_create(0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/member\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x1000003c5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_getevents(r4, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="53e7", 0x3528ab9d}], 0x256, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 3002.694254] audit: type=1400 audit(1547611030.776:291208): avc: denied { dac_override } for pid=2112 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.695271] audit: type=1400 audit(1547611030.776:291209): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.697572] audit: type=1400 audit(1547611030.706:291201): avc: denied { net_admin } for pid=2115 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.727913] binder: 4511:4523 ioctl c0306201 20000100 returned -14 [ 3002.776917] binder: 4511:4576 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3002.776929] binder: 4511:4576 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3002.777017] binder: 4511:4523 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3002.778462] binder: 4511:4576 transaction failed 29189/-22, size 0-0 line 3013 [ 3002.778475] binder: 4511:4576 ioctl c0306201 200002c0 returned -14 [ 3002.787115] audit: type=1400 audit(1547611030.876:291211): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.788017] audit: type=1400 audit(1547611030.876:291212): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.796015] audit: type=1400 audit(1547611030.886:291213): avc: denied { net_admin } for pid=10487 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.796718] audit: type=1400 audit(1547611030.886:291214): avc: denied { net_admin } for pid=10487 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3002.869009] binder: 4580:4581 ioctl c0306201 20000100 returned -14 [ 3002.869277] binder: 4580:4581 ioctl 4b46 20000040 returned -22 [ 3002.916583] binder: 4580:4586 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3002.916594] binder: 4580:4586 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3002.916679] binder: 4580:4586 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3002.916729] binder: 4580:4586 transaction failed 29189/-22, size 0-0 line 3013 [ 3002.917309] binder: 4580:4586 ioctl c0306201 200002c0 returned -14 [ 3003.175814] binder: undelivered TRANSACTION_ERROR: 29189 [ 3003.218395] binder: undelivered TRANSACTION_ERROR: 29189 03:57:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x11433e) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) setsockopt$inet6_tcp_int(r2, 0x6, 0x8000000000a, &(0x7f0000000000)=0x102, 0x4) recvfrom$inet6(r2, 0x0, 0xfffffffffffffd91, 0xfffffffffffffffc, 0x0, 0x38a) 03:57:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:11 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0x0, 0x0}) getpgid(r0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'team_slave_1\x00', 0x1}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getpid() get_thread_area(&(0x7f0000000380)={0x3, 0x0, 0x2000, 0x2, 0x8, 0x80, 0x6, 0x6, 0x66, 0x2}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) lsetxattr$security_evm(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.evm\x00', &(0x7f0000000880)=@sha1={0x1, "b3d5e589cc9fca0c1ac4a897a13bfbc103ac764b"}, 0x15, 0x3) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)) recvfrom$packet(r1, &(0x7f0000000440)=""/224, 0xe0, 0x40, &(0x7f00000000c0)={0x11, 0x1c, r4, 0x1, 0x10004, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 03:57:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="f4b2166667fc30492919ade80bd4f377ef21b432", 0x14, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200)=0x6, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0xf}, 0x3}, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x0, [0x6, 0xed2, 0xfff, 0x4, 0x5, 0x1, 0x100, 0x2]}, 0x5c) accept4$unix(r3, 0x0, &(0x7f0000000380), 0x80800) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) [ 3003.644238] binder: 4580:4586 ioctl c0306201 20000100 returned -14 [ 3003.651663] binder: 4580:4618 ioctl 4b46 20000040 returned -22 03:57:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="f4b2166667fc30492919ade80bd4f377ef21b432", 0x14, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200)=0x6, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0xf}, 0x3}, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x0, [0x6, 0xed2, 0xfff, 0x4, 0x5, 0x1, 0x100, 0x2]}, 0x5c) accept4$unix(r3, 0x0, &(0x7f0000000380), 0x80800) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x200031, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) [ 3003.670213] binder: 4580:4619 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3003.670837] binder: 4580:4619 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3003.679006] binder: 4580:4622 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3003.715585] binder: undelivered TRANSACTION_ERROR: 29189 03:57:11 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200, 0x0) recvfrom$unix(r1, &(0x7f0000000140)=""/209, 0xd1, 0xd60af5c221a5aaf1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x4, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0x0, 0x0, 0xf8, 0x218, 0xf8, 0x440, 0x440, 0x440, 0x440, 0x440, 0x5, &(0x7f00000002c0), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'veth1_to_team\x00', 'lapb0\x00', {0xff}, {0xff}, 0x8, 0x1, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@tos={0x28, 'tos\x00', 0x0, {0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x18, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x7f, @port=0x4e22}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x200, 0x1, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @remote, @multicast1, @port=0x4e23, @port=0x4e21}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0xffffffff, 'gre0\x00', 'rose0\x00', {0xff}, {0xff}, 0x6f, 0x2, 0x1}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x802, 0x1, 0x1}}, @common=@unspec=@cgroup0={0x28, 'cgroup\x00', 0x0, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x9, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x401, 0x80000000, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @gre_key=0x9, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = syz_genetlink_get_family_id$team(&(0x7f00000008c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'bond_slave_0\x00', 0x0}) recvmmsg(r1, &(0x7f0000001300)=[{{&(0x7f0000000ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000b40)=""/22, 0x16}, {&(0x7f0000000b80)=""/179, 0xb3}, {&(0x7f0000000c40)=""/231, 0xe7}, {&(0x7f0000000d40)=""/30, 0x1e}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000f80)=""/240, 0xf0}, {&(0x7f0000001080)=""/236, 0xec}, {&(0x7f0000001180)=""/34, 0x22}], 0x9, &(0x7f0000001280)=""/110, 0x6e}, 0xffffffffffffff81}], 0x1, 0x10000, &(0x7f0000001340)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000013c0)={@empty, @loopback, 0x0}, &(0x7f0000001400)=0xc) accept4$packet(r1, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001480)=0x14, 0x800) getsockname$packet(r1, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14) accept$packet(r1, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001700)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001740)={0x0, @multicast1, @local}, &(0x7f0000001780)=0xc) getsockname$packet(r1, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001800)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x438, r2, 0xb02, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x108, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x6, 0xfffffffffffffffe, 0x6}, {0x6, 0x8, 0x1ff, 0x8000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r11}, {0x148, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x22}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x5, 0x6, 0x40, 0xd800000000000000}, {0xb97c, 0xfff, 0x3, 0x3ff}, {0x14, 0x8, 0x9, 0x269}, {0x7, 0x1, 0x9, 0x80000000}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6614}}}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r13) r14 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) fsetxattr$security_selinux(r14, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:udev_tbl_t:s0\x00', 0x20, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000904000)) socket$inet_tcp(0x2, 0x1, 0x0) 03:57:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c171cc3d6e4e5886b6000000000"], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:11 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r4, 0x0, 0x20020102000007) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05"], 0x1) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)="78b371070007000000000073f303e99e99f7e03dd7ddd260382fe478961ea1d669761375355e2cd11abac85b5ee4bcd70fd3953ca7b007456a2bb2a29cb15ea8fca5a83fc5786de354a1d26085a8947b778758f676d9701349b7fd5cc052182bc5a1a84b58058c69cd37b08f9acc2418e884b3e7bef3d263571a06dc9a69b5944b476c594a879099f96f9c83b712453995980fe01718b655", 0x98}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in6}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000400)={@mcast1}, 0x14) r8 = getpgid(0x0) wait4(r8, 0x0, 0x80000000, &(0x7f0000000300)) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000580), 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000208}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010227bd7000000000000a0000001000020004000400080002000000000014000400040107000c00010073797a3100000000"], 0x38}}, 0x20040000) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) [ 3003.883144] binder: 4630:4633 unknown command -1021569172 [ 3003.909431] binder: 4630:4633 ioctl c0306201 20000100 returned -22 03:57:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000140)=""/81, &(0x7f0000000000)=0xffffffffffffffaf) fcntl$notify(r0, 0x402, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) 03:57:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4040000) r1 = socket(0x10, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000040)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(0x0) timerfd_create(0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/member\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x1000003c5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_getevents(r4, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="53e7", 0x3528ab9d}], 0x256, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:57:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x401, 0x4a02) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0xfffffffffffffff7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x0, 0x8004}) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) [ 3003.981077] binder: 4630:4643 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3004.006112] binder: 4630:4643 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3004.048689] binder: 4630:4647 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3004.073494] binder: 4630:4643 transaction failed 29189/-22, size 0-0 line 3013 [ 3004.092014] binder: 4630:4643 ioctl c0306201 200002c0 returned -14 03:57:12 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7f) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0xffffffffffffffff, 0x11, r0, 0x8000000000000000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) 03:57:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="78010000170001000000000000000000fe8000000000000000000000000000bb0000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fe8000000000000000000000000000bb0000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000feffffff"], 0x389}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x100, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x14800, 0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x4}) 03:57:12 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) getpid() syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5405, 0x71dffc) preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 03:57:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) [ 3004.583731] netlink: 80 bytes leftover after parsing attributes in process `syz-executor5'. [ 3004.623882] netlink: 80 bytes leftover after parsing attributes in process `syz-executor5'. 03:57:12 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x10000000080008) splice(r0, 0x0, r1, 0x0, 0x80003, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 03:57:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3004.675684] binder: 4630:4643 unknown command -1021569172 [ 3004.688366] binder: 4630:4643 ioctl c0306201 20000100 returned -22 [ 3004.724487] binder: 4630:4694 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3004.742452] binder: 4630:4694 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x2d, &(0x7f0000000280)={@local, @multicast2, @local}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x7, 0x200, 0x0, 0x1}]}, 0x10) 03:57:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) accept$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', r4}) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000002c0)={0x3e, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0x1, 'sh\x00', 0x21, 0x2, 0x2b}, 0x2c) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000000c0)=0x1ff) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000080), 0x4) 03:57:12 executing program 5: unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x4}) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, 0x0) [ 3004.766109] binder: 4630:4643 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3004.766122] binder: 4630:4692 transaction failed 29189/-22, size 0-0 line 3013 [ 3004.766137] binder: 4630:4692 ioctl c0306201 200002c0 returned -14 03:57:12 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) clone(0x4000002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000006c0), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0xffffffffffffffb2) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000440), &(0x7f00000001c0)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, &(0x7f0000000400)) sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) r4 = perf_event_open(&(0x7f0000000380)={0x7, 0x70, 0x6, 0xb0bb, 0x1f40fdab000000, 0x2, 0x0, 0x5, 0x0, 0x7, 0x200, 0x392, 0x81, 0xdc, 0xd7, 0x9, 0x200, 0x4, 0xffff, 0x7, 0x1000, 0x7ff, 0x8, 0x9761, 0x1ff, 0x2, 0x2, 0x6, 0x0, 0x0, 0x10001, 0x0, 0x7fff, 0xffffffffffffe5f1, 0x40, 0x2761, 0x101, 0x1, 0x0, 0x5d582cd4, 0x6, @perf_config_ext={0x7, 0x4}, 0x1000, 0x4, 0x0, 0x3, 0x7, 0xffffffff7fffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7ffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x1) sendto$inet(r5, &(0x7f0000002440), 0x0, 0x20000802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0xfffffffffffffff0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x800, 0x22}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$inet6(0xa, 0x2000000000002, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) [ 3004.816481] binder: undelivered TRANSACTION_ERROR: 29189 [ 3004.887549] binder: 4705:4708 ioctl c0306201 20000100 returned -14 [ 3004.943114] binder: undelivered TRANSACTION_ERROR: 29189 [ 3004.973276] binder: 4705:4715 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3004.986410] binder: 4705:4715 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x87}, {0x400000000000006}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) 03:57:13 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = creat(0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000180)="bca734998ea1d971fd5333d943e246c19473b615b31eeb26bcafbc25d8ea5fb2458147b4df6606b21d954beb096a98209463b2ff57856e0d60f0bebdaa6754e3d934d84b3eecfad0bd001fc03d3322118ab57d0e5879f051190c6885e71c5bcc3dfbf7a48243a3c39b2b348d3b58ec20e88733e025caa7cf1c24286622580855784ccab147daa08f46513908270786577ec99ec1d18c8ea91fcea6efd59de63b34a4cfd7833a2584aa2b5e6b8ecef684e6b0001b53332d3ef4298610540f30e45b9340df85997b02e36746b96a99a9e2ec4fcdd3356d6d88c56b856f21b54b97e86ce79fee5b165eecf84143f4567f89f41d3c", 0xf3, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000000c0)}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000340)=0x100000001, 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0xe) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) r3 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r3) sendmmsg$unix(r4, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r6]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r5, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x16) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 03:57:13 executing program 2: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 03:57:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) write$P9_RLERROR(r1, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) [ 3005.005632] binder: 4705:4715 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3005.012900] binder: 4705:4715 transaction failed 29189/-22, size 0-0 line 3013 [ 3005.025637] binder: 4705:4715 ioctl c0306201 200002c0 returned -14 03:57:13 executing program 2: socketpair$unix(0x1, 0x100040000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002d000000000000009500000000010000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)) 03:57:13 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0xfffffffffffffffc) write(r0, &(0x7f0000000000)="496efa46", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xff8) clock_nanosleep(0x6, 0x40001, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000340)=0x83e9, 0x4) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x100000001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/118, 0x76, 0x8, 0xffffffffffffffff, 0x4, 0x7e, 0x80000000}, 0x120) ioctl$RTC_PIE_ON(r3, 0x7005) 03:57:13 executing program 4: r0 = socket(0x19, 0x80e, 0x63a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x40, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) recvfrom$inet(r0, &(0x7f0000000040)=""/113, 0x71, 0x20, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8902", 0x2) fcntl$getflags(r3, 0x401) [ 3005.675933] binder: 4705:4715 ioctl c0306201 20000100 returned -14 03:57:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000480)={'icmp\x00'}, &(0x7f0000000580)=0x1e) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) wait4(0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="d091bcd4f8b891b2aaa9f9487e9f2bb13255917c7a252a0f47de09d050f610911000b43d922306d2ccc342ff97ef6593fd344a175399a1025df0d0a137b97b9801e26a9a1c76db9b1a3beeb6723e12a9de229e9f5b20cc7a324f920f04a8fd082eeff5b24c", 0x65, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) keyctl$unlink(0x9, r2, r3) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0xbc, 0x80000001}, {0xe10, 0x3ff}]}, 0x14, 0x3) 03:57:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000380)=""/84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000010001001d5962a7b7f57214e57af8a01c606366d865cc0ef20875d806a2a91d28d41073120a9e4532f329ce44311b826d08710a871dd2534859c9edfff209a73ca578cc4f2f6e635488ea81e860d1f1b35a77541982743945d7f7400a43c74babcfe92f1a8e886cdf7726a390b2e67f7e136c05"], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:13 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, 0x3, {0x7, 0x1c, 0x1, 0x51002, 0x1ff, 0x9, 0x7f, 0x2}}, 0x50) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0x20000000001, &(0x7f00000000c0)=0x3, 0x3a) close(r3) 03:57:13 executing program 0: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) clone(0x4000002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000006c0), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0xffffffffffffffb2) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000440), &(0x7f00000001c0)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, &(0x7f0000000400)) sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x1, 0x3}}, 0x80) r4 = perf_event_open(&(0x7f0000000380)={0x7, 0x70, 0x6, 0xb0bb, 0x1f40fdab000000, 0x2, 0x0, 0x5, 0x0, 0x7, 0x200, 0x392, 0x81, 0xdc, 0xd7, 0x9, 0x200, 0x4, 0xffff, 0x7, 0x1000, 0x7ff, 0x8, 0x9761, 0x1ff, 0x2, 0x2, 0x6, 0x0, 0x0, 0x10001, 0x0, 0x7fff, 0xffffffffffffe5f1, 0x40, 0x2761, 0x101, 0x1, 0x0, 0x5d582cd4, 0x6, @perf_config_ext={0x7, 0x4}, 0x1000, 0x4, 0x0, 0x3, 0x7, 0xffffffff7fffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7ffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x1) sendto$inet(r5, &(0x7f0000002440), 0x0, 0x20000802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0xfffffffffffffff0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x800, 0x22}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = socket$inet6(0xa, 0x2000000000002, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 03:57:13 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = creat(0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000180)="bca734998ea1d971fd5333d943e246c19473b615b31eeb26bcafbc25d8ea5fb2458147b4df6606b21d954beb096a98209463b2ff57856e0d60f0bebdaa6754e3d934d84b3eecfad0bd001fc03d3322118ab57d0e5879f051190c6885e71c5bcc3dfbf7a48243a3c39b2b348d3b58ec20e88733e025caa7cf1c24286622580855784ccab147daa08f46513908270786577ec99ec1d18c8ea91fcea6efd59de63b34a4cfd7833a2584aa2b5e6b8ecef684e6b0001b53332d3ef4298610540f30e45b9340df85997b02e36746b96a99a9e2ec4fcdd3356d6d88c56b856f21b54b97e86ce79fee5b165eecf84143f4567f89f41d3c", 0xf3, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000000c0)}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000340)=0x100000001, 0x4) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0xe) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) r3 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r3) sendmmsg$unix(r4, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r6]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r5, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x16) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 3005.722007] binder: 4705:4776 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3005.729695] binder: 4705:4776 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3005.736687] binder: 4705:4776 transaction failed 29189/-22, size 0-0 line 3013 [ 3005.737034] binder: 4705:4715 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3005.751123] binder: 4705:4776 ioctl c0306201 200002c0 returned -14 [ 3005.760032] binder: undelivered TRANSACTION_ERROR: 29189 [ 3005.765518] binder: undelivered TRANSACTION_ERROR: 29189 03:57:13 executing program 2: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x3, 0x0, &(0x7f0000000080), 0x0) [ 3005.858415] binder: 4788:4789 ioctl c0306201 20000100 returned -14 03:57:14 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) r7 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x6, r2}, {0x2, 0x4, r3}], {}, [{0x8, 0x3, r4}, {0x8, 0x2, r5}, {0x8, 0x0, r6}, {0x8, 0x6, r7}], {0x10, 0x5}, {0x20, 0x4}}, 0x5c, 0x1) pselect6(0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000240), &(0x7f00000005c0), &(0x7f0000000300)={&(0x7f00000002c0)={0x7}, 0x8}) [ 3005.947367] binder: 4788:4814 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3005.955039] binder: 4788:4814 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff7ffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = dup(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0xfffffffffffffe66) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x11, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ftruncate(r6, 0x10099b7) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r4, r6, 0x0, 0x8000fffffffe) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 3005.992010] binder: 4788:4814 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3006.020016] binder: 4788:4814 transaction failed 29189/-22, size 0-0 line 3013 03:57:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x90000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 3006.038218] binder: 4788:4814 ioctl c0306201 200002c0 returned -14 03:57:14 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) getsockname$unix(r1, &(0x7f0000000a00), 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x533) poll(&(0x7f00000000c0)=[{r3, 0x2080}, {r3, 0x6010}], 0x2, 0x4) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x109) dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) pipe(&(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'tunl0\x00'}, 0x18) rt_sigaction(0x38, &(0x7f0000000340)={&(0x7f00000002c0)="673e6445d25d04c4018172e3e3c4e25546c7c42189f4a4391700000047a4672e46d84a00670f56b00a00000064643e0f78686c650f0f0a94c4e139d9775c", {0x800}, 0x40000000, &(0x7f0000000300)="c4e3694a720a2144dab05cc30000c40211918cb1a0c8bc20440fa8c4417bf0729fc4c12dd1ce0f18cfc401f1d9fb40dd847aa10ddf30410f519821000000"}, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 03:57:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='procmd5sum\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0x0) tkill(r0, 0x2c) syz_open_pts(r3, 0x4000) sendto(r4, &(0x7f0000000380)="9326a5754f7b471756b8daffef4d4baadcced9cd88730e3695a1e8aaa1e5438cd2d33a379a2f93cd31af439b1ce97c56bfcbec2c1f1cde3e869faf615824c535b306a6603ad6d3b43ed307d6418ee2ce3345321a", 0x54, 0x20004040, &(0x7f0000000400)=@vsock={0x28, 0x0, 0xffffffff, @reserved}, 0x80) recvfrom$unix(r3, &(0x7f0000000080)=""/158, 0x9e, 0x40000002, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$P9_RREAD(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1) 03:57:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3006.195742] binder: 4829:4831 transaction failed 29189/-22, size 24-0 line 3013 [ 3006.250876] binder: 4829:4840 transaction failed 29189/-22, size 24-0 line 3013 [ 3006.271492] binder: undelivered TRANSACTION_ERROR: 29189 [ 3006.277798] binder: undelivered TRANSACTION_ERROR: 29189 03:57:14 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', 'nodev(trustedsystem\'.-bdev\x00'}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/179, 0xb3, 0x10002, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x545d, 0xfffffffffffffffe) listen(r2, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r1}, 0x10) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffca9, 0x0, 0x4, {0x1}}, 0x18) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, 0x0, 0x0, 0x0) 03:57:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x26a, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0xff, @ipv4={[], [], @rand_addr=0x100}, 0xfffffffffffffffb}, {0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x20}, 0x8, [0x0, 0x9, 0x101, 0xe762, 0xfffffffffffffffd, 0x8, 0x600000, 0x9]}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:14 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(r0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fdatasync(r1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="ef672627ab13a2b7c027f1bbee7f43e41852ea485e7c678d1805e9ee29c51ba6170b71a45fc7f41bf009eadf32f7b563f6f4bbee2f06e3f04c5f32b1613412cee01658263e72aebfaf19636cd23835731a261adf87739305751e4c8bdaaccf5bf9d544a9de6b288372b91de1a5e3ae940a4c569ff36a", 0x76, 0x40004, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x5}, 0x10) r3 = getpgid(0xffffffffffffffff) ptrace$peek(0x1, r3, &(0x7f00000000c0)) 03:57:14 executing program 2: unshare(0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101001, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000600)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)) write(r3, &(0x7f00000001c0), 0xfffffef3) epoll_create(0x4000c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) close(r3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acbe}], 0x7b, 0x4) fchdir(r1) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) sendto$packet(r4, &(0x7f0000000380)="a0ddd49eabb719abf92411a1932f9593", 0x10, 0x20000000, 0x0, 0x0) chroot(&(0x7f0000000040)='./bus\x00') ftruncate(r4, 0x108200) io_setup(0x9, &(0x7f0000000180)) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8, 0x8, 0x3, 0x5, 0x2, 0x4, 0x1acb, 0x1000, 0x200}) io_setup(0x5, &(0x7f0000000100)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x8) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x8010) sendfile(r4, r5, &(0x7f0000000080), 0xffffffff) 03:57:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) 03:57:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x80) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = dup2(r0, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0001f84000100000"], 0x0, 0x0, 0x0}) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0563044020000000106308400400000000000000"], 0x0, 0x0, 0x0}) [ 3006.630414] binder: 4788:4855 ioctl c0306201 20000100 returned -14 [ 3006.636883] binder: 4788:4855 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3006.637029] binder: 4788:4856 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3006.651163] binder: 4788:4855 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3006.685614] binder: undelivered TRANSACTION_ERROR: 29189 [ 3006.709948] binder: 4861:4865 ioctl c0306201 20000100 returned -14 [ 3006.732124] binder: 4861:4865 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3006.741027] binder: 4861:4865 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3006.746660] binder: 4859:4868 unknown command 1089995008 [ 3006.746666] binder: 4859:4868 ioctl c0306201 20000140 returned -22 03:57:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000380)=""/84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000010001001d5962a7b7f57214e57af8a01c606366d865cc0ef20875d806a2a91d28d41073120a9e4532f329ce44311b826d08710a871dd2534859c9edfff209a73ca578cc4f2f6e635488ea81e860d1f1b35a77541982743945d7f7400a43c74babcfe92f1a8e886cdf7726a390b2e67f7e136c05"], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:14 executing program 5: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492565, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r2 = dup3(r1, r1, 0x80000) sendto$unix(r1, 0x0, 0x0, 0x40, 0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/78, 0x4e, 0x0) close(r0) [ 3006.747202] binder: 4859:4868 ioctl 125e 20000000 returned -22 [ 3006.748944] binder: 4859:4868 Acquire 1 refcount change on invalid ref 32 ret -22 [ 3006.748950] binder: 4859:4868 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 3006.786506] binder: 4861:4878 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3006.839678] binder: 4861:4887 transaction failed 29189/-22, size 0-0 line 3013 [ 3006.885751] binder: 4861:4887 ioctl c0306201 200002c0 returned -14 [ 3006.899681] binder: 4861:4865 ioctl c0306201 20000100 returned -14 [ 3006.901255] binder: 4861:4887 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3006.901264] binder: 4861:4887 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) r1 = dup2(r0, r0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3006.901322] binder: 4861:4878 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3006.901346] binder: 4861:4887 transaction failed 29189/-22, size 0-0 line 3013 [ 3006.901357] binder: 4861:4887 ioctl c0306201 200002c0 returned -14 [ 3006.901555] binder: undelivered TRANSACTION_ERROR: 29189 [ 3006.958375] binder: 4893:4895 ioctl c0306201 20000100 returned -14 [ 3006.977822] binder: undelivered TRANSACTION_ERROR: 29189 [ 3007.022214] binder: 4893:4899 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3007.056945] binder: 4900:4902 unknown command 0 [ 3007.056952] binder: 4900:4902 ioctl c0306201 20000100 returned -22 [ 3007.070483] binder: 4893:4903 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3007.070865] binder: 4893:4903 transaction failed 29189/-22, size 0-0 line 3013 [ 3007.070876] binder: 4893:4903 ioctl c0306201 200002c0 returned -14 [ 3007.099776] binder: 4893:4899 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3007.110475] binder: 4900:4906 Acquire 1 refcount change on invalid ref 0 ret -22 03:57:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x44000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3007.123855] binder: 4900:4906 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3007.137688] binder: 4900:4906 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3007.148282] binder: 4900:4906 transaction failed 29189/-22, size 0-0 line 3013 [ 3007.157091] binder: 4900:4906 ioctl c0306201 200002c0 returned -14 03:57:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x2001) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='posix_acl_access&\x00', 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000880)=[{&(0x7f0000000300)="7c48271775e652b93d335594d1999aecc141db28b39cd7bbd6865e3d6d1a5abbd08fcd08cc4e771b1344fbb4ef7c", 0x2e}, {&(0x7f0000000340)="5cc49533c9b0dbdd63317e42cbf568d1bb27510043165109b1c5421618487c1d5392fce39a2770eb07684f398934983e12d9829563525765affbb4e0ce22ea", 0x3f}], 0x2, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000008c0)=0x231) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000ac0)=0x4, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000840)) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r10, 0x40) r11 = getgid() ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000780)={'nr0\x00', {0x2, 0x4e20, @multicast2}}) accept4$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000800)=0x1c, 0x80000) r12 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x4}, [{0x2, 0x1, r5}, {0x2, 0x4, r6}, {0x2, 0x3, r7}, {0x2, 0x4, r8}, {0x2, 0x4, r9}], {0x4, 0x2}, [{0x8, 0x4, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r13}], {0x10, 0x2}, {0x20, 0x7}}, 0x64, 0x1) 03:57:15 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', 'nodev(trustedsystem\'.-bdev\x00'}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/179, 0xb3, 0x10002, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r3, 0x545d, 0xfffffffffffffffe) listen(r2, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r1}, 0x10) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffca9, 0x0, 0x4, {0x1}}, 0x18) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, 0x0, 0x0, 0x0) 03:57:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727", [0x3ff]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "4561f42edbfa7d6e"}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/59) 03:57:15 executing program 2: ptrace$poke(0x1, 0x0, &(0x7f0000000140), 0x81) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@empty, @dev={0xfe, 0x80, [], 0x20}, @loopback, 0x6, 0x9, 0xffff, 0x400, 0x5, 0x400000}) r0 = socket$inet6(0xa, 0x1, 0x42) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000004c0)=0x83, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)={0x0, 0x0}) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='syscall\x00') fsetxattr$security_ima(r3, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@sha1={0x1, "19bc9284ccff41763470005f5a043288f692eef9"}, 0x15, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r4, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x2) read(r4, &(0x7f0000000200)=""/250, 0x19c04826) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000340)) socket$inet6(0xa, 0x0, 0xc270) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r4, 0x540c) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvmmsg(r3, &(0x7f00000013c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000bc0)=""/208, 0xd0}], 0x6, &(0x7f0000000d40)=""/76, 0x4c}, 0xd07}, {{&(0x7f0000000dc0)=@sco, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/247, 0xf7}, {&(0x7f0000000f40)=""/23, 0x17}, {0x0}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001100)=""/189, 0xbd}, {&(0x7f00000011c0)=""/77, 0x4d}], 0x6, &(0x7f00000012c0)=""/196, 0xc4}, 0x7}], 0x2, 0x10000, 0x0) connect$packet(r4, &(0x7f0000001440)={0x11, 0x1b, r7, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)}, 0x40005) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg(r6, &(0x7f0000001080)=[{{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e21, @local}, 0x1, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="4d31dde040faeaa21db5b0b4e7cf21345464f1212f28fbc1a483905829dd8d58f11073bd8b4dbd8aec801a5594a06b1d73727e9bfc1d530dfd5694dbf931b8faa12736b4b3c8349bfe98ba36a22473aed16289e4680410cab0469e860e39a91143f1bb0084a4b7c88d11c7888c49065329a35f289989c92f3f8c24c7ebfc349156dd9eef5b4ba4df4c86d6f32ba3b0", 0x8f}], 0x1}, 0x5}], 0x1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000800)={0x20, 0x457, 0x9, 0x2, 0x10001}, 0x14) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={[], 0xa51, 0x1, 0x4, 0x100, 0x7fffffff, r1}) 03:57:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000440)={@dev, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'hsr0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003140)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000003240)=0xe8) accept4$packet(r1, &(0x7f0000003280)={0x11, 0x0, 0x0}, &(0x7f00000032c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003400)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003440)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000003540)=0xe8) accept$packet(r0, &(0x7f0000003580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000035c0)=0x14) recvmmsg(r2, &(0x7f0000004b80)=[{{&(0x7f00000036c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003740)=""/175, 0xaf}], 0x1}, 0x679034a8}, {{&(0x7f0000003840)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000003900)=[{&(0x7f00000038c0)=""/16, 0x10}], 0x1}, 0xfffffffffffffc01}, {{&(0x7f0000003940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000039c0)=""/190, 0xbe}, {&(0x7f0000003a80)=""/110, 0x6e}, {&(0x7f0000003b00)=""/101, 0x65}], 0x3, &(0x7f0000003bc0)=""/191, 0xbf}, 0x101}, {{&(0x7f0000003c80)=@vsock, 0x80, &(0x7f0000004140)=[{&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/29, 0x1d}, {&(0x7f0000003dc0)=""/12, 0xc}, {&(0x7f0000003e00)=""/205, 0xcd}, {&(0x7f0000003f00)=""/249, 0xf9}, {&(0x7f0000004000)=""/120, 0x78}, {&(0x7f0000004080)=""/140, 0x8c}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f00000041c0)=""/78, 0x4e}], 0x1, &(0x7f0000004280)=""/135, 0x87}, 0x7ff}, {{&(0x7f0000004340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004400)=[{&(0x7f00000043c0)=""/3, 0x3}], 0x1, &(0x7f0000004440)=""/110, 0x6e}, 0x7f}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/139, 0x8b}], 0x1, &(0x7f00000045c0)=""/203, 0xcb}, 0x1340}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000046c0)}, {&(0x7f0000004700)=""/223, 0xdf}, {&(0x7f0000004800)=""/218, 0xda}], 0x3}, 0x80000000}, {{&(0x7f0000004940)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000049c0)=""/51, 0x33}, {&(0x7f0000004a00)=""/183, 0xb7}, {&(0x7f0000004ac0)=""/5, 0x5}], 0x3, &(0x7f0000004b40)=""/56, 0x38}, 0xecd8}], 0x9, 0x40002101, &(0x7f0000004dc0)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004e00)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000004f00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004f40)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000005040)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000005080)={@empty, 0x0}, &(0x7f00000050c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005100)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000005200)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000005240)={@mcast1, 0x0}, &(0x7f0000005280)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000052c0)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005300)={'veth1_to_hsr\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005380)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005540)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000005640)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005740)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000005840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005a80)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000005ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005b00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005b40)={@dev, @empty, 0x0}, &(0x7f0000005b80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005bc0)={0x0, @multicast2, @initdev}, &(0x7f0000005c00)=0xc) accept4$packet(r0, &(0x7f0000005c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005c80)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000005cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005d00)=0x14) getpeername(r0, &(0x7f0000005d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005e00)=0x80) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000005e40)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000005e80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005ec0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000005fc0)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000006cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006c80)={&(0x7f0000006000)={0xc7c, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x134, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x803}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x224, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xe4d}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r16}, {0xc0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x218, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xbbb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xb4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff81}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r25}, {0x170, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffe}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0x1e0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xe9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r31}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r32}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x800, 0xff, 0x7, 0x5a8a}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r34}, {0x170, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r36}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r37}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r38}, {0xf0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r39}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6b}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}]}}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4005) [ 3007.656710] audit_printk_skb: 1269 callbacks suppressed [ 3007.656717] audit: type=1400 audit(1547611035.746:291637): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.701937] audit: type=1400 audit(1547611035.786:291638): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:15 executing program 0: r0 = gettid() r1 = fcntl$dupfd(0xffffffffffffffff, 0x5b914d2c6ed55df5, 0xffffffffffffff9c) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000140)={0x6, 0x5, 0x101}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x6}, 0x28, 0x2) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000240)) pread64(r2, &(0x7f0000000440)=""/37, 0x25, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x2, 0x3ff, 0xffffffff}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$packet(0xffffffffffffff9c, 0x0, 0x0) close(r2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) [ 3007.703988] audit: type=1400 audit(1547611035.786:291639): avc: denied { dac_override } for pid=2112 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.705927] audit: type=1400 audit(1547611035.786:291640): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.708217] audit: type=1400 audit(1547611035.796:291641): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.714925] audit: type=1400 audit(1547611035.796:291642): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x810, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @request_death={0x400c630e, 0x4, 0x2}, @clear_death={0x400c630f, 0x4, 0x2}], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3007.717221] audit: type=1400 audit(1547611035.796:291643): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.769348] audit: type=1400 audit(1547611035.856:291644): avc: denied { sys_admin } for pid=2114 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.787474] audit: type=1400 audit(1547611035.856:291645): avc: denied { dac_override } for pid=4936 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:16 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000002640)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4800, 0x20) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00') pwritev(r2, &(0x7f0000000180), 0x3c7, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) [ 3007.798828] audit: type=1400 audit(1547611035.886:291646): avc: denied { net_admin } for pid=2114 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3007.821761] binder: undelivered TRANSACTION_ERROR: 29189 [ 3007.850602] binder: 4900:4906 unknown command 0 [ 3007.850610] binder: 4900:4906 ioctl c0306201 20000100 returned -22 [ 3007.904061] binder: 4900:4956 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3007.904072] binder: 4900:4956 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3007.904402] binder: 4900:4906 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3007.904514] binder: 4900:4956 transaction failed 29189/-22, size 0-0 line 3013 [ 3007.904528] binder: 4900:4956 ioctl c0306201 200002c0 returned -14 [ 3007.965608] binder: undelivered TRANSACTION_ERROR: 29189 [ 3007.985673] binder: 4961:4963 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 3007.985690] binder: 4961:4963 ioctl c0306201 20000100 returned -14 03:57:16 executing program 2: ptrace$poke(0x1, 0x0, &(0x7f0000000140), 0x81) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@empty, @dev={0xfe, 0x80, [], 0x20}, @loopback, 0x6, 0x9, 0xffff, 0x400, 0x5, 0x400000}) r0 = socket$inet6(0xa, 0x1, 0x42) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000004c0)=0x83, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)={0x0, 0x0}) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='syscall\x00') fsetxattr$security_ima(r3, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@sha1={0x1, "19bc9284ccff41763470005f5a043288f692eef9"}, 0x15, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r4, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x2) read(r4, &(0x7f0000000200)=""/250, 0x19c04826) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000340)) socket$inet6(0xa, 0x0, 0xc270) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r4, 0x540c) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvmmsg(r3, &(0x7f00000013c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000380)=""/63, 0x3f}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000bc0)=""/208, 0xd0}], 0x6, &(0x7f0000000d40)=""/76, 0x4c}, 0xd07}, {{&(0x7f0000000dc0)=@sco, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/247, 0xf7}, {&(0x7f0000000f40)=""/23, 0x17}, {0x0}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001100)=""/189, 0xbd}, {&(0x7f00000011c0)=""/77, 0x4d}], 0x6, &(0x7f00000012c0)=""/196, 0xc4}, 0x7}], 0x2, 0x10000, 0x0) connect$packet(r4, &(0x7f0000001440)={0x11, 0x1b, r7, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)}, 0x40005) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg(r6, &(0x7f0000001080)=[{{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e21, @local}, 0x1, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="4d31dde040faeaa21db5b0b4e7cf21345464f1212f28fbc1a483905829dd8d58f11073bd8b4dbd8aec801a5594a06b1d73727e9bfc1d530dfd5694dbf931b8faa12736b4b3c8349bfe98ba36a22473aed16289e4680410cab0469e860e39a91143f1bb0084a4b7c88d11c7888c49065329a35f289989c92f3f8c24c7ebfc349156dd9eef5b4ba4df4c86d6f32ba3b0", 0x8f}], 0x1}, 0x5}], 0x1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000800)={0x20, 0x457, 0x9, 0x2, 0x10001}, 0x14) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={[], 0xa51, 0x1, 0x4, 0x100, 0x7fffffff, r1}) 03:57:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3007.995668] binder: undelivered TRANSACTION_ERROR: 29189 [ 3008.033832] binder: 4961:4967 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3008.033844] binder: 4961:4967 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3008.035379] binder: 4961:4967 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3008.037211] binder: 4961:4967 transaction failed 29189/-22, size 0-0 line 3013 [ 3008.037226] binder: 4961:4967 ioctl c0306201 200002c0 returned -14 03:57:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x80800) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) close(r1) select(0x40, &(0x7f0000000300), &(0x7f0000000180)={0x1}, 0x0, &(0x7f0000003000)={0x77359400}) geteuid() 03:57:16 executing program 4: mkdir(&(0x7f0000000000)='./bus\x00', 0x2) r0 = dup(0xffffffffffffff9c) write$ppp(r0, &(0x7f0000000040)="24304c0fbb06fe7f7402aa969f69e7ff346de92464ae6375381da709728f6bebfddb", 0x22) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r2 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 03:57:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'yam0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x400}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 03:57:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/49, 0x31) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x420400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffc66, 0x0, 0x0}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 03:57:16 executing program 4: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x480000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x7, 0x0, 0xffffffffffffffff, 0xffffefffffff0003, 0xe7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:57:16 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x19) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000140)=0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000580)={@remote, @multicast2, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getnetconf={0x54, 0x52, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x100000001}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_RP_FILTER={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ptrace$cont(0x18, r2, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x20100, 0x100) memfd_create(&(0x7f0000000700)='mime_typetrusted-lo\x00', 0x2) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f0000000040)=""/97) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x6, 0x1, 0x3, 0x65}) tkill(r1, 0x27) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 3008.628146] binder: 5003:5004 ioctl c0306201 200003c0 returned -14 [ 3008.643492] binder: 5003:5004 ioctl c0306201 200003c0 returned -14 03:57:16 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c000000000000090000070000002005000000000000008d8a8d24785800000000000035861c007bfe68a617059a70b38b4e73c20400000057c4d99301f9646c"], 0x61) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0xfffffffffffffffb, 0x3, 0x1}) 03:57:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'io'}]}, 0x4) r2 = getpid() getpriority(0x1, r2) [ 3008.818563] binder: 4961:5023 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 3008.829568] binder: 4961:5026 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3008.838471] binder: 4961:5029 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3008.856012] binder: undelivered TRANSACTION_ERROR: 29189 [ 3008.858681] binder: 4961:5023 ioctl c0306201 20000100 returned -14 03:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=ANY=[@ANYBLOB='\f\x00\x00$'], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r1 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x4010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xb4, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x28, 0x28, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x3, 0x1f}], &(0x7f0000000280)=[0x38, 0x40, 0x0, 0x78, 0x48]}}, @exit_looper, @release, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f0000000300)=[@flat={0x776a2a85, 0x10b, r1, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x23}, @fda={0x66646185, 0x4, 0x2, 0x16}], &(0x7f0000000380)=[0x0, 0x78, 0x28, 0x20]}, 0x4}}, @dead_binder_done={0x40086310, 0x2}], 0xc, 0x0, &(0x7f0000000480)="aa90f492cbc7a5a3e872d13f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x800000000000005, 0x0, 0x201a7f24}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') r2 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) r10 = getegid() r11 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000d40)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x30000000000000}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000000c0)="1d5ed3f802df4342c104f43103b7f7c2b7068584a61fbed535626e25dfe8d52251362d6f220a59656706fb0a5f1d520ad959303279706ac854eb0f194148c1f2c57c9889a6044e7202eee4c62054b26fa7440d9f5afb2bfa7d2ff9e8bfc2b52b15c91a36070bf9bb6f6d4c6b73a061ac54fee2aa2b866157d2d6a6f88a0240d9d20e0f23", 0x84}, {&(0x7f0000000280)="9e8294062a5abc82fea7815ed752708f6629aba3b0e0a9c604d3bb0631c936af1852c251515fb2ea0d352a971f38926e8d15c4d5c25d0e9c746cbadba2b5039e34623484eb3693f2a17cebc654d042bdbc858cecae56bd8dc938f3b356c9edf16e8edf3b5a3ca6c7da8a8982188dbeae96511455179d186f65acfa2dec219c68c21805e7333e92cbc9d886600c0c69d00770137142570c2fb6f480424f5be6db9ec9372e03e8441907a04e5e8963fd6fee39ab9e26e71ac5869b567a64aed6e55df4f7bc33c34febf4b4b5e7fcb6ec34cf9feca345face3c8480ba32a7e0dad549c85071f448c5af1d1234ee9649428ca67fe7b27e", 0xf5}, {&(0x7f0000000180)="48913b55ec349bb22a7f6fc1f1d55bf7872242e763b4ce37d5a8f0e38740c5951e9f2ac28c53eb4fe1841c2229fec5916e0d413cc0a96b0b75e47316d62b5c76acfd34487e51825880a9cbfdc77b63579ffb53a995c0f0c5671d61454311eef99bc795b1d8e1d20f6a4852c2e6072edf0a7d35ae41", 0x75}, {&(0x7f0000000380)="969fae4195e6e9c87460f59b356000889ce8e2b578fcdded2f26e3af2cdefce19d433d00faca55cc59e3416c972d07cfa7a0b298222f94a42199ec50e9c336127fa63facf83d77d4585a0fb3d1551574fbe9eaee35e2f887c8711391aa1f2273b880faf0ea1143d4095387adeadcf92ef5d3931ea7fdf290f48a063fd9c69fb00bab377650dc1de701533fa311a1a3a7f3ac7af2119b5d744f", 0x99}, {&(0x7f0000000440)="ce5d9f6306158f890239964ebc03bbcc8e6802413ac48db704dcf2343d62acca1c877ee6cc107e05e2ecb3f1a738287844cca3267be231de89778d09caaadfdf7405b2da2a574fc388c9bc3d2aae0b76faa6b68e48fc238b9f0094eda11d266c044970393915eb02a390cd33b2c6", 0x6e}, {&(0x7f00000004c0)="77dddfeb58f100a048d1f6fd9ff814d4c8ce8e9e61bda41286985159e9018565307d3144d2c729368ebdf74844a9953cdaebc354338c60eedfbd5ddd154c421ad7b4a5a05ee19ae89f04525fe1dc28408f03abc50f3f028c4e525d34c39e00b34787e48cbd682d2e7ddd0cad8fb394b953ad019f0944d675", 0x78}, {&(0x7f0000000540)="8475cd559bc0a23d7942d93a5f95f525874fb2c9070e1192e19e4ba0d92c61e410a51c261ca442fc58fed2c24c52258b0271ebb8827a9cd1e02768d2b2d21976b5f89553abf75dc8ae1d82724da89bd003db27bfc286584aa66394afe9f3ecd59a0600cc140fb7dd5a99184099e4c1435f6d966e2bc8de8b3738e0abcb6595b28ccbe0b2c0ef9851bd5638150168213c41f3024410e48352c35e6ec72cfdbe7df432e8776657204e", 0xa8}, {&(0x7f0000000600)="852076dd384dac93974655f5e54ea5170b3a258759bedef682760fe9550ca6f673681cbec7db12c48d70e1704b444f9f7780d26779b3547d12884118a094a8c4b7fe6a3b81831773cadeaf292428cabd62f8844a37f0eefb4ac2c12254a1", 0x5e}, {&(0x7f0000000680)="0509584f4271c6b618d1d221e4b9efd278d76a4e7f9703831e1d820c7bcc8c8183d2b42a552337c7453e18fa7d52eebdd490272ede8a1fd5947ba991a4744510d0a4630d01bb376e1a4aa76873e594d24f6b909c24437f3860652e4bf72055a54b46683b785c74", 0x67}, {&(0x7f0000000700)="73bef2e9221b7a2f327d471b3924d62d0a1850c4f0e587be9ad3143995fd3a3fd665623c5b1a01b45ac874696c4710b30afe34f53df73eb9068928d4125c7c19314aa6872de74fddb308e658238d3dfce43de27131b70bce122877e44afacbe648236af7a999033650708d5f783d054dc05ca3354f40bf51c96518ac6951da56d0b601524cd73d97bb956a859dd8fb5ce16df6eff3f4f1b67b937b9a843824ad8577872eb28f47c26735648eb3e18ecd777380", 0xb3}], 0xa, &(0x7f0000000c40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xd8, 0x800}], 0x1, 0x4000004) 03:57:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x42) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6, 0x9a3}}, 0x30) [ 3008.933226] binder: 4961:5026 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3009.005070] binder: 5042:5045 unknown command 603979788 [ 3009.012445] binder: 5042:5045 ioctl c0306201 20000100 returned -22 03:57:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) write$selinux_load(r1, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "2d9fbcaaaa41c38fad3a416b6f2a1bf15fdac3b6248391bb8da9216c96d88fc966d1f45688d82300ae344a0827379fa712d5159f1a830a666dc7b5b246c68dc179dff471e2fcd5bff1ea38c8bd2b91850fb5928e0aa0abf4e01a3c7160b8940fd6544a3e2a051f483887b2b71f654fffd523efab477810b0f9dc3535eabfda1a149c78ca210be2ac3090c26d459e4fb7370e81be00617cad330f11425e516b1d5bb81903dfa6f2a2a7599738e87bd7559c4bee26b26e7cd69eb040f4908ca1c9a1ce6b7e7226975b39d524"}, 0xdb) 03:57:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x810, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x2, 0x4}, @increfs_done={0x40106308, r1, 0x2}, @request_death={0x400c630e, 0x4, 0x2}, @clear_death={0x400c630f, 0x4, 0x2}], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x800000000000005, 0x0, 0x201a7f24}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') r2 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000b00)=0xe8) r10 = getegid() r11 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000d40)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x30000000000000}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000000c0)="1d5ed3f802df4342c104f43103b7f7c2b7068584a61fbed535626e25dfe8d52251362d6f220a59656706fb0a5f1d520ad959303279706ac854eb0f194148c1f2c57c9889a6044e7202eee4c62054b26fa7440d9f5afb2bfa7d2ff9e8bfc2b52b15c91a36070bf9bb6f6d4c6b73a061ac54fee2aa2b866157d2d6a6f88a0240d9d20e0f23", 0x84}, {&(0x7f0000000280)="9e8294062a5abc82fea7815ed752708f6629aba3b0e0a9c604d3bb0631c936af1852c251515fb2ea0d352a971f38926e8d15c4d5c25d0e9c746cbadba2b5039e34623484eb3693f2a17cebc654d042bdbc858cecae56bd8dc938f3b356c9edf16e8edf3b5a3ca6c7da8a8982188dbeae96511455179d186f65acfa2dec219c68c21805e7333e92cbc9d886600c0c69d00770137142570c2fb6f480424f5be6db9ec9372e03e8441907a04e5e8963fd6fee39ab9e26e71ac5869b567a64aed6e55df4f7bc33c34febf4b4b5e7fcb6ec34cf9feca345face3c8480ba32a7e0dad549c85071f448c5af1d1234ee9649428ca67fe7b27e", 0xf5}, {&(0x7f0000000180)="48913b55ec349bb22a7f6fc1f1d55bf7872242e763b4ce37d5a8f0e38740c5951e9f2ac28c53eb4fe1841c2229fec5916e0d413cc0a96b0b75e47316d62b5c76acfd34487e51825880a9cbfdc77b63579ffb53a995c0f0c5671d61454311eef99bc795b1d8e1d20f6a4852c2e6072edf0a7d35ae41", 0x75}, {&(0x7f0000000380)="969fae4195e6e9c87460f59b356000889ce8e2b578fcdded2f26e3af2cdefce19d433d00faca55cc59e3416c972d07cfa7a0b298222f94a42199ec50e9c336127fa63facf83d77d4585a0fb3d1551574fbe9eaee35e2f887c8711391aa1f2273b880faf0ea1143d4095387adeadcf92ef5d3931ea7fdf290f48a063fd9c69fb00bab377650dc1de701533fa311a1a3a7f3ac7af2119b5d744f", 0x99}, {&(0x7f0000000440)="ce5d9f6306158f890239964ebc03bbcc8e6802413ac48db704dcf2343d62acca1c877ee6cc107e05e2ecb3f1a738287844cca3267be231de89778d09caaadfdf7405b2da2a574fc388c9bc3d2aae0b76faa6b68e48fc238b9f0094eda11d266c044970393915eb02a390cd33b2c6", 0x6e}, {&(0x7f00000004c0)="77dddfeb58f100a048d1f6fd9ff814d4c8ce8e9e61bda41286985159e9018565307d3144d2c729368ebdf74844a9953cdaebc354338c60eedfbd5ddd154c421ad7b4a5a05ee19ae89f04525fe1dc28408f03abc50f3f028c4e525d34c39e00b34787e48cbd682d2e7ddd0cad8fb394b953ad019f0944d675", 0x78}, {&(0x7f0000000540)="8475cd559bc0a23d7942d93a5f95f525874fb2c9070e1192e19e4ba0d92c61e410a51c261ca442fc58fed2c24c52258b0271ebb8827a9cd1e02768d2b2d21976b5f89553abf75dc8ae1d82724da89bd003db27bfc286584aa66394afe9f3ecd59a0600cc140fb7dd5a99184099e4c1435f6d966e2bc8de8b3738e0abcb6595b28ccbe0b2c0ef9851bd5638150168213c41f3024410e48352c35e6ec72cfdbe7df432e8776657204e", 0xa8}, {&(0x7f0000000600)="852076dd384dac93974655f5e54ea5170b3a258759bedef682760fe9550ca6f673681cbec7db12c48d70e1704b444f9f7780d26779b3547d12884118a094a8c4b7fe6a3b81831773cadeaf292428cabd62f8844a37f0eefb4ac2c12254a1", 0x5e}, {&(0x7f0000000680)="0509584f4271c6b618d1d221e4b9efd278d76a4e7f9703831e1d820c7bcc8c8183d2b42a552337c7453e18fa7d52eebdd490272ede8a1fd5947ba991a4744510d0a4630d01bb376e1a4aa76873e594d24f6b909c24437f3860652e4bf72055a54b46683b785c74", 0x67}, {&(0x7f0000000700)="73bef2e9221b7a2f327d471b3924d62d0a1850c4f0e587be9ad3143995fd3a3fd665623c5b1a01b45ac874696c4710b30afe34f53df73eb9068928d4125c7c19314aa6872de74fddb308e658238d3dfce43de27131b70bce122877e44afacbe648236af7a999033650708d5f783d054dc05ca3354f40bf51c96518ac6951da56d0b601524cd73d97bb956a859dd8fb5ce16df6eff3f4f1b67b937b9a843824ad8577872eb28f47c26735648eb3e18ecd777380", 0xb3}], 0xa, &(0x7f0000000c40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xd8, 0x800}], 0x1, 0x4000004) 03:57:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'yam0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x400}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 03:57:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x18032, 0xffffffffffffffff, 0x0) [ 3009.093859] binder: 5042:5055 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3009.110043] binder: 5056:5058 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 03:57:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xf0d741) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) clock_gettime(0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0xfeec) [ 3009.110055] binder: 5056:5058 ioctl c0306201 20000100 returned -14 [ 3009.144469] binder: 5042:5061 Release 1 refcount change on invalid ref 2 ret -22 [ 3009.144480] binder: 5042:5061 transaction failed 29189/-22, size 40-40 line 3013 [ 3009.144575] binder: 5042:5061 ioctl c0306201 200002c0 returned -14 [ 3009.179535] binder: 5056:5063 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3009.179545] binder: 5056:5063 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3009.181508] binder: 5056:5063 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3009.182177] binder: 5056:5063 transaction failed 29189/-22, size 0-0 line 3013 [ 3009.182189] binder: 5056:5063 ioctl c0306201 200002c0 returned -14 [ 3009.345124] binder: 5042:5055 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:17 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) write$P9_RREMOVE(r2, &(0x7f0000000280), 0xff7f) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x3c, 0x2}, &(0x7f0000000080)=0x0) timer_getoverrun(r4) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642fe1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 03:57:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0xce, 0x7fff, 0x8, 0x1a9}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:17 executing program 4: epoll_create(0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) eventfd2(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000001b00)='./file0\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000004fc0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) pipe(&(0x7f0000005140)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000054c0)) epoll_create1(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000057c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000005800)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) pipe(&(0x7f0000006840)) openat$uhid(0xffffffffffffff9c, &(0x7f0000006880)='/dev/uhid\x00', 0x0, 0x0) creat(&(0x7f0000006900)='./file0\x00', 0x0) open(&(0x7f0000006940)='./file0\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000006ac0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000006b40)='/selinux/relabel\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f0000006b80)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x10000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000007040)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000007100)='/dev/urandom\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000007500)='./file0\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000007600)='/proc/self/attr/keycreate\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000007640)='./file0\x00', 0x0, 0x0) open(&(0x7f0000007800)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000007840)='net/udplite\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f0000007880)='/selinux/member\x00', 0x2, 0x0) open(&(0x7f0000007980)='./file0\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000007d00)='/selinux/enforce\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000000)) dup(r1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xfffffffffffffff9, 0x0) [ 3009.605552] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3009.794233] binder: 5042:5055 unknown command 603979788 [ 3009.800391] binder: 5042:5055 ioctl c0306201 20000100 returned -22 03:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000280)={0x9, &(0x7f00000001c0)=[{0xec7, 0x3455}, {0x40, 0x3}, {0x19, 0xfffffffffffffff7}, {0xb4be}, {}, {0xaca, 0x3}, {0x7, 0x7}, {0x59ad396f, 0x2}, {0x328, 0x800000000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x81e) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000efd0)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) 03:57:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000140)={0x2, 0xffff, 0x2, 0x5, 0xba, 0x9}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) write$FUSE_LSEEK(r1, &(0x7f00000001c0)={0x18, 0x0, 0x7}, 0x18) ioctl$LOOP_SET_STATUS64(0xffffffffffffff9c, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) 03:57:17 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) 03:57:17 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000000180)=0x23, 0xfffffffffffffec8) sendmmsg(r0, &(0x7f0000009f00)=[{{&(0x7f0000000040)=@caif=@dgm={0x25, 0x2}, 0x80, 0x0}}], 0x1, 0x0) [ 3009.840218] binder: 5042:5105 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3009.848681] binder: 5042:5105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3009.855724] binder: 5042:5105 Release 1 refcount change on invalid ref 2 ret -22 [ 3009.863268] binder: 5042:5105 transaction failed 29189/-22, size 40-40 line 3013 [ 3009.870867] binder: 5042:5055 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3009.877662] binder: 5042:5105 ioctl c0306201 200002c0 returned -14 [ 3009.925558] binder: undelivered TRANSACTION_ERROR: 29189 [ 3009.926797] binder: 5110:5113 ioctl c0306201 20000100 returned -14 [ 3009.980906] binder: 5110:5120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3010.010617] binder: 5107:5114 ioctl c0306201 0 returned -14 03:57:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f000079e000)=[{&(0x7f0000000000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) 03:57:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000080)="480000001400198c09004b0101048c590a88ffffffea1be50202769604010003d50000000000e389db76df71641b5bffff00c7e5ed5e0000e6ff000000000000eaf60d1886e35b3e", 0x48}], 0x1) socket(0x4, 0x6, 0x645d) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x2, 0x9}) 03:57:18 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x284}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}}, 0x0) [ 3010.015608] binder: undelivered TRANSACTION_ERROR: 29189 [ 3010.041560] binder: 5110:5125 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3010.041696] binder: 5110:5125 transaction failed 29189/-22, size 0-0 line 3013 03:57:18 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='./cgroup.net\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)=',GPL/\x00', &(0x7f0000000240)='bdevsecurityself\xc2procwlan0^+*}\\(\x00', &(0x7f0000000280)='em1\x00', &(0x7f0000000300)=',.vmnet1\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='!ppp1%/eth0\x00', &(0x7f00000003c0)='self]lo\xadproc(vmnet0em1selinuxbdev\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='threaded\x00', &(0x7f00000004c0)='+\\\\],\x00', &(0x7f0000000500)='vmnet0', &(0x7f0000000540)='threaded\x00', &(0x7f0000000580)='$\x00', &(0x7f00000005c0)='threaded\x00', &(0x7f0000000600)='./cgroup.net\x00', &(0x7f0000000640)='\x00']) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x3, 0x0) lseek(r2, 0x200000, 0x4) close(r2) clock_gettime(0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0xfeec) [ 3010.041721] binder: 5110:5125 ioctl c0306201 200002c0 returned -14 [ 3010.045562] binder: undelivered TRANSACTION_ERROR: 29189 [ 3010.128680] binder: 5110:5120 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:18 executing program 5: utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x77359400}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)='veth0_to_bridge\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) r1 = socket(0x11, 0x800000003, 0x600081) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$tun(0xffffffffffffffff, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="911e7da51bbc058a4348281c24c2fe18bbc2203dc9aad9f6dd1e72cd830c56b3ff61be029a37f14b6f764878a184e98dc3b9dce19a4b961e9a3c5150c51c4c9059498529a402df6cda9a1f98cbd29310aff05a2aa3c87d73db76c4450186d77f9c185cc7cf8d662d1eab8280ff95ce99bf0f0868374904a45f85c867471bad360a0318a78b9bff7a6a17b7fe14533ad1d7b53c2b87d579aaa123d48a93fcb4f5d1b86eef6d536707fd05f8c9dbdff1e97506"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r5 = epoll_create(0xe8f1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) sendfile(r4, r4, &(0x7f0000000180), 0x5) poll(&(0x7f0000000340)=[{r5}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000480)={0x0, &(0x7f00000002c0)}) ioctl$KDGKBMODE(r2, 0x4b44, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 03:57:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x8000000}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000180)) r2 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r2}) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x4, 0xfff}) 03:57:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x2, 0x800) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3010.720046] binder: 5110:5120 ioctl c0306201 20000100 returned -14 03:57:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x54, r2, 0x428, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sched_rr_get_interval(r1, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000008, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="e339f516e2e44a75349967db5d74346d5e10224f2b83c480e08fbf2f2cde025170b205aa4d986fa10b754703eb8b875f8957dac7846a0f99bb44929c70488f71", 0x40, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000340)='\x00', 0xfffffffffffffff8) r3 = request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='user#@\x00', 0xfffffffffffffffb) r4 = request_key(&(0x7f00000004c0)='pkc\x967_test\xed\xa7\xb3\xbc^\x96s\xe8\xb0,,\xf8\x17\xc6\x90\xcb\xce9\x9c\x94\x93I\x02f\x11)\x88\xfb\xc2\x9e\xfa\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000240)='system\x00', r3) keyctl$unlink(0x9, r2, r4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:57:18 executing program 4: r0 = getpid() r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/171, 0xab) socketpair(0xf, 0x1, 0xff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0xf23, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x10000, @rand_addr="8fbd7f3593f1a8cb35c61f18d36d29aa", 0x7}, 0x1c) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x20) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x43ce}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x3, 0x528, [0x0, 0x20000540, 0x20000570, 0x20000690], 0x0, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x11, 0x805, 'veth0_to_bond\x00', 'bridge_slave_1\x00', 'syzkaller1\x00', 'team0\x00', @random="f3fb7f75b290", [0x0, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x25}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xa0, 0xf0, [@connlabel={'connlabel\x00', 0x8, {{0x1, 0x1}}}]}}, @common=@log={'log\x00', 0x28, {{0x400, "a7593285b2417e4c374915c0cdcc911461a228c1a779d49d6ea54f7245c4", 0x8}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0xf, 0x50, 0xe83f, 'eql\x00', 'team_slave_1\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @local, [0x0, 0x0, 0xff], @broadcast, [0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}, {{{0x17, 0x40, 0xe9df, 'lapb0\x00', 'dummy0\x00', 'erspan0\x00', 'bcsh0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x1e}, [0x0, 0x0, 0x38b977215c392456, 0xff, 0x0, 0xff], 0x2a8, 0x2d8, 0x308, [@bpf0={'bpf\x00', 0x210, {{0x101, [{0x8, 0x1, 0xc45, 0x5}, {0x1e700000000000, 0x7, 0x6e1a, 0xfffffffffffffffb}, {0x1ff, 0x80000000, 0x7, 0x3}, {0x5, 0x5, 0x0, 0x7}, {0x1f, 0xa102, 0x7, 0x4}, {0x8000, 0x6c1, 0x1, 0xa5}, {0x1, 0x9, 0x9, 0x5}, {0xff, 0x2, 0x8, 0x189}, {0x3103, 0x200, 0x1fc6, 0x40}, {0xd99, 0x1, 0x5, 0x101}, {0x3f, 0xfffffffffffffffa, 0x7fffffff, 0x1000}, {0x2, 0x9, 0x8001, 0xfffffffffffff801}, {0x7fffffff, 0xffffffff7fffffff, 0x4, 0x6}, {0x4, 0x5, 0x1, 0x8}, {0x8000, 0x7fff, 0xbc8c, 0x3}, {0x8, 0x1, 0x8, 0xfff}, {0x5, 0x0, 0x9, 0x6bb}, {0x81, 0xc7a, 0xdd2e, 0x6}, {0xfffffffffffffffc, 0xffffffffffffff7f, 0x1, 0x4}, {0x7, 0x5, 0x9, 0x80}, {0x2, 0x1, 0xace, 0x3ff}, {0x7fff, 0x5, 0x1f, 0x6}, {0x4f9, 0x0, 0x9e}, {0x4, 0x1, 0x4}, {0x4362e05c, 0x11, 0x53b9612c, 0x7}, {0x3, 0x3bc, 0xfffffffffffffffb, 0x8}, {0x4, 0x81, 0x4000, 0x80000}, {0xf34, 0x7, 0xe8, 0x4}, {0x25ab, 0x9, 0x1, 0x80000000}, {0x5, 0x8, 0xeb, 0x81}, {0x8, 0x7, 0x1f, 0x2}, {0x72, 0x9ba, 0xffffffffffff0001, 0x3}, {0x5, 0xeb, 0x5b}, {0x7, 0x7fff, 0x401, 0x3}, {0x5e, 0x0, 0x77d, 0xfffffffffffffffa}, {0xffffffff, 0xca, 0x1ff, 0x8}, {0x3, 0x5, 0xf400000000000000}, {0x55e, 0x9, 0x9, 0x8001}, {0x100000000, 0x400, 0xffffffffffffffb5, 0xc7}, {0xd1, 0x4, 0x8, 0x4}, {0x3, 0x101, 0xd1f, 0x101}, {0x4, 0x4, 0x2c0, 0x1}, {0x6000000, 0xbb, 0x6, 0x6}, {0x1ff, 0xf1, 0x2, 0x4d32}, {0x20, 0x100000001, 0xfff, 0xb041}, {0x8, 0x8, 0x3, 0x100}, {0x1, 0xd88, 0x80000000, 0x80000001}, {0x6, 0x2, 0x0, 0x2}, {0x9, 0x1, 0x0, 0x8}, {0x3f, 0x0, 0x200, 0xc56}, {0x3, 0x7f, 0x7, 0x471}, {0xf699, 0x100000001, 0xfff, 0x100}, {0xfffffffeffffffff, 0x28d5e164, 0x2}, {0x4, 0x4, 0xfffffffffffffff8, 0x40}, {0x440d937c, 0x0, 0x2772, 0x7}, {0x8, 0x1, 0x6, 0x9}, {0x9, 0x81, 0x1f}, {0x101, 0x81, 0x90, 0x9}, {0x100, 0x3, 0x3, 0x7f}, {0xb36, 0x5, 0x2, 0x1}, {0x1, 0x6490, 0x6, 0x53066a9}, {0x200000000000, 0x8000, 0xfffffffffffffffe, 0x9}, {0xac, 0x1ff, 0x3, 0x5}, {0x10000, 0x470, 0x80, 0x1}], 0x2}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x5a0) pwritev(r3, &(0x7f0000000d80)=[{&(0x7f0000000b00)="19657463d037c42050c5467f3c772297f03f4642cea4ee3e7eb8621d7d3d54fa4846c9ae3d9027b8798b0cce6f47a1394cabbb85a15b7da7e2a4041cf68bb0c3483b75d4141ad83269d9a2fff0d84401645cdd3da31cda616eccac349e67a18060c52859c67e2f68a949ff5ba134ddc9a38b6edefc3b392567960b3f2b83831eb6b135446f479d182e02252cd014f86e2f02553a5fb96553c363a0", 0x9b}, {&(0x7f0000000bc0)="dbd155e22019c4baa9acfc8a8f4144211e1314992e66f40c53a4581bb5d479553484a654afe5db4f19fd4ee88bb3a8a2dd7498daa485c3725168fe14e3a93822f060c4bbdf3d4cc088d090c71b1d408dcd4e262af22941ecc998b54e283ac47b8601dc7310b05f4285b472829470ed5dc7bca1f5", 0x74}, {&(0x7f0000000c40)="d0cbc888956ce73326359a9f59372e27e0dd89085b33219fd6a698a419013adc5b7381868d97fe73cc7d3dc2000dfda2508368f5152a2a24341e741d62a512a95622c13682ab1a6e49ac257ede87178632a2ff4b6601b123b5372854bcd7e97ba122c6b561db1e2dda435bb63c9ccf26f780aa921d0f7bb9b5f15163b70339f136283d5933f7d7fd0f38cbaf77df56761df2aa685436854b", 0x98}, {&(0x7f0000000d00)="37711059c290e580fa00686ea9282f6091a9d1b7cca237b6ca17fc6269c527cbc866873c707a5e717bea4b72d140b589b9f2126d7d9ffe0b4a869ff3b8f113a9fe04ddd5c07f74d6d74ba5a1a1cf0a22bc56d8e43bd06b7301de6f13c9241429f55929b732047c8e9f40054bb7b8e0", 0x6f}], 0x4, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000dc0)=""/118, &(0x7f0000000e40)=0x76) r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$void(r6, 0x5450) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000ec0)=""/4096, &(0x7f0000001ec0)=0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001f80)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000002080)=0xe8) lstat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() r10 = geteuid() fstat(r5, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)='system.posix_acl_default\x00', &(0x7f0000002200)={{}, {}, [{0x2, 0x4, r7}, {0x2, 0x4, r8}, {0x2, 0x4, r9}, {0x2, 0x6, r10}], {0x4, 0x1}, [{0x8, 0x5, r11}], {0x10, 0x5}, {0x20, 0x5}}, 0x4c, 0x2) setpgid(r0, r0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000002280)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002300)={r2, 0x7, 0x1, 0xffffffffffffffc0, &(0x7f00000022c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) fstatfs(r5, &(0x7f0000002340)=""/253) prctl$PR_SET_NAME(0xf, &(0x7f0000002440)='\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002480)={{{@in, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000002580)=0xe8) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1055) 03:57:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) fchmod(r0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x4, &(0x7f0000000240)={0x90000000000341, 0x1fe}) clone(0x3002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x22) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @dev, @mcast2, 0x0, 0x0, 0x0, 0x125}) prlimit64(r1, 0xf, &(0x7f0000000040)={0x6, 0x1}, &(0x7f0000000080)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = dup2(r0, r0) openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) [ 3010.765751] binder: 5110:5163 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3010.773284] binder: 5110:5163 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3010.780470] binder: 5110:5163 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3010.781714] binder: 5110:5164 transaction failed 29189/-22, size 0-0 line 3013 [ 3010.781730] binder: 5110:5164 ioctl c0306201 200002c0 returned -14 [ 3010.825597] binder: undelivered TRANSACTION_ERROR: 29189 [ 3010.850030] binder: 5171:5172 ioctl c0306201 20000100 returned -14 [ 3010.867099] binder: undelivered TRANSACTION_ERROR: 29189 03:57:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000640)=""/73, 0x49}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x6) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fstat(r0, &(0x7f0000000180)) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) accept4(r3, &(0x7f0000000340)=@in6, &(0x7f0000000240)=0x80, 0x80800) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0x128b9372) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0x18}, 0x18) sendfile(r4, r2, &(0x7f0000000400), 0xb26) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x80000001}) [ 3010.929435] binder: 5171:5186 unknown command 84173573 [ 3010.935313] binder: 5171:5186 ioctl c0306201 20000000 returned -22 [ 3010.946773] binder: 5171:5186 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3010.964925] binder: 5171:5186 transaction failed 29189/-22, size 0-0 line 3013 [ 3010.978522] binder: 5171:5186 ioctl c0306201 200002c0 returned -14 03:57:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = getegid() fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0xee01]) getgroups(0x2, &(0x7f0000000380)=[0x0, 0xffffffffffffffff]) fstat(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7, r8, r9]) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:19 executing program 2: capset(&(0x7f0000000100)={0x4000019980330}, &(0x7f0000000000)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000b0601adb0000000000000100000000000000d7921d8a78e6cca4b97691e6f1dcb29a4a3b3b2472f803016aab42c42349d47530ae1ec922dcad026692eb3ef7bc116243b48213e4997801c1b2039a6c0000000029cb4dc5ea8ccb9186ace459f7ddc69a0d661ed5cf009e29b9ecad957a4d39b6fb276fda7762ef", @ANYRES32=r0, @ANYBLOB="00000000ff0f0000000000000000000000000020000000000000000021be4e444dbd285208e96814b004a016"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x37, [], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/55}, &(0x7f0000000300)=0x78) 03:57:19 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x210000, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='sched\x00') preadv(r1, &(0x7f00000017c0), 0x3cc, 0x0) 03:57:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x2000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) clock_gettime(0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x4) listen(r0, 0x800000000) r4 = accept4(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() ptrace(0x11, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0xfffffffffffffdd4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000440)=""/200, 0xc8) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300), 0x0) tkill(r5, 0x1000000000016) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180), 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 03:57:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xfffffffffffffffe, 0x4000000004002) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x806, 0x607) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000640)=""/73, 0x49}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x6) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fstat(r0, &(0x7f0000000180)) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) accept4(r3, &(0x7f0000000340)=@in6, &(0x7f0000000240)=0x80, 0x80800) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0x128b9372) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0x18}, 0x18) sendfile(r4, r2, &(0x7f0000000400), 0xb26) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x80000001}) [ 3011.647106] binder: 5171:5186 ioctl c0306201 20000100 returned -14 03:57:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=ANY=[@ANYBLOB="9f5001ee"], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3011.693910] binder: 5171:5236 unknown command 84173573 [ 3011.700698] binder: 5171:5236 ioctl c0306201 20000000 returned -22 [ 3011.706270] binder: 5171:5237 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3011.755572] binder: undelivered TRANSACTION_ERROR: 29189 [ 3011.763313] binder: 5240:5241 unknown command -301903713 [ 3011.768780] binder: 5240:5241 ioctl c0306201 20000100 returned -22 [ 3011.823878] binder: 5240:5243 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3011.831937] binder: 5240:5243 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3011.840055] binder: 5240:5243 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3011.847319] binder: 5240:5243 transaction failed 29189/-22, size 0-0 line 3013 [ 3011.854681] binder: 5240:5243 ioctl c0306201 200002c0 returned -14 [ 3012.544132] binder: 5240:5243 unknown command -301903713 [ 3012.549761] binder: 5240:5243 ioctl c0306201 20000100 returned -22 [ 3012.589727] binder: 5240:5249 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3012.597391] binder: 5240:5249 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3012.604374] binder: 5240:5243 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3012.605248] binder: 5240:5249 transaction failed 29189/-22, size 0-0 line 3013 [ 3012.605262] binder: 5240:5249 ioctl c0306201 200002c0 returned -14 [ 3012.645580] binder: undelivered TRANSACTION_ERROR: 29189 [ 3012.705633] binder: undelivered TRANSACTION_ERROR: 29189 03:57:21 executing program 0: 03:57:21 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/174, 0xae}, {&(0x7f0000000140)=""/108, 0x6c}], 0x2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x80004000c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) write$apparmor_current(r1, &(0x7f00000017c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=0x0, @ANYRESOCT, @ANYPTR64, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x7) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x2, {{0x10, 0x1, 0x8}, 0x5}}, 0x18) pwrite64(r1, &(0x7f00000015c0)="be5a78826db25a6a72eccbdda26656520732d3711cf4b65ce96d083ca5d9e2069d993ffec2870514a19c15f16691ab289b7da7a16a7cd5fe709103250ef2e48721fb69a43105aea73f88e4c3fe135ecf4abd63b10160cbcb6af1d146db75fccd89cdbc6dcacb0ddb454cf6dc50553ee3af69735cd8d3da61c6d7c82727298e69f91c72c4f8e1e013065353cc8b25193ab97f13483c0d1d8b083b313e85e090ef75f7d9ba6781dda76e6e098b39603b1a4d75c861fcc8bdf70d01296ad176e6522d490dc101c1c0224a677c3c296fcb5b6af0", 0xd2, 0x0) vmsplice(r0, &(0x7f0000001780)=[{&(0x7f0000001700)="21a65058f61359e7e50d37889122caf60700f7117b2898896ae9f6830a50eee848090e0e5db368c73012a7ff09ca371948d4072aae8a18c79b452e39b4aac72db2cff5425110f367d0f26135b6b195fba19742f93469b04256cf323e0ad7598ee3bb16406d2f82716ec1535e561fbed5aaaf", 0x72}], 0x1, 0x1) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000280)="aa3a239c08392c0f746c56475ecf0af8052767e5ffd9bddc1010c5f1d53f625a048d938036c05e4647cc3bc68f1554aac22c11683f194a0b859c7d501f6deafc4c761448e639ceef775608087705e215dfa0eb8c959cecb1d4285694b378143224b4f76672724b79c1a25f255714816e704b48be11edddc398375a0563e5462007144ebc6687fb55772188c88227188a20c6c24d571582faf50cf55607f29c77ed26f76f971ffe95de66f737f9be380095d23d0699377096295c7b9d", 0xbc}, {&(0x7f0000000340)="f94d754349f625d3e913ca7be44996d5e3b9aaea600b8d626e4acd8d491a692d30ebb710f485d516998bdc845dac854107ad4dbbf0a8e5cfacf2e33a23ac0c50721ada14e39a855bc899c47f311b19226106e575470f013c2d791faf1b6ba7a38029b3463008db86bf43a3fc04e89250c49eb80fa764d0385f07f9cfd5332e", 0x7f}, {&(0x7f00000003c0)="ebf85f2e2aa5169c0b4861a9174bb1965add331db58d6d183042b59ef1521cccdac85a660cffdc1b82b0f0d08cab6a2e939d3b329b22a745955656b3df749cb6a35f8ed63113", 0x46}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="a3db62fed0aa076ef991fedb4b4a1269aafb8cc76f9d9773350b29e8f9ea2d0b400ef6376cd218adced1e75784bb14d90f46dc6d5c4fa39b847300b8bda2f5c23e17c6c786dad7ab029b887ef02a05b2fa2bd08deb3e1c216c9721ae460e1ecbf54ca268c262f1825771defd3aac3cac94bb368fff58d50f1f497dcc73bf779b02ec15827b871b051421af2f68b3d20463fbe4643efa3a874fbcb74e0f2e47643b78ff16993b487e9b2c159cbe0eb1146a3dd5f876358f82e39f25776a659480597605ad0ec922d5a10c2cca72c2862db20b5ab15a1259cd1a426c667f02ba0136cda3c5f6b2788d3d", 0xe9}], 0x5, 0x4) 03:57:21 executing program 1: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x17, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_delete(r1) r2 = dup2(r0, r0) clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r3 = gettid() wait4(r3, 0x0, 0x20000000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1a) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140)={0x0, @aes256}) 03:57:21 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@getlink={0x3c, 0x12, 0x721, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xb231}, @IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 03:57:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x800) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000300)="68ebd0d558d3dfdfdcc6b705ecbbcc877e445b7edf9cdc236bac8dc0ffc6b6baa86fcb3412ac900c073a5116b3ec71d610f9f8acf088b2fa3dd7033443d90c4d0b2863a08584922bbaefca9145b35eea5cf0de4f0c923e25a010", 0x5a) 03:57:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 3013.817218] audit_printk_skb: 1341 callbacks suppressed [ 3013.817224] audit: type=1400 audit(1547611041.906:292094): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:21 executing program 0: 03:57:21 executing program 4: [ 3013.842741] audit: type=1400 audit(1547611041.926:292095): avc: denied { sys_admin } for pid=2114 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.856782] audit: type=1400 audit(1547611041.946:292096): avc: denied { net_admin } for pid=2114 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.864031] audit: type=1400 audit(1547611041.946:292097): avc: denied { dac_override } for pid=5254 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:22 executing program 0: 03:57:22 executing program 4: [ 3013.865180] binder: 5254:5256 ioctl c0306201 20000100 returned -14 [ 3013.866188] audit: type=1400 audit(1547611041.956:292098): avc: denied { net_admin } for pid=2114 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:22 executing program 0: [ 3013.882958] audit: type=1400 audit(1547611041.966:292099): avc: denied { sys_admin } for pid=2114 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:22 executing program 4: 03:57:22 executing program 0: [ 3013.888959] audit: type=1400 audit(1547611041.976:292100): avc: denied { sys_admin } for pid=2113 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.890686] audit: type=1400 audit(1547611041.976:292101): avc: denied { sys_admin } for pid=2113 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.891543] audit: type=1400 audit(1547611041.976:292102): avc: denied { sys_admin } for pid=2113 comm="syz-executor4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.908776] audit: type=1400 audit(1547611041.996:292103): avc: denied { net_admin } for pid=2114 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3013.927899] binder: 5254:5261 got transaction to context manager from process owning it [ 3013.927909] binder: 5254:5261 transaction failed 29201/-22, size 0-0 line 3004 [ 3013.927941] binder: 5254:5261 ioctl c0306201 200002c0 returned -14 03:57:22 executing program 2: 03:57:22 executing program 0: 03:57:22 executing program 4: [ 3014.663295] binder: 5254:5261 ioctl c0306201 20000100 returned -14 03:57:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$void(r1, 0x5451) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:22 executing program 5: 03:57:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0xffffffffffffff6f) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x2c3) 03:57:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) 03:57:22 executing program 0: socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000080)=0xffff, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 3014.709400] binder: BINDER_SET_CONTEXT_MGR already set [ 3014.724116] binder: 5254:5261 ioctl 40046207 0 returned -16 03:57:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x1200000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x0, r0}) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) tkill(r0, 0x15) [ 3014.770643] binder: undelivered death notification, 0000000000000000 03:57:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000280)=0x4800, 0x20000102000007) 03:57:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x800) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000300)="68ebd0d558d3dfdfdcc6b705ecbbcc877e445b7edf9cdc236bac8dc0ffc6b6baa86fcb3412ac900c073a5116b3ec71d610f9f8acf088b2fa3dd7033443d90c4d0b2863a08584922bbaefca9145b35eea5cf0de4f0c923e25a010", 0x5a) [ 3014.826375] binder: undelivered TRANSACTION_ERROR: 29201 [ 3014.831862] binder: undelivered death notification, 0000000000000000 [ 3014.832556] binder: 5313:5318 ioctl c0306201 20000100 returned -14 03:57:22 executing program 2: prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x17, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_delete(r1) r2 = dup2(r0, r0) clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r3 = gettid() wait4(r3, 0x0, 0x20000000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x3) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1a) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140)={0x0, @aes256}) [ 3014.886845] binder: 5313:5325 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3014.909819] binder: 5313:5325 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:23 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x2002}, {0xffffffffffffffff, 0x9100}, {0xffffffffffffffff, 0x40}], 0x5, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) fadvise64(0xffffffffffffffff, 0x0, 0x8001, 0x4) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x0, 0x80000000, 0xfffffffffffffff8}) pipe(&(0x7f0000000040)) 03:57:23 executing program 2: clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) [ 3014.933623] binder: 5313:5332 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3014.970493] binder: 5313:5325 transaction failed 29189/-22, size 0-0 line 3013 [ 3014.984034] binder: 5313:5325 ioctl c0306201 200002c0 returned -14 [ 3015.003817] binder: 5327:5338 ioctl c0306201 20000100 returned -14 [ 3015.008488] input input270: cannot allocate more than FF_MAX_EFFECTS effects [ 3015.016314] input input271: cannot allocate more than FF_MAX_EFFECTS effects [ 3015.107504] binder: 5327:5338 got transaction to context manager from process owning it [ 3015.115798] binder: 5327:5338 transaction failed 29201/-22, size 0-0 line 3004 [ 3015.123284] binder: 5327:5338 ioctl c0306201 200002c0 returned -14 [ 3015.624885] binder: 5313:5325 ioctl c0306201 20000100 returned -14 03:57:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) socketpair(0x5, 0x80003, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000001c0)={@remote, @remote}, 0x8) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x40) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:23 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) 03:57:23 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fstat(0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0xffff}) io_setup(0xff, &(0x7f0000000140)) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000300)={0x1, 0x5, 0x1b91}) io_destroy(0x0) 03:57:23 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffa) io_setup(0x9, &(0x7f0000000000)=0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_getevents(r0, 0x8, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) setfsuid(r2) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x8001) 03:57:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$TIOCCONS(r1, 0x541d) flock(r1, 0x8) [ 3015.672422] binder_alloc: 5327: binder_alloc_buf, no vma [ 3015.678068] binder: 5313:5325 transaction failed 29189/-3, size 0-0 line 3136 [ 3015.685351] binder: 5313:5325 ioctl c0306201 200002c0 returned -14 03:57:23 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@initdev, @multicast2}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x52}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) epoll_create1(0x80000) [ 3015.715593] binder: undelivered TRANSACTION_ERROR: 29189 [ 3015.722082] binder: undelivered death notification, 0000000000000000 03:57:23 executing program 4: rt_sigaction(0x4000000, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x1) mkdir(&(0x7f00000013c0)='./file0\x00', 0x4) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0/../file0\x00') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/net\x00') write(r0, &(0x7f00000003c0)="814716b19d4eac4abeecab3602f47bbc6fe6865dca2a7be25ebccef803d0c2cf1d0d3e5d6f626513fcb45df6c3206aa0e297cb7c9772948e54342fb8479862c48ccc38898b16fd57184a396fe7c4419839f056e6b59939780b5db92862a936a3e5e9121d16aaa83212f9cc559c0660b0263707774bf8b52439a3849d0821c3ead296087020f07f57f875e819d2c7f95163d6fef2f761577b5611cb20219a8c66973f62e9f45428563d5bbdeb11eed8f30e7a03709f7a5d610bcc395ba57451", 0xbf) clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) accept4(r1, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000240)=0x80, 0x80000) r2 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) fstatfs(r2, &(0x7f0000000280)=""/124) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) ftruncate(r1, 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockname$packet(r2, 0x0, &(0x7f0000000180)) getpeername$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000004340)={@loopback, @multicast1}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x7, 0x8d3, 0x0, 0x7fffffff, 0x3, 0x3f, 0x0, 0x1b5, 0x40, 0x1b5, 0xffffffff, 0x2, 0x38, 0x2, 0x0, 0x6, 0xfffffffffffff001}, [{0x70000007, 0x5, 0x6, 0x5, 0xff, 0x4, 0x3224, 0x7}], "e1b07f66bc7e", [[], [], [], []]}, 0x47e) socket$inet(0x2, 0x4000000000000001, 0x0) [ 3015.754962] binder: 5364:5366 ioctl c0306201 20000100 returned -14 [ 3015.795238] binder: undelivered TRANSACTION_ERROR: 29189 03:57:23 executing program 5: socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = socket$inet6(0xa, 0x801, 0x0) r4 = dup(r3) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = fcntl$dupfd(r5, 0x406, r2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000003c0)=""/59) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f00000001c0)="c446a45d3965233f4bbe69e599eb2acee60389b69b8ac19c2a036ac19e8ff3680e7f9fcfd1a36f178e03f23f6d4e59b29361a079b387b286c89ae8ecf08d2132a5a250da093bd46d178db96493e0d5b1713dc0af690ae70a25eb0a0da4d5"}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x8000000}, 0x28, 0x1) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) lstat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)) write$P9_RLINK(r6, &(0x7f0000000080)={0x7, 0x47, 0x8}, 0x7) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) read(0xffffffffffffffff, 0x0, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 3015.846458] binder: undelivered death notification, 0000000000000000 [ 3015.855098] binder: 5364:5366 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3015.855159] binder: 5364:5366 transaction failed 29189/-22, size 0-0 line 3013 03:57:24 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 3015.855171] binder: 5364:5366 ioctl c0306201 200002c0 returned -14 [ 3015.941955] binder: undelivered TRANSACTION_ERROR: 29201 03:57:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x9, 0x5, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x19c, r3, 0xc00, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54d0000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff97}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0021040000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x821, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x2c, r5, 0xf20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) 03:57:24 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 03:57:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003440)={&(0x7f00000025c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x6, 0x7fff, "06e72fcd22ed8b9c0670eba2c29f8c2b1bbc43028ae34360aa4815392f492d1b1494deaea0fbfe47fa3ee3f2f517cdb1ad4883df311c1a5fade6581bc82802", 0x3a}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002c80)="d4c7f94dc86ba345276aba4e7f70d4b14e89b425faf2678195044824ced8cd5363e720c5396a60e865f95b4618982f91974a177ea7845b3b7e50ed3e7e0d90c666aebc5e00b2998fc05069cf8efca81aec8986d6dbed681b", 0x58}, {&(0x7f0000002d00)="710211c8ead65795b69e091de9d3cb75d8218b440e681fe333ed6b8e831527a29d3121d10bfcc6e7430d9d6723f330f4c671b6e6182f257307fc8d52e611dc560b187d303b77c2a39aa05d9362405518", 0x50}, {&(0x7f0000001540)="69b84d497b856fd2ac0e1d4118c4fd60fcef88f85410406427b51baeea9c3ffa88cfe8e2013f449668c14b9848a763b7130d4395a31b660d7b", 0x39}, {&(0x7f0000002d80)="ce2de2074aac2ad80b59f571c577b51363e945cd5243822c65b879bd96297bca99db5a7ab08840ace0e18ffa54ef83d78f16caba8adefe03f466244e0ddaaff894f251238e7241951bf8b131a14c26f2cfd3e3065c13786e35553718f06683bce2a2c986bf8d48735d", 0x69}, {&(0x7f0000002e00)="cf3e56de2b6251c26613cbe0664d6889d3e809c1d90d355826d371986914d15fedb6fb97e968652b8a6b8e9c157887c5e92003e3d77b998ae70f9af26bc560dbaa4a377bb709b664651cbfdd9b9749514f8d1ac743385ce23c6faa17c71485da61fd37620c5a8c804647f1189c9bc0d6f18899562ebb52bedc7906fcbda4f9b0b334a8a1df8e7d681068f9b920ed52e28005292e5da665f479a31f2d267cb0557817deddc6579804f519343ce229e93054941bcefd", 0xb5}, {&(0x7f0000002ec0)="ccafc46fe1fb0a80a4c6f79db8257760ea9b2b034b6d0cabb697f20dbbd3767502a0172d4d228238e3ec8850f493394b62716437ace8a95f7a252b570fe93390ecb52f4196381c0457bcfb11fb430c97de935442c1251831faf7a9102dabd32573b59d8005613fcf0a68ec51e6a8e602ab89bb925ea37f324752af57dd010195bd22b5a61abdfde3016770f12255882a514ebd57506c78fa6a6a9ba04a46055e7e51a645b37785b16dae416b38454a24cc13c63fce651da2c434c8ad3a2de6d18eaf67d54b89064e5a06af3bf360dc23c9d83fed3fcb4161d3a6649c6751456380408d6cc01c", 0xe6}, {&(0x7f0000002fc0)="91e280397624952ff066c2c8c7d943b7b96cf7aaa09102bd4363b0c151fb963e72d53392fbf4b5d554a8197f21603135c074e13af7200030d37e2c439003756c02303bb51f8a8a824635bb49b430fe4da456577dd79b84f88d497091a25a6fd730398f4155b786d46fe294f910f6b22dd28795ec56bdbc201f3f352350206c217dcf3927f8655d0472b891e62aaf4da9ba61814437cc7475ed1fd68a10d5207e6e457e2bc0085ea93590ebfb51d5ed4984245393ebdb47b799c11a03de214738c049c6039c096c72", 0xc8}, {&(0x7f00000030c0)="921b00589a76701b796e9d70f8", 0xd}], 0x8, &(0x7f0000003180)=[{0x28, 0x102, 0x8, "9f58703c1d4b7c4dd24ef06f5eea86b78cebc43264"}, {0xb8, 0x13b, 0x9, "1eb5aa803f1d2904096eca32e35825b895586105d9072dd74da13a40ef1b78513620d749af5bff4b8128ec1fd8c804efe4b9d12edc5065bd78d21365de615470b75f3169298c9e199572837a96318ee11a14032ea2735c38f909a8152b811caf16db909d2cc92c997bd2af03f2fe3623f93b833598dec38f04919b7824703fba64b6a8584b228ba230fbd704148b8a0c9e6d67fd1c9f06b469639339320a55147e832fe6da"}, {0x88, 0x10f, 0x2, "272318562daa45962097a083badb0cdb823f1c101b3fe2d17671d6c27d210fc9376ed2ea0ac187c856c35f7149fab3d00ad3d2d10c5d0817a9b416351693f1c366394bb54f58e04f0cdc3fb73c12efbb1a172b9a105647ab6c62ab7c33fc2784d0a089bbdb78744f916a02ba2574cc19d692f4ef666f09"}, {0x98, 0x102, 0x1ff, "52d083f2ce13bb64cb0782a96eca9030ffd9a5baca7ac9a5b51ae071f7964cbb943a3b155d166b0406b043f394653b23113cc16282222bbc401898d300dc8a7d94121121d925903118af11d7deb15de5f035c75bed06aa37da65e67bd678651ca5a568d9354f40aa9628efad32d8e8bae467b037908a882caf037cbc2f4ab76e19a446807e3806aa"}, {0x98, 0x10e, 0x4, "ff31da8276545ca4da1b41ffd3608932990e1bf86ed734c6efdaa1b0621e1f94c422080d8e90d4e6371a8a5a1aa8f34f7aa387426abc74df4b23ddbfb70f38ffd47c33e3f7b8876ed6d40abff93873d3d19f0daf086b17ef7d2e3417eba1e15652e98fc8ff0873b36320fc6c7557ff48263bbcb3f5ffa844ccd22cd279d7423fe1dc54cb"}], 0x298}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x204, 0x20, 0x800, 0x10001, 0x6, @dev={[], 0x2a}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="3487d779e82f860ca8b996e393f5691904000db275cb82bc10d1e571fee6429480e2206a3c13844cb5b8a96831b87503e4c03ade68fa442399e1de397b6dfe927b03e637ec0d2724cf962a4f70801af88bdb14a6f697771ba58fb7172ac209d4ef01082ba286a13d3a547c83d228782f57f0e98e229ca1769f691217a3325913e3a2853a4c33331d4785d09819739baa45c6592777ab338a", 0x98}], 0x1, &(0x7f0000000280)=[{0x30, 0x0, 0x7f1, "aa17b581357e28477bd9eae8d3d4583db74422a90c2fda5b770797"}], 0x30}, 0xcef}, {{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x2, @remote, 'dummy0\x00'}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000340)="385cd93c0a09b7cbd05830872310dfb617e04e63846aecf4a28d64d43c1a9a6fb8f314c0bfbef93ea2e258aeee4b9abbdc13564ce73e3195b5c52f44bd6029cdd2d3e6b14a6bc4afda6d6b7a7cdf113a0993d445251f040d9179312d8b7b5e37", 0x60}, {&(0x7f00000003c0)="28797099b58d67cc65ea7050a9e77494156c6a", 0x13}, {&(0x7f0000001440)="75d9ebea4afc6d1f768e0a9e21f2a71fd9ce1e02c8fac89a7ac5097f4d71daf1995ecc3f4c0f85a3cbab65ae7f917b175dc60426029a11282537f067bf7cdc042769ec8db906076fb91a5276292a62da617b57335c931614154c5d1cecb97eaa9e804eb5c0923e210bcbd6832d23f6674b6b0d5f2da9346d09733cf8aea5f3c03faaa89b47bc966bf973775e00c34956bd178b82b17ebf25bb66e0b6c2beadf7b11fc939a56a4e", 0xa7}], 0x4, &(0x7f0000001540)}, 0x80}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)="ec540c0b13d655094564c57a08e165d1ea4131d117bb1d158d7f9aa65087cc76ed2bda0e4a5d021c", 0x28}], 0x1, &(0x7f0000001600)=[{0xf0, 0x117, 0x3, "720d51f0cb988aac7b5d7c81ff0f96f2799c15aa3c2d02f504036c96f8e5f2a6459c8428cb4db4dbe817e5d43914d030c5aad65dfd9556263b7bd47cb56f2bf1dc2b061ac88646bbd29f287a4345e37de39b949c076fbd0c07bbc32cc9c10cc9bc3a6b99a51fd302e5fd4c623ed94c910f567f559fa46d5cb6b3f646dc7af50b755acf06ac9b6b0e9ea898d349138138637a4d8158cf52c50f929cc083644db2fcd17a7b47eee484ff8291f58d4fdac07e155b267886a29dd7821fde11425a58fa7cfe4db7e2c0410a7208d5f4768023e5ecd352b1e3376b57d574630146"}, {0x28, 0x104, 0x9, "1db7b6213af624db0d2353215a2dbc4fac9173502d"}, {0x100, 0x1, 0x7, "fba45f52a8598163fa4fa663ddf9459358fd5fe896f8ec3af32457b23895534c1f86b0e44f9e28720b3c3f8e83cd19dd907df8984941b2a60dfb827a306f85376a01d1a31b8d0e8549437117fb2f13ac41b774464efd602478590bf654344a296f3b23f6770c6c133e56213527c57f411af8bfed30f9b982b56856303148277579738c5f7fadbfe15740ff8bc3cca9f745fa384eebb81e7714bfe6e7e30cc899b69657ec112cade9a89c3d19bb4e56806f57d011b889996547692c37a740bd01d902f9d0331535f3278eb775e7367cf855620ff7ca0446f7ff4156a71210c9bafd4e44ca857ea8d00ab92af7"}], 0x218}, 0xddc}, {{&(0x7f0000001840)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000018c0)="12c2c59e1a6e98f812a7855c3142f4c6754b1b7bc81e6bb5bee44046fe372d0842dab7129a8e914a218869a4dc53fbab995a997836ce7f65bf2edd811b45e07c4c11f81099994b6e67a70fc827b67e68ecfaac37ee33d1c3d0fd70ba6bd2a80bff71782c644027630e045106e49bbdba4f90cdf5f5e1d7d20433ce53e62d01078f45bdcba0af0833fb632e0c491c2a91de942f3e00cdd77765fb645b92a3817c80143857c29d13af3ef66ef57159788555f37553713dcd5d1bc772b2d97982b6fddf626f36b8adc77af2b0e833041144eee217646301b88f9e4d5a", 0xdb}, {&(0x7f00000019c0)="d1f49468990cc25ed76646010d1ebcb5fc71eedc24011a0e404af400077fb11569c74a90f15388ab5d4e210352acc2ab61cb29c9a486e024e0a1ce071d057f172fc818262e52e61ff3e018c02b2e45c3277165983fcc2f5245b38418ac45b100a71c06c616e925c742cf926e78e2973599f54b380d9d6fec42a5f0cba25e6f8a9478ae8053a997d7c9caaf0af094111e0b3e5f4c91fedc488fc58b81108e46721e8bd42c20", 0xa5}, {&(0x7f0000001a80)="2a1885ab40c9d6605d708cc7afbe9c43ca954280ac727e60185aa58ad6e7b3471bd5d78a74bd6788f7b6c6aa83747bb9151f1b5135c517a6803d04960e6e135e6ec7179d7ddb0909abcbde7258d5fc96375a865c4af1e7bec7deeee628129cb2ed70ae16621a5e2088ddbd2d1e2f64ae7004142faaa95bd6714ac86e4b7cd12bc7c9e3594771ace8bda9844c69f3", 0x8e}, {&(0x7f0000001b40)="7384142ae16438939747211f0796d7efe4e8c5075f5b26294091d2237d97b1a57288e9cae4593c36bca7822e4f8ae950b86a290943981d24bf87b7b2eac3540a33dfe5d829c76410abb711d6270b08e4554d7527d4a1645009c3c9fb1bc7028c88aef050efcb3f264d18165e2c8c6e92b14ef425ede1411eb7e56da557196df3ea47622c5c0fb6dda98285d74858e8b2323d5149d429fcc9045451c2c41a850aebd34745e0900f94f6273ed6e7b4a21c23246d581960d560d0cdd18b0450ea3173fae5f163080a113a109b3df88404ca32beb568930e1250a5721e2529df", 0xde}, {&(0x7f0000001c40)="6c1272f4bde09c08f1f585e1cc785eaefa83251b03d45bc63e3ec2bdba9e89e291560b21eb2e9eba89e6bba0acfa1f596534fd5de5767d817a5f8582094e678e32423e3f042d1bbea92bdfe6db6f18eb749607", 0x53}, {&(0x7f0000001cc0)="ae2498cc83495ecb3344b972a9ba5902e46f4f790a3a9521a32c3631919bd4282f39755c97b64cebaab25d6b7aa6ebd12c6930f11ce13bbbe2a548d91e96b2f2b08ce658e38e7ed22116c9fa3ad6ed895d247efc57", 0x55}, {&(0x7f0000001d40)="3c8659c045c491a8ab28e28f2247359b8da2fedfb0b95fbd757784a8fb599ce34fbaf5c4db56fe9b4ef342b83db32f4468a8a435fb9e8c7f6034fdee1d79927b03b61e3bafc7c4667b9d01c05ad93c4f990cb36b28e7f4266cf530", 0x5b}], 0x7, &(0x7f0000001e40)=[{0x78, 0x0, 0x904, "b2756a009ae2977a002f483cc28312605c4dadd61c2866a0800e32142b96fa7d2ce2bcb736e355a6b5b026e51cac546b68a3712235f6bf15a5945c9d608d0ad8ecc85b44954b732c1a1e40635e0ba07793e44955752694179e01e355a216ab69bbb96c"}, {0x78, 0x117, 0x81, "c0775b94632e8e3cd0927864cad6cd1511be3c546eb492e02d6b8f12be78d3e8ae580e15a86e77ce8a8c40d23ed2f41248e5db30e61a1f2a8f1c6b31e90d28a2546239b9b72e5019f0db1825b4511db0c7384180c3c35b296cfeaa46b3a79625e9670aa1e5ca21c1"}, {0xb8, 0x11e, 0x1, "a24537e686654a194a97be7da110fd23d909b2c2ee81d65dfd3f52e3bd2bc147f20d1f5d7be61d4922c05fe911abbea2895c1ea3b705bce75849a8112354e032e851fdc14d9b608571723a1f3cd00a1869db41bb0016135c1e4334f86c52c6898dcc51975e4a2b2717881a7dfc96fcce71a928bcf3fa6eaf403a4338b9d1dfb656a204f4fe08266eaa22ce8441d0355077591951b3cdfa5c3fbef86c51e93ad6e117"}], 0x1a8}, 0x6}, {{&(0x7f0000002000)=@sco={0x1f, {0x3ff, 0x0, 0x40, 0x8, 0x7fffffff, 0x80000000}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002080)="975ee66b7c3cc256c64efdcdbe3557dcc9bed1700319facc4d4693cc9f234a19f7295d62fe7f3eceb4d7c9dd669947b1cfc0ed2f639c43d8beb1d7a010663dcfb542fa6c6492230cbe0b5e0e296629caf28d45203e4d4f9180b60db69e0f5835b069434ca903ac36dce22479bffb3705ee77df3c8c630b5fa9f1e3f6d527715851ce", 0x82}, {&(0x7f0000002140)="78c403ba9b343836a19ad9d1cb73431790550cc97e8505375a6561830f8e653d4be15f270cf6f005cf146049713871440a546dfa9df77cfdc74a192e2c632cbe2c5a9e8835a1bf4d647ebefc170c2f90fca65a82aa8225dba5c0bc51dd48044c643c0b6f973254045d0ec1bf83455fd09697d7e6c042faf8646ef9a12c6ee8d32dcec2b145e23f2fad80413d50cb3efef0d0ea982761f3a126f6ce385d22fffe3fe98c45b111699ab53508554c9811f5deaca95ec79641b04f48a0c0e4685ca63127cf1890efaa9422ae22abe629148b8e223f77f0f46b37ccba8b04ac447471583e2a", 0xe3}, {&(0x7f0000002240)="5fd44fd79176302d06a8d36faae02395cc0fe4e49e0f8f5ca95d4e58c2fc7314c1d6805fb7fbf314864869de0f1d0433f3b6d8b198fcabd4250506122b6ac7bed7e9f58526a9761caec3b932ffa84acd56da177bd202d2cd5715fb0f105552e7a08e201b2b4b177d61ee", 0x6a}, {&(0x7f00000022c0)="24faa7dcde893589d766f24deb9013bab6a0eeb61d47f88746dfaa999baaae683386204cd101f40b8f312d6d1cc490058626fb8532b2364eb0f8ce72dcd235f4315c68b1c3707eb691b5aae490b1bdcb46d7e65a60f21031a51974907df40aec62fc55e16e8389f0f27187e235a0aa4fabf461ee0f325d8fc55343709551456bcd021d867f6da546809251a5514de5e88d75beb2a18fa9844ad51c488d6c248b713c720a831f69cebad4922b85e6a12482aa00fb655796b35efd", 0xba}], 0x4, &(0x7f00000023c0)=[{0x28, 0x104, 0x6, "5014faf55f79196b759d1a7b135d59dfa3a426"}], 0x28}, 0x400}, {{&(0x7f0000002400)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002480)="ecc2c6b270ef0ee1cdc38c51121d6949e10e5aba205ab9023949bcc800786cfa9b7961d9b21083565933de7d796307544aa90ade409ddd383ba5251182a97b97d545e7e57d0ad6752a77261be6613d7cc7a3717770328ba27ea3f84d7dcc647b13248d9f3670be29d21bb616422e7acd9ee43ae1370b3f75c9fcc1ff21af620fed1ec0f4b900798394505a3e7c444874", 0x90}, {&(0x7f0000002540)="79cc779110edef5a527e2cfebb343b169d6414f7b1b0424c3400afe2974bd0509521387d0fee685fd9985ee1e16dd51b8877f96a3d82a60dbfb928bf1b53e6870a3290ffeb18ebb04baef75798c75965f16d703fa7627d", 0x57}, {&(0x7f00000025c0)}, {&(0x7f0000002600)}, {&(0x7f0000002640)="083baaed8d0fe74b2a146ba7506bb63d6ab18041384bd852acbed3a266bdf26a99211ad032769ad37135b02df9a58b6ca812e2562c16fa1f3d27b7745f0e21c1cbb8c22d87894ce9b72e1260b22870af10f06b08a4f7138e1b97a952f1b38308a0177cb3204280513d96b864104a1fb86c868087de891e311869a8177bf974139a68f195b9d1aef93f4bcb06e0c0eccfcbf4f1c2e063801a08f8a8f541b987b96ba3223300a3e0225b3388d37aa1a4ed1b09d1fdb80b73210c88ccdcf68aa717e8d35846531a6106bdb2b641984130600253ed7f55f548c852e9c903fb56fd531093635b669364149048a9", 0xeb}, {&(0x7f0000002740)="351b27b5813cf44d07fbe3a83dbdaadb37efb736d83d42c5e9fd16ec1db78e4dc85b39ed2437624bc289dad399b67d6db444aa8f3df17dab565c72158d8e76f8e978513b459d7a3272002a08e90f2ab964d10dce29552a403a23338d3cb169bf873a2c4055dda99be7a6c95ad338a37f3be304a8834c802254fad046cd393eb47a357890265d81e3cfd2645a0001451ea5dad8c63f82c12846e63191d5a2b3f45a4e", 0xa2}], 0x6, &(0x7f0000002880)=ANY=[@ANYBLOB="3000000000000000150100000400000089929db1733fca86a16c377579985d78cafb08bd70001800fdffffffffff0e010000fcffffffc19fd8ed0000070000000000000000000000"], 0x48}, 0x1}, {{&(0x7f0000002900)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002980)="7c7b11980e93624852b648e9014bd8f11916f20d100de7efb6eda391d4911e5202f9aee89f46922ae4a75a790fa6f9f1e6f2d553cb2d8aed84121dfdc5cfb4025e9e5e7d716b3425cbab9b2138b47a2353893cbba3f97b7423b815159ad4a8e15c80f4abe13b30b666e3bdae225f82d7841f553e7d0ed1b8a8e982fa698937d473ab8f76d62ee3ec91e611bb340124a45abca59584e9bc98597500b9a3e933f7301e1457936059d41bb741071487faa7d18b4dedbb1d6c99bc47830de90535b1d4b6250788d873d13bd5675a85030547c039daba7b7075211114a529460365", 0xdf}], 0x1, &(0x7f0000003980)=[{0x90, 0x115, 0x0, "50bad57ea2ded573fe9a8d1d2a48f06941642eb1b040ef4b54c7680fc313f20e44cb4c460589d073c6c96dbf4092f68d9278d382952f440d8bcfd849d619a70cbff7f015b8ba9dfe9d9d06b4e346eb9d8399fddba8ac1280a44f8bcfd0b30667f533bfa0b16af0c1296e94fd85ea3cafd121a699cf1ffe5f0ed838485ebeb405"}, {0x90, 0x116, 0x2, "be61c665ecdf095e0e74d68b17bb5096a1a5ff6e172017859dcfe47d9b0e912fae1ac0e454eb7f92589e6735d3766667eeb5e71646315f2ce0a96f509c31da8b471be149f124b2b30ba2981b161147acd3df7b10499b6ff5390fe2665c65810fb9e19fc22ebea68482a43e833ec7f198760ce4ecf67f411a6e8307d2ab11"}, {0x108, 0x117, 0x1, "94ae45e261979b4580bfae00eaa35e9bb3f45c9b87dd3705f3dbb2163243980e955bafd6b4cff9505b0a70b4d2c11334e50af80ec7a28655cbe006461e4229d1134e624e2e195aa15fa58cd18edcb99be04c343a2f2aef74c6d3bbfd37e5e3714457ae45cd3913e0b67efed0c32dc8e813b3aadc06ee16fc7bc91cf0dc070744c66147f0bf48142518dad60ce5d1ef50e3c7a2b9a1a8d5a8bfa2c53ecc237523fb4c56e8cf345cda4a3bf999ce0fd21b955a0a2e4eeb8a1f04ca81eaee13bcadd454518ccde7406f05c904a873fb37d261e0162ae8c9ef9656d9e59a8170e2a0c886b9953f5213f6ca9cd4c352630041283ac36cfa"}, {0x1010, 0x11f, 0x7, "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"}], 0x1238}, 0x1}], 0x7, 0x20000001) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8000, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c) bind(r1, &(0x7f0000003480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x0, {0xa, 0x4e22, 0x7fff, @ipv4={[], [], @multicast2}, 0x7}}}, 0x80) sendmmsg(r1, &(0x7f0000003940)=[{{0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x240, 0x0) [ 3016.521290] binder: 5364:5366 ioctl c0306201 20000100 returned -14 03:57:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x101000) stat(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x18}, @in6=@local, 0x4e21, 0xfff, 0x4e24, 0x7, 0xa, 0xa0, 0x80, 0x6f, 0x0, r2}, {0x80000000, 0x2, 0x2, 0x9, 0x400, 0x3f, 0xb730}, {0x6, 0x0, 0x9, 0x2}, 0xd44f, 0x6e6bb4, 0x3, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4d6, 0xff}, 0x0, @in6=@mcast1, 0x3505, 0x0, 0x3, 0x7, 0x9, 0xf7a, 0x8000}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x900, 0x0) write$P9_RMKDIR(r3, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x80, 0x4, 0x3}}, 0x14) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000004c0)="15f12c7c25c6e7266f672112f08c89009344cd6a8e27abed40136339db02512a9cf1c8b4951b043b61b8841ee2c65b4a6158153b503b8499ea35b532ca66e257b454fef3da8c1c65a1d63efb80dc27547318bed173097d1dbda2664295c21d87b8acc6d73b68d1b0fc13739bcff2f17e91f83d117fc7b6c102d68bcf41de352ebc8259e3df1aebcdbbb0a2b564258630ae8c00919e36e3eea0690a851b6cf9369808ae8cc0e75e", 0xa7) 03:57:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x4000000010, 0x802, 0x0) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) write(r1, &(0x7f00000000c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000100)="437f9745e623d6f2d7b41a16dbd84de379ffe714fcd8e9c774166860f94866fa9bb9ca5931a175deb24af28da369a18a1420aafa5adf4f7cf1271043590c55e468cbaf6537ef92d3e58f", &(0x7f0000000480)=""/4096}, 0x18) 03:57:24 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="3445d7cd6486b6a9f3786a507507fcc6be3b5db1507718100fd8136b049c035ea9f21a29640ff35652af5c6eabdc6569c91d5cb59df387274779fd414536ad36da5ffa736cb1c0bf0cf42376b89eb7997f56b536abe01779", 0x58}], 0x1, &(0x7f0000000200)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r1, r2]}], 0x38, 0x4000011}, 0x0) write$selinux_context(r3, &(0x7f0000000000)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) syncfs(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4010, r2, 0x0) 03:57:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() setregid(r2, r3) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x101400, 0x0) 03:57:24 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 03:57:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) socketpair(0x2, 0x4, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) [ 3016.574472] binder: 5364:5366 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3016.575613] binder: 5364:5448 transaction failed 29189/-22, size 0-0 line 3013 [ 3016.575625] binder: 5364:5448 ioctl c0306201 200002c0 returned -14 [ 3016.575970] binder: undelivered TRANSACTION_ERROR: 29189 03:57:24 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="c6d44247d5c73042ac413026204d5bc054c010876724216dc3d9b3ec22c8ff101db8fd2a7045c84b0f39644c0e008e00"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000001c0)=""/133, &(0x7f0000000100)=0x85) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3016.624892] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 3016.645764] binder: undelivered TRANSACTION_ERROR: 29189 [ 3016.661518] binder: 5452:5461 ioctl c0306201 20000100 returned -14 03:57:24 executing program 2: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffff8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 03:57:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x3, 0x9, 0x9, 0x0, 0xb, 0x1000, 0x20, 0x6, 0xfffffffffffffff7, 0x8, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f00000000c0), 0x4) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000200)=""/128) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0xe) [ 3016.674684] PF_BRIDGE: RTM_NEWNEIGH with invalid address 03:57:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) setpgid(r2, r3) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x20, 0x4, 0xbc}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x3, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r1, 0x2008200) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) sendfile(r4, r1, &(0x7f0000000180), 0x3) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x0, r3}) sendfile(r1, r6, 0x0, 0x8000fffffffe) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x8, 0x0, 0x10000) setns(r6, 0x40000000) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000000200)="2ba7b4ee61", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f00000000c0)=r8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000001c0)={0xc178, 0x4, 0x9000}, 0x4) personality(0x0) [ 3016.743883] binder: 5452:5474 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3016.756855] binder: 5452:5474 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3016.766227] binder: 5452:5474 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3016.774546] binder: 5452:5474 ioctl 6612 0 returned -22 [ 3016.782916] binder: 5452:5474 transaction failed 29189/-22, size 0-0 line 3013 [ 3016.796025] binder: 5452:5474 ioctl c0306201 200002c0 returned -14 03:57:25 executing program 5: socketpair$unix(0x1, 0x7, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x36, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r2) pread64(r0, &(0x7f0000003c00)=""/4096, 0x1000, 0x200020) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x3, 0xfff, 0x100000000, 0x9}, {0x6, 0x4, 0x7fff, 0x3}, {0x8000, 0x80000001, 0x9, 0x97}, {0x0, 0x1, 0x5, 0x10000}, {0x20, 0x2, 0x5, 0x1b}]}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x264, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x18ad382e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffcceb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe584}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac47}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xca9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6df}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffbc99}]}]}, 0x264}}, 0xc810) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) tee(r1, r0, 0x8, 0x6) write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x489) 03:57:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x400000, 0xe5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@remote}, 0x7) [ 3017.452231] binder: 5452:5474 ioctl c0306201 20000100 returned -14 [ 3017.505630] binder: 5452:5510 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3017.513191] binder: 5452:5510 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3017.521167] binder: 5452:5474 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3017.527949] binder: 5452:5510 ioctl 6612 0 returned -22 [ 3017.534973] binder: 5452:5513 transaction failed 29189/-22, size 0-0 line 3013 [ 3017.551370] binder: 5452:5513 ioctl c0306201 200002c0 returned -14 03:57:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x1, 0x20}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0xfffffffffffffe3e) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x10880, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) clone(0x207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x5c, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ppoll(0x0, 0xffffffc7, 0x0, 0x0, 0xfffffffffffffd8b) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80003) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f00000004c0)=0x3c1) r8 = syz_open_procfs(r7, &(0x7f0000000380)='environ\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000800)=@generic={0x1, 0x10001, 0x80000000}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='deN\xa7K\xf1\xcf\x86)`ast\x00') io_setup(0x80, &(0x7f00000001c0)=0x0) io_cancel(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x4, r3, &(0x7f0000000580)="938b3dfaa643c8cc535a1a305254b25bb0bfc827dab4771faab076dddb46fcafeac5fd7a5f3a0ce6e5c7df1f2c326b03fa2a9b8e011c8bc8a6be809dd141f43dd23e4f0d12c0f8141e6589341430f200363d3f93479495b29d969f5cb1845f9eaa3fb48fa03a", 0x66, 0x17, 0x0, 0x1, r8}, 0x0) ioctl$VT_WAITACTIVE(r9, 0x5607) ioctl$VT_WAITACTIVE(r1, 0x5607) 03:57:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000180)={0x100000000, 0x6}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) 03:57:25 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="3445d7cd6486b6a9f3786a507507fcc6be3b5db1507718100fd8136b049c035ea9f21a29640ff35652af5c6eabdc6569c91d5cb59df387274779fd414536ad36da5ffa736cb1c0bf0cf42376b89eb7997f56b536abe01779", 0x58}], 0x1, &(0x7f0000000200)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r1, r2]}], 0x38, 0x4000011}, 0x0) write$selinux_context(r3, &(0x7f0000000000)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) syncfs(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4010, r2, 0x0) 03:57:25 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) clock_gettime(0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sched_rr_get_interval(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) truncate(0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 3017.679215] binder: 5521:5522 ioctl c0306201 20000100 returned -14 [ 3017.686140] binder: undelivered TRANSACTION_ERROR: 29189 [ 3017.715671] binder: undelivered TRANSACTION_ERROR: 29189 [ 3017.752904] binder: 5521:5533 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3017.762593] binder: 5521:5533 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3017.778524] binder: 5521:5533 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3017.800399] binder: 5521:5533 transaction failed 29189/-22, size 0-0 line 3013 [ 3017.825913] binder: 5521:5533 ioctl c0306201 200002c0 returned -14 03:57:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0xffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x41d, 0x14}) clone(0x802102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() write(r1, &(0x7f0000000280)="abb330015449cfe686623d47ddf99da54ad52053712c2c9800c6ff9951ad7fab07aff965f22ea9117c6ca77567a48924c128ca634cb6eb5d1a8c1172374352a2ae1376be3ec74379caba79ee4ef3c895c1cd8e1f0825a6a30c322df04b37f32eabdbcc7a287ed49f1e3b917140d17bfe8e6a56850e936d4869ca234fe1b26998c3ab16d906b2800b6fc17da623492dc7110b2a987d07f7890f09601c90b35ced1192eeb9e9f64da8418d09a8ae1fba647118b7b5b8ebf793b8e2b3df3384f4fddaf7275ff5eeba8d9096c70e883b630500e60dc2ccbe46144c0e4eb9bb490307ea5611", 0xe3) sched_setscheduler(r2, 0x0, &(0x7f0000000200)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffd) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x40, 0x4, 0x1}}, 0x14) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="060000001d0000001cae847e000000000000000000000000"]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00\x00\xe4\xff\xff\xff\xff\x00\x00\x00\x00\xff\xea\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00000000677c000000a0220000000000000900005233e62be78a92e9a73d00ffffff7f0400000000000000000000"]}) arch_prctl$ARCH_SET_GS(0x1001, 0x101) 03:57:26 executing program 5: keyctl$reject(0xc, 0x0, 0x101, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000400)=""/234) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/164) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) 03:57:26 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="3445d7cd6486b6a9f3786a507507fcc6be3b5db1507718100fd8136b049c035ea9f21a29640ff35652af5c6eabdc6569c91d5cb59df387274779fd414536ad36da5ffa736cb1c0bf0cf42376b89eb7997f56b536abe01779", 0x58}], 0x1, &(0x7f0000000200)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r1, r2]}], 0x38, 0x4000011}, 0x0) write$selinux_context(r3, &(0x7f0000000000)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) syncfs(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4010, r2, 0x0) 03:57:26 executing program 5: timerfd_create(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) alarm(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='G']}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="dd3614000000000000000000b5da"], 0xe) creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="dd3615000000000000000000"], 0xc) sendfile(r2, r2, &(0x7f00000000c0), 0xfff) sendfile(r1, r2, &(0x7f0000000140), 0x8fff) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000280)={{0x2b, @local, 0x4e24, 0x3, 'wrr\x00', 0x10, 0x4, 0x71}, {@broadcast, 0x4e22, 0x10001, 0xfaf8, 0x9, 0x11}}, 0x44) r3 = creat(&(0x7f0000000840)='./file0\x00', 0x8000000000000000) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x0, 0x3f}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getuid() r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000280)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\x0e(\x1a\xb4/\xb8\x97\xc0\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x98B7\xd0\x92\xef\x1c\x00\xb5\x17\x02o\x8b\xd7\xf2\xb0CjL@\x96\n\xb3\xf6\xbcH(\t\xf6\xbd\x82\xca\xa3G\x99\x19;5DR\x93\xb9\x92\xab^DW>\xef_\xd0\xf4#\xa5\xcf\xb3\x86\xf9\xcc\x99ln\xff\xde~`?\xde\xabD\x86q\xb6;\xecn\x93\x95\xaa\xba\xb4\xd0E\xf1\xad\x98**\x89\x7f\xaf\xa7\x10\xbe\x9eh\x1f0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000380)={@remote, 0x6, r3}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f266f9a600100"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1b700000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x80000000) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000240)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x44, r3}) 03:57:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000080)) [ 3018.655772] binder: undelivered TRANSACTION_ERROR: 29189 [ 3018.695615] binder: undelivered TRANSACTION_ERROR: 29189 03:57:26 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = getpgrp(0xffffffffffffffff) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="3445d7cd6486b6a9f3786a507507fcc6be3b5db1507718100fd8136b049c035ea9f21a29640ff35652af5c6eabdc6569c91d5cb59df387274779fd414536ad36da5ffa736cb1c0bf0cf42376b89eb7997f56b536abe01779", 0x58}], 0x1, &(0x7f0000000200)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r1, r2]}], 0x38, 0x4000011}, 0x0) write$selinux_context(r3, &(0x7f0000000000)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29) sendfile(r3, r3, &(0x7f00000000c0), 0xfff) syncfs(r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4010, r2, 0x0) [ 3018.710201] binder: 5581:5583 unknown command 6578956 [ 3018.726409] binder: 5581:5583 ioctl c0306201 20000100 returned -22 03:57:26 executing program 2: gettid() timer_create(0xb, 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x84) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x3810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000001c0)) [ 3018.818414] binder: 5581:5586 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3018.825914] audit_printk_skb: 1512 callbacks suppressed 03:57:26 executing program 2: r0 = socket(0xc, 0x0, 0x401) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x22}, @loopback}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x1000, 0x26, &(0x7f0000000500)="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", &(0x7f0000000080)=""/38, 0x6}, 0x28) r4 = getpgid(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000380)='net/igmp\x00\x00\x00?\xefI\x03\xa0\xb5V\xcfF\xbd\xe2\xcc\xca\x944\x17m,\x00\x04\x00\x00\x00\x00\x00\x00\x90!{\x95\x10\v.\xa7\xb0v\xba\xdfv\x06\x05\xef\x87\x83G\v\xe4F\xd5\x02\x00\x00\x00\x00\x00\x00\x00G\xf7j\xe4L>\n.8\x0e\x068(9\xddu\xcd^\x05\xf7C=yR%\x88\xd9\x06\xac\x03-vgV%\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x0) preadv(r5, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 3018.825920] audit: type=1400 audit(1547611046.916:292608): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.829472] audit: type=1400 audit(1547611046.916:292609): avc: denied { dac_override } for pid=2112 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:27 executing program 0: eventfd2(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) getsockname(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ipddp0\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x6, 0xfffffffffffff701, 0x4, "1263b9ddaf21"}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 3018.831884] audit: type=1400 audit(1547611046.916:292610): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.844298] audit: type=1400 audit(1547611046.926:292611): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:27 executing program 5: pipe(&(0x7f0000000180)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x0, 0x0) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000001c0), 0x8) unshare(0x2000400) sendto$inet6(r0, &(0x7f0000000240)="9ce1a2ac5e5179656b94ae61a0c465baa1b7eb2aecd97dfaea498eb9a6b65302421ddffbf498784c3156ea172da2cd908c60b036e4234e138919baddde9404ec40bba34952438cfdff", 0x49, 0x8010, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffffffffffc, @remote, 0x20}, 0x1c) signalfd4(r0, &(0x7f0000000140)={0xb}, 0xfffffffffffffebb, 0xfffffffffffffffc) [ 3018.844861] audit: type=1400 audit(1547611046.926:292612): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.878532] audit: type=1400 audit(1547611046.966:292613): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.879483] audit: type=1400 audit(1547611046.966:292614): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.880566] audit: type=1400 audit(1547611046.966:292615): avc: denied { dac_override } for pid=2112 comm="syz-executor2" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.881262] audit: type=1400 audit(1547611046.966:292616): avc: denied { net_admin } for pid=2112 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3018.888976] binder: 5581:5594 unknown command -1703991793 [ 3018.891164] binder: 5581:5594 ioctl c0306201 20000080 returned -22 03:57:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x100000000000204, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084503, &(0x7f0000000300)=""/202) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8001, 0x101000) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x54) 03:57:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000d80000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000999000/0x1000)=nil, &(0x7f000095c000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000826000/0x3000)=nil, &(0x7f0000d35000/0x3000)=nil, &(0x7f0000d1d000/0x1000)=nil, &(0x7f00001ae000/0x2000)=nil, &(0x7f00009e1000/0x4000)=nil, &(0x7f00005b8000/0x4000)=nil, &(0x7f00008e3000/0x4000)=nil, &(0x7f0000000180)="c6cff403e0a1f1a7de15f9bba6a2a909bb950c2b9aceec0789ecaf8b32cc659be243ef35ed921084f4cfba46fb39fabfec6e152687d4e94d9f3a4b07d796e5ae695974d96efe50b4de536f947d14e86f0ebbf3ff4b5620b240eee6ee8828e5008f9e1727d780e58bfe520690aee98ed59d62ececd82d89c7d537b6d94c3266ed59400ffa199c1947023807247d263c5ba361a07f4e5f0aaeda34dcbd2456ce7118104a46e4476356520ff3fd4b5be12ebf16293e3e00e7ddfedeb0905efda191417bf4", 0xc3, r0}, 0x68) socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101e6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49dc359ca1ecb9fafd02cf00", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be84631274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000380)=0x78) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4000, 0x0) 03:57:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sched_yield() r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000dbb000), &(0x7f0000329000)=0xfffffffffffffd21) [ 3018.891345] binder: 5581:5594 transaction failed 29189/-22, size 0-3081830400 line 3013 [ 3018.924798] audit: type=1400 audit(1547611047.006:292617): avc: denied { dac_override } for pid=5588 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3019.361398] binder: 5581:5586 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @dev}, {0x1}, 0x4, {0x2, 0x0, @multicast2}}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) 03:57:27 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') r1 = dup(r0) utimensat(r1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x53214eb3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) [ 3019.501826] binder: 5581:5594 unknown command 6578956 [ 3019.514259] binder: 5581:5594 ioctl c0306201 20000100 returned -22 [ 3019.535322] binder: 5581:5594 Acquire 1 refcount change on invalid ref 0 ret -22 03:57:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='children\x00') ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000300)) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cgr\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x9, 0x81, 0x8001, 0x15f, 0x7, 0x8, 0x7a, 0xed6, 0xffffffffffff0001, 0x3, 0x7, 0x5}) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3019.543948] binder: 5581:5639 unknown command -1703991793 [ 3019.543955] binder: 5581:5639 ioctl c0306201 20000080 returned -22 [ 3019.544454] binder: 5581:5639 transaction failed 29189/-22, size 0-3081830400 line 3013 [ 3019.589880] binder: 5581:5594 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000600)=[0x0, 0xee00]) r11 = getpid() r12 = getuid() stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000ac0)=0x0) r18 = getuid() stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000bc0)='user\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@empty, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000e80)=0xe8) r25 = getegid() r26 = getpid() r27 = geteuid() r28 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000ec0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0, 0x0}, &(0x7f0000001080)=0xc) r32 = gettid() r33 = getuid() lstat(&(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002cc0)=0x0) lstat(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002e80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002ec0)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000002fc0)=0xe8) fstat(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000003180)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="d434ee888db0ec7eac13fd91e4b1b9360e937e17a426db6c30d7ac9e7deeb5e835997efb16e3", 0x26}], 0x1, &(0x7f0000000880)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xd0, 0x1}, {&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)="262756a4c411c6ccf2a10d37f74fccd73c9d46440292eae6e2b76137c56bffd8667062226a8cc064a6136a4b1a3e66e189b4ad499336ca93df651e36b08f52dffa92ff52196ee4b9abe7b17dd3b9d0a538339b2cd2beeecde49c4e178c5b85922ba10a4827603c774c01bf9c0aea95267a6ff10d1652", 0x76}], 0x1, &(0x7f00000010c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0xd0, 0x4000}, {&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001240)="fedf81324f2a4f6897824f5cc91028f1f8cadb6c1b7b68d75b17ef9f2ca268e45b6eb4d133a75758edf638ead8efe95589d39a5fe7ec5fba50ca90b87dfdb53d94e8cba8ae17e9dee93412a04425fc9ee0b0e642c76f559b41865cbc3b7438b7753eeb215206d619be170f83", 0x6c}, {&(0x7f00000012c0)="bbdfb0fe9de7d13228bff134927af611f8a92c5af0aa4df6fbb21c0c18be2eb7604b45bd4e16e5774b6e4827da49eb319c96ff4b3638d16fbe4fc24b6855c58de3cfbec1b6bcb2c0b7afd8b14bfa88294ffc62d442c939674a2e51991db8314649213b62b91a938eb9ceb6d1a1f5ec2b7c1ec7ed05", 0x75}, {&(0x7f0000001340)="4f6367ed3bab70ac8b1d1e63c34ce1da5d9c60b7404c92e498976db46a5189e2f8ec448d2a9cd3e8b1255cbcff1ee99bacf02153b94ac23397e934", 0x3b}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="5f2e95d852aec05bb60a4a7b7c2a772b35071dbf9b3f57472a4789109b9d6a5cdf7f41e9191b667320ca8ac14cad146b027d33052fdb3765e86045c6c4d10eb404ab77167fc600f538ae493ff4d8464895e0e9b2aac34217d8e3416a57e4c11171483003fd9c880047c2bbd64214c9210a6b081d9503c27d778608b2084a18e7a4b842fad43a71405a49a76811914546e71d3c0f34d0f42b353d4117a65ff424d1427cc263bafcbc152bb02a550c7073246c8cb833c9b9f891571c116bcfe80996c1a8d7bb6e", 0xc6}], 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="30000009000000000000000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4000}, {&(0x7f0000002540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000025c0)="a8bf12e72d063e34c40428e7b292e72e87a6950ec448e625ef126127e7b33b6d55f4c22399eebabd2bc85fe4ef22e0fda5c08436e30eb62404e067bb42e5928761d9f6767d5f0b85d83edf5d0f8842593f98028041f35f1619bbfd1121435816904586069df02e9920aff298b63775b006b884dee5660409568c0504a20f9008c4d2b28edb3a61c58f4eaae1d1888d1d9f5606475e359728e60e8b0b53d3653e09c79ba5592e2e116a32616249b5eab7f58cae4e66d5b628293a38f6dcbdd99881dc1e900b9a6386e9ae3857ffffc433d0e2ad39b659e64e5654d83b05f97cfd6401ae99f090242783514d", 0xeb}, {&(0x7f00000026c0)="8108d691edab94d923318d3becec522089e8dd6685863dc88ecc658c3f899ea68e38621587f5f306fce8721028a6fbbbf4b36cdcba2e36d6d6e3c2cce03d66785c43b114b2486eb45e575c79d9815855f88fd8a0de194277887e00b472bdb58b8865208bba4f", 0x66}, {&(0x7f0000002740)="76a9bcb94cffcd4c7110f1098e2cb1a1", 0x10}, {&(0x7f0000002780)="51d564d003b3cd9a8f0183c8685ace28ccb234f68fbdda4e41957982d061e8d6cdee1ebd7604288e5d73da884eccc70c82b010acc0f205009ccd0b30444b2d9285a18a19d45b76b7", 0x48}, {&(0x7f0000002800)="327477a74a1c140c0df80290d8ce18a64a97c89a726b3cf37945d9df4397f4d32064859154b756ec02c241aa56ea5f410171cdf30f96d30f3f6bbc57aea916ab81d56a0fa08d5db84a5bad3e14d20452f3ce4802d0b8ae4f0d1d46fd0916b0db493901f1d219f8bc685f86caba319961c3ef067e34b8ff626af7c36ff1ce8cfacd490db03ce7210273c4a2fd7b55f7824ab5c2e24560452db31a", 0x9a}], 0x5, &(0x7f0000002a00)=[@rights={0x38, 0x1, 0x1, [r0, r0, r1, r0, r0, r0, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x58, 0x4000}, {&(0x7f0000002a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002b00)="25a330a7d542509110d4b044d7de1f05dbd3e50e270ba76992395206ff8a0880ddc06b465e072aa3a7e5e23064a1fdbeaecbc8cb952699e3d24c81bdfebb14b7b37eaa53ed54a0770d4c848109ac92d2732e34e5f3d43b3688de791f6298b19d4995d92a58dc7f1aeaa7757e7484f2540344da92409d7002d713a302503aec6338da091c", 0x84}, {&(0x7f0000002bc0)="c6946b29a69f221c99224a3fd023b02a2918f8819b306977f3e7f24812455a576fbef9de675bc51d8abe1d1ef5cc5efdc06287847c9b33ea27ead1", 0x3b}, {&(0x7f0000002c00)="fecf32b266b79cf8a57d82815ad41caace3e718fc97362d945ad2966ee521f96e5a2799f27d39b67b0d3d436a4adf69a5d1914d6b1e5e3ef6d5bd72cdd4e95e20dfc", 0x42}], 0x3, &(0x7f0000003080)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1]}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r1, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r38, r39, r40}], 0xf0, 0x40084}], 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'.yz', 0x2}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) 03:57:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00007d0000)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 3019.616181] binder: undelivered TRANSACTION_ERROR: 29189 [ 3019.645862] binder: undelivered TRANSACTION_ERROR: 29189 [ 3019.698242] binder: 5648:5654 ioctl c0306201 20000100 returned -14 03:57:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=[@register_looper, @clear_death={0x400c630f, 0x4, 0x3}], 0x4, 0x0, &(0x7f0000000100)="6cec5a78"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 03:57:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x6, 0x4) bind(r0, &(0x7f0000000200)=@in={0x2, 0x4e20}, 0x80) nanosleep(&(0x7f0000000100), &(0x7f00000001c0)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x6, 0xa10, [0x0, 0x200002c0, 0x20000560, 0x20000590], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x15, 0x1, 0xf7, 'yam0\x00', 'rose0\x00', 'gre0\x00', 'veth0_to_hsr\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x1d}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x4, 0x4}}}, @state={'state\x00', 0x8, {{0xfd21}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0x3, 0x20, 0x6004, '\x00', 'ip6_vti0\x00', 'bcsh0\x00', 'bcsf0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xe8, 0x160}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x40, 0x2, 0x401}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x8050, 0x3ff, 0x0, 0x0, "c86e4735f3120bd76f6b55ed16defca1093d9488a8b0e8bfebb70261878b00281ecffc7af7054bd03286b7e18449d995fedb97ae6aa3ec770e27b9003cdcbbd0"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x13, 0x62, 0x6005, 'vlan0\x00', 'veth0\x00', 'syzkaller1\x00', 'rose0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}}, {{{0x3, 0x8, 0x86dd, 'bcsf0\x00', 'ip6gretap0\x00', 'irlan0\x00', 'syzkaller0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[], 0xe}, [0xff, 0xff, 0xff, 0xff], 0xf0, 0x170, 0x1c0, [@vlan={'vlan\x00', 0x8, {{0x0, 0x3, 0x8809, 0x2, 0x6}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@local, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 0x4e24, 0x29, 0x1, 0x4e20, 0x10, 0x20}}}]}, [@common=@log={'log\x00', 0x28, {{0x48000, "345fdca945d30fdd5d021fd5adf1956d68aa32ebd5c40e17ac7fe6d7d7b1", 0x4}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x400}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', 0x20e2b9ff}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0x3, 0x1, 0x201, 'hsr0\x00', 'hsr0\x00', 'rose0\x00', 'nr0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @dev={[], 0x22}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0xa0, 0x1d0, [@vlan={'vlan\x00', 0x8, {{0x4, 0x7, 0x8914, 0x1, 0x7}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}}}}, {{{0x15, 0x42, 0x0, 'veth0_to_bridge\x00', 'caif0\x00', 'syzkaller0\x00', 'ip6_vti0\x00', @dev={[], 0x22}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x160, 0x1b0, [@ip6={'ip6\x00', 0x50, {{@mcast1, @dev={0xfe, 0x80, [], 0x20}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000], 0x3, 0x3c, 0x0, 0x2, 0x4e24, 0x4e20, 0x4e20, 0x4e20}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x6aa677a7, 0x3ff, 0x41}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffffffe}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x2, 0x7fff}}}}]}]}, 0xa88) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000d80)={'teql0\x00', @ifru_mtu=0x7}) shutdown(r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) ioctl$RTC_UIE_ON(r1, 0x7003) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x18004e20}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x7, 0x8}) recvmmsg(r0, &(0x7f0000000dc0), 0x0, 0x0, &(0x7f0000000180)={0x77359400}) [ 3019.803144] binder: 5648:5664 got transaction to context manager from process owning it [ 3019.815031] binder: BINDER_SET_CONTEXT_MGR already set 03:57:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00007d0000)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 3019.815038] binder: 5665:5666 ioctl 40046207 0 returned -16 [ 3019.815087] binder: 5665:5666 ERROR: BC_REGISTER_LOOPER called without request [ 3019.815094] binder: 5665:5666 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 3019.867981] binder_alloc: 5648: binder_alloc_buf, no vma [ 3019.867998] binder: 5665:5672 transaction failed 29189/-3, size 0-0 line 3136 [ 3019.868501] binder: 5665:5672 ERROR: BC_REGISTER_LOOPER called without request [ 3019.978590] binder: 5648:5664 transaction failed 29201/-22, size 0-0 line 3004 03:57:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x40) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000200)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000540)=""/91, 0x5b}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)=""/230, 0xe6}], 0x7, &(0x7f0000000280)=""/63, 0x3f}, 0x21) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000a00)={@multicast1, @local, 0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000ac0)={@rand_addr, 0x0}, &(0x7f0000000b00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'sit0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000e40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000041c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000042c0)=0xe8) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004500)={&(0x7f0000004300)={0x1d0, r3, 0x300, 0x70bd26, 0x4, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x16c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xfffffdfe, &(0x7f00000001c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="c00000001b0001000000000000000000ff010000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000eb0ac6fc337c04a1828e1ddce3fbe0c544170d8cf75b51933cb9806f5bf8fddb998d122ddede91d2d41ed9a20cd00eedda38425f6355d88a21b1cd3205e7e7125e6bac51b06141368485f76bd691b632f1b57e782fad5fe9b6ea2267cefbca59107f2e156486fb1b1ab65d8845", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000098a7a21ebd0000000000002100000000000000000000001000000000000000000100e1000000050000000000000000000000000000004000000000000001010000000000000000002890180266a3f9f3ae70de3d132f000000000000000000000000000000000000005d0100000009000a00bde198b6c85463f79a38"], 0xc0}, 0x8}, 0x8800) [ 3019.987351] binder: 5648:5664 ioctl c0306201 200002c0 returned -14 03:57:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() prlimit64(r2, 0xe, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_get$pid(0x2, r3) 03:57:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) r4 = getpgrp(0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={[], 0xffffffff, 0x80, 0x5, 0x3006, 0xffffffff, r4}) 03:57:28 executing program 5: sync() getsockname(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x80) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000040)=0xc0, 0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 03:57:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x40000000000, 0x2, 0xd, r0, 0xf60}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{}, [@map={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, &(0x7f00000000c0), &(0x7f0000000100)=""/101}, 0x18) 03:57:28 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ramfs\x00', r0}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x22, 0x2, 0x200, "69f7d94f34ea21e78f28843440db5ad1", "e98d9ba83639a06e8abc7a83de"}, 0x22, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="9847c7f59467ad35d16631f19f486d5e7d32e44a2e71f2da631329e7a0269741a2ac86cdb035a2d33188b3e190a2fc1ef7e73fb33936a39610432dbe593bb87337fa3dc950ec671759f4f6098aea9deb324c042083c3b3eea332d5317b883f2ef8797db82969ed10ff322b42fa758beef1e58f6c37febb4630b0d97224e339b2cf3700403b265296e471211aa8f807487881ac4f043aabe46c01f59dc4087f2e9dd25daeeb775a9ee47072e591636bab6ec66cd8613dbcb3e39fefef705a96d6417a26ce3a453afcaf"], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000000)='./file0\x00') getitimer(0x0, &(0x7f0000000340)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r0}, 0x10) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) unshare(0x2020000) [ 3020.468756] binder: 5648:5664 ioctl c0306201 20000100 returned -14 03:57:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000003c0)={0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x2a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x11c, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x30, &(0x7f0000000300)=[@fda={0x66646185, 0x2, 0x2, 0xe}, @fda={0x66646185, 0x1, 0x4, 0x3}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000040)=[0x18, 0x48, 0x28, 0x0, 0x30, 0x30]}}, @clear_death={0x400c630f, 0x2, 0x4}, @dead_binder_done={0x40086310, 0x1}, @free_buffer={0x40086303, r1}, @register_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000280), &(0x7f0000000380)=[0x0, 0x78, 0x0]}, 0x200}}, @reply_sg={0x40486312, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30, 0x18, &(0x7f0000000400)=[@flat={0x77622a85, 0x1, r2, 0x2}, @flat={0x73622a85, 0xa, r3, 0x2}], &(0x7f0000000440)=[0x60, 0x38, 0x28]}, 0x25a6}}, @free_buffer={0x40086303, r4}, @enter_looper, @register_looper], 0x1000, 0x0, &(0x7f00000005c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/177, 0xb1}], 0x3, 0x851) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c0}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, r1, 0xf05, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf301}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x6}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x49a}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 03:57:28 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f0000001740)=[{&(0x7f0000001640)=""/7, 0x7}, {&(0x7f0000001680)=""/140, 0x8c}], 0x2, &(0x7f0000001780)=""/216, 0xd8}, 0xcbdc}, {{&(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/146, 0x92}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/62, 0x3e}, {&(0x7f0000001a00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000001c40)=""/165, 0xa5}], 0x7, &(0x7f0000001d80)=""/107, 0x6b}, 0xdf86360}, {{&(0x7f0000001e00)=@in, 0x80, &(0x7f0000006300)=[{&(0x7f0000001e80)=""/100, 0x64}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000003080)=""/95, 0x5f}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/131, 0x83}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/12, 0xc}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/211, 0xd3}, {&(0x7f00000062c0)}], 0xa}, 0xe27}], 0x3, 0x2000, &(0x7f0000006480)={0x0, 0x989680}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x22082, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000002c0)=""/5) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)="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", 0x1d5) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x20000000000000}, {0xa, 0x0, 0x80, @empty, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x5]}, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x80, 0x8, 0x100, 0x5}) setrlimit(0x0, &(0x7f0000000000)={0x8, 0x9}) setsockopt$inet6_int(r4, 0x29, 0x3d, &(0x7f0000000040), 0xfffffffffffffe84) [ 3020.513784] binder: BINDER_SET_CONTEXT_MGR already set [ 3020.519667] binder: 5648:5664 ioctl 40046207 0 returned -16 03:57:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) fsetxattr$security_ima(r1, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f00000001c0), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540), 0x4) 03:57:28 executing program 4: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x2011, r0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200400, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 03:57:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) r2 = getuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 03:57:28 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80800) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'bpq0\x00', {0x2, 0x4e23, @empty}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x1013, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/71) fcntl$getflags(r0, 0x40b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) connect$packet(r1, &(0x7f00000002c0)={0x11, 0x15, r3, 0x1, 0x8, 0x6, @random="1dba45894fcb"}, 0x14) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x8000, 0x0) rt_sigaction(0x16, &(0x7f0000000400)={&(0x7f0000000380)="c42159eb4e5cc462d9b9a100000080c482fd302a6642d9fe360f8eae00000036f083acd10000000000d9eec4e2559a3b470f0f8bc80000001cc4a1e571f200", {}, 0x10000000, &(0x7f00000003c0)="440f38f060e28f4950020bc42165fa0366470ff7c12ef22643da660ac4c1782f49d42e43d8e6c4217de7b05de9e461c4637bf0ba000800004d450f2a5200"}, 0x0, 0x8, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) nanosleep(&(0x7f00000004c0)={r4, r5+10000000}, &(0x7f0000000500)) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000540)={0xffffffff, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000680)={'nat\x00'}, &(0x7f0000000700)=0x78) write$selinux_attr(r1, &(0x7f0000000740)='system_u:object_r:etc_aliases_t:s0\x00', 0x23) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@initdev, @in=@empty}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000008c0)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000900)=0x2) prctl$PR_GET_SECUREBITS(0x1b) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000940)) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) write$cgroup_pid(r6, &(0x7f0000000a40)=r7, 0x12) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000b00)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={r1, 0x10, &(0x7f0000000b80)={&(0x7f0000000b40)=""/60, 0x3c, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r8, 0x4) [ 3020.565636] binder: undelivered TRANSACTION_ERROR: 29201 [ 3020.589012] binder: undelivered death notification, 0000000000000000 03:57:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000048, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000003040), 0x40000000000030f, 0x0) write$apparmor_current(r2, &(0x7f0000000080)=@profile={'stack ', '\x00'}, 0x7) [ 3020.615540] binder: 5665:5672 ERROR: BC_REGISTER_LOOPER called without request [ 3020.615554] binder: 5665:5672 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 03:57:28 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0ee2fffff8ff000000002d00670d7b066f66db683bd51f36bc044926e4ce1ec260774b86bef272c40a3f8f4cbbe910affefd06519d0e317b5e"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x1000, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 3020.617600] binder: 5724:5729 ioctl c0306201 20000100 returned -14 [ 3020.679729] binder_alloc: 5665: binder_alloc_buf, no vma [ 3020.679745] binder: 5724:5743 transaction failed 29189/-3, size 88-48 line 3136 [ 3020.684924] binder_alloc: 5665: binder_alloc_buf, no vma [ 3020.684938] binder: 5724:5743 transaction failed 29189/-3, size 0-0 line 3136 [ 3020.684976] binder: 5724:5743 ioctl c0306201 200002c0 returned -14 [ 3020.810128] binder: send failed reply for transaction 1631 to 5665:5732 [ 3020.822709] binder: undelivered TRANSACTION_COMPLETE [ 3020.832639] binder: undelivered TRANSACTION_ERROR: 29189 [ 3020.843323] binder: undelivered TRANSACTION_ERROR: 29189 [ 3020.875646] binder: undelivered death notification, 0000000000000000 03:57:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[]}}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000280)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00') fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) fchownat(r4, &(0x7f0000000200)='./bus\x00', r3, r5, 0xc00) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000040), 0x4) creat(&(0x7f0000000380)='./bus\x00', 0x0) prctl$PR_SET_FPEXC(0xc, 0x100000) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000540)=""/21, &(0x7f0000000580)=0x15) getpid() getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000400)={@local, @remote}, &(0x7f0000000480)=0x8) r7 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="ef4a113e4a37b2f7d978d215c360"], 0xe) sendfile(r7, r7, &(0x7f00000000c0), 0xfff) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f00000005c0)=""/56, 0x3f}) sendfile(r2, r7, &(0x7f0000000140), 0x8fff) 03:57:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000240)) write(r0, &(0x7f0000000000)="d56a5b4ae01f1a13c9866f6af45c2315b291d57a3f8dd8b5ca99f7579ff065931e03c3e48af72d2ace93f76e7c16441e322adb2f877b56868d3fbffa8da46aac2f165a01a540143af5ce772e746e67bcbeb5e793035f8f030a692f191df0c431a2c5fca7bdc130b8e0fb78da8341d90e4833ccebcb1f91c19285a0c6719c001c43fbce76733dabe50318a1eb58534c03f3d7", 0x92) r2 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) getsockname$unix(r1, &(0x7f0000000a00), &(0x7f00000000c0)=0x6e) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x533) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x109) dup(r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) pipe(&(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) [ 3021.381180] binder: 5724:5743 ioctl c0306201 20000100 returned -14 [ 3021.426451] binder: 5724:5743 transaction failed 29189/-22, size 88-48 line 3013 [ 3021.441783] binder: 5724:5784 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3021.441796] binder: 5724:5784 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3021.452231] binder: 5724:5787 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$void(r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:29 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x3c02b40d) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 03:57:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r1, 0xfffd) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0), 0x80000) open(&(0x7f0000000200)='./bus\x00', 0x40800, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r4) sendfile(r1, r3, 0x0, 0x8000fffffffe) 03:57:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3021.475804] binder: undelivered TRANSACTION_ERROR: 29189 [ 3021.475825] binder: undelivered death notification, 0000000000000000 03:57:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) getsockname$unix(r1, &(0x7f0000000a00), &(0x7f00000000c0)=0x6e) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x533) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x109) dup(r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) pipe(&(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 03:57:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote, @loopback, @empty, 0x3, 0x0, 0x0, 0x800000000113}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x51) [ 3021.645192] binder: 5798:5802 ioctl c0306201 20000100 returned -14 03:57:29 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0e050000000000e4a2133552b46d7b06df5efbcef14c93aa9e622d43b4116f66db683b265c333fb734f5df52d51f04bc044926e4ce1ea496d5"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x3f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'lc\x00', 0x8, 0x8, 0xf}, {@local, 0x4e23, 0x4, 0xa2, 0x5, 0x9}}, 0x44) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 3021.718862] binder: 5798:5813 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3021.730478] binder: 5798:5813 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3021.748206] binder: 5798:5813 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3021.757174] binder: 5798:5813 ioctl 0 0 returned -22 03:57:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0}) setgid(r6) write$cgroup_type(r5, &(0x7f0000000080)='threaded\x00', 0x9) ppoll(&(0x7f0000000400)=[{r0, 0x8028}, {0xffffffffffffffff, 0x2}, {r2, 0x4000}, {r3, 0x1}, {r0, 0x8}], 0x5, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480), 0x8) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 3021.768298] binder: 5798:5813 transaction failed 29189/-22, size 0-0 line 3013 [ 3021.800160] binder: 5798:5813 ioctl c0306201 200002c0 returned -14 [ 3022.439994] binder: 5798:5813 ioctl c0306201 20000100 returned -14 [ 3022.489361] binder: 5798:5846 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3022.496945] binder: 5798:5846 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3022.504100] binder: 5798:5813 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3022.505835] binder: 5798:5846 ioctl 0 0 returned -22 [ 3022.545577] binder: undelivered TRANSACTION_ERROR: 29189 03:57:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r0, 0x1) unshare(0x400) flock(r0, 0x2) epoll_create(0x5) prctl$PR_SET_DUMPABLE(0x4, 0x1) 03:57:31 executing program 5: socketpair$unix(0x1, 0x2000200000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x3, 0x0, 0x0, 0x50ffd}]}) 03:57:31 executing program 1: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80800, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000200)=0x3ff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x16, 0x0, 0x6, 0x1b, 0x0, "c8fd18f27a16cd6795ed6591a72b319033972d3ee6c7e882b25970cf8125d82ec002a070dc6fd2c0938adcbeb55aa8e0f348959b1e94413f1492edf86e638483", "54d450f835159ccf03f2cde795a010327b818a95acd525d01e9e959a33f8557870a6412cca62f7070e5d46d752ed86dbd1db32c78122de4dbbe898ed9160dd73", "dce65f74ccc8188770b1fdb9966083e816c29bd291f5240206f258ec0b5b0441", [0x1, 0xc4]}) 03:57:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) getsockname$unix(r1, &(0x7f0000000a00), &(0x7f00000000c0)=0x6e) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x533) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x109) dup(r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) pipe(&(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 03:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000300)=@sco, &(0x7f0000000040)=0x80) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x5d0, [0x0, 0x20000380, 0x200003b0, 0x200003e0], 0x0, &(0x7f00000001c0), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x40, 0x6007, 'batadv0\x00', 'irlan0\x00', 'ip6_vti0\x00', 'team0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x108, 0x138}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xf7c, 0x1, 0x492}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3, 0x10000}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x7, 0x0, 0xd, 'bcsh0\x00', 'hwsim0\x00', 'ip6_vti0\x00', 'ip6erspan0\x00', @remote, [0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe0, 0x110, 0x158, [@connlabel={'connlabel\x00', 0x8, {{0x8, 0x1}}}, @mark_m={'mark_m\x00', 0x18, {{0x2, 0x0, 0x2, 0x2}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"17ce05b1e0ea6df13877e186bfde8c8c4861505d71fa8c3892ff7159a5eb"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x19, 0x8, 0x17, 'bcsf0\x00', 'rose0\x00', 'bond_slave_0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0xff], 0xb0, 0xe0, 0x110, [@statistic={'statistic\x00', 0x18, {{0x1, 0x1, 0x1, 0x4, 0xe56, 0x5}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}, {{{0x9, 0x14, 0x0, 'teql0\x00', 'yam0\x00', 'veth1_to_bridge\x00', 'teql0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xd0, 0x120, 0x170, [@arp={'arp\x00', 0x38, {{0x32f, 0xf7, 0x3, @broadcast, 0x0, @rand_addr=0x10001, 0xffffff00, @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff], 0x20, 0x10}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x683, 0xff}}}]}, @common=@log={'log\x00', 0x28, {{0x426, "58684bab4adad25c6171d30c68861f52f09d80cf823395d5caf2ce704dcc", 0x1}}}}]}]}, 0x648) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:32 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x19b1, 0x1ff, 0x4, 0x8}, 0x10) [ 3023.852914] audit_printk_skb: 1083 callbacks suppressed [ 3023.852925] audit: type=1400 audit(1547611051.936:292980): avc: denied { dac_override } for pid=5852 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.861732] audit: type=1400 audit(1547611051.946:292981): avc: denied { net_admin } for pid=2113 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:32 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x5}, 0x28, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x800000000007, &(0x7f0000000000)=0x2, 0x4) dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000300)={0x80, 0x3, 0x100, 0x5, 0x8, 0x80000001}) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) truncate(0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000000c0)=0xf8, 0x4) 03:57:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c, 0x80000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/91, 0x5b) r1 = accept4(r0, &(0x7f0000000000)=@ax25={{}, [@rose, @remote, @netrom, @netrom, @rose, @null, @default, @default]}, &(0x7f0000000080)=0x80, 0x80800) setsockopt(r1, 0xfffffffffffffffd, 0x1000006, &(0x7f0000000300), 0xfffffffffffffeea) [ 3023.902766] audit: type=1400 audit(1547611051.986:292982): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:32 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xc4080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x39, 0x4000000000000003) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fchdir(0xffffffffffffffff) [ 3023.904439] audit: type=1400 audit(1547611051.986:292983): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.912022] audit: type=1400 audit(1547611051.996:292984): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.928009] audit: type=1400 audit(1547611052.016:292985): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.930454] audit: type=1400 audit(1547611052.016:292986): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x100) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) socketpair$unix(0x1, 0x203, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) socket$inet(0x2, 0x2, 0x1) ftruncate(r2, 0x208200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0xd, &(0x7f0000000080)='./cgroup.cpu\x00'}, 0x30) syz_open_procfs(r3, &(0x7f0000000140)='pagemap\x00') fcntl$setstatus(r1, 0x4, 0x2004000000006100) r4 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xa5cc54d) [ 3023.932236] audit: type=1400 audit(1547611052.016:292987): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.932678] audit: type=1400 audit(1547611052.016:292988): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3023.934243] audit: type=1400 audit(1547611052.016:292989): avc: denied { dac_override } for pid=5850 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3024.223954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=5878 comm=syz-executor5 [ 3024.263439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=5880 comm=syz-executor5 03:57:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x6, 0x5e, 0x2, 0x7, 0x80, 0x6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x10001, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) r3 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x8, &(0x7f00000001c0)=[{0x0, 0x7fff, 0x6, 0x8}, {0x2, 0x7f, 0x7, 0x8}, {0x608b4729, 0xffff, 0x0, 0x6}, {0x8, 0x3, 0xfffffffffffffff9, 0x81}, {0x8, 0x0, 0xd3, 0x7f}, {0x0, 0x5, 0xffffffffffffff9f, 0x3}, {0x5, 0x1, 0x1aa, 0x6}, {0x4, 0x1, 0x6}]}, 0x10) 03:57:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000280)=0x1c) setsockopt(r1, 0x7, 0x401, &(0x7f00000002c0)="11f0a04f1fded8ca9028d75206aa8fbe3b3dac67a33337c9b7edb8", 0x1b) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x8) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) seccomp(0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getsockopt(r1, 0x1, 0x0, &(0x7f0000000340)=""/77, &(0x7f00000001c0)=0x4d) lseek(r4, 0x0, 0x4) close(r2) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) preadv(r2, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000100)={0x2f, @empty, 0x4e20, 0x4, 'dh\x00', 0x2, 0x8, 0x3a}, 0x2c) recvfrom$inet6(r2, &(0x7f00000013c0)=""/4096, 0x1000, 0x140, &(0x7f0000000180)={0xa, 0x4e20, 0x100000003, @ipv4={[], [], @broadcast}, 0x9}, 0x1c) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000003c0)=0x0) get_robust_list(r7, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f0000000400), 0x0, &(0x7f0000000440)}, &(0x7f0000000500)=0x18) fdatasync(r3) write(r6, &(0x7f00000001c0), 0xfffffef3) eventfd2(0x4, 0x80000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffe89}], 0x1, 0x8) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') syz_genetlink_get_family_id$fou(0x0) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0xfc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:57:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) geteuid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0xa48204) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, 0x0) getsockname$unix(r1, &(0x7f0000000a00), &(0x7f00000000c0)=0x6e) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x533) open(&(0x7f0000000140)='./bus\x00', 0x941, 0x109) dup(r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) pipe(&(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) rt_sigaction(0x38, 0x0, &(0x7f0000000480)={&(0x7f0000000380)="65266736f3f043084c1400c4a2adb90ef3af8f09c8904232673666660fdce8670fdb1d77000000f043808892a2a3476065f3416ec4627d247908c4e271901cc500800000", {}, 0x0, &(0x7f0000000400)="c482619b7868c4e3816b6bfefd8fe878867d400045ed4381b1833f00000d000000c4a131d8e6c463196d9808000000adc40261a94700c4a17e5b3ec4e1e5fcab03000000"}, 0x0, 0x0) 03:57:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f0000000180)=']*nodev-\\cpuset-\x00'}, 0x30) r3 = syz_open_procfs(r2, &(0x7f0000000200)='projid_map\x00') ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x400}) eventfd2(0x8, 0x80001) recvmmsg(r0, &(0x7f0000001f4c), 0x4000000000001b9, 0x0, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) sendto(r1, &(0x7f0000018000)="f8", 0x1, 0x0, 0x0, 0x0) [ 3024.717855] binder: 5852:5904 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3024.725436] binder: 5852:5904 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3024.740805] binder: 5852:5856 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffc9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3024.769503] binder: 5852:5904 ioctl 6685 0 returned -22 03:57:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='irlan0\x00') ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3024.872834] binder: 5911:5914 ioctl c0306201 20000100 returned -14 03:57:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) flock(r4, 0x400000000001) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file1/file0\x00', 0x0, 0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rename(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200)='./file0\x00') unlink(&(0x7f0000000300)='./file1\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x800, 0x0) io_cancel(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000100)="b45cbffd74a20343dae9dc58a7f8002a1cded1a64f77f3a517ed3c09cb003b497730b81a8de22ce44f1c2c0f1e672a7455bd751e78c1eff71608a02e67fa1962ddb703f87938d24e48897b2a9dc139007341a6705d", 0x55, 0x100000001, 0x0, 0x2, r6}, &(0x7f0000000280)) [ 3024.944792] binder: 5911:5919 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3024.973303] binder: 5911:5919 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3025.009953] binder: 5911:5919 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3025.044396] binder: 5911:5924 transaction failed 29189/-22, size 0-0 line 3013 03:57:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r6 = open(&(0x7f0000000140)='./bus\x00', 0x8, 0x0) lseek(r5, 0x0, 0x2) getgroups(0x0, 0x0) getresgid(&(0x7f0000000e40), 0x0, &(0x7f0000000c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)) stat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) sysinfo(&(0x7f0000002000)=""/4096) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setreuid(r7, r8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000480)) pread64(r3, &(0x7f0000005000)=""/4096, 0xffffffffffffffb3, 0x0) [ 3025.069244] binder: 5911:5924 ioctl c0306201 200002c0 returned -14 03:57:33 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x20000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x40002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) clone(0x8000000, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000600)={0x800cf76, 0x40, 0x1ff}) r1 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000680)=""/223, 0xdf, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000240)={0xb, 0x77, 0x1}, 0xb) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file1\x00', 0x8, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x200400, 0x0) mount(&(0x7f0000001040)=ANY=[@ANYRESOCT=r1, @ANYPTR=&(0x7f00000010c0)=ANY=[@ANYRESDEC=r4, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64=r3, @ANYBLOB="db459549edf7a450dfaaf5d0a9ff24a6b354fef7c6bb57973ab8c1a113d778375850cc3fc220bb06c66ff2e51ab335e5845273821218e7d73c2147442fd397e838c1b8db05e431610f4e4760ed77f96cdbc45d914f6c2a44be2967d01f53dc0a14c9820b77996e314434db77b4a96d9c8f97d4aa37a0bad6a72cf468242e3b9f5decc977a02aa363c730f3532ccfd30c6cba8e72847291f2eec96a1f1ee7868714760ec9c3646f367a90d193ffd26f8d88eec156459d855ecc78893c2f007a44204f5a9ccddee3e6adba2d013c66206062575e79367813", @ANYBLOB="9e977199206002ed1cdea2d3aa18d70c64ffee523964a2a13126cd9437c6f86cf01f41db794e5dd00d5de2817bfa2bdbc0ba19c68e07b9f1332506a472b4f257f8d019d8fef7cb7a41aa2400edcf3a1d2c138df1f57474ecff1d4c090576a466a4c31c70ab5f0254d08a05ccd79fffa679989bae7e1855e21b9a4f691c240a6a9c26be441aead8cc7d5665b01c209f", @ANYBLOB="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", @ANYRESDEC=r2, @ANYRES16=r1], @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYPTR, @ANYRESHEX=r3, @ANYRES32=r4, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b5c97d5754fd06185e3467c792c5ff08ffd3c7074e3a49ca10f52e41cc637d55070d5d17e1b46f195c93df010f1bdd9bb16a0edf8c107cc1f9489ae040f87f2ae7a1e35499cd4bafa79e9d3b9bf4781960a5e8eb163f76bd15403ee1b4247e1fded17c258523a473fa64b40913e57d78d815972eafed8ca8f476c9b1bdc74717b04378625831c5289f921530eba7b74c755b21c64e106392060ec283368ac266407344bda596ec1b677983ca7fdc3cb750e355a6a3f829fb6f3be531d988a470a8037dcb32d8", @ANYBLOB="8ea1e2a0dfe2a99c5cfc5d82b241b4db4d98a7e41ef673483eb9eb81e10d3d21307f5deb1b12ea7be5a74c32514b200ce9d537a143adb63d097d4624e9cf887f1d75ec26f6f6d1ab4f1f32b313fb7bbb617841b06f1ea600", @ANYRESDEC=0x0, @ANYBLOB="9842039b462e086c49554257d44799cefdfc88782f1d3c2bfb02dcde649d022ff483e940b1e8e126e7240104c10c9dc5c5e879ece6c4161f16da99a55c2cbcafd3fbc6a6bf0ae9b66d3d2d0d6a543f6091753f8030af9fa1b808c79110e957ea55971d8c9bc6b354c17bff2ac54de115ed90bdb77b0fa2774edb482ffed225c7edab2d393178a2e37351ebdd1dfb3d93af510c46e5ba9ea034d13656f82a1dd07e1683babfb727695751577eaa806da95ae2746438f2a95b4ede5d57a2f06cf0b8f8d360aff65b619f93bb91c164b0d8489cf086e9333a94365d8f418b287713", @ANYRESOCT=r5], @ANYRES64], 0x0, 0x0, 0x10040, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000007c0)=0x1e) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/52) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000b40)=ANY=[], 0x0, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0x66) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000005c0)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000e00)=""/250, 0x5d) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x705a40, 0x0) 03:57:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5801000024000000003deed0f0b19064567d19c72b2cd13bbe2ccd6ec07cd76d0aac2a0512b0ae6d5beab7a155cf1c5a9e0f71e10c9be0d2cbb17c", @ANYRES16=r2, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x17c1631497f604a0}, 0x40) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x1}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x9) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00\x04\x00\x00\x00\x00\x00Jk\x00'}) 03:57:33 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x20000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x40002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) clone(0x8000000, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000600)={0x800cf76, 0x40, 0x1ff}) r1 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000680)=""/223, 0xdf, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000240)={0xb, 0x77, 0x1}, 0xb) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file1\x00', 0x8, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x200400, 0x0) mount(&(0x7f0000001040)=ANY=[@ANYRESOCT=r1, @ANYPTR=&(0x7f00000010c0)=ANY=[@ANYRESDEC=r4, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64=r3, @ANYBLOB="db459549edf7a450dfaaf5d0a9ff24a6b354fef7c6bb57973ab8c1a113d778375850cc3fc220bb06c66ff2e51ab335e5845273821218e7d73c2147442fd397e838c1b8db05e431610f4e4760ed77f96cdbc45d914f6c2a44be2967d01f53dc0a14c9820b77996e314434db77b4a96d9c8f97d4aa37a0bad6a72cf468242e3b9f5decc977a02aa363c730f3532ccfd30c6cba8e72847291f2eec96a1f1ee7868714760ec9c3646f367a90d193ffd26f8d88eec156459d855ecc78893c2f007a44204f5a9ccddee3e6adba2d013c66206062575e79367813", @ANYBLOB="9e977199206002ed1cdea2d3aa18d70c64ffee523964a2a13126cd9437c6f86cf01f41db794e5dd00d5de2817bfa2bdbc0ba19c68e07b9f1332506a472b4f257f8d019d8fef7cb7a41aa2400edcf3a1d2c138df1f57474ecff1d4c090576a466a4c31c70ab5f0254d08a05ccd79fffa679989bae7e1855e21b9a4f691c240a6a9c26be441aead8cc7d5665b01c209f", @ANYBLOB="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", @ANYRESDEC=r2, @ANYRES16=r1], @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYPTR, @ANYRESHEX=r3, @ANYRES32=r4, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b5c97d5754fd06185e3467c792c5ff08ffd3c7074e3a49ca10f52e41cc637d55070d5d17e1b46f195c93df010f1bdd9bb16a0edf8c107cc1f9489ae040f87f2ae7a1e35499cd4bafa79e9d3b9bf4781960a5e8eb163f76bd15403ee1b4247e1fded17c258523a473fa64b40913e57d78d815972eafed8ca8f476c9b1bdc74717b04378625831c5289f921530eba7b74c755b21c64e106392060ec283368ac266407344bda596ec1b677983ca7fdc3cb750e355a6a3f829fb6f3be531d988a470a8037dcb32d8", @ANYBLOB="8ea1e2a0dfe2a99c5cfc5d82b241b4db4d98a7e41ef673483eb9eb81e10d3d21307f5deb1b12ea7be5a74c32514b200ce9d537a143adb63d097d4624e9cf887f1d75ec26f6f6d1ab4f1f32b313fb7bbb617841b06f1ea600", @ANYRESDEC=0x0, @ANYBLOB="9842039b462e086c49554257d44799cefdfc88782f1d3c2bfb02dcde649d022ff483e940b1e8e126e7240104c10c9dc5c5e879ece6c4161f16da99a55c2cbcafd3fbc6a6bf0ae9b66d3d2d0d6a543f6091753f8030af9fa1b808c79110e957ea55971d8c9bc6b354c17bff2ac54de115ed90bdb77b0fa2774edb482ffed225c7edab2d393178a2e37351ebdd1dfb3d93af510c46e5ba9ea034d13656f82a1dd07e1683babfb727695751577eaa806da95ae2746438f2a95b4ede5d57a2f06cf0b8f8d360aff65b619f93bb91c164b0d8489cf086e9333a94365d8f418b287713", @ANYRESOCT=r5], @ANYRES64], 0x0, 0x0, 0x10040, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000007c0)=0x1e) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/52) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000b40)=ANY=[], 0x0, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0x66) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000005c0)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000e00)=""/250, 0x5d) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x705a40, 0x0) [ 3025.562882] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3025.578073] qtaguid: iface_stat: create6(lo): no inet dev 03:57:33 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900001}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x404, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x45) lseek(r0, 0x0, 0x2) r2 = syz_open_pts(r0, 0x101000) r3 = getpgid(0x0) fcntl$setown(r0, 0x8, r3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)={0x0, @aes128, 0x2, "a7e0bc84b4d55e26"}) sched_setattr(r3, &(0x7f0000000240)={0x30, 0x0, 0x1, 0x9, 0x8, 0x1, 0x6ab, 0x6}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') ioctl$TIOCSBRK(r0, 0x5427) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x402, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) r5 = socket$inet(0x2, 0x3, 0x8) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000440)="9f79042659a7ecc20aaf9326071bb60150e2a8ed436f8ba5b09a65e8373d14dfd442782fc2eccf88e8186f98be7a0f85af039a9ccebf5c75fe00389bb0bdedc287d249d248aa5e538e8bc48fa2a3a67edf84839680ef1d32dea2f12cbbccda9c0b6b1e8654adcf3a565d5111f2d4c0112249e677c786c83953bb1e6129bda3d6a2ee89f524") ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000500)) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000001b00)={@initdev, 0x0}, &(0x7f0000001b40)=0x14) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000001b80)={@local, @local, r6}, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000002040)=0xe8) stat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() getresgid(&(0x7f0000002180), &(0x7f00000021c0)=0x0, &(0x7f0000002200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002240)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000002340)=0xe8) getresgid(&(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)=0x0) stat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000003b00)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000003c00)=0xe8) r16 = getgid() fstat(r2, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003d80)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000003e80)=0xe8) r20 = getgid() r21 = geteuid() fstat(r0, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004640)='./file0\x00', &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004700)='./file0\x00', &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getuid() r26 = getgid() sendmmsg$unix(r0, &(0x7f0000004840)=[{&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000001cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d40)="1c890f6329f6d55dd8951dbf37b9f76c1073edbf5fc94d8c0742845648eff76b5102062eaf9fe8bc162bdb8e0ce14c980dd480fcd29f77c44d0e031d24a3033a127dee324f09967012f6160d3e36325cc09afce0abb8932065d61b3eb110bf8b31287e9f72d0f90e9e787c49bcd8203003f1a0f8f33461b02b0bd7ae8e609af18d63a3b7e3d87f5ded345cab9a152d3663eff81704aa81dadf2e6acb0e4a8222e83e3031d196997b09e45cf5d4e9556004bb0906aa4bc9f99adfde164a5508ced10354e9c95a58dac5e780f3acd7d874e1e23ed52b50a49c7197c96d2b02d9382ad4ff848e865e6129c20fad87474fb405c24abe4503", 0xf6}, {&(0x7f0000001e40)="ae2551de9724c5a505a8681ea36f21eb8a9ab89aa0f29b1e00c78c5022b0ee026f3bdf5bffc9b338a22012c0509e5bd361632debfe14a7839b9e4fc1e32b25a817367cf5e0cd1e81cf11ef122825163d52355cc510660deaa6a4f64d060be752bae4597dcadbe3f62582331dbf986863dd05dd2b8199a7a4a1", 0x79}, {&(0x7f0000001ec0)="8256a91238144a08194d1f303b8d51b6e1f7e98275de2059ed", 0x19}], 0x3, &(0x7f0000002500)=[@rights={0x20, 0x1, 0x1, [r0, r5, r0]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x30, 0x1, 0x1, [r2, r2, r5, r2, r0, r5, r0]}, @cred={0x20, 0x1, 0x2, r3, r7, r8}, @cred={0x20, 0x1, 0x2, r3, r9, r10}, @rights={0x18, 0x1, 0x1, [r2, r5]}, @cred={0x20, 0x1, 0x2, r3, r11, r12}, @rights={0x30, 0x1, 0x1, [r5, r0, r5, r2, r2, r0, r5]}, @cred={0x20, 0x1, 0x2, r3, r13, r14}, @rights={0x20, 0x1, 0x1, [r2, r2, r0, r2]}], 0x150}, {&(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000002700)="07d10b8a4a5de1aad04700f0cd9163b15aa54f4696a263916fbd6fab915e61ab5e74773c323611e9493045c48ba93353fe5d888a08c11a9fe3711c25d16b1d865110", 0x42}, {&(0x7f0000002780)="aba30800ee12cd04c7a025825e8659f09c126653b84fd51bdc296f", 0x1b}, {&(0x7f00000027c0)="a5329cc61f000d15204de1c9708648fa91540827e7840a6abc01f973322a05a04a871644e3972de25813296a126c4a60d2485bd84c233a52fbd3efb10a2d2809528705df628a693f68e768e00d57c23bf2454ba8b27f488b41314abbfd62260dd2f15e0f80c356e02c5018d6b395df495a3e9b103c22fd68b24ebe7b8002e9d45c11d916af3b47a4b10242429066c4010f53ff142331a141cbc87545b35c2ecc97c3d91a8abf78bf5cfa4bcd808bd93d3c87105b0f14cba84260166f8c11898c57d5f306defe84305699d5950e834f35361f6b97d243a0998dfcbfffc31fc9c96d310986f8d14db15876436f99a812011e4000946a", 0xf5}, {&(0x7f00000028c0)="cbbcd43f079f9ea4842110740668d347d4fe9d679e623c23ce55f323e6b73d516f9f9a1ddc3aca4d26bc7a3d73b2ca45b214e245dbe4467edccca48c983dca92b75d1aac010c76184cf6ad3f55bc9d57657009da08ed120a07bdd3a48a4bbeb70c8ad4528ab9273218f484b77ca04669b895e3a6afae9a86fe0097a308065759a38978de7d1e1b21994b38046634a1067c8062c6215638b041d31185791078ad73ea6bf8448e4087f50ef446486469b93d67969cdf6f783e34bdc127924a92dc2209318fb9838b8e82ede1c28e9a2b621eb207c43cad89bc1ee03d3099c435a9edbfa9010aec8d128c8e7eacddef93ccec2994f7105df23f811cd3a52ab51a02489d9785776bb49d4b7c22aa64b11534b05c208599acefe43b2684a2e4c4d87ed8335f49c513da79560466dc6c16fc02dd18d3ed1b39c25556e7d71a20e4ceef171d316997ecfe80998770ad8d864f97977efd402f6093d009e90813920e0c7372419978697fe3b73da383f2a59860de04ee5444d8d2b3b887201c6c3c870a036bb10915d1b44fe50d15457a3b35e8b06ccdf48a4bc77fed6af5248527a0879cd96b316cf44a5f8b3746b3740fe250e195dcca795006ca33cc40b7a6c691f0aaeb882394fe067d4b3093cd41ebe82abf2c3ae0e52498cce5cc1dfd1de58b02ddb0dd2e88c62582e5cef8f6ec6ce069e7ab2f023968cfed9c658ca3a1dd7e305e94616f48543e298a035b375d64a37476fc946a171151a8f1245cd731bf30595795c7ccad97223946b92f2d63a069f42e17adc96ecc15481099c19c38200db08afe9c18970de5032f87606dd0eb6d9627665a8dcb12aaed1dc09a1cdac2d1691a536bbe04e0cd0517f11a5e0f7c6655e17110a838dba6a3b10d30c66aaae3ead07e9f0b317ea320d974025d8f1f06ccbc184ef7e5fa17322bb2b2a1ddb705c8a00d8779f697c2e0cce417347a41c5f8ec0de2463959065566480beb3dbfce9a5d6c6a2f55327739e22751f833460dfba840ce2ed243998c7c4cc837d5484341ce48a4195d033fba66310521645286917e5d12a44fdefed6c4b9df7d70fde58edcd1162846c8a857e2ab5ad3ec0547386ec62bfd4eb8cc7d5e47c483c9a7f77f96802d23249a9cdf2bde061e65cbea9278099c8b085a21df5827f760c628d612e1eec0afd45a5a28d59f176e7927b3d99cb3939429f40025844c5a059885056fdec4fee00537c6473999e344818bd7051a7774f157b1cfb2403d76bd42d454e42e14d1596e4bb51ffab5730d3380a7e5c7e9518d276b41f877c14b1c7e73eef6e3da4ab88ed2f897ccb322602e63079c5f1f0bc8a8562a92e9b5ed2bc7884e396b2da65bafb93dbe920accfd91d620ac9f4bc0ae0827e52fc00344be34bb5111665949e4ff87927f9a919142720b31f3ae9c3d2f6525822d255b558a4904d9236ae98f7f989a3d8a0d0a6c538d534ec624b99c90784c92db23226300997df6f224f6e9bffc543518aef114066eb2d2b7acd1601347bd6782ac49dc2304f0cdc843553724522edd07ae501de4cca691bdbd11f0fa17a347f68e6242b94cf858126dfd23dbe8681e8a28e083b76a3cf97c6c722f15f156e0b76c96701403b1e42e9ae24321897aeb166c706ad95eacc882fcdcde3f268493c6b9bb52ab2d403131e46401e99b0d6e7080d72f1c08eb09155d3d6816ca38bf155866cffc2200cd22f0cbdd10a8755c42830314fca72dde2fab7bd6de37555ceecbc3d036a874c0f02b3f57f22dab48bfa4c361d4dd3a870e29b5512fdf17babd324d336ffa77d3d100351533c727054e123d90cfcc0ffdc5304d2fc9d89fefa4d219f6aa135bedab338ee8f1c3ef867503751a9647a7799e32f325bc0296e0b2647628e94eb1f4a10051ebbe168777cdb3b16a40768b824c2656fa87035105a1c08dce8ee2b1356d8fd43937c2c0fa29a2e8352ebf9331c6d898fb7193b5e57cd2ed634d5f62bc8ffc9a9553b08e350b9672b5d6e0ee445c38376d4c7baa5a443d63d0310134beaa71bd8cb29980ac6965d129cbd3e119cde577f82add9b33f3bddaddc8a10d5be8d95b1d6d4d9080f9ae3bab5088f906e89964bd34c178279d80f9c057d0fc120d447cd5452aec7556a43ed004b74f5a88d97dcd7f5d6ea4bf81f0dfdf48cc316ae9746ddf01d7ae877054ad62d2011432f00cfdbe89f1b9ee04ff6857581a4868f3d6a9df82165d82af9f16878033088df7f43df018a91f467848334f5299b8dff87cd8254494167b43f6b99bf57fa5a23d3d8050e398b59d29083bb4454faeed35b5d5922241db13ac2de15ce1307859272b65b283549b1e4c05e8cfacb58556bdc258f8c5c9cd946ee6f4d2ff321a68615caddd101710e2547396b9c7aeb688b2705cbf7b58b108945b489cd892f27cbc61b7a456e0773acba88a75c42bf387cb0853e092fb265bd3409248059a8ac75a09710fc42d48ec8f1f50af026c28a1cadd8546afad8f940dead21e03997f0fe922bcfbcabdb32e12f6eafd44e8813eecdb66688dccdf2497b00ce7cb52e18ea8518a3718c1ec07ee4051cf63a02404fecd1ca634e6333df218fc10853749f4e3cab5e034df05294580d6bffc412433cc4fe66b9c6168c309da1c1189d9a8e29549abb73cfe5248c87765b313c851a6d853704778e8e7c7dab9d807c44215de3a657eae3211e6ae2ca2d7f5b8cedcabe80f1c28a209ca9f94679c30762553b84ae27f5a8fa67b320a97d04384f4d31ab94c1bc36588e5c493bfb30c4449fadddeadf85f1180fa729663e92a4e0d008151f6987a64510a1a2201d74a09f5f2cb20c77ae6967878f849378ef1abc12a8662f05c219df939df5e44f5319d46c961d9382a01f109f1ccf7dd1cd453c244f0cc76d4557c772719003cc2bdde5db666b6e5064404c0bf9dff7578adf5273abbeac5bfd7c898bb9b429991d9c96989bd69bb01de1e5c83b436b36fcd0c97448e70b810dfcdaa36aa6815848d0f57c9feb099ce43da4020eab3e9b965ddbb4491560228ad8fea85c39c75da38b527fb41b2d612fa3932d7ebc7421131220dab09b5e44401c49094954d432a5728c05cd4a0250035d1c15042e7c7b6eec92f054c352207c3eea521bf28c332c5c2299611573a9dfe5c1b250ecdcf74f95cf3363092b3401aa1ec93a69f78bfca5bc76727acb6a81cce006f561f0bd083ff8f4caf8e78bf40b0640ce6df3d098e23c52a8be30fce6c39aedc8d52f4febcdf54ce7cd235f8a65aa3118628407af466463e0152841a2a36f4b1f2c18bb286e9d1e5816f09c698402a1b93de91bd7d487fef95c45cd4830511844bbb93489346f10a539bee02b18badf0909f09d273678ba72eb02cb4da9d81d948a15212c8769095b6d917025b0fba65b89ac0d085b7bf4aece2e03a416e7cf27303ee453dd8d92cfa0ece7d46e06d6fca04c35396686c018fd36bc579e1c9b9d915240227994cf4292386909c963a855a1c04d93fc771119a95e1da44c141ede9368e77468e14cf6f65c78215e744e3ffc8a6d7383c71d171961161722c879bc048776d789938734f37c8de4b26999f03bdbc3c47a9534896920dd24ee62b96177eb0808d82f7dfe4d8fed233f41f72704d06014306da31ad29cb9509265415a7e9126bc80267c78ff7eafe7e7b400ed4f399d5bb7cdb9d0548e9f05c11b82365ca6c83683f72055186207e727d3ef0e38fb1c4e6da1052e38cc5eff3ba7c7ae86dbbdd2635ab7c74a484823151c59ad9856310f1262cf64c9be05b061ccf57642d136dc6acf27a34b1a2b803d92918340d95c70ea6629795b510ac9ba36321a57d74905f2eadfa7148e34b9223177322ee99b1117e624ba5c3f2c96adcb6243843d669b7fb0b03689dbe8e692f47048a5f11c62c6d8955814677c2bc48be30aa42d9d7fa45e77a8756db132602c11ce80373ce9539f60d137537fdaf0c77dc87cb73ab0677ae9f7db89ad0c1f408eabfdab07643b61908361e76fc2f4e192e3f3fc1005d373c0ac46069e536f6bafab51fa9ddc790698e7446a007cd7feb972ee0c41cd54ac88b2b7d0829a1c01e9f02a2d3faa62d69fee960548db72059cc43d88e6da33aa98d2519846b4a97cb02a328e8af446c74adcef8beafb82503b75c6437eafac20bad655661799b30376235f6eb91b6459b873f908625be145d74d3c856280effb1b53284b8c1374993f4c0af50e7f8ebd5dbab9efcbee813fc601575016227a1141925bcc54ed824426fbef9145b207645f8e649d8fffce621bb0778a44e9f059a83644fc3bea229b789346d956f406646764ef21b54f4efbc9a310c059a67e22d1f309905d394e991d1f88ba5b372788849355f93de9202e1f2214e51f6045785886dfea18be3733119f6e517f93cce08aea1d6c2dc12be917a432c8c2177ff03b8c63d24eb2e661fef55eb1c0cc529925e1e38505710cc57351db223617c9e0d4dd7e7338882d792c91949d9d2747d6c56b6f0af8e929ead72ecb694b0b1ac3304a4b8f73d2bf934d7abf539f267d56011f64e47be8a53539d2da17a54d0284bed0d600ff8a2fd054104848c3c031e529542f874ac7bb4c47c627c8d761da46749802f212d0faeaed6e57885f289549861b50518cb6aa77ca79cd267da0812f17aa98801dbd826fe55c99d40b2f5019d303974fc5f61064b5d07a9fef59ded61b8be323eae780c63de89cbbe1719ca2ed3e2236370b04b0dca15cff55cae7e7bf1e6f3edfd0dda076b5233147e648ead07cfe4c15dd4a2a3dc5bd0bd113e244990047ce9e8dfd4da7a7eb7fb225a6d0c172dfd3bd4f7a542a7bac896238374c81017b909124b18b71710ce29661796a6446c4de363d69c05d209db493609b08830b720d6e6844d99629296935b411a3aa84a45c0c5bd169062b870110f3d30618c8ffe77e87ea8f35640019c20823a27344d61eec618fcc9481992f23077adab77aec764be4347b768a54a2bd1e3925135423edfd95312660a3a1d637fb59501fdb7177eb3fca20ab19e88631d20a49a300b2faec0f0369ad11e1fc64eb2a6b7d0b4f23633a9f5fb0c0c5791f6e073c80c57bbf027c2756c78538b2de6b82de45390a7723b95f2baccc32a2b15d3f477613abff2eae32e950fe3f681b484ff12115792a364868b2bd84af03ffd78859a98831fd0ded89b6e0c8783516305888c3db033d0cfbd89773b32607c099b0cbdfe6fab989c152c0bd96562c52dbe9d1f13430dd9c7d608b5fcb820d48604125f290679fde9a416c8dc8f1fb80a5b44d300e56f31ee2cdc05e54dd57cd738d08f80c5e05588b5d6dd1109636218bf8f88fe1b81ea709dabc6e391f26566aee30462675e55f75cf0baa41e39fbdd7d1796f6ee3a7c0ad387ea11ff740fcb5516a6f84cffd508074f40375218dc34456b91a7911a2851bdf5779f55aa5bc96c043bf9c8289eb2e86d725d8899ceae9a48bd483c78e9ffd5704b52f1d97eb73a508e9958a873dde31199579f2a043428c46e20ea3b9acb11e1845fac23a977b5212f4c8653f2056ad2e9328149e6ddead93d59cac1cd49ea3b7af8d7459a6b2e335b6f6113a4801acb538d0b28bc2b8816fda4f15da8a6761c985d0c7ae02abc6ba4eef8046bad6a7ae511cc753213aa4ea263a6f061dcbd7f9046948a421378685b01fe204329936f83c0aee3f8004b01e0a639cef2a1a06dedeedf32ca79af65d3f54bffe4c10da37ecfbedb286e173714bb833d44da45f6534c3ab1953cf8b8bfe13bafff392163eaa38211834dfbb7a235f6c4", 0x1000}, {&(0x7f00000038c0)="faa68038ee395f6f6da0df097fe0414d863d913247dad277187ceac02de6e2f99fd617a7b46bb141ec7eff871b513c123b7a856f5559344c3c4e46b1d65b6f7feec337df024825d8c2f5795098fc8a01abb3a27e72725b1d6cf1e33ebc879bfa65def58a1240c751b3e59414bae88fbe56b4ce84052c53981287eb17d34f3a73d49817b7373d8f1fff783763e4478cd50c2c7c548e2e6429ce7dfb819c68f23995532f020c73aa9845e6268376ce3a782b", 0xb1}, {&(0x7f0000003980)="e5ed489c05a60c35ceef01b20babb6202bec940c09ff5052d16a08cdac475250a4608917ce79170324c7bbc9c39f36f093622d8076611b358026e9f00dd3e26cf3bcf081ccb9a4506c9d2b1627493878ffe9bb1d8a3767154c4c9d2b8f0bafe39b07f8eef76bbc61f3f07eec136acf8397ae89b67b7ae348162443d2b443f450a391e9c8d8e26c39042625c4fc4d7afa7f20af4af3349b4586df62bfbf251650bc378d91696a869378e9b980794b094dd93cdf5f5966ba0bdd6f6f096dc3668f58c1db0f0efc210dfdba", 0xca}], 0x6, &(0x7f0000003ec0)=[@cred={0x20, 0x1, 0x2, r3, r15, r16}, @rights={0x28, 0x1, 0x1, [r2, r5, r0, r2, r5]}, @rights={0x20, 0x1, 0x1, [r0, r2, r5]}, @rights={0x18, 0x1, 0x1, [r0, r2]}, @rights={0x20, 0x1, 0x1, [r5, r2, r5]}, @cred={0x20, 0x1, 0x2, r3, r17, r18}, @cred={0x20, 0x1, 0x2, r3, r19, r20}], 0xe0, 0x20040840}, {&(0x7f0000003fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000004040)="fa30210f440b3a8ae14328490870fa6f88b10421fce94a12582350783c59c0d60e9c38a21852e7b8af3b12696bb36bcfe07e0f2ac1a86889b8ea2e03e48bdb6f13c2de651e4fed1c6c7674234210d5f5874ded51e15de2fb95f8eb71b83d0e83600bc789ded77820ce3f5262495d7edad1d50ff3971e4d5af6a33affe90286b495483c4551082309050c3dbc4e8343a110bb99526bcd8f42372c85d6d9f0db83017ec1c2a1d3bb0dda863b21e56c7e4876e1770c086d7163d660565c2c0a8bb965546fd2e718cf7539eaa69f543e77accb0620681524fa0c810a9e66eeaa67f7f3a64aaa8d8e14ffb1622e72bf8c3e", 0xef}, {&(0x7f0000004140)="1d52d3d50eace4d2daa9fa47886384ffc945f589971cb181fcd78eb3e49551baf0462594c8721872ad92d09ce9e328092b502a4ac386f1b87db73247362f451809fc09a7aba893bf4a0f8b78b1268de087b8d169aa25f05c11dae278168ca25fcf0a9d600b5882c0049386b60e854df5a75829825be8de1c51067507b1af56242d8f5e57c0637e5215f11330ad3e9247c8", 0x91}, {&(0x7f0000004200)="839e76729baf0709dcd5be624fd5fc2fe67a7eb017ebadfb7ebb823621a3a638fe5e5e2ce94149f45eadb5372d972e4ef6621a56a91529f104dc2cde61cb73741b7898303d2414f19e21eb00ef57cb048aceaaf6e8d7108b466599d61f9d53f7d20fc3dfcd8b1daaf01cf516112dd2393b1ac4722d6670e1192f766fb71ed17abbee36875a94c81681c7ab0dae691581076438186e2502ede0c026ae2031a52a1ee41913a4f606d610a31a68c736cd7b72703ae894c1df1a3af59854f78d6724a3b5ab5a4d5893c8d7ecf3865b16d1cd6ae12e934e7f38986711bdc36f1316d7ebed9caa0a0c03812596375216a3427494b30c2f94", 0xf5}, {&(0x7f0000004300)="ddbf4c8fc745e2450f709e90bc80a47f008ebca27289dcbe7e3b88a4757f3ae378ef979dc76d24ea4c53f0f2d459fb83f105096f87", 0x35}, {&(0x7f0000004340)="3393564a9ea17f5778beb87cc00c6ea76ec4a16db8f272a7cbd5b13cd1f9eac0ce121bd32f26269aa5336927454060ee0d90dbe8b3375b542c572033288b6be3390a3b49b5a67cf92ef19bb7d8b3008e4615a0ff9413d2ef2a8f10ee7bbf8b43dd914f8de3869e53d0e61b1ae09682e4f6404edfb7c363799aacc7461736559f379feeb77a93a16ecd", 0x89}, {&(0x7f0000004400)="1254c5e27a24d3685a544e1d266f87b6a7cb6276d18888860448a01c2c5bebbccb509f68ea1b632b6adc321c2eb9cbae0a94a8df49045f493ddaa9ed654ea062a241ed06fb856c8ae6c6d5966423d7558bd1ed8deea32fe89f47f856a58d6f435a43f287", 0x64}, {&(0x7f0000004480)="9a7f58f7516f1b4f67a864ce3042ce13f5865b0f09083efab0c8b1855c7212b0a75013a83007cfe3e60b1e632e0bec17b65ecb2320e55e1c797127ef6d5e4484b782372f02706495b8fc427046688b40f2d36133d910ae8e41d6cec369429836258aff9bdaa6e328c94e0702f7f0616b4a15bd04d6cb576e72baef34a7bc75c28cb1f7773d74bbe60b71ab9a0cb3a03737b7c74eaadf34", 0x97}], 0x7, &(0x7f00000047c0)=[@cred={0x20, 0x1, 0x2, r3, r21, r22}, @cred={0x20, 0x1, 0x2, r3, r23, r24}, @cred={0x20, 0x1, 0x2, r3, r25, r26}], 0x60, 0x11}], 0x4, 0x800) [ 3025.660818] binder: 5911:5919 ioctl c0306201 20000100 returned -14 [ 3025.709412] binder: 5911:5958 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3025.728609] binder: 5911:5958 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3025.748374] binder: 5911:5919 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000081e9ff0000000000000000000000000000000000000000000000000008000000000000000000000000200000000037fb0dab0000000000000000000000"], 0xffffffffffffff92, 0x0, 0x0}) [ 3025.755251] binder: 5911:5958 transaction failed 29189/-22, size 0-0 line 3013 [ 3025.773966] binder: 5911:5958 ioctl c0306201 200002c0 returned -14 [ 3025.786959] binder: undelivered TRANSACTION_ERROR: 29189 [ 3025.792460] binder: undelivered TRANSACTION_ERROR: 29189 [ 3025.865638] binder: 5969:5970 ioctl c0306201 20000100 returned -14 [ 3025.923440] binder: 5969:5972 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3025.942001] qtaguid: iface_stat: create(lo): no inet dev [ 3025.942045] qtaguid: iface_stat: create6(lo): no inet dev [ 3025.959794] binder: 5969:5972 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:34 executing program 5: r0 = gettid() r1 = inotify_init1(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) close(r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x0, 0xb3, 0xaa48, 0x9}, {0x5, 0x7a7c, 0x3, 0x3ff}]}) r4 = gettid() write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRESHEX=r1, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYPTR64, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000480)=ANY=[]], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="47d44b656e7b7c23e3adef7773d509515dc896501f0666f8d160ce55490e748cf87f62220ba5593bb01587545237f58b54312b1388896e77acd58586a676f0f10f692b1246616223ab0b16db485ef5a4b6c3329a4e14672932aa134a0a83af311c29069d27d8e9cb453128a5749926c9a8855e1e6b51a908802d", @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES16=r4], @ANYBLOB="2e60c9c1f1d616ba02a903ebabaf4cfc35dea623a21a6c25f24a75b3f4f3d7bb71dfae8ef7fa6c14ca47b46d626f8f380a05523f1e29d85dc56904ccc0ed68acde", @ANYRES16=r2, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYRES16=r1, @ANYRES64, @ANYRESOCT=r2, @ANYRESDEC]], 0x7) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) poll(&(0x7f0000000100)=[{r5, 0x8000}, {r3}, {r5, 0x100}], 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/203, 0xcb, 0xffffffff, 0x1ff, 0xffffffff00000001, 0x6, 0x1000}, 0x408) [ 3025.968796] binder: 5969:5975 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3025.977880] binder: 5969:5972 transaction failed 29189/-22, size 576460752303423488-0 line 3013 [ 3025.992201] binder: 5969:5972 ioctl c0306201 200002c0 returned -14 03:57:34 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x224082, 0x0) r1 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000002c0)={0x8}) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000100)="e9fa36bd1aa8f208025d25212cbc99597e154ccee424de191e1544d758f7fd99e3d4c60a5614995f5fe9d5bcaf70bc92ce243d8764d0ac7c943f6ca4b003b9d849f1b3d7921d70dde32c4bd199a79c8e89eb6f121c7b02ff67aa71504f6731eb443462bf906b82267af30f9274d4169d3e2b13a1ba60f75c8b5aff60bc22b0b395f369b8202f08fff2482fa8c5c8e71b02eb95b3e665bfa49b7f223550f666b21a9197e2b27ebedae4cabb5f523784499ec9549ae2087f13b41f9a4669c719ca1f02c5e1503d2a2e54df1bf994fb78cc3d6bc34cd41e172edce954239e86bd7d28b7f7ab764184") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x7ff, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '%cpuset^uservboxnet1,keyring]:vmnet1\x00'}, &(0x7f0000000240)=""/82, 0x52) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000000c0)) 03:57:34 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x40050, r0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000009c0)={'syz_tun\x00', 0x8000}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x40, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2000000010005fba0000fb9b18b7000034029d17474556ceecaaf3c715c88a1aa946a55c3d8a83b4788c5910811f6a315795359b2cff6fceb51d256767d2f439ad893e711f40be3972c5be5f4ef2fcda5f88aa72ed4de3e498a3d7fdfcb28238d4be768fe4e2539d539d6b5db41f0ffde49286d04fd3e6ded2f8f1353d22b7afdbb6291671d932723c94981163c96d83d9c7de31bb9bdd9e983479ff2b8ea23e816d5d2894b800b9e1e8b9b77f68a8ac22147e45b4d9beb4d7952e79ee4db61f6ec6ac510d2ad47e6f", @ANYRES32=0x0, @ANYBLOB='Z\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r5 = open(&(0x7f0000000380)='./bus\x00', 0x141042, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000340)={0x3, 0xd4}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ftruncate(r5, 0x2007fff) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000003c0), 0x0) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000680)=0xa, 0x4) sendfile(r0, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 3026.643768] binder: 5969:5972 ioctl c0306201 20000100 returned -14 [ 3026.699364] binder: 5969:6027 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3026.731431] binder: 5969:6027 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3026.738406] binder: 5969:5972 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3026.739202] binder: 5969:6033 transaction failed 29189/-22, size 576460752303423488-0 line 3013 [ 3026.739217] binder: 5969:6033 ioctl c0306201 200002c0 returned -14 03:57:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffc6e, 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) [ 3026.795684] binder: undelivered TRANSACTION_ERROR: 29189 [ 3026.835540] binder: undelivered TRANSACTION_ERROR: 29189 [ 3026.840217] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840271] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840317] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840362] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840409] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840454] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840499] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.840544] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=6045 comm=syz-executor2 [ 3026.855797] binder: 6044:6046 ioctl c0306201 20000100 returned -14 [ 3026.920460] binder: 6044:6049 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3026.920472] binder: 6044:6049 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3026.932404] binder: 6044:6049 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3026.933970] binder: 6044:6049 transaction failed 29189/-22, size 0-0 line 3013 [ 3026.933991] binder: 6044:6049 ioctl c0306201 200002c0 returned -14 [ 3027.639837] binder: 6044:6053 ioctl c0306201 20000100 returned -14 [ 3027.646476] binder: 6044:6053 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3027.646649] binder: 6044:6054 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3027.646875] binder: 6044:6054 transaction failed 29189/-22, size 0-0 line 3013 [ 3027.646888] binder: 6044:6054 ioctl c0306201 200002c0 returned -14 [ 3027.653558] binder: undelivered TRANSACTION_ERROR: 29189 [ 3027.653580] binder: undelivered TRANSACTION_ERROR: 29189 [ 3027.686395] binder: 6044:6053 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x48040) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'veth0\x00'}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000100)=0xe8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)=0x3, 0x4) signalfd(r0, &(0x7f00000002c0)={0x100000000}, 0xfffffd59) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/8, 0x8) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) r5 = getpgid(0x0) ptrace(0x200000000003, r5) creat(&(0x7f0000000080)='./file0\x00', 0x10000000102) r6 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='fuseblk\x00', 0x1004000, &(0x7f0000000600)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xfcd}}, {@max_read={'max_read', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@hash='hash'}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, 'ramfs\x00'}}]}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) 03:57:37 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fstat(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x7fff, 0x4000000000080, 0x100000000, 0x0, r0, 0x7ff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r2, &(0x7f0000fcbfff), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000)='o', &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) 03:57:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0x9, &(0x7f0000000200)=0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ftruncate(r3, 0x48204) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f0000004fc0)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000003000/0x3000)=nil) 03:57:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f00009b8000/0x4000)=nil, 0x4000, 0x1000004, 0x32, r0, 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:37 executing program 2: clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') exit(0x0) capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) getdents64(r0, 0x0, 0x0) 03:57:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="d49c108e38f3dbe23dd06106d5d3c4bcce224620e83918bea31997b304b73170543af31aefb79f54aa63be4a7b77874a30c05c3df6c4476b799327000a6c79d9f60d44a8d5cd6af891b1b33bcf78e6fbc3595b6cfc8d0e00bee7cd864118", 0x5e}], 0x1, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3029.023457] audit_printk_skb: 921 callbacks suppressed [ 3029.023465] audit: type=1400 audit(1547611057.106:293297): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:37 executing program 2: futimesat(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) clone(0x2122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') exit(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) sendfile(r0, r1, 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)) setpriority(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x18, r2, 0x1, 0x10000, 0x6, @dev={[], 0x27}}, 0x14) 03:57:37 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket(0x11, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffe}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7, 0x1000}, 0x4) [ 3029.040456] audit: type=1400 audit(1547611057.126:293298): avc: denied { sys_admin } for pid=6060 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3029.040834] audit: type=1400 audit(1547611057.126:293299): avc: denied { sys_admin } for pid=6060 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:37 executing program 2: r0 = memfd_create(&(0x7f00000007c0)='ya\x01\x17\x13\xb2\x16\xb5\xe4\x00', 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x2c2, 0x8}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000000), &(0x7f000044cfc0), &(0x7f0000000080), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) [ 3029.042858] audit: type=1400 audit(1547611057.126:293300): avc: denied { dac_override } for pid=6057 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x3f, 0xfff}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6fe, 0x5, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x8, 0x45}, &(0x7f0000000300)={0xfff, 0x1, 0x3, 0x5, 0x1, 0xe92, 0x59b, 0xfffffffffffffffb}, &(0x7f0000000340)={0x0, 0xfffffffffffff001, 0x337c, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x4}, &(0x7f00000003c0)={r1, r2+10000000}, &(0x7f0000000440)={&(0x7f0000000400)={0x401}, 0x8}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000a8d7d305000000bd004a82e4b349190be5aaa22acd887210f84ac93fc68617d3784835d9fe15c2873abac57b13f57d407154990874b46d7183a22ebc8c76c5a32bccf8fd193a8d", @ANYRES16=r3, @ANYBLOB="080829bd7000fedbdf250100000000000000024100000018001369623a76657468315f746f5f7465616d00000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 3029.048794] audit: type=1400 audit(1547611057.136:293301): avc: denied { dac_override } for pid=6057 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3029.053919] audit: type=1400 audit(1547611057.136:293302): avc: denied { dac_override } for pid=6057 comm="syz-executor0" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3029.072924] audit: type=1400 audit(1547611057.156:293303): avc: denied { map_create } for pid=6058 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:57:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) sendfile(r0, r0, &(0x7f0000000240)=0x54, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1e, 0x9, 0x0, 0xb, 0x1d, 0x15, "742382565b69d884676f75b2ea73c447362fe0e90fe85e5d3b0e7c37eb7367efb782d9bbdcb1f5fa2b10b70a0395e1ad5726117850aadbcacd330a3819e1c2c9", "8eb11b60bc2c0b018f9e1749167ed24a788f8bdf7c36248648ebb2626f4322225d5810a3e94ac7ec2fccc0cba77a3c7754c58e5e56d054c49d8b38f8836c2a22", "181a24683e4f14d50e47e1e03200a8600b89c300aab62f88136166a972975e6d", [0x9, 0x4]}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3029.076987] audit: type=1400 audit(1547611057.166:293304): avc: denied { dac_override } for pid=6061 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3029.078234] audit: type=1400 audit(1547611057.166:293305): avc: denied { map_create } for pid=6058 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 03:57:37 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r2, 0x406, r1) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x26, 0xa00) [ 3029.099217] binder: 6061:6068 ioctl c0306201 20000100 returned -14 [ 3029.100674] audit: type=1400 audit(1547611057.186:293306): avc: denied { sys_admin } for pid=2112 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3029.187008] binder: 6061:6079 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3029.187020] binder: 6061:6079 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3029.187540] binder: 6061:6079 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3029.188240] binder: 6061:6079 transaction failed 29189/-22, size 0-0 line 3013 [ 3029.188255] binder: 6061:6079 ioctl c0306201 200002c0 returned -14 [ 3029.872707] binder: 6061:6079 ioctl c0306201 20000100 returned -14 [ 3029.919044] binder: 6061:6130 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3029.927232] binder: 6061:6130 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3029.934907] binder: 6061:6079 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:38 executing program 5: socketpair(0x19, 0x80000, 0x2, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000) r2 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x403) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) getresuid(&(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x3f, r3, r4}, {0xf471, 0x6, 0x9, 0x4, 0xff, 0x5, 0x7a6c, 0x800}, {0xcad1, 0x2, 0x9, 0x2}, 0x87, 0x6e6bbe, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x0, 0x3, 0x0, 0x4, 0x401, 0x100, 0x1}}, 0xe8) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000400)=""/164) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) 03:57:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x0, &(0x7f0000000080)) 03:57:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x4, 0x100000000, 0x249, 0x8}, {0x5e22bf5f, 0x0, 0x3, 0xffffffff}, {0x0, 0x7fffffff, 0xc857, 0x3}]}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f00000001c0)={'stack ', '\x00'}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:38 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="c49174cb79c46672e00ed66b28570a18876d70b51ce814c654cdbbe3fbbf4c1c4b419591c2de92a9269b9cda56ff0ab962187029f9b3f8a4a8b28504d22be4e0ae9778d735aade372011c0c291038488c3d001d3d302f60f2c348b641aae5fc4ec62a26adce413a5ab8d484898c265f10c8890750fa35510cf0b2a9001cc30010eb1f1ac0b8280935d195bff0d3a7f") ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x3, 0x43, "883767f2803f57e0612af338af6ef56b7f1299a4556145970c457e47694a40b7415fd50b1f51fd169e94f843c9a2534522339eb5dfceeeed4b31a75ff463cf47377555"}) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 03:57:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x101, &(0x7f0000001000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000001080)=0x132) [ 3029.985629] binder: undelivered TRANSACTION_ERROR: 29189 [ 3030.008348] binder: 6133:6134 ioctl c0306201 20000100 returned -14 03:57:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000440)={0xfffffffffffffffd, 0x1, 0x6e, 0x1, 0x7fffffff, 0xf98}) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x238, r2, 0x30, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcad8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c38b226}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) read$eventfd(r3, &(0x7f0000000080), 0xb0) [ 3030.072640] binder: 6133:6144 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3030.104844] binder: 6133:6144 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:57:38 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000140)) mount(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x9) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000440)={0x3, 0x7, 0x0, 0xffffffffffffff9c}) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="d5ecd0d5e6ed8b79e82c6f0019af0eee2faf9bab467eafd8769053b99c7bb98c6e52fae4fd7a359ab25d111237b2f4f274ed70e5d3c0f96c2f0df0b98560b05b3ed77f8cad07f96b91056a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3026, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b, 0x3) lsetxattr$security_selinux(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='/usr/sbin/ntpd\x00', 0xf, 0x1) [ 3030.116627] binder: 6133:6144 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3030.131658] binder: 6133:6144 transaction failed 29189/-22, size 0-0 line 3013 [ 3030.147368] binder: 6133:6144 ioctl c0306201 200002c0 returned -14 03:57:38 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x41c0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000a80), 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000380), 0xc, &(0x7f00000010c0)={&(0x7f0000000c80)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x1) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) chroot(&(0x7f0000000240)='./bus\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/67) ftruncate(r3, 0x2007fff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f00000004c0)=""/250, 0x5c1d0b9) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 03:57:38 executing program 2: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/dev/ptmx\x00', 0xfffffffffffffffe) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000328bd7000fedbdf250100000000000000024100000010001369623a627269646765300000779148f66c74730ab1b4b5ee8cfda21a2a9220a02fc1da9b36da2218df71699afbed98e4c9a66627cddaf4cb0391772253dea2644bded60f7ccda6bc9e"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x3, 0x4, 0x3f00000}) [ 3030.321897] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3030.346321] qtaguid: iface_stat: create6(lo): no inet dev 03:57:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x7, &(0x7f0000000140)="dba6276bdfd4c49e3c8f32f3aac0f843b8134e054533874df06ca0730ad77dfa4709c48fd71cc71ccc2d0e4d54c1bc24407563582cf487b454cf55580f411ba7aea4e54132b52a") setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) pipe2$9p(&(0x7f0000000240), 0x84000) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff4b) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x8}, 0xf) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000340)) socketpair(0xe, 0x2, 0x3ff000000, &(0x7f00000002c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r3, 0x3, &(0x7f0000000280)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 3030.385779] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 03:57:38 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) io_setup(0x8, &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/mls\x00', 0x0, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff}, 0x80000) io_submit(r1, 0x4, &(0x7f0000001440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x100, r0, &(0x7f0000000180)="a4ee06292cf1529c7b118666efaa9fb5210933453ba7adccd54ac7affa8441159d629a6bc06f64a0ed18e9189d69f861e6845a0a903d93047c1dbd880081b5ae9d4035f40f40733d3049293090d0ac7015e55f2b2668b4b4f4e31824559e66f0a36a5815a8ab04909bb100989f75b363b2ea835652c8f35ce357b97c52f8a3c1e2567d7aa39154f852733a", 0x8b, 0x8, 0x0, 0x3, r2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000240)="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", 0x1000, 0x80000001, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001280)="7a7fa048603c1e2c114120329d", 0xd, 0x1a, 0x0, 0x3, r3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001340)="bc3b3377de0399bdc10cbfc7629311d9c89c4f36b3ff344ea6d0c6c4d3e53c2905b05e6d22d7df9e558a92c6b3c62ac753e1bea7068477eaa9b84dd7305fa3631596cf43066dfdcd89014c74360bd3fbc1bae1", 0x53, 0x0, 0x0, 0x1, r4}]) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xfffffeef, &(0x7f000000d000)=[{&(0x7f0000000100)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540380024001d001fc41180b598bc593ab6822848a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1, 0x0, 0x107}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x301000, 0x0) [ 3030.535558] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 03:57:38 executing program 4: getrusage(0x1, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SET_GS(0x1001, 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x2, &(0x7f00000000c0)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000001c0)="cb67359530d52a4ff1a089374898bbf1d2f6fa2741dd93b85cbfde", 0x1b, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="980430f2561d67f8864bf7d3baab44875018a1d7b0cc93f4c70793b32f2a50e8eb61ac1536d0f27ff2f63f587be4b24b38dc0acdb479f14818", 0x39, 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x3, r2) write$P9_RSYMLINK(r0, &(0x7f00000002c0)={0x14, 0x11, 0x1, {0x0, 0x1, 0x4}}, 0x14) r3 = getpgrp(0xffffffffffffffff) waitid(0x0, r3, &(0x7f0000000300), 0x2, &(0x7f0000000380)) 03:57:38 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = dup2(r0, r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0xa1f3ffff) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x5, 0x9, 0x7, 0xffffffff, 0xe, 0x3, 0xd8, 0x0, 0x7, 0xfffffffffffffffc, 0x9, 0x40}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) 03:57:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x1, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}}, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8, 0x0, 0x7f, 0x5, 0x4, 0x9, 0x8, 0x8, 0x7, 0xffffffffadb29e95, 0xd72, 0x3}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) recvmsg(r1, &(0x7f0000000640)={&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/117, 0x75}], 0x4, &(0x7f0000000580)=""/155, 0x9b}, 0x2042) [ 3030.758851] futex_wake_op: syz-executor2 tries to shift op by -193; fix this program [ 3030.783702] futex_wake_op: syz-executor2 tries to shift op by -193; fix this program [ 3030.806633] binder: 6133:6144 ioctl c0306201 20000100 returned -14 [ 3030.868534] binder: 6133:6201 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3030.879570] binder: 6133:6201 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3030.898094] binder: 6133:6144 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3030.906068] binder: 6133:6201 transaction failed 29189/-22, size 0-0 line 3013 03:57:39 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, 0x0, 0x0) close(r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000540)={'mangle\x00'}, &(0x7f00000005c0)=0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x4fff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2800000010005f9e00000000000000000000000043ce68eab3e2d90c308366c2a0539a3a846fd0b11fb12e5ba8aab6be38aa03facba6e6d72a6bd64d0b242bf0e91afb2bef1c6dcc1722d054430b0ab27af51ad33fa27ca1cb7f9ca46f264d023518380dcbb12b5607afa4dffacb64003250b01b96fb0a28e8d174cae792d790eb020fd8d77d88a5b0c4cc458f4731b7e4ea337270161ff5f816b8bb7e80774afb9f32f2255ab1cc1fb9646d6d55ffc06fa2fab8ace069dbb795f35eae", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0\x00'}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0, 0x3) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000a00)=@hci, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') accept(r2, &(0x7f0000000b40)=@hci, &(0x7f0000000bc0)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f00000007c0)=ANY=[]}}, 0x1) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000780)) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)=""/67) ftruncate(r4, 0x2007fff) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000600)={{0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1}, 0x7, 0x0, 0x5}) write(r6, &(0x7f00000001c0), 0xfffffef3) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, 0x0, 0x4) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f0000002040)=""/4096) 03:57:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/192, 0xc0}], 0x5, &(0x7f0000001640)=""/163, 0xa3}, 0x10061) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3030.916357] binder: 6133:6201 ioctl c0306201 200002c0 returned -14 [ 3030.965629] binder: undelivered TRANSACTION_ERROR: 29189 [ 3030.976929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 3031.045596] binder: 6207:6209 ioctl c0306201 20000100 returned -14 [ 3031.062463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3031.075269] qtaguid: iface_stat: create6(lo): no inet dev [ 3031.075571] binder: undelivered TRANSACTION_ERROR: 29189 [ 3031.115742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3031.162432] binder: 6207:6221 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3031.194441] binder: 6207:6221 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3031.204924] binder: 6207:6217 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:57:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) 03:57:39 executing program 1: r0 = timerfd_create(0xf, 0x80000) flistxattr(r0, &(0x7f0000000140)=""/77, 0x4d) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) gettid() write$P9_RWALK(r0, &(0x7f00000001c0)={0x23, 0x6f, 0x2, {0x2, [{0x81, 0x3, 0x1}, {0xc, 0x1, 0x6}]}}, 0x23) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) 03:57:39 executing program 4: getrusage(0x1, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SET_GS(0x1001, 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x2, &(0x7f00000000c0)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000001c0)="cb67359530d52a4ff1a089374898bbf1d2f6fa2741dd93b85cbfde", 0x1b, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="980430f2561d67f8864bf7d3baab44875018a1d7b0cc93f4c70793b32f2a50e8eb61ac1536d0f27ff2f63f587be4b24b38dc0acdb479f14818", 0x39, 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x3, r2) write$P9_RSYMLINK(r0, &(0x7f00000002c0)={0x14, 0x11, 0x1, {0x0, 0x1, 0x4}}, 0x14) r3 = getpgrp(0xffffffffffffffff) waitid(0x0, r3, &(0x7f0000000300), 0x2, &(0x7f0000000380)) [ 3031.212504] binder: 6207:6217 transaction failed 29189/-22, size 0-0 line 3013 [ 3031.221551] binder: 6207:6217 ioctl c0306201 200002c0 returned -14 03:57:39 executing program 5: unshare(0x400) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x1, 0x5, 0x8001, r1}) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x3, 0x0, 0xd, 0x3, 0x34, "c9bd7286885f5b01c54ac2470c6b3c26635e064bf2df81dd400e18a785d217bbc54dd40107122ab42a557ed1723ac1fb184d97d9"}, 0x3e, 0x3) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000180)={0x7f, 0x1ff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000280)}, 0x10) 03:57:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000001000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x44) openat(r1, &(0x7f0000000040)='./file0\x00', 0x214401, 0x20) 03:57:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x280a1) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x14, 0x0, 0x0, 0x4, 0x3}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x4) [ 3031.373096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 03:57:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfffffd61) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="0d9e6c79fedbd27a834f45088467318c", 0x80000000, 0x0, 0x3, 0x1, 0x8, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000500), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:57:39 executing program 2: pipe(&(0x7f0000000040)) r0 = dup(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000600)={{0x4, 0x400, 0x6, 0x3}, 'syz1\x00', 0xc}) fchdir(0xffffffffffffffff) r1 = open(0x0, 0x141042, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x2081fc) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000400)="ff0196f5cde93c3329817bc6b8b9561145008b6a760100d7fbce1288b74de9366ec9338d759c076e8fa6e37542e6d035e32b248c94dd718e0420ac39f30c2acf704e9b58ce703714ca7af36f3ebe49dad7cf794eb76f7d6a62d0970a2024417316631a510ef9a8bfe7ad6052146651275864dbc4ad7eaad833457e24c3cefd42f7123cff29e1b4e0a6c3dcad332083914cabd319a074c5d95a1b9f3a7acf313870d69e96e6023ecab7bf8a5a32f0448179aa60134a2c37b5542d085503b81fabe68b00000000000000", 0xc9) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r5, 0x500, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x20040000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r6, r7) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x4c81, 0xfffffffffffffffe) [ 3031.565564] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 03:57:39 executing program 4: r0 = memfd_create(&(0x7f0000000240)='w\x00', 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') fchmod(r2, 0xfffffffffffffffd) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080)=0x9, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) dup2(r0, r2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 03:57:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0x10001, 0x7e}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x12, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x3f000000, 0x0, &(0x7f0000000300)}) 03:57:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000674000/0x2000)=nil, 0x2000, 0x1000006) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x600000a) ioctl$int_out(r0, 0x80804522, &(0x7f0000000000)) [ 3031.799989] binder: 6270:6272 got transaction with invalid offsets size, 18 [ 3031.808046] binder: 6270:6272 transaction failed 29201/-22, size 4608-18 line 3172 [ 3031.833438] binder_alloc: binder_alloc_mmap_handler: 6270 20005000-20009000 already mapped failed -16 [ 3031.835735] binder: 6207:6217 ioctl c0306201 20000100 returned -14 [ 3031.866031] binder: BINDER_SET_CONTEXT_MGR already set [ 3031.871332] binder: 6270:6272 ioctl 40046207 0 returned -16 [ 3031.872498] binder_alloc: 6270: binder_alloc_buf, no vma [ 3031.872512] binder: 6270:6277 transaction failed 29189/-3, size 4608-18 line 3136 03:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) 03:57:40 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd8c2206c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00df45", 0x273) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x62d7, 0x9, 0x0, 0x8000}, 0xff6b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000002100)="fae962275ec1a982790e606f065cada843eec7637c6326edbc74efaa3b0e16be24adbf46225a0a8eb3f42c3b1383", 0x2e}], 0x1, &(0x7f00000014c0)}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 03:57:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x280a1) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x14, 0x0, 0x0, 0x4, 0x3}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x4) 03:57:40 executing program 4: r0 = socket$inet6(0xa, 0x80805, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x40) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [{0x20, '(ppp0['}, {0x20, ']lo\\eth0wlan0cpuset/:]wlan1()\',\\md5sum'}, {}], 0xa, "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"}, 0x103a) r2 = getpid() io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xc, r1}, &(0x7f00000000c0)) sched_setscheduler(r2, 0x5, &(0x7f0000000140)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x1, 0x6, 0x3, 0x1000, 0xe, 0x400, 0x6, 0x3, 0x10000, 0x2, 0x8, 0x8}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x100000040, &(0x7f0000000040), 0x0) 03:57:40 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000003ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003f00)=0x14, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000057c0)) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'lo\x00', 0x5}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005800)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005a00)='/dev/ptmx\x00', 0x44800, 0x0) pipe2(&(0x7f0000005b00), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005c80)={0x0, 0x3, &(0x7f0000005b40), &(0x7f0000005b80)='syzkaller\x00', 0x401, 0x9d, &(0x7f0000005bc0)=""/157}, 0x48) rt_sigpending(&(0x7f0000000580), 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000005d00)='./file0/file0\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000005d40)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000005dc0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eeff088cddae610000", @ANYRES16=r3, @ANYBLOB="28032abd7000fddbdf250d000000200006008260ffcca1f82a8d08000100400000000400020008000100ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40408c4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10100800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x401, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000005e40)) getpgid(0xffffffffffffffff) pipe2(&(0x7f0000000540), 0x4800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000004000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000005480), 0x0, 0x0, 0x0, 0x4800}], 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) listxattr(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000300)=""/252, 0xfffffffffffffecc) ioctl$TCFLSH(r4, 0x40045431, 0x8000100000000001) 03:57:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fff) r2 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3031.909761] binder: 6207:6280 Acquire 1 refcount change on invalid ref 0 ret -22 [ 3031.923529] binder: 6207:6280 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 3031.934730] binder: 6207:6217 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 3031.943457] binder: 6207:6280 transaction failed 29189/-22, size 0-0 line 3013 [ 3031.951603] binder: 6207:6280 ioctl c0306201 200002c0 returned -14 [ 3031.995970] binder: undelivered TRANSACTION_ERROR: 29189 [ 3032.015621] binder: undelivered TRANSACTION_ERROR: 29189 [ 3032.063950] binder: 6301:6303 ioctl c0306201 20000100 returned -14 [ 3032.134639] binder: 6301:6308 got transaction to context manager from process owning it [ 3032.149292] binder: 6301:6308 transaction failed 29201/-22, size 0-0 line 3004 [ 3032.162803] binder: 6301:6308 ioctl c0306201 200002c0 returned -14 03:57:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unshare(0x3ffffffe) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x200802, 0x0) accept4$unix(r0, &(0x7f0000000340)=@abs, &(0x7f0000000400)=0x6e, 0x800) syz_genetlink_get_family_id$fou(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x3403}) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000700)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x1f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220}) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x180) lsetxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', 0x0, 0x0, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) unshare(0x20020000) mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') 03:57:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) epoll_create1(0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x80000000, 0x7, 0x101}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x8001}) ioctl$TCXONC(r2, 0x540a, 0x0) [ 3032.766972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:57:40 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x2d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x8, 0x3, 0x1ff, 0x2f6e74f5, 0x0, 0x0, 0x3c184, 0x8, 0x8000, 0x8, 0x3ff, 0x9, 0x9, 0x5, 0x3f, 0x401, 0x2, 0x1, 0x2, 0x1000, 0x1, 0xffffffff, 0x401, 0x7, 0x9, 0xc2, 0x3, 0x1, 0x3070, 0x1fd3, 0xb4, 0x80000000, 0x6, 0x1f, 0x7f, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x80, 0x8}, 0x820, 0x8, 0x0, 0x3, 0x4, 0x10001, 0x67b}, r0, 0xf, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x10001, 0x3, 0x4, 0x4, 0x0, 0x200, 0x4101, 0x1, 0x100000000, 0x3f27, 0x1c, 0xee, 0x1f, 0x8, 0x101, 0xfffffffffffffffc, 0x81, 0x1ff, 0x9, 0x4, 0x3, 0x3, 0x53bd0ea8, 0x10001, 0xff, 0x8, 0x1, 0xffffffffffffff34, 0x100, 0x1, 0x67d, 0x8, 0x0, 0x4, 0x10001, 0x3, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0xf4}, 0x100, 0x7, 0x7, 0x7, 0x3, 0x1, 0x7d3}, r0, 0x3, r1, 0xa) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 3032.846076] qtaguid: iface_stat: create6(lo): no inet dev 03:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3032.848613] binder: 6301:6308 ioctl c0306201 20000100 returned -14 [ 3032.894299] binder: BINDER_SET_CONTEXT_MGR already set [ 3032.894307] binder: 6301:6308 ioctl 40046207 0 returned -16 [ 3032.911023] binder_alloc: 6301: binder_alloc_buf, no vma [ 3032.911039] binder: 6301:6336 transaction failed 29189/-3, size 0-0 line 3136 [ 3032.911053] binder: 6301:6336 ioctl c0306201 200002c0 returned -14 [ 3032.911222] binder: undelivered death notification, 0000000000000000 03:57:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x5) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ea8380a83101a6ba12a0f6c1fe1a5657214eec6f466e7cfd29ca30ae103e99725eaebc4c3d49c0100ce189647d91186d6b59fc8063dadc359ca1ecb9fafd02cf", "968e88de44a85573541c51ffbb05562d975ab17571fee7782be8810a274d4f02e4c2f85493e20f1563fde75201367b1851cf884036e4447277dfa08b1925b7f2", "9c1bbe8b57abcd5271b177c5a9b5d2e035947e0addac32b8699d7d3c8dd32727"}) [ 3032.992849] binder: 6339:6342 ioctl c0306201 20000100 returned -14 [ 3033.046745] binder: 6339:6348 ioctl 40046205 80 returned -22 03:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) unshare(0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000040)=[@exit_looper, @decrefs={0x40046307, 0x1}], 0xd, 0x0, &(0x7f00000001c0)="d390da24f3fe219f8c51c74d14"}) [ 3033.058260] binder_alloc: 6301: binder_alloc_buf, no vma [ 3033.058277] binder: 6339:6348 transaction failed 29189/-3, size 0-0 line 3136 [ 3033.058317] binder: 6339:6348 ioctl c0306201 200002c0 returned -14 [ 3033.768632] binder: 6339:6348 ioctl c0306201 20000100 returned -14 [ 3033.815901] binder: 6339:6348 ioctl 40046205 80 returned -22 [ 3033.929460] binder: 6370:6371 ioctl c0306201 20000100 returned -14 [ 3033.987789] binder_alloc: 6301: binder_alloc_buf, no vma [ 3033.987806] binder: 6370:6372 transaction failed 29189/-3, size 0-0 line 3136 [ 3033.987854] binder: 6370:6372 ioctl c0306201 200002c0 returned -14 [ 3034.140845] audit_printk_skb: 1371 callbacks suppressed [ 3034.140853] audit: type=1400 audit(1547611062.156:293764): avc: denied { sys_admin } for pid=2115 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 03:57:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper], 0xffffffffffffff2d, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r1}, @register_looper, @dead_binder_done={0x40086310, 0x1}, @decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x1, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xffffffffffffff92, 0x0, 0x0}) [ 3034.722355] audit: type=1400 audit(1547611062.806:293765): avc: denied { dac_override } for pid=6370 comm="syz-executor3" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3034.723610] binder: 6370:6372 ioctl c0306201 20000100 returned -14 [ 3034.740124] audit: type=1400 audit(1547611062.826:293766): avc: denied { net_admin } for pid=2115 comm="syz-executor1" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3034.796796] audit: type=1400 audit(1547611062.886:293767): avc: denied { call } for pid=6370 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 3034.796818] binder_alloc: 6301: binder_alloc_buf, no vma [ 3034.796834] binder: 6370:6375 transaction failed 29189/-3, size 0-0 line 3136 [ 3034.796853] binder: 6370:6375 ioctl c0306201 200002c0 returned -14 [ 3034.797224] audit: type=1400 audit(1547611062.886:293768): avc: denied { sys_admin } for pid=6370 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3034.804860] audit: type=1400 audit(1547611062.886:293769): avc: denied { sys_admin } for pid=10487 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3034.809649] audit: type=1400 audit(1547611062.896:293770): avc: denied { net_admin } for pid=10487 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3034.984207] lowmemorykiller: Killing 'syz-executor2' (2730) (tgid 2730), adj 1000, [ 3034.984207] to free 50408kB on behalf of 'syz-executor2' (6330) because [ 3034.984207] cache 65464kB is below limit 65536kB for oom_score_adj 12 [ 3034.984207] Free memory is -13004kB above reserved [ 3035.007688] lowmemorykiller: Killing 'syz-executor0' (31926) (tgid 31926), adj 1000, [ 3035.007688] to free 50400kB on behalf of 'syz-executor2' (6298) because [ 3035.007688] cache 65264kB is below limit 65536kB for oom_score_adj 12 [ 3035.007688] Free memory is -12904kB above reserved [ 3035.124333] lowmemorykiller: Killing 'syz-executor5' (23930) (tgid 23930), adj 1000, [ 3035.124333] to free 50400kB on behalf of 'syz-executor2' (6330) because [ 3035.124333] cache 64564kB is below limit 65536kB for oom_score_adj 12 [ 3035.124333] Free memory is 4396kB above reserved [ 3035.205591] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 3035.275008] lowmemorykiller: Killing 'syz-executor1' (7734) (tgid 7734), adj 1000, [ 3035.275008] to free 50396kB on behalf of 'syz-executor2' (6330) because [ 3035.275008] cache 64028kB is below limit 65536kB for oom_score_adj 12 [ 3035.275008] Free memory is -9744kB above reserved [ 3035.298163] lowmemorykiller: Killing 'syz-executor1' (29136) (tgid 29136), adj 1000, [ 3035.298163] to free 50396kB on behalf of 'syz-executor2' (6330) because [ 3035.298163] cache 63728kB is below limit 65536kB for oom_score_adj 12 [ 3035.298163] Free memory is -13100kB above reserved [ 3035.326455] lowmemorykiller: Killing 'syz-executor5' (6923) (tgid 6923), adj 1000, [ 3035.326455] to free 50388kB on behalf of 'syz-executor2' (6330) because [ 3035.326455] cache 63128kB is below limit 65536kB for oom_score_adj 12 [ 3035.326455] Free memory is -13216kB above reserved [ 3035.334043] lowmemorykiller: Killing 'syz-executor2' (22704) (tgid 22704), adj 1000, [ 3035.334043] to free 50380kB on behalf of 'syz-executor2' (6330) because [ 3035.334043] cache 62928kB is below limit 65536kB for oom_score_adj 12 [ 3035.334043] Free memory is -13216kB above reserved [ 3035.353944] lowmemorykiller: Killing 'syz-executor5' (6923) (tgid 6923), adj 1000, [ 3035.353944] to free 50388kB on behalf of 'syz-executor2' (6298) because [ 3035.353944] cache 63228kB is below limit 65536kB for oom_score_adj 12 [ 3035.353944] Free memory is -13016kB above reserved [ 3035.354699] audit: type=1400 audit(1547611063.436:293771): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3035.355099] audit: type=1400 audit(1547611063.436:293772): avc: denied { sys_admin } for pid=2111 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3035.369068] audit: type=1400 audit(1547611063.456:293773): avc: denied { net_admin } for pid=2111 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 3035.369636] lowmemorykiller: Killing 'syz-executor5' (6104) (tgid 6104), adj 1000, [ 3035.369636] to free 50372kB on behalf of 'syz-executor2' (6330) because [ 3035.369636] cache 62528kB is below limit 65536kB for oom_score_adj 12 [ 3035.369636] Free memory is 5084kB above reserved [ 3035.381948] lowmemorykiller: Killing 'syz-executor1' (19141) (tgid 19141), adj 1000, [ 3035.381948] to free 50372kB on behalf of 'syz-executor2' (6330) because [ 3035.381948] cache 60928kB is below limit 65536kB for oom_score_adj 12 [ 3035.381948] Free memory is -13248kB above reserved [ 3035.397703] lowmemorykiller: Killing 'syz-executor0' (7278) (tgid 7278), adj 1000, [ 3035.397703] to free 50364kB on behalf of 'syz-executor2' (6330) because [ 3035.397703] cache 58028kB is below limit 65536kB for oom_score_adj 12 [ 3035.397703] Free memory is -5944kB above reserved [ 3035.398637] lowmemorykiller: Killing 'syz-executor0' (7278) (tgid 7278), adj 1000, [ 3035.398637] to free 50364kB on behalf of 'syz-executor2' (6298) because [ 3035.398637] cache 56528kB is below limit 65536kB for oom_score_adj 12 [ 3035.398637] Free memory is 12456kB above reserved [ 3035.409857] lowmemorykiller: Killing 'syz-executor0' (7366) (tgid 7366), adj 1000, [ 3035.409857] to free 50364kB on behalf of 'udevd' (10690) because [ 3035.409857] cache 55428kB is below limit 65536kB for oom_score_adj 12 [ 3035.409857] Free memory is -13240kB above reserved [ 3035.414114] lowmemorykiller: Killing 'syz-executor1' (11871) (tgid 11871), adj 1000, [ 3035.414114] to free 50364kB on behalf of 'syz-executor2' (6330) because [ 3035.414114] cache 56028kB is below limit 65536kB for oom_score_adj 12 [ 3035.414114] Free memory is -13240kB above reserved [ 3035.420295] lowmemorykiller: Killing 'syz-executor5' (7812) (tgid 7812), adj 1000, [ 3035.420295] to free 50344kB on behalf of 'syz-executor2' (6298) because [ 3035.420295] cache 51928kB is below limit 65536kB for oom_score_adj 12 [ 3035.420295] Free memory is -13184kB above reserved [ 3035.422864] lowmemorykiller: Killing 'syz-executor5' (11138) (tgid 11138), adj 1000, [ 3035.422864] to free 50344kB on behalf of 'syz-executor2' (6298) because [ 3035.422864] cache 51828kB is below limit 65536kB for oom_score_adj 12 [ 3035.422864] Free memory is -13084kB above reserved [ 3035.427437] lowmemorykiller: Killing 'syz-executor5' (11168) (tgid 11168), adj 1000, [ 3035.427437] to free 50344kB on behalf of 'syz-executor2' (6298) because [ 3035.427437] cache 51728kB is below limit 65536kB for oom_score_adj 12 [ 3035.427437] Free memory is -12328kB above reserved [ 3035.429842] lowmemorykiller: Killing 'syz-executor0' (7222) (tgid 7222), adj 1000, [ 3035.429842] to free 50336kB on behalf of 'syz-executor2' (6298) because [ 3035.429842] cache 51728kB is below limit 65536kB for oom_score_adj 12 [ 3035.429842] Free memory is -7844kB above reserved [ 3035.460003] lowmemorykiller: Killing 'syz-executor5' (7812) (tgid 7812), adj 1000, [ 3035.460003] to free 50344kB on behalf of 'syz-executor2' (6330) because [ 3035.460003] cache 52028kB is below limit 65536kB for oom_score_adj 12 [ 3035.460003] Free memory is -13184kB above reserved [ 3035.462817] lowmemorykiller: Killing 'syz-executor0' (7253) (tgid 7253), adj 1000, [ 3035.462817] to free 50336kB on behalf of 'syz-executor2' (6330) because [ 3035.462817] cache 51528kB is below limit 65536kB for oom_score_adj 12 [ 3035.462817] Free memory is 4948kB above reserved [ 3035.464023] lowmemorykiller: Killing 'syz-executor0' (7253) (tgid 7253), adj 1000, [ 3035.464023] to free 50336kB on behalf of 'kswapd0' (33) because [ 3035.464023] cache 51028kB is below limit 65536kB for oom_score_adj 12 [ 3035.464023] Free memory is 5348kB above reserved [ 3035.468075] lowmemorykiller: Killing 'syz-executor1' (7663) (tgid 7663), adj 1000, [ 3035.468075] to free 50336kB on behalf of 'kswapd0' (33) because [ 3035.468075] cache 51028kB is below limit 65536kB for oom_score_adj 12 [ 3035.468075] Free memory is -3264kB above reserved [ 3035.481114] lowmemorykiller: Killing 'syz-executor1' (7699) (tgid 7699), adj 1000, [ 3035.481114] to free 50336kB on behalf of 'syz-executor2' (6330) because [ 3035.481114] cache 50528kB is below limit 65536kB for oom_score_adj 12 [ 3035.481114] Free memory is -11960kB above reserved [ 3035.481751] lowmemorykiller: Killing 'syz-executor1' (7699) (tgid 7699), adj 1000, [ 3035.481751] to free 50336kB on behalf of 'syz-executor2' (6298) because [ 3035.481751] cache 50428kB is below limit 65536kB for oom_score_adj 12 [ 3035.481751] Free memory is -11860kB above reserved [ 3035.498156] lowmemorykiller: Killing 'syz-executor2' (24196) (tgid 24196), adj 1000, [ 3035.498156] to free 50336kB on behalf of 'syz-executor2' (6298) because [ 3035.498156] cache 49828kB is below limit 65536kB for oom_score_adj 12 [ 3035.498156] Free memory is 13816kB above reserved [ 3035.505497] lowmemorykiller: Killing 'syz-executor2' (24202) (tgid 24202), adj 1000, [ 3035.505497] to free 50336kB on behalf of 'syz-executor2' (6298) because [ 3035.505497] cache 49828kB is below limit 65536kB for oom_score_adj 12 [ 3035.505497] Free memory is 14016kB above reserved [ 3035.511502] lowmemorykiller: Killing 'syz-executor5' (19029) (tgid 19029), adj 1000, [ 3035.511502] to free 50332kB on behalf of 'syz-executor2' (6330) because [ 3035.511502] cache 49628kB is below limit 65536kB for oom_score_adj 12 [ 3035.511502] Free memory is -13208kB above reserved [ 3035.513982] lowmemorykiller: Killing 'syz-executor5' (19043) (tgid 19043), adj 1000, [ 3035.513982] to free 50332kB on behalf of 'syz-executor2' (6330) because [ 3035.513982] cache 49528kB is below limit 65536kB for oom_score_adj 12 [ 3035.513982] Free memory is -13008kB above reserved [ 3035.525491] lowmemorykiller: Killing 'syz-executor2' (5541) (tgid 5541), adj 1000, [ 3035.525491] to free 50332kB on behalf of 'syz-executor2' (6330) because [ 3035.525491] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.525491] Free memory is -8708kB above reserved [ 3035.534768] lowmemorykiller: Killing 'syz-executor1' (24393) (tgid 24393), adj 1000, [ 3035.534768] to free 50324kB on behalf of 'kswapd0' (33) because [ 3035.534768] cache 50828kB is below limit 65536kB for oom_score_adj 12 [ 3035.534768] Free memory is -13044kB above reserved [ 3035.537250] lowmemorykiller: Killing 'syz-executor1' (13839) (tgid 13839), adj 1000, [ 3035.537250] to free 50324kB on behalf of 'kswapd0' (33) because [ 3035.537250] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.537250] Free memory is -6400kB above reserved [ 3035.547402] lowmemorykiller: Killing 'syz-executor1' (24393) (tgid 24393), adj 1000, [ 3035.547402] to free 50324kB on behalf of 'syz-executor2' (6298) because [ 3035.547402] cache 49528kB is below limit 65536kB for oom_score_adj 12 [ 3035.547402] Free memory is -13108kB above reserved [ 3035.549480] lowmemorykiller: Killing 'syz-executor2' (21773) (tgid 21773), adj 1000, [ 3035.549480] to free 50324kB on behalf of 'syz-executor2' (6298) because [ 3035.549480] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.549480] Free memory is 2644kB above reserved [ 3035.558242] lowmemorykiller: Killing 'syz-executor2' (14192) (tgid 14192), adj 1000, [ 3035.558242] to free 50320kB on behalf of 'kswapd0' (33) because [ 3035.558242] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.558242] Free memory is 744kB above reserved [ 3035.560289] lowmemorykiller: Killing 'syz-executor4' (479) (tgid 479), adj 1000, [ 3035.560289] to free 50320kB on behalf of 'kswapd0' (33) because [ 3035.560289] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.560289] Free memory is -4604kB above reserved [ 3035.576651] lowmemorykiller: Killing 'syz-executor1' (14833) (tgid 14833), adj 1000, [ 3035.576651] to free 50316kB on behalf of 'kswapd0' (33) because [ 3035.576651] cache 49428kB is below limit 65536kB for oom_score_adj 12 [ 3035.576651] Free memory is 276kB above reserved [ 3035.587713] lowmemorykiller: Killing 'syz-executor1' (14833) (tgid 14833), adj 1000, [ 3035.587713] to free 50316kB on behalf of 'syz-executor2' (6298) because [ 3035.587713] cache 49328kB is below limit 65536kB for oom_score_adj 12 [ 3035.587713] Free memory is -8524kB above reserved [ 3035.590285] lowmemorykiller: Killing 'syz-executor1' (13624) (tgid 13624), adj 1000, [ 3035.590285] to free 50316kB on behalf of 'syz-executor2' (6298) because [ 3035.590285] cache 49228kB is below limit 65536kB for oom_score_adj 12 [ 3035.590285] Free memory is -6352kB above reserved [ 3035.596257] lowmemorykiller: Killing 'syz-executor1' (13624) (tgid 13624), adj 1000, [ 3035.596257] to free 50316kB on behalf of 'kswapd0' (33) because [ 3035.596257] cache 49328kB is below limit 65536kB for oom_score_adj 12 [ 3035.596257] Free memory is 1676kB above reserved [ 3035.598331] lowmemorykiller: Killing 'syz-executor1' (30913) (tgid 30913), adj 1000, [ 3035.598331] to free 50316kB on behalf of 'kswapd0' (33) because [ 3035.598331] cache 48928kB is below limit 65536kB for oom_score_adj 12 [ 3035.598331] Free memory is -13448kB above reserved [ 3035.607387] lowmemorykiller: Killing 'syz-executor2' (5384) (tgid 5384), adj 1000, [ 3035.607387] to free 50316kB on behalf of 'syz-executor2' (6330) because [ 3035.607387] cache 48828kB is below limit 65536kB for oom_score_adj 12 [ 3035.607387] Free memory is -9748kB above reserved [ 3035.613697] lowmemorykiller: Killing 'syz-executor2' (5398) (tgid 5398), adj 1000, [ 3035.613697] to free 50316kB on behalf of 'syz-executor2' (6330) because [ 3035.613697] cache 48728kB is below limit 65536kB for oom_score_adj 12 [ 3035.613697] Free memory is -11556kB above reserved [ 3035.617822] lowmemorykiller: Killing 'syz-executor2' (20598) (tgid 20598), adj 1000, [ 3035.617822] to free 50312kB on behalf of 'syz-executor2' (6330) because [ 3035.617822] cache 48628kB is below limit 65536kB for oom_score_adj 12 [ 3035.617822] Free memory is -4956kB above reserved ** 811 printk messages dropped ** [ 3047.529846] [16863] 0 16863 17633 8240 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3047.529866] [16891] 0 16891 17633 8239 25 4 0 1000 syz-executor1 [ 3047.529884] [16949] 0 16949 17600 8238 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3047.529902] [16984] 0 16984 17633 8239 25 4 0 1000 syz-executor1 [ 3047.529912] [16992] 0 16992 17600 8238 25 4 0 1000 syz-executor5 [ 3047.529921] [17007] 0 17007 17600 8238 25 4 0 1000 syz-executor5 [ 3047.529930] [17021] 0 17021 17600 8238 25 4 0 1000 syz-executor5 [ 3047.529940] [17023] 0 17023 17699 8243 25 4 0 1000 syz-executor1 [ 3047.529949] [17032] 0 17032 17600 8238 25 4 0 1000 syz-executor5 [ 3047.529958] [17062] 0 17062 17600 8238 25 4 0 1000 syz-executor5 ** 44 printk messages dropped ** [ 3047.530300] [17552] 0 17552 17633 8239 25 4 0 1000 syz-executor1 [ 3047.530309] [17563] 0 17563 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530318] [17571] 0 17571 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530326] [17572] 0 17572 17633 8239 25 4 0 1000 syz-executor1 [ 3047.530336] [17579] 0 17579 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530344] [17585] 0 17585 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530353] [17605] 0 17605 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530362] [17630] 0 17630 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530370] [17641] 0 17641 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530379] [17647] 0 17647 17666 8241 25 4 0 1000 syz-executor1 [ 3047.530404] [17668] 0 17668 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530414] [17696] 0 17696 17633 8239 25 4 0 1000 syz-executor1 [ 3047.530423] [17714] 0 17714 17633 8239 25 4 0 1000 syz-executor1 [ 3047.530432] [17718] 0 17718 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530441] [17759] 0 17759 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530451] [17762] 0 17762 17600 8237 25 4 0 1000 syz-executor1 [ 3047.530460] [17772] 0 17772 17600 8238 25 4 0 1000 syz-executor5 [ 3047.530469] [17777] 0 17777 17600 8238 25 4 0 1000 syz-executor5 ** 38 printk messages dropped ** [ 3047.530950] [21376] 0 21376 17630 8207 25 3 0 1000 syz-executor0 ** 81 printk messages dropped ** [ 3047.531745] [28820] 0 28820 17633 8241 25 4 0 1000 syz-executor1 ** 44 printk messages dropped ** [ 3047.532226] [29791] 0 29791 17600 8235 24 4 0 1000 syz-executor2 [ 3047.532235] [29799] 0 29799 17600 8235 24 4 0 1000 syz-executor2 [ 3047.532245] [29823] 0 29823 17600 8238 25 4 0 1000 syz-executor5 [ 3047.532255] [29824] 0 29824 17633 8241 25 4 0 1000 syz-executor1 [ 3047.532266] [29898] 0 29898 17600 8238 25 4 0 1000 syz-executor5 [ 3047.532276] [29916] 0 29916 17600 8237 25 4 0 1000 syz-executor4 ** 19 printk messages dropped ** [ 3047.532478] [30241] 0 30241 17600 8236 25 4 0 1000 syz-executor2 ** 85 printk messages dropped ** [ 3047.533210] [32122] 0 32122 17633 8239 25 4 0 1000 syz-executor4 [ 3047.533218] [32129] 0 32129 17666 8242 25 4 0 1000 syz-executor4 [ 3047.533226] [32154] 0 32154 17600 8194 23 3 0 1000 syz-executor4 ** 40 printk messages dropped ** [ 3047.533525] [ 674] 0 674 17600 8238 26 4 0 1000 syz-executor4 [ 3047.533532] [ 737] 0 737 17600 8193 23 3 0 1000 syz-executor2 ** 1 printk messages dropped ** [ 3047.533547] [ 767] 0 767 17600 8193 23 3 0 1000 syz-executor2 [ 3047.533554] [ 797] 0 797 17600 8238 26 4 0 1000 syz-executor4 [ 3047.533561] [ 814] 0 814 17600 8236 25 4 0 1000 syz-executor2 [ 3047.533569] [ 819] 0 819 17600 8237 25 4 0 1000 syz-executor4 [ 3047.533576] [ 864] 0 864 17600 8237 25 4 0 1000 syz-executor4 ** 39 printk messages dropped ** [ 3047.533872] [ 1875] 0 1875 17633 8239 25 4 0 1000 syz-executor4 ** 42 printk messages dropped ** [ 3047.534275] [ 4094] 0 4094 17600 8203 24 3 0 1000 syz-executor4 [ 3047.534285] [ 4130] 0 4130 17633 8240 25 4 0 1000 syz-executor0 [ 3047.534295] [ 4229] 0 4229 17666 8242 25 4 0 1000 syz-executor0 ** 1808 printk messages dropped ** [ 3070.278523] [16842] 0 16842 17633 8239 25 4 0 1000 syz-executor1 ** 40 printk messages dropped ** [ 3070.278833] [17405] 0 17405 17600 8238 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3070.278858] [17433] 0 17433 17633 8239 25 4 0 1000 syz-executor1 ** 39 printk messages dropped ** [ 3070.279236] [18017] 0 18017 17600 8238 25 4 0 1000 syz-executor0 ** 2 printk messages dropped ** [ 3070.279267] [18050] 0 18050 17600 8238 25 4 0 1000 syz-executor0 [ 3070.279279] [18107] 0 18107 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279289] [18134] 0 18134 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279299] [18154] 0 18154 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279320] [18411] 0 18411 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279330] [18436] 0 18436 17666 8208 24 3 0 1000 syz-executor5 [ 3070.279375] [19155] 0 19155 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279387] [19217] 0 19217 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279401] [19393] 0 19393 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279422] [19664] 0 19664 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279433] [19683] 0 19683 17600 8237 25 4 0 1000 syz-executor4 [ 3070.279445] [19770] 0 19770 17633 8239 25 4 0 1000 syz-executor4 [ 3070.279455] [19771] 0 19771 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279465] [19776] 0 19776 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279475] [19778] 0 19778 17633 8239 25 4 0 1000 syz-executor4 [ 3070.279508] [20265] 0 20265 17600 8237 25 4 0 1000 syz-executor4 [ 3070.279518] [20293] 0 20293 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279527] [20296] 0 20296 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279539] [20352] 0 20352 17600 8237 25 4 0 1000 syz-executor4 [ 3070.279549] [20387] 0 20387 17633 8240 25 4 0 1000 syz-executor5 [ 3070.279559] [20394] 0 20394 17600 8237 25 4 0 1000 syz-executor4 [ 3070.279572] [20421] 0 20421 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279582] [20465] 0 20465 17666 8208 24 3 0 1000 syz-executor5 [ 3070.279608] [20938] 0 20938 17633 8237 24 4 0 1000 syz-executor2 [ 3070.279618] [21064] 0 21064 17666 8241 25 4 0 1000 syz-executor4 [ 3070.279628] [21066] 0 21066 17666 8241 25 4 0 1000 syz-executor4 [ 3070.279638] [21372] 0 21372 17600 8208 25 3 0 1000 syz-executor0 [ 3070.279647] [21376] 0 21376 17630 8207 25 3 0 1000 syz-executor0 [ 3070.279658] [21488] 0 21488 17600 8204 24 3 0 1000 syz-executor0 [ 3070.279667] [21491] 0 21491 17600 8209 24 3 0 1000 syz-executor0 [ 3070.279677] [21707] 0 21707 17666 8241 25 4 0 1000 syz-executor4 [ 3070.279687] [21934] 0 21934 17633 8240 25 4 0 1000 syz-executor0 [ 3070.279697] [21936] 0 21936 17633 8240 25 4 0 1000 syz-executor0 [ 3070.279707] [22000] 0 22000 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279717] [22028] 0 22028 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279727] [22060] 0 22060 17600 8204 24 3 0 1000 syz-executor5 [ 3070.279738] [22096] 0 22096 17633 8239 24 4 0 1000 syz-executor5 [ 3070.279748] [22545] 0 22545 17600 8218 24 3 0 1000 syz-executor5 [ 3070.279759] [22606] 0 22606 17600 8218 24 3 0 1000 syz-executor5 [ 3070.279769] [22880] 0 22880 17633 8205 24 3 0 1000 syz-executor4 [ 3070.279779] [22987] 0 22987 17633 8239 25 4 0 1000 syz-executor4 [ 3070.279789] [23051] 0 23051 17600 8236 24 4 0 1000 syz-executor4 [ 3070.279798] [24312] 0 24312 17600 8205 24 3 0 1000 syz-executor1 [ 3070.279808] [24526] 0 24526 17600 8241 25 4 0 1000 syz-executor5 [ 3070.279819] [25246] 0 25246 17600 8202 23 3 0 1000 syz-executor4 [ 3070.279829] [25266] 0 25266 17633 8207 25 3 0 1000 syz-executor4 [ 3070.279847] [25791] 0 25791 17634 8239 25 4 0 1000 syz-executor4 [ 3070.279857] [25831] 0 25831 17633 8239 25 4 0 1000 syz-executor4 [ 3070.279868] [26564] 0 26564 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279878] [26569] 0 26569 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279888] [26606] 0 26606 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279897] [26610] 0 26610 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279908] [26615] 0 26615 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279917] [26619] 0 26619 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279927] [26623] 0 26623 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279937] [26627] 0 26627 17600 8238 25 4 0 1000 syz-executor5 [ 3070.279947] [26827] 0 26827 17600 8195 23 3 0 1000 syz-executor5 [ 3070.279957] [26850] 0 26850 17600 8195 23 3 0 1000 syz-executor5 [ 3070.279967] [26869] 0 26869 17600 8195 23 3 0 1000 syz-executor5 [ 3070.279977] [26909] 0 26909 17600 8237 24 4 0 1000 syz-executor5 [ 3070.279987] [26926] 0 26926 17600 8237 24 4 0 1000 syz-executor5 [ 3070.279997] [26935] 0 26935 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280007] [26940] 0 26940 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280017] [26946] 0 26946 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280027] [26958] 0 26958 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280037] [26962] 0 26962 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280047] [26974] 0 26974 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280057] [26985] 0 26985 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280067] [27033] 0 27033 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280077] [27041] 0 27041 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280086] [27051] 0 27051 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280096] [27060] 0 27060 17600 8238 25 4 0 1000 syz-executor5 [ 3070.280106] [27312] 0 27312 17600 8196 23 3 0 1000 syz-executor1 [ 3070.280116] [27711] 0 27711 17633 8241 25 4 0 1000 syz-executor1 [ 3070.280127] [27745] 0 27745 17633 8241 25 4 0 1000 syz-executor1 [ 3070.280137] [27846] 0 27846 17666 8241 33 4 0 1000 syz-executor2 [ 3070.280147] [27877] 0 27877 17633 8241 25 4 0 1000 syz-executor1 [ 3070.280158] [27906] 0 27906 17600 8239 25 4 0 1000 syz-executor1 [ 3070.280168] [27941] 0 27941 17600 8239 25 4 0 1000 syz-executor1 [ 3070.280178] [27968] 0 27968 17600 8239 25 4 0 1000 syz-executor1 ** 15 printk messages dropped ** [ 3070.280338] [28377] 0 28377 17600 8205 24 3 0 1000 syz-executor1 [ 3070.280348] [28394] 0 28394 17600 8196 23 3 0 1000 syz-executor1 ** 40 printk messages dropped ** [ 3070.280776] [29537] 0 29537 17633 8241 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3070.280797] [29593] 0 29593 17600 8196 23 3 0 1000 syz-executor1 [ 3070.280807] [29595] 0 29595 17600 8236 25 4 0 1000 syz-executor2 [ 3070.280816] [29602] 0 29602 17600 8236 25 4 0 1000 syz-executor2 [ 3070.280826] [29604] 0 29604 17600 8205 24 3 0 1000 syz-executor1 [ 3070.280837] [29616] 0 29616 17633 8241 25 4 0 1000 syz-executor1 [ 3070.280856] [29626] 0 29626 17600 8194 23 3 0 1000 syz-executor4 [ 3070.280865] [29642] 0 29642 17600 8238 25 4 0 1000 syz-executor5 ** 39 printk messages dropped ** [ 3070.281269] [30280] 0 30280 17600 8236 25 4 0 1000 syz-executor2 ** 1 printk messages dropped ** [ 3070.281289] [30309] 0 30309 17600 8236 25 4 0 1000 syz-executor2 [ 3070.281299] [30315] 0 30315 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281310] [30342] 0 30342 17600 8236 25 4 0 1000 syz-executor2 [ 3070.281320] [30347] 0 30347 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281330] [30446] 0 30446 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281340] [30482] 0 30482 17633 8239 25 4 0 1000 syz-executor4 ** 41 printk messages dropped ** [ 3070.281740] [31383] 0 31383 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281748] [31386] 0 31386 17600 8206 24 3 0 1000 syz-executor0 [ 3070.281755] [31413] 0 31413 17600 8238 25 4 0 1000 syz-executor0 [ 3070.281763] [31436] 0 31436 17600 8238 25 4 0 1000 syz-executor0 [ 3070.281770] [31454] 0 31454 17600 8238 25 4 0 1000 syz-executor0 [ 3070.281778] [31465] 0 31465 17600 8194 23 3 0 1000 syz-executor4 [ 3070.281785] [31474] 0 31474 17633 8205 24 3 0 1000 syz-executor4 [ 3070.281793] [31489] 0 31489 17666 8242 24 4 0 1000 syz-executor1 [ 3070.281801] [31535] 0 31535 17600 8194 23 3 0 1000 syz-executor4 [ 3070.281808] [31536] 0 31536 17633 8205 24 3 0 1000 syz-executor4 [ 3070.281815] [31542] 0 31542 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281824] [31560] 0 31560 17666 8241 25 4 0 1000 syz-executor4 [ 3070.281833] [31605] 0 31605 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281849] [31689] 0 31689 17600 8194 23 3 0 1000 syz-executor4 [ 3070.281857] [31691] 0 31691 17633 8205 24 3 0 1000 syz-executor4 [ 3070.281864] [31735] 0 31735 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281873] [31767] 0 31767 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281881] [31778] 0 31778 17600 8195 23 3 0 1000 syz-executor0 [ 3070.281889] [31783] 0 31783 17600 8204 24 3 0 1000 syz-executor0 [ 3070.281897] [31808] 0 31808 17600 8238 25 4 0 1000 syz-executor0 [ 3070.281904] [31826] 0 31826 17633 8239 25 4 0 1000 syz-executor4 [ 3070.281912] [31880] 0 31880 17633 8239 25 4 0 1000 syz-executor4 ** 30 printk messages dropped ** [ 3070.282182] [32546] 0 32546 17633 8240 26 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3070.282203] [32576] 0 32576 17600 8236 25 4 0 1000 syz-executor2 ** 42 printk messages dropped ** [ 3070.282677] [ 1241] 0 1241 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282687] [ 1293] 0 1293 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282697] [ 1348] 0 1348 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282708] [ 1365] 0 1365 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282718] [ 1385] 0 1385 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282728] [ 1420] 0 1420 17600 8236 25 4 0 1000 syz-executor2 [ 3070.282739] [ 1437] 0 1437 17600 8238 25 4 0 1000 syz-executor0 [ 3070.282749] [ 1443] 0 1443 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282759] [ 1461] 0 1461 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282769] [ 1494] 0 1494 17633 8239 25 4 0 1000 syz-executor4 [ 3070.282780] [ 1514] 0 1514 17600 8238 25 4 0 1000 syz-executor0 [ 3070.282790] [ 1525] 0 1525 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282801] [ 1589] 0 1589 17600 8238 25 4 0 1000 syz-executor0 [ 3070.282811] [ 1594] 0 1594 17600 8237 25 4 0 1000 syz-executor4 [ 3070.282821] [ 1636] 0 1636 17666 8241 26 4 0 1000 syz-executor2 [ 3070.282831] [ 1641] 0 1641 17666 8241 26 4 0 1000 syz-executor2 [ 3070.282849] [ 1646] 0 1646 17600 8238 25 4 0 1000 syz-executor0 [ 3070.282860] [ 1658] 0 1658 17633 8239 25 4 0 1000 syz-executor4 ** 34 printk messages dropped ** [ 3070.283225] [ 3209] 0 3209 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283235] [ 3219] 0 3219 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283246] [ 3454] 0 3454 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283256] [ 3455] 0 3455 17633 8239 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3070.283276] [ 3502] 0 3502 17600 8203 24 3 0 1000 syz-executor4 [ 3070.283286] [ 3510] 0 3510 17666 8240 26 4 0 1000 syz-executor2 [ 3070.283296] [ 3522] 0 3522 17666 8242 25 4 0 1000 syz-executor0 [ 3070.283308] [ 3565] 0 3565 17666 8207 24 3 0 1000 syz-executor4 [ 3070.283319] [ 3715] 0 3715 17600 8204 24 3 0 1000 syz-executor5 [ 3070.283330] [ 3791] 0 3791 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283341] [ 3832] 0 3832 17600 8203 24 3 0 1000 syz-executor4 ** 39 printk messages dropped ** [ 3070.283763] [ 5218] 0 5218 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283774] [ 5271] 0 5271 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283784] [ 5333] 0 5333 17666 8241 25 4 0 1000 syz-executor4 [ 3070.283795] [ 5415] 0 5415 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283806] [ 5462] 0 5462 17666 8242 25 4 0 1000 syz-executor0 [ 3070.283816] [ 5523] 0 5523 17666 8242 25 4 0 1000 syz-executor0 [ 3070.283827] [ 5597] 0 5597 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283847] [ 5641] 0 5641 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283858] [ 5663] 0 5663 17633 8241 25 4 0 1000 syz-executor0 [ 3070.283868] [ 5737] 0 5737 17633 8242 25 4 0 1000 syz-executor0 ** 1 printk messages dropped ** [ 3070.283890] [ 5853] 0 5853 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283900] [ 5897] 0 5897 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283910] [ 5949] 0 5949 17633 8240 25 4 0 1000 syz-executor0 [ 3070.283921] [ 6001] 0 6001 17600 8204 24 3 0 1000 syz-executor0 ** 40 printk messages dropped ** [ 3070.284348] [ 9116] 0 9116 17633 8205 24 3 0 1000 syz-executor4 [ 3070.284358] [ 9150] 0 9150 17600 8203 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3070.284379] [ 9212] 0 9212 17600 8203 24 3 0 1000 syz-executor4 ** 38 printk messages dropped ** [ 3070.284755] [10134] 0 10134 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284765] [10137] 0 10137 17633 8207 24 3 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3070.284785] [10146] 0 10146 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284795] [10153] 0 10153 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284804] [10164] 0 10164 17666 8209 24 3 0 1000 syz-executor1 [ 3070.284814] [10182] 0 10182 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284824] [10184] 0 10184 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284834] [10210] 0 10210 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284852] [10215] 0 10215 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284862] [10227] 0 10227 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284872] [10232] 0 10232 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284882] [10246] 0 10246 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284892] [10249] 0 10249 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284902] [10257] 0 10257 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284911] [10261] 0 10261 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284921] [10277] 0 10277 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284931] [10301] 0 10301 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284941] [10304] 0 10304 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284951] [10332] 0 10332 17600 8205 24 3 0 1000 syz-executor1 [ 3070.284961] [10345] 0 10345 17633 8213 24 3 0 1000 syz-executor1 [ 3070.284971] [10359] 0 10359 17600 8204 24 3 0 1000 syz-executor0 [ 3070.284981] [10374] 0 10374 17633 8207 24 3 0 1000 syz-executor1 [ 3070.284991] [10377] 0 10377 17666 8209 24 3 0 1000 syz-executor1 [ 3070.285001] [10394] 0 10394 17600 8205 24 3 0 1000 syz-executor1 [ 3070.285011] [10397] 0 10397 17633 8208 24 3 0 1000 syz-executor1 ** 34 printk messages dropped ** [ 3070.285360] [10782] 0 10782 17633 8207 24 3 0 1000 syz-executor1 ** 4 printk messages dropped ** [ 3070.285410] [10834] 0 10834 17600 8205 24 3 0 1000 syz-executor1 [ 3070.285420] [10839] 0 10839 17633 8207 24 3 0 1000 syz-executor1 ** 37 printk messages dropped ** [ 3070.345850] [11253] 0 11253 17666 8209 24 3 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3070.345870] [11274] 0 11274 17633 8207 24 3 0 1000 syz-executor1 [ 3070.345880] [11302] 0 11302 17600 8205 24 3 0 1000 syz-executor1 [ 3070.345890] [11306] 0 11306 17633 8207 24 3 0 1000 syz-executor1 [ 3070.345900] [11319] 0 11319 17600 8205 24 3 0 1000 syz-executor1 [ 3070.345910] [11322] 0 11322 17633 8207 24 3 0 1000 syz-executor1 [ 3070.345920] [11348] 0 11348 17633 8206 24 3 0 1000 syz-executor1 [ 3070.345930] [11363] 0 11363 17666 8208 24 3 0 1000 syz-executor1 [ 3070.345940] [11378] 0 11378 17600 8205 24 3 0 1000 syz-executor1 [ 3070.345950] [11380] 0 11380 17633 8207 24 3 0 1000 syz-executor1 [ 3070.345959] [11397] 0 11397 17600 8205 24 3 0 1000 syz-executor1 [ 3070.345969] [11399] 0 11399 17633 8207 24 3 0 1000 syz-executor1 [ 3070.345979] [11438] 0 11438 17600 8205 24 3 0 1000 syz-executor1 [ 3070.345989] [11441] 0 11441 17633 8207 24 3 0 1000 syz-executor1 [ 3070.346000] [11464] 0 11464 17600 8205 24 3 0 1000 syz-executor1 [ 3070.346009] [11474] 0 11474 17600 8205 24 3 0 1000 syz-executor1 [ 3070.346019] [11479] 0 11479 17633 8207 24 3 0 1000 syz-executor1 ** 80 printk messages dropped ** [ 3070.346854] [16397] 0 16397 17633 8240 24 4 0 1000 syz-executor1 [ 3070.346863] [16441] 0 16441 17633 8240 24 4 0 1000 syz-executor1 ** 38 printk messages dropped ** [ 3070.347255] [19661] 0 19661 17600 8196 23 3 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3070.347275] [19846] 0 19846 17633 8206 24 3 0 1000 syz-executor5 ** 42 printk messages dropped ** [ 3070.347717] [27409] 0 27409 17633 8241 25 4 0 1000 syz-executor5 ** 41 printk messages dropped ** [ 3070.348128] [ 1127] 0 1127 17666 8242 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3070.348148] [ 1256] 0 1256 17600 8239 25 4 0 1000 syz-executor1 [ 3070.348158] [ 1730] 0 1730 17633 8198 24 3 0 1000 syz-executor5 [ 3070.348168] [ 1748] 0 1748 17666 8210 25 3 0 1000 syz-executor5 [ 3070.348178] [ 1763] 0 1763 17633 8209 24 3 0 1000 syz-executor4 [ 3070.348188] [ 1768] 0 1768 17699 8213 24 3 0 1000 syz-executor4 [ 3070.348198] [ 2015] 0 2015 17600 8237 24 4 0 1000 syz-executor5 [ 3070.348208] [ 2092] 0 2092 17633 8206 23 3 0 1000 syz-executor4 [ 3070.348218] [ 2440] 0 2440 17600 8207 25 3 0 1000 syz-executor5 [ 3070.348227] [ 2574] 0 2574 17600 8204 24 3 0 1000 syz-executor0 [ 3070.348237] [ 2580] 0 2580 17633 8207 24 3 0 1000 syz-executor0 [ 3070.348250] [ 3078] 0 3078 17600 8195 23 3 0 1000 syz-executor5 [ 3070.348261] [ 3126] 0 3126 17600 8195 23 3 0 1000 syz-executor5 ** 1491 printk messages dropped ** [ 3137.554733] [12860] 0 12860 17601 8232 25 4 0 1000 syz-executor4 ** 286 printk messages dropped ** [ 3137.597303] [18050] 0 18050 17600 8232 25 4 0 1000 syz-executor0 [ 3137.597313] [18107] 0 18107 17600 8232 25 4 0 1000 syz-executor5 [ 3137.597322] [18134] 0 18134 17633 8234 25 4 0 1000 syz-executor5 ** 39 printk messages dropped ** [ 3137.597770] [24312] 0 24312 17600 8201 24 3 0 1000 syz-executor1 [ 3137.597779] [24526] 0 24526 17600 8235 25 4 0 1000 syz-executor5 [ 3137.597788] [25246] 0 25246 17600 8198 23 3 0 1000 syz-executor4 [ 3137.597797] [25266] 0 25266 17633 8203 25 3 0 1000 syz-executor4 [ 3137.597805] [25791] 0 25791 17634 8233 25 4 0 1000 syz-executor4 [ 3137.597822] [25831] 0 25831 17633 8233 25 4 0 1000 syz-executor4 ** 80 printk messages dropped ** [ 3137.598512] [29324] 0 29324 17600 8201 24 3 0 1000 syz-executor1 ** 40 printk messages dropped ** [ 3137.598865] [30078] 0 30078 17600 8189 23 3 0 1000 syz-executor2 [ 3137.598874] [30098] 0 30098 17633 8235 25 4 0 1000 syz-executor1 ** 640 printk messages dropped ** [ 3137.604471] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 ** 1151 printk messages dropped ** [ 3141.893956] [17390] 0 17390 17633 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3141.893973] [17395] 0 17395 17633 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3141.893991] [17420] 0 17420 17600 8232 25 4 0 1000 syz-executor5 [ 3141.893999] [17433] 0 17433 17633 8233 25 4 0 1000 syz-executor1 [ 3141.894008] [17435] 0 17435 17600 8232 25 4 0 1000 syz-executor5 [ 3141.894017] [17445] 0 17445 17633 8233 25 4 0 1000 syz-executor1 [ 3141.894025] [17448] 0 17448 17600 8232 25 4 0 1000 syz-executor5 [ 3141.894034] [17458] 0 17458 17600 8232 25 4 0 1000 syz-executor5 [ 3141.894043] [17467] 0 17467 17633 8233 25 4 0 1000 syz-executor1 [ 3141.894052] [17473] 0 17473 17600 8232 25 4 0 1000 syz-executor5 [ 3141.894060] [17483] 0 17483 17633 8233 25 4 0 1000 syz-executor1 [ 3141.894069] [17506] 0 17506 17633 8233 25 4 0 1000 syz-executor1 [ 3141.894078] [17509] 0 17509 17600 8232 25 4 0 1000 syz-executor5 ** 38 printk messages dropped ** [ 3141.894445] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3141.894496] [19217] 0 19217 17633 8234 25 4 0 1000 syz-executor5 ** 1157 printk messages dropped ** [ 3141.996431] [ 6318] 0 6318 3648 43 13 3 0 0 getty ** 574 printk messages dropped ** [ 3147.539035] [17390] 0 17390 17633 8233 25 4 0 1000 syz-executor1 [ 3147.539044] [17392] 0 17392 17600 8232 25 4 0 1000 syz-executor5 [ 3147.539053] [17395] 0 17395 17633 8233 25 4 0 1000 syz-executor1 [ 3147.539062] [17405] 0 17405 17600 8232 25 4 0 1000 syz-executor5 [ 3147.539070] [17420] 0 17420 17600 8232 25 4 0 1000 syz-executor5 [ 3147.539079] [17433] 0 17433 17633 8233 25 4 0 1000 syz-executor1 [ 3147.539087] [17435] 0 17435 17600 8232 25 4 0 1000 syz-executor5 ** 79 printk messages dropped ** [ 3147.539892] [22606] 0 22606 17600 8214 24 3 0 1000 syz-executor5 ** 45 printk messages dropped ** [ 3147.540322] [28143] 0 28143 17633 8202 24 3 0 1000 syz-executor5 [ 3147.540330] [28163] 0 28163 17600 8232 25 4 0 1000 syz-executor5 [ 3147.540339] [28167] 0 28167 17600 8233 25 4 0 1000 syz-executor1 ** 82 printk messages dropped ** [ 3147.541086] [30098] 0 30098 17633 8235 25 4 0 1000 syz-executor1 ** 1670 printk messages dropped ** [ 3152.647009] [16737] 0 16737 17633 8203 25 3 0 1000 syz-executor0 [ 3152.647017] [16771] 0 16771 17666 8235 25 4 0 1000 syz-executor1 [ 3152.647026] [16830] 0 16830 17633 8233 25 4 0 1000 syz-executor1 [ 3152.647035] [16842] 0 16842 17633 8233 25 4 0 1000 syz-executor1 [ 3152.647045] [16863] 0 16863 17633 8234 25 4 0 1000 syz-executor1 [ 3152.647054] [16867] 0 16867 17633 8234 25 4 0 1000 syz-executor1 [ 3152.647063] [16891] 0 16891 17633 8233 25 4 0 1000 syz-executor1 [ 3152.647073] [16949] 0 16949 17600 8232 25 4 0 1000 syz-executor5 [ 3152.647081] [16967] 0 16967 17666 8235 25 4 0 1000 syz-executor1 [ 3152.647090] [16984] 0 16984 17633 8233 25 4 0 1000 syz-executor1 [ 3152.647098] [16992] 0 16992 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3152.647116] [17021] 0 17021 17600 8232 25 4 0 1000 syz-executor5 ** 41 printk messages dropped ** [ 3152.647436] [17506] 0 17506 17633 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3152.647449] [17516] 0 17516 17600 8232 25 4 0 1000 syz-executor5 ** 43 printk messages dropped ** [ 3152.647847] [19770] 0 19770 17633 8233 25 4 0 1000 syz-executor4 ** 41 printk messages dropped ** [ 3152.648251] [26619] 0 26619 17600 8232 25 4 0 1000 syz-executor5 [ 3152.648259] [26623] 0 26623 17600 8232 25 4 0 1000 syz-executor5 [ 3152.648268] [26627] 0 26627 17600 8232 25 4 0 1000 syz-executor5 [ 3152.648277] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3152.648285] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 [ 3152.648294] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 [ 3152.648302] [26909] 0 26909 17600 8231 24 4 0 1000 syz-executor5 [ 3152.648311] [26926] 0 26926 17600 8231 24 4 0 1000 syz-executor5 [ 3152.648319] [26935] 0 26935 17600 8232 25 4 0 1000 syz-executor5 ** 120 printk messages dropped ** [ 3152.649407] [30273] 0 30273 17633 8233 25 4 0 1000 syz-executor4 ** 124 printk messages dropped ** [ 3152.650553] [ 674] 0 674 17600 8232 26 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3152.650571] [ 749] 0 749 17633 8200 24 3 0 1000 syz-executor2 [ 3152.650579] [ 767] 0 767 17600 8189 23 3 0 1000 syz-executor2 [ 3152.650588] [ 797] 0 797 17600 8232 26 4 0 1000 syz-executor4 ** 1741 printk messages dropped ** [ 3164.543603] [16634] 0 16634 17633 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3164.543616] [16716] 0 16716 17633 8233 25 4 0 1000 syz-executor1 [ 3164.543622] [16737] 0 16737 17633 8203 25 3 0 1000 syz-executor0 [ 3164.543629] [16771] 0 16771 17666 8235 25 4 0 1000 syz-executor1 [ 3164.543635] [16830] 0 16830 17633 8233 25 4 0 1000 syz-executor1 [ 3164.543642] [16842] 0 16842 17633 8233 25 4 0 1000 syz-executor1 [ 3164.543650] [16863] 0 16863 17633 8234 25 4 0 1000 syz-executor1 [ 3164.543656] [16867] 0 16867 17633 8234 25 4 0 1000 syz-executor1 [ 3164.543664] [16891] 0 16891 17633 8233 25 4 0 1000 syz-executor1 [ 3164.543672] [16949] 0 16949 17600 8232 25 4 0 1000 syz-executor5 ** 41 printk messages dropped ** [ 3164.543940] [17448] 0 17448 17600 8232 25 4 0 1000 syz-executor5 [ 3164.543946] [17458] 0 17458 17600 8232 25 4 0 1000 syz-executor5 [ 3164.543953] [17467] 0 17467 17633 8233 25 4 0 1000 syz-executor1 [ 3164.543959] [17473] 0 17473 17600 8232 25 4 0 1000 syz-executor5 [ 3164.543965] [17483] 0 17483 17633 8233 25 4 0 1000 syz-executor1 ** 39 printk messages dropped ** [ 3164.544278] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 ** 38 printk messages dropped ** [ 3164.544703] [24526] 0 24526 17600 8235 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3164.544721] [25266] 0 25266 17633 8203 25 3 0 1000 syz-executor4 [ 3164.544730] [25791] 0 25791 17634 8233 25 4 0 1000 syz-executor4 [ 3164.544738] [25831] 0 25831 17633 8233 25 4 0 1000 syz-executor4 [ 3164.544748] [26564] 0 26564 17600 8232 25 4 0 1000 syz-executor5 [ 3164.544756] [26569] 0 26569 17600 8232 25 4 0 1000 syz-executor5 [ 3164.544765] [26606] 0 26606 17600 8232 25 4 0 1000 syz-executor5 [ 3164.544774] [26610] 0 26610 17600 8232 25 4 0 1000 syz-executor5 ** 43 printk messages dropped ** [ 3164.545162] [28394] 0 28394 17600 8192 23 3 0 1000 syz-executor1 ** 42 printk messages dropped ** [ 3164.605585] [29593] 0 29593 17600 8192 23 3 0 1000 syz-executor1 ** 121 printk messages dropped ** [ 3164.606643] [31993] 0 31993 17633 8233 25 4 0 1000 syz-executor4 ** 2 printk messages dropped ** [ 3164.606669] [32099] 0 32099 17633 8233 25 4 0 1000 syz-executor4 [ 3164.606678] [32122] 0 32122 17633 8233 25 4 0 1000 syz-executor4 [ 3164.606687] [32129] 0 32129 17666 8236 25 4 0 1000 syz-executor4 ** 1718 printk messages dropped ** [ 3176.429559] [16630] 0 16630 17633 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3176.429576] [16714] 0 16714 17633 8233 25 4 0 1000 syz-executor1 ** 42 printk messages dropped ** [ 3176.429962] [17390] 0 17390 17633 8233 25 4 0 1000 syz-executor1 ** 2 printk messages dropped ** [ 3176.429989] [17405] 0 17405 17600 8232 25 4 0 1000 syz-executor5 [ 3176.429998] [17420] 0 17420 17600 8232 25 4 0 1000 syz-executor5 [ 3176.430006] [17433] 0 17433 17633 8233 25 4 0 1000 syz-executor1 [ 3176.430015] [17435] 0 17435 17600 8232 25 4 0 1000 syz-executor5 [ 3176.430024] [17445] 0 17445 17633 8233 25 4 0 1000 syz-executor1 ** 81 printk messages dropped ** [ 3176.430936] [23051] 0 23051 17600 8230 24 4 0 1000 syz-executor4 ** 51 printk messages dropped ** [ 3176.431359] [28375] 0 28375 17600 8192 23 3 0 1000 syz-executor1 ** 40 printk messages dropped ** [ 3176.431761] [29521] 0 29521 17666 8237 25 4 0 1000 syz-executor1 ** 42 printk messages dropped ** [ 3176.432170] [30198] 0 30198 17600 8230 25 4 0 1000 syz-executor2 [ 3176.432179] [30241] 0 30241 17600 8230 25 4 0 1000 syz-executor2 [ 3176.432188] [30246] 0 30246 17600 8230 25 4 0 1000 syz-executor2 [ 3176.432198] [30250] 0 30250 17600 8230 25 4 0 1000 syz-executor2 [ 3176.432207] [30262] 0 30262 17600 8232 25 4 0 1000 syz-executor5 [ 3176.432216] [30273] 0 30273 17633 8233 25 4 0 1000 syz-executor4 [ 3176.432225] [30279] 0 30279 17600 8231 24 4 0 1000 syz-executor5 ** 83 printk messages dropped ** [ 3176.433051] [32175] 0 32175 17600 8230 25 4 0 1000 syz-executor2 [ 3176.433061] [32188] 0 32188 17633 8201 24 3 0 1000 syz-executor4 [ 3176.433070] [32205] 0 32205 17633 8233 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3176.433089] [32215] 0 32215 17633 8233 25 4 0 1000 syz-executor4 [ 3176.433098] [32250] 0 32250 17666 8236 26 4 0 1000 syz-executor4 [ 3176.433107] [32285] 0 32285 17666 8236 26 4 0 1000 syz-executor4 ** 1682 printk messages dropped ** [ 3186.558959] [16610] 0 16610 17633 8233 25 4 0 1000 syz-executor1 ** 44 printk messages dropped ** [ 3186.559439] [17386] 0 17386 17600 8232 25 4 0 1000 syz-executor5 ** 1706 printk messages dropped ** [ 3187.314645] [17777] 0 17777 17600 8232 25 4 0 1000 syz-executor5 ** 40 printk messages dropped ** [ 3187.315186] [21491] 0 21491 17600 8205 24 3 0 1000 syz-executor0 ** 2 printk messages dropped ** [ 3187.315208] [21936] 0 21936 17633 8234 25 4 0 1000 syz-executor0 [ 3187.315216] [22000] 0 22000 17600 8200 24 3 0 1000 syz-executor5 [ 3187.315224] [22028] 0 22028 17600 8200 24 3 0 1000 syz-executor5 [ 3187.315232] [22060] 0 22060 17600 8200 24 3 0 1000 syz-executor5 [ 3187.315240] [22096] 0 22096 17633 8233 24 4 0 1000 syz-executor5 ** 39 printk messages dropped ** [ 3187.375628] [27906] 0 27906 17600 8233 25 4 0 1000 syz-executor1 ** 38 printk messages dropped ** [ 3187.376040] [28999] 0 28999 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3187.376060] [29129] 0 29129 17633 8235 25 4 0 1000 syz-executor1 [ 3187.376071] [29131] 0 29131 17633 8234 25 4 0 1000 syz-executor5 [ 3187.376082] [29138] 0 29138 17600 8232 25 4 0 1000 syz-executor5 [ 3187.376093] [29162] 0 29162 17633 8235 25 4 0 1000 syz-executor1 [ 3187.376103] [29207] 0 29207 17633 8235 25 4 0 1000 syz-executor1 ** 42 printk messages dropped ** [ 3187.376569] [30009] 0 30009 17600 8232 25 4 0 1000 syz-executor5 ** 40 printk messages dropped ** [ 3187.377007] [30719] 0 30719 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3187.377027] [30789] 0 30789 17633 8233 25 4 0 1000 syz-executor4 ** 40 printk messages dropped ** [ 3187.377467] [31735] 0 31735 17633 8233 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3187.377489] [31778] 0 31778 17600 8191 23 3 0 1000 syz-executor0 ** 42 printk messages dropped ** [ 3187.377938] [32745] 0 32745 17600 8230 25 4 0 1000 syz-executor2 ** 4 printk messages dropped ** [ 3187.377989] [ 463] 0 463 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378000] [ 497] 0 497 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378010] [ 524] 0 524 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378020] [ 538] 0 538 17600 8202 25 3 0 1000 syz-executor1 [ 3187.378030] [ 539] 0 539 17633 8234 25 4 0 1000 syz-executor0 [ 3187.378041] [ 581] 0 581 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378051] [ 604] 0 604 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378062] [ 646] 0 646 17633 8236 25 4 0 1000 syz-executor1 [ 3187.378072] [ 655] 0 655 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378082] [ 674] 0 674 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378092] [ 737] 0 737 17600 8189 23 3 0 1000 syz-executor2 [ 3187.378103] [ 749] 0 749 17633 8200 24 3 0 1000 syz-executor2 [ 3187.378113] [ 767] 0 767 17600 8189 23 3 0 1000 syz-executor2 [ 3187.378123] [ 797] 0 797 17600 8232 26 4 0 1000 syz-executor4 [ 3187.378134] [ 814] 0 814 17600 8230 25 4 0 1000 syz-executor2 [ 3187.378144] [ 819] 0 819 17600 8231 25 4 0 1000 syz-executor4 [ 3187.378155] [ 864] 0 864 17600 8231 25 4 0 1000 syz-executor4 [ 3187.378165] [ 923] 0 923 17600 8231 25 4 0 1000 syz-executor4 [ 3187.378175] [ 973] 0 973 17699 8223 25 4 0 1000 syz-executor0 [ 3187.378185] [ 976] 0 976 17600 8231 25 4 0 1000 syz-executor4 [ 3187.378196] [ 1017] 0 1017 17600 8231 25 4 0 1000 syz-executor4 ** 80 printk messages dropped ** [ 3187.379045] [ 4310] 0 4310 17666 8234 26 4 0 1000 syz-executor2 ** 4 printk messages dropped ** [ 3187.379099] [ 4455] 0 4455 17633 8234 25 4 0 1000 syz-executor0 [ 3187.379110] [ 4479] 0 4479 17600 8200 25 3 0 1000 syz-executor4 [ 3187.379120] [ 4522] 0 4522 17633 8234 25 4 0 1000 syz-executor0 [ 3187.379130] [ 4558] 0 4558 17633 8233 25 4 0 1000 syz-executor4 [ 3187.379140] [ 4561] 0 4561 17633 8233 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3187.379161] [ 4621] 0 4621 17633 8234 25 4 0 1000 syz-executor0 ** 1743 printk messages dropped ** [ 3206.975940] [16602] 0 16602 17600 8230 25 4 0 1000 syz-executor2 ** 1 printk messages dropped ** [ 3206.975957] [16610] 0 16610 17633 8233 25 4 0 1000 syz-executor1 [ 3206.975966] [16630] 0 16630 17633 8233 25 4 0 1000 syz-executor1 [ 3206.975974] [16634] 0 16634 17633 8233 25 4 0 1000 syz-executor1 ** 2385 printk messages dropped ** [ 3208.308926] [11975] 0 11975 17600 8201 24 3 0 1000 syz-executor1 ** 1565 printk messages dropped ** [ 3208.438732] [11306] 0 11306 17633 8203 24 3 0 1000 syz-executor1 ** 937 printk messages dropped ** [ 3208.612111] [16503] 0 16503 17600 8199 24 3 0 1000 syz-executor1 [ 3208.612135] [16521] 0 16521 17633 8201 24 3 0 1000 syz-executor1 [ 3208.612145] [16538] 0 16538 17666 8236 25 4 0 1000 syz-executor1 [ 3208.612156] [16559] 0 16559 17633 8233 25 4 0 1000 syz-executor1 [ 3208.612166] [16602] 0 16602 17600 8230 25 4 0 1000 syz-executor2 [ 3208.612177] [16605] 0 16605 17633 8233 25 4 0 1000 syz-executor1 [ 3208.612188] [16610] 0 16610 17633 8233 25 4 0 1000 syz-executor1 ** 1606 printk messages dropped ** [ 3209.794818] [16483] 0 16483 17600 8198 24 3 0 1000 syz-executor2 [ 3209.794828] [16487] 0 16487 17633 8200 24 3 0 1000 syz-executor2 [ 3209.794837] [16503] 0 16503 17600 8199 24 3 0 1000 syz-executor1 ** 50 printk messages dropped ** [ 3209.795310] [17390] 0 17390 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795319] [17392] 0 17392 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795328] [17395] 0 17395 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795339] [17405] 0 17405 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795356] [17420] 0 17420 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795366] [17433] 0 17433 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795375] [17435] 0 17435 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795384] [17445] 0 17445 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795393] [17448] 0 17448 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795402] [17458] 0 17458 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795411] [17467] 0 17467 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795421] [17473] 0 17473 17600 8232 25 4 0 1000 syz-executor5 [ 3209.795430] [17483] 0 17483 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795440] [17506] 0 17506 17633 8233 25 4 0 1000 syz-executor1 [ 3209.795453] [17509] 0 17509 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805496] [17516] 0 17516 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805504] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3209.805512] [17523] 0 17523 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805520] [17527] 0 17527 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805529] [17552] 0 17552 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805538] [17563] 0 17563 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805546] [17571] 0 17571 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805571] [17572] 0 17572 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805582] [17579] 0 17579 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805591] [17585] 0 17585 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805610] [17605] 0 17605 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805619] [17630] 0 17630 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805629] [17641] 0 17641 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805638] [17647] 0 17647 17666 8235 25 4 0 1000 syz-executor1 [ 3209.805647] [17668] 0 17668 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805656] [17696] 0 17696 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805666] [17714] 0 17714 17633 8233 25 4 0 1000 syz-executor1 [ 3209.805675] [17718] 0 17718 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805684] [17759] 0 17759 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805694] [17762] 0 17762 17600 8231 25 4 0 1000 syz-executor1 [ 3209.805703] [17772] 0 17772 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805712] [17777] 0 17777 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805722] [17783] 0 17783 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805731] [17809] 0 17809 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805744] [17901] 0 17901 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805753] [17903] 0 17903 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805762] [17906] 0 17906 17600 8233 25 4 0 1000 syz-executor5 [ 3209.805778] [18005] 0 18005 17600 8232 25 4 0 1000 syz-executor0 [ 3209.805787] [18008] 0 18008 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805796] [18014] 0 18014 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805805] [18017] 0 18017 17600 8232 25 4 0 1000 syz-executor0 [ 3209.805815] [18023] 0 18023 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805824] [18025] 0 18025 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805834] [18050] 0 18050 17600 8232 25 4 0 1000 syz-executor0 [ 3209.805846] [18107] 0 18107 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805855] [18134] 0 18134 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805864] [18154] 0 18154 17600 8200 24 3 0 1000 syz-executor5 [ 3209.805883] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 [ 3209.805893] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 [ 3209.805936] [19155] 0 19155 17600 8232 25 4 0 1000 syz-executor5 [ 3209.805947] [19217] 0 19217 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805960] [19393] 0 19393 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805980] [19664] 0 19664 17633 8234 25 4 0 1000 syz-executor5 [ 3209.805990] [19683] 0 19683 17600 8231 25 4 0 1000 syz-executor4 [ 3209.806002] [19770] 0 19770 17633 8233 25 4 0 1000 syz-executor4 [ 3209.806011] [19771] 0 19771 17633 8234 25 4 0 1000 syz-executor5 [ 3209.806021] [19776] 0 19776 17633 8234 25 4 0 1000 syz-executor5 ** 2 printk messages dropped ** [ 3209.806069] [20293] 0 20293 17633 8234 25 4 0 1000 syz-executor5 ** 6 printk messages dropped ** [ 3209.806147] [20938] 0 20938 17633 8231 24 4 0 1000 syz-executor2 ** 1 printk messages dropped ** [ 3209.806166] [21066] 0 21066 17666 8235 25 4 0 1000 syz-executor4 ** 13 printk messages dropped ** [ 3209.806298] [22880] 0 22880 17633 8201 24 3 0 1000 syz-executor4 ** 6 printk messages dropped ** [ 3209.806371] [25791] 0 25791 17634 8233 25 4 0 1000 syz-executor4 ** 6 printk messages dropped ** [ 3209.806437] [26619] 0 26619 17600 8232 25 4 0 1000 syz-executor5 ** 8 printk messages dropped ** [ 3209.806529] [26940] 0 26940 17600 8232 25 4 0 1000 syz-executor5 ** 8 printk messages dropped ** [ 3209.806612] [27060] 0 27060 17600 8232 25 4 0 1000 syz-executor5 ** 4 printk messages dropped ** [ 3209.806657] [27906] 0 27906 17600 8233 25 4 0 1000 syz-executor1 ** 1 printk messages dropped ** [ 3209.806674] [27968] 0 27968 17600 8233 25 4 0 1000 syz-executor1 ** 2 printk messages dropped ** [ 3209.806700] [28066] 0 28066 17600 8233 25 4 0 1000 syz-executor1 ** 6 printk messages dropped ** [ 3209.806761] [28216] 0 28216 17600 8232 25 4 0 1000 syz-executor5 ** 607 printk messages dropped ** [ 3209.812521] [12179] 0 12179 17633 8203 24 3 0 1000 syz-executor1 [ 3209.812529] [12202] 0 12202 17600 8201 24 3 0 1000 syz-executor1 [ 3209.812538] [12207] 0 12207 17633 8203 24 3 0 1000 syz-executor1 [ 3209.812546] [12220] 0 12220 17600 8201 24 3 0 1000 syz-executor1 [ 3209.812555] [12227] 0 12227 17633 8203 24 3 0 1000 syz-executor1 [ 3209.812564] [12242] 0 12242 17600 8201 24 3 0 1000 syz-executor1 [ 3209.812572] [12246] 0 12246 17633 8203 24 3 0 1000 syz-executor1 [ 3209.812581] [12264] 0 12264 17600 8201 24 3 0 1000 syz-executor1 [ 3209.812589] [12270] 0 12270 17633 8203 24 3 0 1000 syz-executor1 [ 3209.812603] [12344] 0 12344 17666 8202 32 3 0 1000 syz-executor2 [ 3209.812612] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3209.812620] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3209.812628] [13055] 0 13055 17633 8235 25 4 0 1000 syz-executor1 [ 3209.812638] [13079] 0 13079 17666 8237 25 4 0 1000 syz-executor4 [ 3209.812647] [13355] 0 13355 17633 8234 25 4 0 1000 syz-executor0 [ 3209.812656] [13516] 0 13516 17633 8234 24 4 0 1000 syz-executor1 [ 3209.812664] [13580] 0 13580 17666 8237 25 4 0 1000 syz-executor4 ** 522 printk messages dropped ** [ 3215.168733] lowmemorykiller: Killing 'syz-executor4' (3124) (tgid 3124), adj 1000, [ 3215.168733] to free 32940kB on behalf of 'syz-executor2' (6330) because [ 3215.168733] cache 1028kB is below limit 65536kB for oom_score_adj 12 [ 3215.168733] Free memory is 20384kB above reserved ** 594 printk messages dropped ** [ 3215.232004] [26675] 0 26675 17666 8220 25 4 0 1000 syz-executor5 ** 577 printk messages dropped ** [ 3215.627431] [11161] 0 11161 17600 8234 26 4 0 1000 syz-executor5 ** 30 printk messages dropped ** [ 3215.627726] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 ** 603 printk messages dropped ** [ 3215.732717] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3215.732729] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3215.732740] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 ** 602 printk messages dropped ** [ 3216.295432] [22362] 0 22362 17633 8234 25 4 0 1000 syz-executor5 ** 599 printk messages dropped ** [ 3216.722737] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3216.722747] [21674] 0 21674 17600 8233 25 4 0 1000 syz-executor4 [ 3216.722759] [22362] 0 22362 17633 8234 25 4 0 1000 syz-executor5 [ 3216.722770] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3216.722781] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3216.722791] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 ** 594 printk messages dropped ** [ 3217.166915] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3217.166926] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3217.166938] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3217.166952] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3217.166962] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3217.166971] [21674] 0 21674 17600 8233 25 4 0 1000 syz-executor4 [ 3217.166983] [22362] 0 22362 17633 8234 25 4 0 1000 syz-executor5 [ 3217.167012] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3217.167024] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3217.167034] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3217.167046] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3217.167057] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3217.167078] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3217.167087] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3217.167096] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3217.167111] [26675] 0 26675 17666 8220 25 4 0 1000 syz-executor5 [ 3217.167120] [26681] 0 26681 17666 8220 25 4 0 1000 syz-executor5 [ 3217.167132] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3217.167141] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3217.167151] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 ** 577 printk messages dropped ** [ 3217.462979] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 ** 2 printk messages dropped ** [ 3217.463013] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 ** 594 printk messages dropped ** [ 3217.766799] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3217.766808] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3217.766817] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3217.766829] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 [ 3217.766838] [15667] 0 15667 17633 8202 24 3 0 1000 syz-executor5 [ 3217.766849] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3217.766865] [18823] 0 18823 17600 8233 25 4 0 1000 syz-executor4 [ 3217.766875] [19130] 0 19130 17600 8233 25 4 0 1000 syz-executor5 [ 3217.766884] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3217.766893] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3217.766904] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3217.766914] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3217.766922] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3217.766931] [21674] 0 21674 17600 8233 25 4 0 1000 syz-executor4 [ 3217.766942] [22362] 0 22362 17633 8234 25 4 0 1000 syz-executor5 [ 3217.766952] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3217.766963] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3217.766971] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3217.766982] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3217.766991] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3217.767000] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767009] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3217.767017] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3217.767031] [26675] 0 26675 17666 8220 25 4 0 1000 syz-executor5 [ 3217.767039] [26681] 0 26681 17666 8220 25 4 0 1000 syz-executor5 [ 3217.767050] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767059] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767068] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 [ 3217.767099] [29622] 0 29622 17666 8206 27 3 0 1000 syz-executor4 [ 3217.767109] [31974] 0 31974 17088 8233 25 4 0 1000 syz-executor4 [ 3217.767118] [32014] 0 32014 17666 8221 25 4 0 1000 syz-executor4 [ 3217.767127] [32041] 0 32041 17666 8221 25 4 0 1000 syz-executor4 [ 3217.767136] [ 597] 0 597 17600 8232 24 4 0 1000 syz-executor4 [ 3217.767156] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767166] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767176] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3217.767185] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3217.767198] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 [ 3217.767220] [ 6322] 0 6320 17831 2 26 4 0 1000 syz-executor0 [ 3217.767233] [ 6403] 0 6403 2666 33 10 3 0 0 init [ 3217.767242] [ 6404] 0 6404 2666 33 10 3 0 0 init [ 3217.767251] [ 6405] 0 6405 2666 33 10 3 0 0 init ** 564 printk messages dropped ** [ 3218.174081] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 ** 581 printk messages dropped ** [ 3218.355513] [11251] 0 11251 17600 8233 26 4 0 1000 syz-executor5 [ 3218.355523] [11264] 0 11264 17600 8233 26 4 0 1000 syz-executor5 [ 3218.355533] [11289] 0 11289 17600 8234 26 4 0 1000 syz-executor5 [ 3218.355543] [11331] 0 11331 17600 8234 26 4 0 1000 syz-executor5 [ 3218.355553] [11346] 0 11346 17600 8233 25 4 0 1000 syz-executor5 [ 3218.355563] [11395] 0 11395 17600 8233 25 4 0 1000 syz-executor5 [ 3218.355572] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 ** 577 printk messages dropped ** [ 3220.282133] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3220.282146] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3220.282156] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 ** 579 printk messages dropped ** [ 3220.384415] [31786] 0 31786 17600 8233 25 4 0 1000 syz-executor4 ** 585 printk messages dropped ** [ 3220.878809] [30027] 0 30027 17699 8208 24 3 0 1000 syz-executor5 [ 3220.878823] [31786] 0 31786 17600 8233 25 4 0 1000 syz-executor4 [ 3220.878833] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3220.878842] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3220.878856] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3220.878866] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3220.878876] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3220.878885] [ 1768] 0 1768 17699 8209 24 3 0 1000 syz-executor4 [ 3220.878895] [ 2015] 0 2015 17600 8231 24 4 0 1000 syz-executor5 [ 3220.878905] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 ** 1148 printk messages dropped ** [ 3221.220642] [25169] 0 25169 17600 8231 24 4 0 1000 syz-executor5 [ 3221.220652] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3221.220662] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3221.220671] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3221.220680] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 ** 572 printk messages dropped ** [ 3221.634828] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 ** 574 printk messages dropped ** [ 3221.667643] [19481] 0 19481 17600 8232 25 4 0 1000 syz-executor5 [ 3221.667652] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3221.667661] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3221.667671] [19905] 0 19905 17633 8226 24 4 0 1000 syz-executor4 [ 3221.667683] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 ** 575 printk messages dropped ** [ 3221.953559] [19481] 0 19481 17600 8232 25 4 0 1000 syz-executor5 [ 3221.953569] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3221.953579] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3221.953590] [19905] 0 19905 17633 8226 24 4 0 1000 syz-executor4 [ 3221.953602] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 [ 3221.953612] [21709] 0 21709 17666 8238 27 4 0 4 syz-executor5 [ 3221.953622] [22681] 0 22681 17600 8200 24 3 0 1000 syz-executor5 [ 3221.953633] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3221.953643] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3221.953653] [24646] 0 24646 17633 8234 24 4 0 1000 syz-executor4 [ 3221.953664] [25157] 0 25157 17600 8232 25 4 0 1000 syz-executor5 [ 3221.953674] [25169] 0 25169 17600 8231 24 4 0 1000 syz-executor5 [ 3221.953684] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3221.953695] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3221.953705] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3221.953715] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 [ 3221.953725] [26781] 0 26781 17600 8191 23 3 0 1000 syz-executor5 [ 3221.953741] [28807] 0 28807 17600 8191 23 3 0 1000 syz-executor5 [ 3221.953751] [28850] 0 28850 17600 8191 23 3 0 1000 syz-executor5 [ 3221.953762] [29997] 0 29997 17633 8202 24 3 0 1000 syz-executor5 [ 3221.953772] [30027] 0 30027 17699 8208 24 3 0 1000 syz-executor5 [ 3221.953786] [31786] 0 31786 17600 8233 25 4 0 1000 syz-executor4 [ 3221.953796] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3221.953806] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3221.953820] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3221.953830] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3221.953840] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3221.953850] [ 1768] 0 1768 17699 8209 24 3 0 1000 syz-executor4 [ 3221.953860] [ 2015] 0 2015 17600 8231 24 4 0 1000 syz-executor5 [ 3221.953868] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 [ 3221.953875] [ 2440] 0 2440 17600 8203 25 3 0 1000 syz-executor5 [ 3221.953885] [ 3078] 0 3078 17600 8191 23 3 0 1000 syz-executor5 [ 3221.953893] [ 3126] 0 3126 17600 8191 23 3 0 1000 syz-executor5 [ 3221.953908] [ 8536] 0 8536 17600 8200 24 3 0 1000 syz-executor5 [ 3221.953915] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3221.953931] [11224] 0 11224 17600 8233 26 4 0 1000 syz-executor5 [ 3221.953938] [11251] 0 11251 17600 8233 26 4 0 1000 syz-executor5 [ 3221.953945] [11264] 0 11264 17600 8233 26 4 0 1000 syz-executor5 [ 3221.953954] [11346] 0 11346 17600 8233 25 4 0 1000 syz-executor5 [ 3221.953961] [11395] 0 11395 17600 8233 25 4 0 1000 syz-executor5 [ 3221.953969] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3221.953977] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3221.953984] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3221.953995] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 ** 537 printk messages dropped ** [ 3222.089067] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3222.089076] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3222.089086] [24646] 0 24646 17633 8234 24 4 0 1000 syz-executor4 ** 555 printk messages dropped ** [ 3222.351787] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3222.351794] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3222.351802] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 [ 3222.351812] [10045] 0 10045 17600 8232 25 4 0 1000 syz-executor5 ** 553 printk messages dropped ** [ 3225.614087] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3225.614117] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 ** 560 printk messages dropped ** [ 3226.000921] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3226.000930] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3226.000939] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3226.000948] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3226.000956] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 ** 553 printk messages dropped ** [ 3226.207600] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3226.207611] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 ** 553 printk messages dropped ** [ 3226.477924] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 ** 553 printk messages dropped ** [ 3227.162233] [ 7984] 0 7984 17633 8233 25 4 0 1000 syz-executor4 [ 3227.162244] [ 8066] 0 8066 17600 8231 27 4 0 1000 syz-executor4 [ 3227.162254] [ 8092] 0 8092 17600 8231 26 4 0 1000 syz-executor4 [ 3227.162265] [ 8315] 0 8315 17633 8233 25 4 0 1000 syz-executor4 [ 3227.162274] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162284] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162294] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162304] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162314] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162324] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162334] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162343] [ 9011] 0 9011 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162354] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162364] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162373] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3227.162383] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3227.162393] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 ** 533 printk messages dropped ** [ 3227.388210] [ 7336] 0 7336 17633 8233 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3227.388228] [ 7682] 0 7682 17633 8233 25 4 0 1000 syz-executor4 [ 3227.388237] [ 7761] 0 7761 17633 8233 25 4 0 1000 syz-executor4 ** 545 printk messages dropped ** [ 3227.504277] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 ** 549 printk messages dropped ** [ 3228.243085] [ 4751] 0 4751 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243095] [ 4883] 0 4883 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243105] [ 4937] 0 4937 17600 8200 24 3 0 1000 syz-executor5 [ 3228.243115] [ 4953] 0 4953 17600 8200 24 3 0 1000 syz-executor5 [ 3228.243126] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 ** 2 printk messages dropped ** [ 3228.243164] [ 7045] 0 7045 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243174] [ 7116] 0 7116 17600 8199 23 3 0 1000 syz-executor5 [ 3228.243184] [ 7139] 0 7139 17699 8206 24 3 0 1000 syz-executor5 [ 3228.243194] [ 7336] 0 7336 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243204] [ 7523] 0 7523 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243215] [ 7682] 0 7682 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243225] [ 7761] 0 7761 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243236] [ 7984] 0 7984 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243247] [ 8066] 0 8066 17600 8231 27 4 0 1000 syz-executor4 [ 3228.243256] [ 8092] 0 8092 17600 8231 26 4 0 1000 syz-executor4 [ 3228.243267] [ 8315] 0 8315 17633 8233 25 4 0 1000 syz-executor4 [ 3228.243277] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 [ 3228.243287] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 [ 3228.243297] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3228.243307] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 ** 531 printk messages dropped ** [ 3228.627053] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 [ 3228.627068] [ 6851] 0 6851 17600 8200 24 3 0 1000 syz-executor5 [ 3228.627076] [ 6853] 0 6853 17633 8202 24 3 0 1000 syz-executor5 [ 3228.627086] [ 7045] 0 7045 17633 8233 25 4 0 1000 syz-executor4 ** 535 printk messages dropped ** [ 3228.758938] [ 3832] 0 3832 17600 8199 24 3 0 1000 syz-executor4 ** 534 printk messages dropped ** [ 3230.772054] [ 1443] 0 1443 17600 8231 25 4 0 1000 syz-executor4 [ 3230.772063] [ 1461] 0 1461 17600 8231 25 4 0 1000 syz-executor4 [ 3230.772072] [ 1494] 0 1494 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772081] [ 1525] 0 1525 17600 8231 25 4 0 1000 syz-executor4 [ 3230.772091] [ 1594] 0 1594 17600 8231 25 4 0 1000 syz-executor4 [ 3230.772100] [ 1658] 0 1658 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772109] [ 1678] 0 1678 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772129] [ 1857] 0 1857 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772137] [ 1875] 0 1875 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772146] [ 1940] 0 1940 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772156] [ 2153] 0 2153 17600 8199 24 3 0 1000 syz-executor4 [ 3230.772164] [ 2224] 0 2224 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772175] [ 2621] 0 2621 17633 8233 25 4 0 1000 syz-executor4 [ 3230.772187] [ 3020] 0 3020 17600 8231 25 4 0 1000 syz-executor4 [ 3230.772197] [ 3455] 0 3455 17633 8233 25 4 0 1000 syz-executor4 ** 526 printk messages dropped ** [ 3230.911426] [ 1525] 0 1525 17600 8231 25 4 0 1000 syz-executor4 [ 3230.911435] [ 1594] 0 1594 17600 8231 25 4 0 1000 syz-executor4 [ 3230.911445] [ 1658] 0 1658 17633 8233 25 4 0 1000 syz-executor4 [ 3230.911485] [ 1678] 0 1678 17633 8233 25 4 0 1000 syz-executor4 [ 3230.911495] [ 1857] 0 1857 17633 8233 25 4 0 1000 syz-executor4 [ 3230.911504] [ 1875] 0 1875 17633 8233 25 4 0 1000 syz-executor4 [ 3230.911513] [ 1940] 0 1940 17633 8233 25 4 0 1000 syz-executor4 [ 3230.911523] [ 2153] 0 2153 17600 8199 24 3 0 1000 syz-executor4 ** 528 printk messages dropped ** [ 3231.164908] [ 1594] 0 1594 17600 8231 25 4 0 1000 syz-executor4 [ 3231.164917] [ 1658] 0 1658 17633 8233 25 4 0 1000 syz-executor4 ** 535 printk messages dropped ** [ 3231.829265] [ 1461] 0 1461 17600 8231 25 4 0 1000 syz-executor4 ** 533 printk messages dropped ** [ 3232.107075] [ 1293] 0 1293 17600 8231 25 4 0 1000 syz-executor4 [ 3232.107084] [ 1348] 0 1348 17600 8231 25 4 0 1000 syz-executor4 [ 3232.107093] [ 1365] 0 1365 17600 8231 25 4 0 1000 syz-executor4 [ 3232.107102] [ 1385] 0 1385 17600 8231 25 4 0 1000 syz-executor4 [ 3232.107128] [ 1443] 0 1443 17600 8231 25 4 0 1000 syz-executor4 ** 55 printk messages dropped ** [ 3232.107746] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 ** 472 printk messages dropped ** [ 3232.346952] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 ** 526 printk messages dropped ** [ 3232.441645] [ 864] 0 864 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441655] [ 923] 0 923 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441664] [ 976] 0 976 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441673] [ 1017] 0 1017 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441683] [ 1104] 0 1104 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441692] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3232.441701] [ 1179] 0 1179 17600 8231 25 4 0 1000 syz-executor4 [ 3232.441710] [ 1192] 0 1192 17600 8231 25 4 0 1000 syz-executor4 ** 523 printk messages dropped ** [ 3232.781670] [ 797] 0 797 17600 8232 26 4 0 1000 syz-executor4 [ 3232.781681] [ 819] 0 819 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781692] [ 864] 0 864 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781702] [ 923] 0 923 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781713] [ 976] 0 976 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781723] [ 1017] 0 1017 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781734] [ 1104] 0 1104 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781745] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3232.781755] [ 1179] 0 1179 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781766] [ 1192] 0 1192 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781777] [ 1241] 0 1241 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781787] [ 1293] 0 1293 17600 8231 25 4 0 1000 syz-executor4 ** 3 printk messages dropped ** [ 3232.781830] [ 1443] 0 1443 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781840] [ 1461] 0 1461 17600 8231 25 4 0 1000 syz-executor4 [ 3232.781851] [ 1494] 0 1494 17633 8233 25 4 0 1000 syz-executor4 ** 517 printk messages dropped ** [ 3232.903615] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3232.903624] [ 1179] 0 1179 17600 8231 25 4 0 1000 syz-executor4 [ 3232.903633] [ 1192] 0 1192 17600 8231 25 4 0 1000 syz-executor4 ** 517 printk messages dropped ** [ 3233.481699] [ 604] 0 604 17600 8232 26 4 0 1000 syz-executor4 ** 515 printk messages dropped ** [ 3236.018617] [31880] 0 31880 17633 8233 25 4 0 1000 syz-executor4 [ 3236.018625] [31891] 0 31891 17633 8233 25 4 0 1000 syz-executor4 ** 514 printk messages dropped ** [ 3236.482635] [31691] 0 31691 17633 8201 24 3 0 1000 syz-executor4 [ 3236.482643] [31735] 0 31735 17633 8233 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3236.482662] [31826] 0 31826 17633 8233 25 4 0 1000 syz-executor4 [ 3236.482671] [31880] 0 31880 17633 8233 25 4 0 1000 syz-executor4 [ 3236.482680] [31891] 0 31891 17633 8233 25 4 0 1000 syz-executor4 [ 3236.482689] [31902] 0 31902 17633 8233 25 4 0 1000 syz-executor4 [ 3236.482699] [31985] 0 31985 17600 8190 23 3 0 1000 syz-executor4 [ 3236.482708] [31986] 0 31986 17633 8201 24 3 0 1000 syz-executor4 [ 3236.482722] [31993] 0 31993 17633 8233 25 4 0 1000 syz-executor4 [ 3236.482731] [32099] 0 32099 17633 8233 25 4 0 1000 syz-executor4 ** 506 printk messages dropped ** [ 3236.848113] [31605] 0 31605 17633 8233 25 4 0 1000 syz-executor4 [ 3236.848120] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 ** 512 printk messages dropped ** [ 3237.169909] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 ** 43 printk messages dropped ** [ 3237.170294] [ 1385] 0 1385 17600 8231 25 4 0 1000 syz-executor4 ** 469 printk messages dropped ** [ 3237.883663] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 ** 513 printk messages dropped ** [ 3238.209096] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 [ 3238.209105] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 ** 508 printk messages dropped ** [ 3238.458705] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3238.458714] [31375] 0 31375 17633 8233 25 4 0 1000 syz-executor4 [ 3238.458724] [31383] 0 31383 17633 8233 25 4 0 1000 syz-executor4 ** 504 printk messages dropped ** [ 3238.754824] [31216] 0 31216 17633 8233 25 4 0 1000 syz-executor4 [ 3238.754832] [31248] 0 31248 17633 8233 25 4 0 1000 syz-executor4 [ 3238.754842] [31267] 0 31267 17633 8233 25 4 0 1000 syz-executor4 [ 3238.754850] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3238.754859] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3238.754867] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 ** 2 printk messages dropped ** [ 3238.754894] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3238.754911] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 [ 3238.754919] [31536] 0 31536 17633 8201 24 3 0 1000 syz-executor4 [ 3238.754928] [31542] 0 31542 17633 8233 25 4 0 1000 syz-executor4 [ 3238.754939] [31605] 0 31605 17633 8233 25 4 0 1000 syz-executor4 [ 3238.754949] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 ** 499 printk messages dropped ** [ 3239.033038] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3239.033047] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3239.033055] [31375] 0 31375 17633 8233 25 4 0 1000 syz-executor4 [ 3239.033065] [31383] 0 31383 17633 8233 25 4 0 1000 syz-executor4 ** 495 printk messages dropped ** [ 3239.578616] [30719] 0 30719 17600 8232 25 4 0 1000 syz-executor5 [ 3239.578626] [30819] 0 30819 17600 8191 23 3 0 1000 syz-executor5 [ 3239.578639] [30918] 0 30918 17600 8231 25 4 0 1000 syz-executor4 [ 3239.578646] [30945] 0 30945 17600 8191 23 3 0 1000 syz-executor5 ** 493 printk messages dropped ** [ 3241.047110] [29138] 0 29138 17600 8232 25 4 0 1000 syz-executor5 [ 3241.047121] [29286] 0 29286 17600 8232 25 4 0 1000 syz-executor5 [ 3241.047131] [29295] 0 29295 17600 8191 23 3 0 1000 syz-executor5 ** 494 printk messages dropped ** [ 3241.537229] [28227] 0 28227 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3241.537244] [28765] 0 28765 17600 8190 23 3 0 1000 syz-executor4 [ 3241.537250] [28800] 0 28800 17600 8232 25 4 0 1000 syz-executor5 [ 3241.537257] [28999] 0 28999 17600 8232 25 4 0 1000 syz-executor5 [ 3241.537267] [29138] 0 29138 17600 8232 25 4 0 1000 syz-executor5 ** 491 printk messages dropped ** [ 3242.067339] [28163] 0 28163 17600 8232 25 4 0 1000 syz-executor5 [ 3242.067347] [28216] 0 28216 17600 8232 25 4 0 1000 syz-executor5 [ 3242.067356] [28227] 0 28227 17600 8232 25 4 0 1000 syz-executor5 [ 3242.067365] [28607] 0 28607 17600 8232 25 4 0 1000 syz-executor5 ** 125 printk messages dropped ** [ 3242.068606] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 ** 365 printk messages dropped ** [ 3242.419346] [27060] 0 27060 17600 8232 25 4 0 1000 syz-executor5 [ 3242.419356] [28065] 0 28065 17600 8191 23 3 0 1000 syz-executor5 [ 3242.419365] [28123] 0 28123 17600 8191 23 3 0 1000 syz-executor5 ** 534 printk messages dropped ** [ 3242.722030] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 [ 3242.722041] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3242.722050] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3242.722058] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 ** 984 printk messages dropped ** [ 3243.451439] [26627] 0 26627 17600 8232 25 4 0 1000 syz-executor5 [ 3243.451448] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3243.451457] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 ** 482 printk messages dropped ** [ 3243.868029] [26606] 0 26606 17600 8232 25 4 0 1000 syz-executor5 ** 2 printk messages dropped ** [ 3243.868062] [26619] 0 26619 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868072] [26623] 0 26623 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868081] [26627] 0 26627 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868090] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3243.868100] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 [ 3243.868109] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 [ 3243.868119] [26909] 0 26909 17600 8231 24 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3243.868133] [26935] 0 26935 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3243.868147] [26946] 0 26946 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3243.868160] [26962] 0 26962 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868167] [26974] 0 26974 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868174] [26985] 0 26985 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868181] [27033] 0 27033 17600 8232 25 4 0 1000 syz-executor5 [ 3243.868188] [27041] 0 27041 17600 8232 25 4 0 1000 syz-executor5 ** 479 printk messages dropped ** [ 3243.912374] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 ** 480 printk messages dropped ** [ 3244.380394] [26606] 0 26606 17600 8232 25 4 0 1000 syz-executor5 [ 3244.380402] [26610] 0 26610 17600 8232 25 4 0 1000 syz-executor5 [ 3244.380411] [26615] 0 26615 17600 8232 25 4 0 1000 syz-executor5 [ 3244.380419] [26619] 0 26619 17600 8232 25 4 0 1000 syz-executor5 [ 3244.380428] [26623] 0 26623 17600 8232 25 4 0 1000 syz-executor5 ** 469 printk messages dropped ** [ 3246.419941] [17772] 0 17772 17600 8232 25 4 0 1000 syz-executor5 [ 3246.419950] [17777] 0 17777 17600 8232 25 4 0 1000 syz-executor5 [ 3246.419958] [17783] 0 17783 17600 8232 25 4 0 1000 syz-executor5 [ 3246.419967] [17809] 0 17809 17600 8232 25 4 0 1000 syz-executor5 ** 472 printk messages dropped ** [ 3246.726130] [17585] 0 17585 17600 8232 25 4 0 1000 syz-executor5 [ 3246.726136] [17605] 0 17605 17600 8232 25 4 0 1000 syz-executor5 [ 3246.726143] [17630] 0 17630 17600 8232 25 4 0 1000 syz-executor5 [ 3246.726150] [17641] 0 17641 17600 8232 25 4 0 1000 syz-executor5 [ 3246.726156] [17668] 0 17668 17600 8232 25 4 0 1000 syz-executor5 [ 3246.726163] [17718] 0 17718 17600 8232 25 4 0 1000 syz-executor5 ** 475 printk messages dropped ** [ 3246.915119] [17605] 0 17605 17600 8232 25 4 0 1000 syz-executor5 ** 473 printk messages dropped ** [ 3247.166905] [17563] 0 17563 17600 8232 25 4 0 1000 syz-executor5 [ 3247.166912] [17571] 0 17571 17600 8232 25 4 0 1000 syz-executor5 [ 3247.166918] [17579] 0 17579 17600 8232 25 4 0 1000 syz-executor5 ** 470 printk messages dropped ** [ 3247.521651] [17458] 0 17458 17600 8232 25 4 0 1000 syz-executor5 [ 3247.521660] [17473] 0 17473 17600 8232 25 4 0 1000 syz-executor5 [ 3247.521669] [17509] 0 17509 17600 8232 25 4 0 1000 syz-executor5 ** 467 printk messages dropped ** [ 3247.682800] [17326] 0 17326 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3247.682817] [17386] 0 17386 17600 8232 25 4 0 1000 syz-executor5 ** 469 printk messages dropped ** [ 3248.089218] [17267] 0 17267 17600 8232 25 4 0 1000 syz-executor5 ** 466 printk messages dropped ** [ 3248.382906] [17125] 0 17125 17600 8232 25 4 0 1000 syz-executor5 [ 3248.382914] [17150] 0 17150 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3248.382932] [17207] 0 17207 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3248.382949] [17247] 0 17247 17600 8232 25 4 0 1000 syz-executor5 ** 2 printk messages dropped ** [ 3248.382976] [17326] 0 17326 17600 8232 25 4 0 1000 syz-executor5 [ 3248.382984] [17377] 0 17377 17600 8232 25 4 0 1000 syz-executor5 [ 3248.382993] [17386] 0 17386 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383001] [17392] 0 17392 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383010] [17405] 0 17405 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383019] [17420] 0 17420 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383027] [17435] 0 17435 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3248.383044] [17458] 0 17458 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383052] [17473] 0 17473 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383061] [17509] 0 17509 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383069] [17516] 0 17516 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383078] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3248.383086] [17563] 0 17563 17600 8232 25 4 0 1000 syz-executor5 [ 3248.383095] [17571] 0 17571 17600 8232 25 4 0 1000 syz-executor5 ** 457 printk messages dropped ** [ 3248.803722] [17267] 0 17267 17600 8232 25 4 0 1000 syz-executor5 [ 3248.803731] [17279] 0 17279 17600 8232 25 4 0 1000 syz-executor5 [ 3248.803741] [17326] 0 17326 17600 8232 25 4 0 1000 syz-executor5 ** 452 printk messages dropped ** [ 3248.938546] [16355] 0 16355 17732 8207 24 3 0 1000 syz-executor4 ** 453 printk messages dropped ** [ 3251.723832] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 ** 450 printk messages dropped ** [ 3252.353699] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 ** 450 printk messages dropped ** [ 3252.621955] [ 8265] 0 8265 17600 8228 25 4 0 1000 syz-executor5 ** 445 printk messages dropped ** [ 3252.736928] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 ** 493 printk messages dropped ** [ 3252.951675] [14123] 0 14123 17600 8231 25 4 0 1000 syz-executor4 [ 3252.951681] [14174] 0 14174 17600 8231 25 4 0 1000 syz-executor4 [ 3252.951688] [14321] 0 14321 17600 8232 25 4 0 1000 syz-executor5 ** 445 printk messages dropped ** [ 3253.094151] [14123] 0 14123 17600 8231 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3253.094168] [14321] 0 14321 17600 8232 25 4 0 1000 syz-executor5 [ 3253.094177] [14369] 0 14369 17600 8199 24 3 0 1000 syz-executor4 [ 3253.094185] [14379] 0 14379 17633 8202 24 3 0 1000 syz-executor4 ** 900 printk messages dropped ** [ 3253.521434] [ 4718] 0 4718 17633 8231 25 4 0 1000 syz-executor4 [ 3253.521445] [ 4771] 0 4771 17633 8231 25 4 0 1000 syz-executor4 [ 3253.521454] [ 4791] 0 4791 17633 8231 25 4 0 1000 syz-executor4 [ 3253.521465] [ 4820] 0 4820 17633 8231 25 4 0 1000 syz-executor4 [ 3253.521477] [ 4972] 0 4972 17600 8197 24 3 0 1000 syz-executor4 [ 3253.521483] [ 4977] 0 4977 17633 8199 24 3 0 1000 syz-executor4 [ 3253.521490] [ 5177] 0 5177 17600 8231 25 4 0 1000 syz-executor4 [ 3253.521509] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3253.521518] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 [ 3253.521527] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 [ 3253.521537] [ 7504] 0 7504 17600 8200 25 3 0 1000 syz-executor4 [ 3253.521547] [ 7909] 0 7909 17633 8230 25 4 0 1000 syz-executor5 ** 3 printk messages dropped ** [ 3253.521593] [ 8113] 0 8113 17600 8232 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3253.521610] [ 8265] 0 8265 17600 8228 25 4 0 1000 syz-executor5 [ 3253.521620] [ 8912] 0 8912 17666 8222 25 4 0 1000 syz-executor5 [ 3253.521628] [ 8952] 0 8952 17666 8222 25 4 0 1000 syz-executor5 [ 3253.521638] [ 9273] 0 9273 17600 8199 24 3 0 1000 syz-executor4 [ 3253.521647] [ 9298] 0 9298 17600 8200 24 3 0 1000 syz-executor5 [ 3253.521655] [ 9615] 0 9615 17600 8201 24 3 0 1000 syz-executor4 [ 3253.521667] [10102] 0 10102 17600 8231 25 4 0 1000 syz-executor4 [ 3253.521677] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 [ 3253.521691] [10403] 0 10403 17633 8201 24 3 0 1000 syz-executor4 [ 3253.521700] [10421] 0 10421 17600 8199 24 3 0 1000 syz-executor4 [ 3253.521709] [10729] 0 10729 17600 8191 23 3 0 1000 syz-executor5 [ 3253.521717] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 ** 427 printk messages dropped ** [ 3253.959847] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 ** 434 printk messages dropped ** [ 3254.021239] [ 4480] 0 4480 17633 8231 25 4 0 1000 syz-executor4 [ 3254.021247] [ 4544] 0 4544 17600 8197 24 3 0 1000 syz-executor4 [ 3254.021256] [ 4547] 0 4547 17633 8199 24 3 0 1000 syz-executor4 [ 3254.021264] [ 4677] 0 4677 17633 8231 25 4 0 1000 syz-executor4 ** 424 printk messages dropped ** [ 3256.750526] 0 pages HighMem/MovableOnly [ 3256.750528] 313617 pages reserved [ 3256.750530] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name ** 3 printk messages dropped ** [ 3256.750571] [ 1945] 0 1945 4724 52 15 3 0 0 cron ** 430 printk messages dropped ** [ 3256.936591] 313617 pages reserved [ 3256.936593] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 3256.936607] [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 3256.936616] [ 1753] 0 1753 2492 572 10 4 0 0 dhclient ** 423 printk messages dropped ** [ 3257.385317] Normal: 1144*4kB (MH) 60*8kB (MH) 0*16kB 11*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5472kB 7764 total pagecache pages [ 3257.385321] 0 pages in swap cache [ 3257.385324] Swap cache stats: add 0, delete 0, find 0/0 ** 430 printk messages dropped ** [ 3257.832362] lowmem_reserve[]: 0 0 0 [ 3257.832403] DMA32: 14*4kB (UMH) 14*8kB (UMH) 11*16kB (UMH) 14*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18712kB Normal: 1233*4kB (UMH) 67*8kB (UMH) 3*16kB (MH) 11*32kB (UH) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5932kB ** 427 printk messages dropped ** [ 3258.223048] lowmem_reserve[]: 0 3505 3505 [ 3258.223064] Normal free:5760kB min:5580kB low:9168kB high:12756kB active_anon:249580kB inactive_anon:17140kB active_file:520kB inactive_file:544kB unevictable:0kB writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34524kB slab_unreclaimable:350312kB kernel_stack:19520kB pagetables:34880kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB ** 1272 printk messages dropped ** [ 3259.676624] [] handle_mm_fault+0x1326/0x2350 [ 3259.676632] [] ? poll_select_set_timeout+0xb5/0x120 [ 3259.676637] [] ? vm_insert_page+0x6f0/0x6f0 [ 3259.676643] [] ? debug_lockdep_rcu_enabled+0x77/0x90 ** 3 printk messages dropped ** [ 3259.676671] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3259.676677] [] do_page_fault+0x27/0x30 [ 3259.676684] [] page_fault+0x25/0x30 [ 3259.676687] Mem-Info: ** 1 printk messages dropped ** [ 3259.676712] Node 0 active_anon:249256kB inactive_anon:17148kB active_file:424kB inactive_file:488kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:65940kB dirty:0kB writeback:0kB shmem:29684kB writeback_tmp:0kB unstable:0kB pages_scanned:1039 all_unreclaimable? no [ 3259.676727] DMA32 free:18712kB min:4696kB low:7712kB high:10728kB active_anon:100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:3145324kB managed:3020132kB mlocked:8kB slab_reclaimable:32kB slab_unreclaimable:4304kB kernel_stack:544kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 3259.676749] Normal free:5464kB min:5580kB low:9168kB high:12756kB active_anon:249156kB inactive_anon:17140kB active_file:424kB inactive_file:488kB unevictable:0kB writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34524kB slab_unreclaimable:350400kB kernel_stack:19392kB pagetables:34480kB bounce:0kB free_pcp:200kB local_pcp:132kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 3259.676796] DMA32: 14*4kB (UMH) 14*8kB (UMH) 11*16kB (UMH) 14*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18712kB Normal: 1173*4kB (MH) 47*8kB (MH) 4*16kB (MH) 9*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5484kB 7698 total pagecache pages [ 3259.676832] 0 pages in swap cache [ 3259.676835] Swap cache stats: add 0, delete 0, find 0/0 [ 3259.676837] Free swap = 0kB [ 3259.676839] Total swap = 0kB [ 3259.676841] 1965979 pages RAM [ 3259.676842] 0 pages HighMem/MovableOnly [ 3259.676844] 313617 pages reserved [ 3259.676846] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 3259.676861] [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 3259.676870] [ 1753] 0 1753 2492 572 10 4 0 0 dhclient [ 3259.676886] [ 1894] 0 1894 14263 175 23 3 0 0 rsyslogd [ 3259.676895] [ 1945] 0 1945 4724 52 15 3 0 0 cron [ 3259.676903] [ 1963] 0 1963 3767 70 11 3 0 0 mcstransd ** 405 printk messages dropped ** [ 3259.738789] active_anon:62289 inactive_anon:4287 isolated_anon:0 [ 3259.738789] active_file:106 inactive_file:122 isolated_file:0 [ 3259.738789] unevictable:2 dirty:0 writeback:0 unstable:0 [ 3259.738789] slab_reclaimable:8639 slab_unreclaimable:88676 [ 3259.738789] mapped:16485 shmem:7421 pagetables:8657 bounce:0 [ 3259.738789] free:6144 free_pcp:0 free_cma:0 ** 405 printk messages dropped ** [ 3260.063262] [] xt_alloc_entry_offsets+0x41/0x60 ** 407 printk messages dropped ** [ 3261.475617] Out of memory: Kill process 17267 (syz-executor5) score 1004 or sacrifice child [ 3261.475642] Killed process 17267 (syz-executor5) total-vm:70400kB, anon-rss:160kB, file-rss:32768kB, shmem-rss:0kB ** 408 printk messages dropped ** [ 3262.133692] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3262.133702] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3262.133712] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3262.133735] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 ** 406 printk messages dropped ** [ 3262.382915] [ 597] 0 597 17600 8232 24 4 0 1000 syz-executor4 [ 3262.382936] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 ** 462 printk messages dropped ** [ 3263.137474] [] ? kthreadd+0x293/0x420 [ 3263.137481] [] ? kthread_park+0xa0/0xa0 [ 3263.137488] [] kernel_thread+0x34/0x40 [ 3263.137495] [] kthreadd+0x2a7/0x420 [ 3263.137503] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3263.137512] [] ? finish_task_switch+0x1e9/0x640 ** 399 printk messages dropped ** [ 3263.472947] [] xt_alloc_entry_offsets+0x41/0x60 [ 3263.472955] [] translate_table+0x215/0x1690 ** 398 printk messages dropped ** [ 3263.793918] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 3263.793927] [] ? kmem_cache_alloc+0x246/0x2b0 ** 5 printk messages dropped ** [ 3263.793975] [] ? kthread_park+0xa0/0xa0 [ 3263.793982] [] ? fork_idle+0x270/0x270 ** 811 printk messages dropped ** [ 3264.310527] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3264.310548] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3264.310560] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3264.310573] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3264.310584] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3264.310594] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3264.310611] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3264.310623] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3264.310633] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3264.310645] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3264.310657] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3264.310667] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3264.310677] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3264.310687] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3264.310704] [26675] 0 26675 17666 8220 25 4 0 1000 syz-executor5 [ 3264.310714] [26681] 0 26681 17666 8220 25 4 0 1000 syz-executor5 ** 68 printk messages dropped ** [ 3264.599272] lowmem_reserve[]: 0 3505 3505 ** 325 printk messages dropped ** [ 3264.603115] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3264.603127] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3264.603137] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 ** 393 printk messages dropped ** [ 3264.953967] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3264.953995] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3264.954007] [12944] 0 12944 5529 313 14 3 0 -1000 udevd ** 392 printk messages dropped ** [ 3265.024437] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3265.024448] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3265.024458] [ 1768] 0 1768 17699 8209 24 3 0 1000 syz-executor4 ** 697 printk messages dropped ** [ 3267.804565] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 ** 84 printk messages dropped ** [ 3267.815601] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3267.815612] [19905] 0 19905 17633 8226 24 4 0 1000 syz-executor4 [ 3267.815626] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 ** 388 printk messages dropped ** [ 3268.176922] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3268.176933] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3268.176950] [19481] 0 19481 17600 8232 25 4 0 1000 syz-executor5 [ 3268.176960] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3268.176970] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 ** 385 printk messages dropped ** [ 3268.490710] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 ** 389 printk messages dropped ** [ 3268.613349] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 ** 2 printk messages dropped ** [ 3268.613380] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3268.613389] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 ** 383 printk messages dropped ** [ 3269.026279] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 ** 386 printk messages dropped ** [ 3269.405209] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3269.405216] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3269.405225] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3269.405232] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3269.405240] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 ** 4 printk messages dropped ** [ 3269.405291] [10602] 0 10602 17633 8232 25 4 0 1000 syz-executor4 [ 3269.405301] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 ** 1 printk messages dropped ** [ 3269.405319] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3269.405337] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3269.405346] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3269.405359] [19481] 0 19481 17600 8232 25 4 0 1000 syz-executor5 [ 3269.405367] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3269.405374] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3269.405383] [19905] 0 19905 17633 8226 24 4 0 1000 syz-executor4 [ 3269.405394] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 ** 2 printk messages dropped ** [ 3269.405417] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3269.405434] [25157] 0 25157 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3269.405455] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3269.415494] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3269.415505] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 ** 374 printk messages dropped ** [ 3269.617327] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 ** 371 printk messages dropped ** [ 3270.085329] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3270.085350] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3270.085360] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3270.085371] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3270.085381] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3270.085391] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3270.085401] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3270.085411] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3270.085422] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 ** 407 printk messages dropped ** [ 3270.151631] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 ** 364 printk messages dropped ** [ 3272.431444] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 ** 4 printk messages dropped ** [ 3272.431494] [ 9479] 0 9479 17600 8232 25 4 0 1000 syz-executor5 [ 3272.431504] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3272.431514] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 ** 364 printk messages dropped ** [ 3272.677020] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3272.677028] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3272.677037] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 ** 736 printk messages dropped ** [ 3273.625436] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 ** 720 printk messages dropped ** [ 3274.638544] [30679] 0 30679 17600 8191 23 3 0 1000 syz-executor5 ** 359 printk messages dropped ** [ 3274.689283] [30719] 0 30719 17600 8232 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3274.689317] [30918] 0 30918 17600 8231 25 4 0 1000 syz-executor4 [ 3274.689327] [30945] 0 30945 17600 8191 23 3 0 1000 syz-executor5 [ 3274.689346] [31140] 0 31140 17600 8190 23 3 0 1000 syz-executor4 [ 3274.689355] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3274.689379] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3274.689402] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 [ 3274.689411] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 [ 3274.689421] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 [ 3274.689431] [31536] 0 31536 17633 8201 24 3 0 1000 syz-executor4 [ 3274.689446] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 [ 3274.689456] [31691] 0 31691 17633 8201 24 3 0 1000 syz-executor4 ** 6 printk messages dropped ** [ 3274.689573] [ 923] 0 923 17600 8231 25 4 0 1000 syz-executor4 [ 3274.689584] [ 976] 0 976 17600 8231 25 4 0 1000 syz-executor4 [ 3274.689594] [ 1017] 0 1017 17600 8231 25 4 0 1000 syz-executor4 ** 346 printk messages dropped ** [ 3274.920455] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 [ 3274.920468] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3274.920478] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3274.920488] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3274.920500] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 ** 348 printk messages dropped ** [ 3275.043945] [30719] 0 30719 17600 8232 25 4 0 1000 syz-executor5 [ 3275.043960] [30819] 0 30819 17600 8191 23 3 0 1000 syz-executor5 [ 3275.043977] [30918] 0 30918 17600 8231 25 4 0 1000 syz-executor4 ** 686 printk messages dropped ** [ 3277.482409] [14174] 0 14174 17600 8231 25 4 0 1000 syz-executor4 ** 341 printk messages dropped ** [ 3277.767120] [13565] 0 13565 17600 8231 25 4 0 1000 syz-executor4 ** 681 printk messages dropped ** [ 3278.617561] [ 8952] 0 8952 17666 8222 25 4 0 1000 syz-executor5 ** 675 printk messages dropped ** [ 3278.991284] [ 5177] 0 5177 17600 8231 25 4 0 1000 syz-executor4 [ 3278.991302] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3278.991310] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 ** 335 printk messages dropped ** [ 3279.133072] [ 4977] 0 4977 17633 8199 24 3 0 1000 syz-executor4 ** 6 printk messages dropped ** [ 3279.133150] [ 7967] 0 7967 17600 8199 24 3 0 1000 syz-executor4 ** 3 printk messages dropped ** [ 3279.133188] [ 8952] 0 8952 17666 8222 25 4 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3279.133208] [ 9298] 0 9298 17600 8200 24 3 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3279.133228] [10102] 0 10102 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133238] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 [ 3279.133247] [10403] 0 10403 17633 8201 24 3 0 1000 syz-executor4 [ 3279.133255] [10421] 0 10421 17600 8199 24 3 0 1000 syz-executor4 [ 3279.133264] [10729] 0 10729 17600 8191 23 3 0 1000 syz-executor5 [ 3279.133273] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 [ 3279.133288] [11468] 0 11468 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133298] [12147] 0 12147 17633 8233 25 4 0 4 syz-executor4 [ 3279.133309] [12807] 0 12807 17600 8230 24 4 0 1000 syz-executor4 [ 3279.133327] [13482] 0 13482 17600 8190 23 3 0 1000 syz-executor4 [ 3279.133337] [13565] 0 13565 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133345] [13579] 0 13579 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133354] [13671] 0 13671 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133362] [13721] 0 13721 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133371] [13775] 0 13775 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133379] [13864] 0 13864 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133388] [13881] 0 13881 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133402] [14123] 0 14123 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133410] [14174] 0 14174 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133420] [14369] 0 14369 17600 8199 24 3 0 1000 syz-executor4 [ 3279.133429] [14379] 0 14379 17633 8202 24 3 0 1000 syz-executor4 [ 3279.133439] [16305] 0 16305 17633 8201 24 3 0 1000 syz-executor4 [ 3279.133448] [16355] 0 16355 17732 8207 24 3 0 1000 syz-executor4 [ 3279.133483] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3279.133522] [18154] 0 18154 17600 8200 24 3 0 1000 syz-executor5 [ 3279.133540] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 [ 3279.133548] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 [ 3279.133608] [19683] 0 19683 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133643] [20265] 0 20265 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133655] [20352] 0 20352 17600 8231 25 4 0 1000 syz-executor4 [ 3279.133664] [20394] 0 20394 17600 8231 25 4 0 1000 syz-executor4 ** 306 printk messages dropped ** [ 3279.242834] [ 9615] 0 9615 17600 8201 24 3 0 1000 syz-executor4 ** 645 printk messages dropped ** [ 3279.624220] [ 4120] 0 4120 17633 8231 25 4 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3279.624248] [ 4203] 0 4203 17633 8231 25 4 0 1000 syz-executor4 [ 3279.624257] [ 4264] 0 4264 17633 8231 25 4 0 1000 syz-executor4 ** 622 printk messages dropped ** [ 3282.664474] [] ? check_preemption_disabled+0x3b/0x200 ** 367 printk messages dropped ** [ 3282.731220] [ 1969] 0 1969 12926 1231 27 3 0 0 restorecond [ 3282.731228] [ 1995] 0 1995 12489 153 28 3 0 -1000 sshd [ 3282.731236] [ 2025] 0 2025 3648 40 13 3 0 0 getty ** 311 printk messages dropped ** [ 3283.157593] 313617 pages reserved ** 313 printk messages dropped ** [ 3283.224238] Free swap = 0kB [ 3283.224240] Total swap = 0kB ** 4 printk messages dropped ** [ 3283.224259] [ 470] 0 470 5365 168 15 3 0 -1000 udevd ** 311 printk messages dropped ** [ 3283.289139] ffff8801da62f780 ffffffff81b42e79 ffff8801da62fb40 ffffffff833e92b0 ** 311 printk messages dropped ** [ 3283.292197] [ 6406] 0 6406 2666 33 10 3 0 0 init [ 3283.292205] [ 6408] 0 6408 2666 33 10 3 0 0 init ** 1 printk messages dropped ** [ 3283.292219] Out of memory: Kill process 11468 (syz-executor4) score 1004 or sacrifice child [ 3283.292240] Killed process 11468 (syz-executor4) total-vm:70400kB, anon-rss:156kB, file-rss:32768kB, shmem-rss:0kB [ 3283.683053] kthreadd invoked oom-killer: gfp_mask=0x27080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOTRACK), nodemask=0, order=3, oom_score_adj=0 [ 3283.683060] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.9.141+ #1 [ 3283.683072] ffff8801da62f780 ffffffff81b42e79 ffff8801da62fb40 ffffffff833e92b0 [ 3283.683081] 0000000000000000 ffff8801da62fb58 0000000000000003 ffff8801da62f800 [ 3283.683090] ffffffff814fb526 0000000000000003 0000000000000000 ffffffff82816fa5 ** 3 printk messages dropped ** [ 3283.683120] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3283.683127] [] ? ___ratelimit+0x53/0x401 [ 3283.683135] [] oom_kill_process.cold.10+0xd/0xa6e [ 3283.683143] [] ? has_capability_noaudit+0x24/0x30 [ 3283.683152] [] ? check_preemption_disabled+0x3b/0x200 [ 3283.683160] [] ? out_of_memory+0x6d4/0xe90 [ 3283.683167] [] out_of_memory+0x292/0xe90 [ 3283.683174] [] ? out_of_memory+0x410/0xe90 [ 3283.683181] [] ? oom_killer_disable+0x200/0x200 [ 3283.683188] [] ? trace_hardirqs_on+0xd/0x10 [ 3283.683196] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 3283.683203] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 3283.683210] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3283.683218] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3283.683227] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 3283.683236] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 3283.683244] [] ? kmem_cache_alloc+0x246/0x2b0 [ 3283.683263] [] copy_process.part.8+0x280/0x6a10 ** 1 printk messages dropped ** [ 3283.683277] [] ? __cleanup_sighand+0x40/0x40 [ 3283.683283] [] ? trace_hardirqs_on+0x10/0x10 [ 3283.683289] [] _do_fork+0x1b2/0xd30 [ 3283.683295] [] ? kthread_park+0xa0/0xa0 [ 3283.683301] [] ? fork_idle+0x270/0x270 [ 3283.683307] [] ? debug_lockdep_rcu_enabled+0x77/0x90 ** 4 printk messages dropped ** [ 3283.683336] [] kthreadd+0x2a7/0x420 [ 3283.683343] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 ** 9 printk messages dropped ** [ 3283.683413] Node 0 active_anon:237856kB inactive_anon:17144kB active_file:348kB inactive_file:540kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:65960kB dirty:0kB writeback:0kB shmem:29680kB writeback_tmp:0kB unstable:0kB pages_scanned:1931 all_unreclaimable? no [ 3283.683428] DMA32 free:18696kB min:4696kB low:7712kB high:10728kB active_anon:100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:3145324kB managed:3020132kB mlocked:8kB slab_reclaimable:32kB slab_unreclaimable:4308kB kernel_stack:544kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB ** 951 printk messages dropped ** [ 3284.194986] lowmem_reserve[]: 0 0 0 [ 3284.195027] DMA32: 14*4kB (UMH) 13*8kB (MH) 10*16kB (MH) 15*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18720kB ** 781 printk messages dropped ** [ 3287.620471] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 ** 287 printk messages dropped ** [ 3287.697490] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 ** 285 printk messages dropped ** [ 3287.941977] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 ** 287 printk messages dropped ** [ 3288.058271] [ 4403] 0 4403 17600 8199 24 3 0 1000 syz-executor4 ** 284 printk messages dropped ** [ 3288.136305] [ 4403] 0 4403 17600 8199 24 3 0 1000 syz-executor4 ** 3 printk messages dropped ** [ 3288.136353] [ 4953] 0 4953 17600 8200 24 3 0 1000 syz-executor5 [ 3288.136363] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136377] [ 6851] 0 6851 17600 8200 24 3 0 1000 syz-executor5 ** 1 printk messages dropped ** [ 3288.136396] [ 7116] 0 7116 17600 8199 23 3 0 1000 syz-executor5 [ 3288.136404] [ 7139] 0 7139 17699 8206 24 3 0 1000 syz-executor5 [ 3288.136423] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3288.136440] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136448] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136457] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136465] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136474] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3288.136491] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3288.136508] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136516] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136525] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136533] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136542] [ 9278] 0 9278 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136550] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136559] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136567] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136577] [ 9395] 0 9395 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136586] [ 9437] 0 9437 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136594] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136603] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136612] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136621] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136630] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136639] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3288.136647] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3288.136656] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3288.136682] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3288.136689] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3288.136698] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 [ 3288.136705] [13655] 0 13655 17666 8205 24 3 0 1000 syz-executor4 ** 267 printk messages dropped ** [ 3288.299096] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 ** 266 printk messages dropped ** [ 3288.519239] [ 4479] 0 4479 17600 8200 25 3 0 1000 syz-executor4 ** 265 printk messages dropped ** [ 3288.635003] [31985] 0 31985 17600 8190 23 3 0 1000 syz-executor4 ** 307 printk messages dropped ** [ 3288.857486] [ 4094] 0 4094 17600 8199 24 3 0 1000 syz-executor4 ** 513 printk messages dropped ** [ 3292.924788] [ 9273] 0 9273 17600 8199 24 3 0 1000 syz-executor4 ** 255 printk messages dropped ** [ 3293.096353] [ 4972] 0 4972 17600 8197 24 3 0 1000 syz-executor4 ** 1 printk messages dropped ** [ 3293.096384] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3293.096394] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 [ 3293.096404] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 ** 261 printk messages dropped ** [ 3293.325847] [] _do_fork+0x1b2/0xd30 [ 3293.325854] [] ? kthread_park+0xa0/0xa0 [ 3293.325861] [] ? fork_idle+0x270/0x270 [ 3293.325886] [] ? debug_lockdep_rcu_enabled+0x77/0x90 ** 249 printk messages dropped ** [ 3293.570073] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 3293.570082] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 3293.570091] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3293.570098] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 3293.570113] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3293.570122] [] __vmalloc_node_range+0x25b/0x600 ** 1 printk messages dropped ** [ 3293.570138] [] vmalloc+0x5b/0x70 [ 3293.570145] [] ? xt_alloc_entry_offsets+0x41/0x60 [ 3293.570152] [] xt_alloc_entry_offsets+0x41/0x60 [ 3293.570161] [] translate_table+0x215/0x1690 [ 3293.570170] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3293.570178] [] ? compat_do_ip6t_get_ctl+0x940/0x940 [ 3293.570186] [] do_ip6t_set_ctl+0x2ce/0x470 ** 242 printk messages dropped ** [ 3293.695915] [] ? rcu_read_unlock_special+0x6d0/0xb20 [ 3293.695922] [] ? has_capability_noaudit+0x24/0x30 [ 3293.695930] [] ? out_of_memory+0x6d4/0xe90 [ 3293.695936] [] out_of_memory+0x292/0xe90 [ 3293.695942] [] ? out_of_memory+0x410/0xe90 ** 2 printk messages dropped ** [ 3293.695961] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 ** 2 printk messages dropped ** [ 3293.695981] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3293.695989] [] ? check_preemption_disabled+0x3b/0x200 ** 394 printk messages dropped ** [ 3293.841761] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841769] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841778] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841786] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841795] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841803] [ 9011] 0 9011 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841812] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841827] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841836] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841845] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841853] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841862] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841870] [ 9278] 0 9278 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841879] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841888] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841896] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841906] [ 9395] 0 9395 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841914] [ 9437] 0 9437 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841923] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841932] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841940] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841950] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841958] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841967] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841976] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3293.841984] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3293.841993] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 [ 3293.842010] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3293.842019] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3293.842030] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 [ 3293.842039] [13655] 0 13655 17666 8205 24 3 0 1000 syz-executor4 [ 3293.842050] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842060] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842074] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842081] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842094] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 [ 3293.842103] [21709] 0 21709 17666 8238 27 4 0 4 syz-executor5 [ 3293.842112] [22681] 0 22681 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842121] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3293.842130] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3293.842142] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3293.842151] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3293.842160] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3293.842169] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842179] [26781] 0 26781 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842191] [28807] 0 28807 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842197] [28850] 0 28850 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842205] [29997] 0 29997 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842212] [30027] 0 30027 17699 8208 24 3 0 1000 syz-executor5 [ 3293.842222] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3293.842228] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3293.842238] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3293.842244] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3293.842251] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3293.842257] [ 1768] 0 1768 17699 8209 24 3 0 1000 syz-executor4 [ 3293.842264] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 [ 3293.842271] [ 2440] 0 2440 17600 8203 25 3 0 1000 syz-executor5 [ 3293.842279] [ 3078] 0 3078 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842287] [ 3126] 0 3126 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842303] [ 8536] 0 8536 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842312] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842333] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3293.842342] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3293.842351] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3293.842362] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842371] [15667] 0 15667 17633 8202 24 3 0 1000 syz-executor5 [ 3293.842382] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3293.842399] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3293.842408] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842419] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842428] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3293.842437] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3293.842451] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3293.842461] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3293.842469] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3293.842479] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3293.842489] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3293.842498] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842506] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3293.842515] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3293.842532] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842541] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842550] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 [ 3293.842564] [29622] 0 29622 17666 8206 27 3 0 1000 syz-executor4 [ 3293.842589] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842599] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842608] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3293.842617] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3293.842629] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 [ 3293.842639] [ 6322] 0 6320 17831 2 26 4 0 1000 syz-executor0 [ 3293.842650] [ 6403] 0 6403 2666 33 10 3 0 0 init [ 3293.842658] [ 6404] 0 6404 2666 33 10 3 0 0 init [ 3293.842667] [ 6405] 0 6405 2666 33 10 3 0 0 init [ 3293.842675] [ 6406] 0 6406 2666 33 10 3 0 0 init [ 3293.842684] [ 6408] 0 6408 2666 33 10 3 0 0 init [ 3293.842692] [ 6409] 0 6409 2666 33 10 3 0 0 init [ 3293.842699] Out of memory: Kill process 1768 (syz-executor4) score 1004 or sacrifice child [ 3293.842721] Killed process 1768 (syz-executor4) total-vm:70796kB, anon-rss:196kB, file-rss:32640kB, shmem-rss:0kB [ 3294.065632] lowmemorykiller: Killing 'syz-executor5' (30027) (tgid 30027), adj 1000, [ 3294.065632] to free 32832kB on behalf of 'kthreadd' (2) because [ 3294.065632] cache 1400kB is below limit 6144kB for oom_score_adj 0 [ 3294.065632] Free memory is -13200kB above reserved [ 3294.339214] kthreadd invoked oom-killer: gfp_mask=0x27080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOTRACK), nodemask=0, order=3, oom_score_adj=0 [ 3294.339221] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.9.141+ #1 [ 3294.339232] ffff8801da62f780 ffffffff81b42e79 ffff8801da62fb40 ffffffff833e92b0 [ 3294.339241] 0000000000000000 ffff8801da62fb58 0000000000000003 ffff8801da62f800 [ 3294.339248] ffffffff814fb526 0000000000000003 0000000000000000 ffffffff82816fa5 [ 3294.339250] Call Trace: [ 3294.339262] [] dump_stack+0xc1/0x128 [ 3294.339270] [] dump_header.isra.4+0x142/0x747 [ 3294.339277] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3294.339284] [] ? ___ratelimit+0x53/0x401 [ 3294.339290] [] oom_kill_process.cold.10+0xd/0xa6e [ 3294.339298] [] ? has_capability_noaudit+0x24/0x30 [ 3294.339305] [] ? check_preemption_disabled+0x3b/0x200 [ 3294.339313] [] ? out_of_memory+0x6d4/0xe90 [ 3294.339319] [] out_of_memory+0x292/0xe90 [ 3294.339325] [] ? out_of_memory+0x410/0xe90 [ 3294.339331] [] ? oom_killer_disable+0x200/0x200 [ 3294.339338] [] ? trace_hardirqs_on+0xd/0x10 [ 3294.339345] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 3294.339352] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 3294.339358] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3294.339365] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3294.339373] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 3294.339381] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 3294.339388] [] ? kmem_cache_alloc+0x246/0x2b0 [ 3294.339396] [] copy_process.part.8+0x280/0x6a10 [ 3294.339404] [] ? kthread_park+0xa0/0xa0 [ 3294.339410] [] ? __cleanup_sighand+0x40/0x40 [ 3294.339416] [] ? trace_hardirqs_on+0x10/0x10 [ 3294.339422] [] _do_fork+0x1b2/0xd30 [ 3294.339428] [] ? kthread_park+0xa0/0xa0 [ 3294.339434] [] ? fork_idle+0x270/0x270 [ 3294.339439] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3294.339446] [] ? kthreadd+0x1cc/0x420 [ 3294.339451] [] ? kthreadd+0x293/0x420 [ 3294.339457] [] ? kthread_park+0xa0/0xa0 [ 3294.339463] [] kernel_thread+0x34/0x40 [ 3294.339469] [] kthreadd+0x2a7/0x420 [ 3294.339476] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.339483] [] ? finish_task_switch+0x1e9/0x640 [ 3294.339489] [] ? __switch_to_asm+0x34/0x70 [ 3294.339495] [] ? __switch_to_asm+0x40/0x70 [ 3294.339500] [] ? __switch_to_asm+0x34/0x70 [ 3294.339506] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.339513] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.339518] [] ret_from_fork+0x5c/0x70 [ 3294.339521] Mem-Info: [ 3294.339534] active_anon:57987 inactive_anon:4286 isolated_anon:0 [ 3294.339534] active_file:155 inactive_file:165 isolated_file:0 [ 3294.339534] unevictable:2 dirty:0 writeback:0 unstable:0 [ 3294.339534] slab_reclaimable:8633 slab_unreclaimable:87919 [ 3294.339534] mapped:16489 shmem:7420 pagetables:4531 bounce:0 [ 3294.339534] free:6083 free_pcp:0 free_cma:0 [ 3294.339546] Node 0 active_anon:231948kB inactive_anon:17144kB active_file:620kB inactive_file:660kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:65956kB dirty:0kB writeback:0kB shmem:29680kB writeback_tmp:0kB unstable:0kB pages_scanned:18 all_unreclaimable? no [ 3294.339560] DMA32 free:18716kB min:4696kB low:7712kB high:10728kB active_anon:100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:3145324kB managed:3020132kB mlocked:8kB slab_reclaimable:32kB slab_unreclaimable:4312kB kernel_stack:544kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 3294.339582] Normal free:5616kB min:5580kB low:9168kB high:12756kB active_anon:231848kB inactive_anon:17136kB active_file:620kB inactive_file:660kB unevictable:0kB writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34500kB slab_unreclaimable:347364kB kernel_stack:14848kB pagetables:17976kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 3294.339627] DMA32: 13*4kB (MH) 13*8kB (MH) 10*16kB (MH) 15*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18716kB Normal: 1287*4kB (UMH) 51*8kB (UH) 1*16kB (H) 2*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5700kB 7766 total pagecache pages [ 3294.339661] 0 pages in swap cache [ 3294.339664] Swap cache stats: add 0, delete 0, find 0/0 [ 3294.339666] Free swap = 0kB [ 3294.339668] Total swap = 0kB [ 3294.339670] 1965979 pages RAM [ 3294.339671] 0 pages HighMem/MovableOnly [ 3294.339673] 313617 pages reserved [ 3294.339675] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 3294.339689] [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 3294.339698] [ 1753] 0 1753 2492 572 10 4 0 0 dhclient [ 3294.339706] [ 1894] 0 1894 14263 175 23 3 0 0 rsyslogd [ 3294.339714] [ 1945] 0 1945 4724 52 15 3 0 0 cron [ 3294.339723] [ 1963] 0 1963 3767 70 11 3 0 0 mcstransd [ 3294.339731] [ 1969] 0 1969 12926 1231 27 3 0 0 restorecond [ 3294.339740] [ 1995] 0 1995 12489 153 28 3 0 -1000 sshd [ 3294.339748] [ 2025] 0 2025 3648 40 13 3 0 0 getty [ 3294.339756] [ 2053] 0 2053 17820 197 39 3 0 0 sshd [ 3294.339764] [ 2055] 0 2055 82529 47367 123 5 0 0 syz-fuzzer [ 3294.339781] [ 2105] 0 2105 17568 15 22 3 0 0 syz-executor5 [ 3294.339792] [ 2110] 0 2110 17568 16 22 3 0 0 syz-executor4 [ 3294.339801] [ 2111] 0 2111 17567 8220 23 4 0 0 syz-executor5 [ 3294.339810] [ 2113] 0 2113 17567 8221 23 4 0 0 syz-executor4 [ 3294.339864] [ 4394] 0 4394 17600 8197 24 3 0 1000 syz-executor4 [ 3294.339872] [ 4399] 0 4399 17633 8199 24 3 0 1000 syz-executor4 [ 3294.339884] [ 4544] 0 4544 17600 8197 24 3 0 1000 syz-executor4 [ 3294.339893] [ 4547] 0 4547 17633 8199 24 3 0 1000 syz-executor4 [ 3294.339911] [ 4972] 0 4972 17600 8197 24 3 0 1000 syz-executor4 [ 3294.339919] [ 4977] 0 4977 17633 8199 24 3 0 1000 syz-executor4 [ 3294.339938] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3294.339946] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 [ 3294.339955] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 [ 3294.339963] [ 7504] 0 7504 17600 8200 25 3 0 1000 syz-executor4 [ 3294.339973] [ 7967] 0 7967 17600 8199 24 3 0 1000 syz-executor4 [ 3294.339982] [ 7975] 0 7975 17633 8202 25 3 0 1000 syz-executor4 [ 3294.339999] [ 9273] 0 9273 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340007] [ 9298] 0 9298 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340016] [ 9615] 0 9615 17600 8201 24 3 0 1000 syz-executor4 [ 3294.340036] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340045] [10403] 0 10403 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340053] [10421] 0 10421 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340062] [10729] 0 10729 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340070] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 [ 3294.340088] [12147] 0 12147 17633 8233 25 4 0 4 syz-executor4 [ 3294.340108] [13482] 0 13482 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340126] [14369] 0 14369 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340135] [14379] 0 14379 17633 8202 24 3 0 1000 syz-executor4 [ 3294.340145] [16305] 0 16305 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340153] [16355] 0 16355 17732 8207 24 3 0 1000 syz-executor4 [ 3294.340189] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340229] [18154] 0 18154 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340247] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340255] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 [ 3294.340351] [20421] 0 20421 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340359] [20465] 0 20465 17666 8204 24 3 0 1000 syz-executor5 [ 3294.340381] [22000] 0 22000 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340390] [22028] 0 22028 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340399] [22060] 0 22060 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340412] [22880] 0 22880 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340425] [25246] 0 25246 17600 8198 23 3 0 1000 syz-executor4 [ 3294.340434] [25266] 0 25266 17633 8203 25 3 0 1000 syz-executor4 [ 3294.340452] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340460] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340466] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340486] [28065] 0 28065 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340494] [28123] 0 28123 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340503] [28143] 0 28143 17633 8202 24 3 0 1000 syz-executor5 [ 3294.340517] [28765] 0 28765 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340530] [29295] 0 29295 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340542] [29525] 0 29525 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340551] [29626] 0 29626 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340587] [30679] 0 30679 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340600] [30819] 0 30819 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340615] [30945] 0 30945 17600 8191 23 3 0 1000 syz-executor5 [ 3294.340631] [31140] 0 31140 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340640] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340651] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340660] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340669] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340680] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340689] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340697] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340706] [31536] 0 31536 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340719] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340728] [31691] 0 31691 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340745] [31985] 0 31985 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340754] [31986] 0 31986 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340768] [32154] 0 32154 17600 8190 23 3 0 1000 syz-executor4 [ 3294.340784] [32188] 0 32188 17633 8201 24 3 0 1000 syz-executor4 [ 3294.340819] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340842] [ 2153] 0 2153 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340862] [ 3502] 0 3502 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340870] [ 3565] 0 3565 17666 8203 24 3 0 1000 syz-executor4 [ 3294.340879] [ 3715] 0 3715 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340889] [ 3832] 0 3832 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340898] [ 4094] 0 4094 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340908] [ 4403] 0 4403 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340917] [ 4479] 0 4479 17600 8200 25 3 0 1000 syz-executor4 [ 3294.340931] [ 4937] 0 4937 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340940] [ 4953] 0 4953 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340950] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 [ 3294.340965] [ 6851] 0 6851 17600 8200 24 3 0 1000 syz-executor5 [ 3294.340973] [ 6853] 0 6853 17633 8202 24 3 0 1000 syz-executor5 [ 3294.340984] [ 7116] 0 7116 17600 8199 23 3 0 1000 syz-executor5 [ 3294.340992] [ 7139] 0 7139 17699 8206 24 3 0 1000 syz-executor5 [ 3294.341011] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341020] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341029] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341041] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341050] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341059] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341067] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341076] [ 9011] 0 9011 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341084] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341093] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341101] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341110] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341118] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341127] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341135] [ 9278] 0 9278 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341144] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341152] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341161] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341171] [ 9395] 0 9395 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341180] [ 9437] 0 9437 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341188] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341198] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341206] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341216] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341224] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341233] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341241] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341250] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3294.341259] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 [ 3294.341277] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3294.341285] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3294.341297] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 [ 3294.341306] [13655] 0 13655 17666 8205 24 3 0 1000 syz-executor4 [ 3294.341317] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341326] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341341] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341350] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341363] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 [ 3294.341371] [21709] 0 21709 17666 8238 27 4 0 4 syz-executor5 [ 3294.341380] [22681] 0 22681 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341390] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3294.341398] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3294.341411] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3294.341420] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3294.341429] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3294.341438] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341447] [26781] 0 26781 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341461] [28807] 0 28807 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341470] [28850] 0 28850 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341480] [29997] 0 29997 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341494] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3294.341503] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3294.341515] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3294.341525] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3294.341533] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3294.341543] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 [ 3294.341552] [ 2440] 0 2440 17600 8203 25 3 0 1000 syz-executor5 [ 3294.341563] [ 3078] 0 3078 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341572] [ 3126] 0 3126 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341588] [ 8536] 0 8536 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341597] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341619] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3294.341628] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3294.341637] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3294.341649] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341657] [15667] 0 15667 17633 8202 24 3 0 1000 syz-executor5 [ 3294.341668] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3294.341686] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3294.341696] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341707] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341716] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3294.341725] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3294.341739] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3294.341750] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3294.341758] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3294.341768] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3294.341784] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3294.341793] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341801] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3294.341810] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3294.341826] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341835] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341845] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 [ 3294.341858] [29622] 0 29622 17666 8206 27 3 0 1000 syz-executor4 [ 3294.341879] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341888] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341898] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3294.341906] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3294.341918] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 [ 3294.341928] [ 6322] 0 6320 17831 2 26 4 0 1000 syz-executor0 [ 3294.341940] [ 6403] 0 6403 2666 33 10 3 0 0 init [ 3294.341948] [ 6404] 0 6404 2666 33 10 3 0 0 init [ 3294.341957] [ 6405] 0 6405 2666 33 10 3 0 0 init [ 3294.341965] [ 6406] 0 6406 2666 33 10 3 0 0 init [ 3294.341974] [ 6408] 0 6408 2666 33 10 3 0 0 init [ 3294.341983] [ 6409] 0 6409 2666 33 10 3 0 0 init [ 3294.341991] Out of memory: Kill process 29622 (syz-executor4) score 1004 or sacrifice child [ 3294.342013] Killed process 29622 (syz-executor4) total-vm:70664kB, anon-rss:184kB, file-rss:32640kB, shmem-rss:0kB [ 3294.743338] kthreadd invoked oom-killer: gfp_mask=0x27080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOTRACK), nodemask=0, order=3, oom_score_adj=0 [ 3294.743345] CPU: 0 PID: 2 Comm: kthreadd Not tainted 4.9.141+ #1 [ 3294.743357] ffff8801da62f780 ffffffff81b42e79 ffff8801da62fb40 ffffffff833e92b0 [ 3294.743366] 0000000000000000 ffff8801da62fb58 0000000000000003 ffff8801da62f800 [ 3294.743374] ffffffff814fb526 0000000000000003 0000000000000000 ffffffff82816fa5 [ 3294.743375] Call Trace: [ 3294.743388] [] dump_stack+0xc1/0x128 [ 3294.743397] [] dump_header.isra.4+0x142/0x747 [ 3294.743404] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3294.743410] [] ? ___ratelimit+0x53/0x401 [ 3294.743417] [] oom_kill_process.cold.10+0xd/0xa6e [ 3294.743424] [] ? has_capability_noaudit+0x24/0x30 [ 3294.743432] [] ? check_preemption_disabled+0x3b/0x200 [ 3294.743439] [] ? out_of_memory+0x6d4/0xe90 [ 3294.743446] [] out_of_memory+0x292/0xe90 [ 3294.743451] [] ? out_of_memory+0x410/0xe90 [ 3294.743458] [] ? oom_killer_disable+0x200/0x200 [ 3294.743465] [] ? trace_hardirqs_on+0xd/0x10 [ 3294.743472] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 3294.743479] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 3294.743484] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3294.743492] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3294.743500] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 3294.743507] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 3294.743514] [] ? kmem_cache_alloc+0x246/0x2b0 [ 3294.743522] [] copy_process.part.8+0x280/0x6a10 [ 3294.743530] [] ? kthread_park+0xa0/0xa0 [ 3294.743536] [] ? __cleanup_sighand+0x40/0x40 [ 3294.743542] [] ? trace_hardirqs_on+0x10/0x10 [ 3294.743548] [] _do_fork+0x1b2/0xd30 [ 3294.743554] [] ? kthread_park+0xa0/0xa0 [ 3294.743560] [] ? fork_idle+0x270/0x270 [ 3294.743566] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3294.743572] [] ? kthreadd+0x1cc/0x420 [ 3294.743578] [] ? kthreadd+0x293/0x420 [ 3294.743584] [] ? kthread_park+0xa0/0xa0 [ 3294.743590] [] kernel_thread+0x34/0x40 [ 3294.743595] [] kthreadd+0x2a7/0x420 [ 3294.743602] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.743611] [] ? finish_task_switch+0x1e9/0x640 [ 3294.743617] [] ? __switch_to_asm+0x34/0x70 [ 3294.743622] [] ? __switch_to_asm+0x40/0x70 [ 3294.743627] [] ? __switch_to_asm+0x34/0x70 [ 3294.743634] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.743657] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3294.743663] [] ret_from_fork+0x5c/0x70 [ 3294.743666] Mem-Info: [ 3294.743681] active_anon:57962 inactive_anon:4286 isolated_anon:0 [ 3294.743681] active_file:123 inactive_file:124 isolated_file:0 [ 3294.743681] unevictable:2 dirty:0 writeback:0 unstable:0 [ 3294.743681] slab_reclaimable:8633 slab_unreclaimable:87919 [ 3294.743681] mapped:16464 shmem:7420 pagetables:4494 bounce:0 [ 3294.743681] free:6092 free_pcp:0 free_cma:0 [ 3294.743693] Node 0 active_anon:231848kB inactive_anon:17144kB active_file:492kB inactive_file:496kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:65856kB dirty:0kB writeback:0kB shmem:29680kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 3294.743709] DMA32 free:18716kB min:4696kB low:7712kB high:10728kB active_anon:100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:3145324kB managed:3020132kB mlocked:8kB slab_reclaimable:32kB slab_unreclaimable:4312kB kernel_stack:544kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 3294.743732] Normal free:5652kB min:5580kB low:9168kB high:12756kB active_anon:231748kB inactive_anon:17136kB active_file:492kB inactive_file:496kB unevictable:0kB writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34500kB slab_unreclaimable:347364kB kernel_stack:14848kB pagetables:17828kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 3294.743787] DMA32: 13*4kB (MH) 13*8kB (MH) 10*16kB (MH) 15*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18716kB Normal: 1319*4kB (UMH) 49*8kB (H) 1*16kB (H) 2*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5812kB 7691 total pagecache pages [ 3294.743824] 0 pages in swap cache [ 3294.743827] Swap cache stats: add 0, delete 0, find 0/0 [ 3294.743829] Free swap = 0kB [ 3294.743831] Total swap = 0kB [ 3294.743833] 1965979 pages RAM [ 3294.743835] 0 pages HighMem/MovableOnly [ 3294.743836] 313617 pages reserved [ 3294.743839] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 3294.743853] [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 3294.743863] [ 1753] 0 1753 2492 572 10 4 0 0 dhclient [ 3294.743872] [ 1894] 0 1894 14263 175 23 3 0 0 rsyslogd [ 3294.743881] [ 1945] 0 1945 4724 52 15 3 0 0 cron [ 3294.743889] [ 1963] 0 1963 3767 70 11 3 0 0 mcstransd [ 3294.743899] [ 1969] 0 1969 12926 1231 27 3 0 0 restorecond [ 3294.743908] [ 1995] 0 1995 12489 153 28 3 0 -1000 sshd [ 3294.743917] [ 2025] 0 2025 3648 40 13 3 0 0 getty [ 3294.743925] [ 2053] 0 2053 17820 197 39 3 0 0 sshd [ 3294.743934] [ 2055] 0 2055 82529 47367 123 5 0 0 syz-fuzzer [ 3294.743943] [ 2105] 0 2105 17568 15 22 3 0 0 syz-executor5 [ 3294.743955] [ 2110] 0 2110 17568 16 22 3 0 0 syz-executor4 [ 3294.743964] [ 2111] 0 2111 17567 8220 23 4 0 0 syz-executor5 [ 3294.743974] [ 2113] 0 2113 17567 8221 23 4 0 0 syz-executor4 [ 3294.744037] [ 4394] 0 4394 17600 8197 24 3 0 1000 syz-executor4 [ 3294.744046] [ 4399] 0 4399 17633 8199 24 3 0 1000 syz-executor4 [ 3294.744059] [ 4544] 0 4544 17600 8197 24 3 0 1000 syz-executor4 [ 3294.744068] [ 4547] 0 4547 17633 8199 24 3 0 1000 syz-executor4 [ 3294.744087] [ 4972] 0 4972 17600 8197 24 3 0 1000 syz-executor4 [ 3294.744096] [ 4977] 0 4977 17633 8199 24 3 0 1000 syz-executor4 [ 3294.744116] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744125] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744134] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 [ 3294.744143] [ 7504] 0 7504 17600 8200 25 3 0 1000 syz-executor4 [ 3294.744154] [ 7967] 0 7967 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744163] [ 7975] 0 7975 17633 8202 25 3 0 1000 syz-executor4 [ 3294.744181] [ 9273] 0 9273 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744190] [ 9298] 0 9298 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744200] [ 9615] 0 9615 17600 8201 24 3 0 1000 syz-executor4 [ 3294.744215] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744224] [10403] 0 10403 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744234] [10421] 0 10421 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744243] [10729] 0 10729 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744252] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 [ 3294.744271] [12147] 0 12147 17633 8233 25 4 0 4 syz-executor4 [ 3294.744293] [13482] 0 13482 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744313] [14369] 0 14369 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744322] [14379] 0 14379 17633 8202 24 3 0 1000 syz-executor4 [ 3294.744333] [16305] 0 16305 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744342] [16355] 0 16355 17732 8207 24 3 0 1000 syz-executor4 [ 3294.744380] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744421] [18154] 0 18154 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744440] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744449] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 [ 3294.744551] [20421] 0 20421 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744560] [20465] 0 20465 17666 8204 24 3 0 1000 syz-executor5 [ 3294.744582] [22000] 0 22000 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744592] [22028] 0 22028 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744602] [22060] 0 22060 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744615] [22880] 0 22880 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744629] [25246] 0 25246 17600 8198 23 3 0 1000 syz-executor4 [ 3294.744638] [25266] 0 25266 17633 8203 25 3 0 1000 syz-executor4 [ 3294.744656] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744666] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744675] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744697] [28065] 0 28065 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744706] [28123] 0 28123 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744716] [28143] 0 28143 17633 8202 24 3 0 1000 syz-executor5 [ 3294.744730] [28765] 0 28765 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744752] [29295] 0 29295 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744766] [29525] 0 29525 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744775] [29626] 0 29626 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744816] [30679] 0 30679 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744830] [30819] 0 30819 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744848] [30945] 0 30945 17600 8191 23 3 0 1000 syz-executor5 [ 3294.744865] [31140] 0 31140 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744874] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 [ 3294.744884] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744891] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744898] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3294.744907] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744914] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744921] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744927] [31536] 0 31536 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744939] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744946] [31691] 0 31691 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744966] [31985] 0 31985 17600 8190 23 3 0 1000 syz-executor4 [ 3294.744975] [31986] 0 31986 17633 8201 24 3 0 1000 syz-executor4 [ 3294.744989] [32154] 0 32154 17600 8190 23 3 0 1000 syz-executor4 [ 3294.745003] [32188] 0 32188 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745038] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745062] [ 2153] 0 2153 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745083] [ 3502] 0 3502 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745092] [ 3565] 0 3565 17666 8203 24 3 0 1000 syz-executor4 [ 3294.745102] [ 3715] 0 3715 17600 8200 24 3 0 1000 syz-executor5 [ 3294.745112] [ 3832] 0 3832 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745122] [ 4094] 0 4094 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745132] [ 4403] 0 4403 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745142] [ 4479] 0 4479 17600 8200 25 3 0 1000 syz-executor4 [ 3294.745158] [ 4937] 0 4937 17600 8200 24 3 0 1000 syz-executor5 [ 3294.745167] [ 4953] 0 4953 17600 8200 24 3 0 1000 syz-executor5 [ 3294.745178] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745193] [ 6851] 0 6851 17600 8200 24 3 0 1000 syz-executor5 [ 3294.745202] [ 6853] 0 6853 17633 8202 24 3 0 1000 syz-executor5 [ 3294.745224] [ 7116] 0 7116 17600 8199 23 3 0 1000 syz-executor5 [ 3294.745232] [ 7139] 0 7139 17699 8206 24 3 0 1000 syz-executor5 [ 3294.745251] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745260] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745269] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745277] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745286] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745294] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745303] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745311] [ 9011] 0 9011 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745320] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745329] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745337] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745346] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745354] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745363] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745372] [ 9278] 0 9278 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745381] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745389] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745398] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745408] [ 9395] 0 9395 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745416] [ 9437] 0 9437 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745425] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745434] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3294.745443] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3294.745476] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3294.748765] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3294.748774] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3294.748783] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3294.748793] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3294.748802] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 [ 3294.748821] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3294.748830] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3294.748843] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 [ 3294.748852] [13655] 0 13655 17666 8205 24 3 0 1000 syz-executor4 [ 3294.748864] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3294.748874] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3294.748890] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3294.748899] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3294.748913] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 [ 3294.748933] [21709] 0 21709 17666 8238 27 4 0 4 syz-executor5 [ 3294.748942] [22681] 0 22681 17600 8200 24 3 0 1000 syz-executor5 [ 3294.748951] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3294.748977] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3294.748989] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3294.749004] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3294.749013] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3294.749022] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 [ 3294.749043] [26781] 0 26781 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749057] [28807] 0 28807 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749066] [28850] 0 28850 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749076] [29997] 0 29997 17633 8202 24 3 0 1000 syz-executor5 [ 3294.749090] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3294.749099] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3294.749111] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3294.749120] [ 1748] 0 1748 17666 8206 25 3 0 1000 syz-executor5 [ 3294.749129] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3294.749138] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 [ 3294.749144] [ 2440] 0 2440 17600 8203 25 3 0 1000 syz-executor5 [ 3294.749153] [ 3078] 0 3078 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749161] [ 3126] 0 3126 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749177] [ 8536] 0 8536 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749185] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3294.749207] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3294.749216] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3294.749225] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3294.749237] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749245] [15667] 0 15667 17633 8202 24 3 0 1000 syz-executor5 [ 3294.749257] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3294.749274] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3294.749284] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749295] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749304] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3294.749313] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3294.749327] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3294.749337] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3294.749346] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3294.749356] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3294.749366] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3294.749374] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749383] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3294.749391] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3294.749408] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749417] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749427] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 [ 3294.749471] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749481] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749491] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3294.749500] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3294.749513] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 [ 3294.749524] [ 6322] 0 6320 17831 2 26 4 0 1000 syz-executor0 [ 3294.749537] [ 6403] 0 6403 2666 33 10 3 0 0 init [ 3294.749546] [ 6404] 0 6404 2666 33 10 3 0 0 init [ 3294.749555] [ 6405] 0 6405 2666 33 10 3 0 0 init [ 3294.749564] [ 6406] 0 6406 2666 33 10 3 0 0 init [ 3294.749585] [ 6408] 0 6408 2666 33 10 3 0 0 init [ 3294.749593] [ 6409] 0 6409 2666 33 10 3 0 0 init [ 3294.749602] Out of memory: Kill process 16355 (syz-executor4) score 1004 or sacrifice child [ 3294.749625] Killed process 16355 (syz-executor4) total-vm:70928kB, anon-rss:188kB, file-rss:32640kB, shmem-rss:0kB [ 3295.076307] lowmemorykiller: Killing 'syz-executor5' (1748) (tgid 1748), adj 1000, [ 3295.076307] to free 32824kB on behalf of 'kswapd0' (33) because [ 3295.076307] cache 1076kB is below limit 6144kB for oom_score_adj 0 [ 3295.076307] Free memory is -13316kB above reserved [ 3295.083767] lowmemorykiller: Killing 'syz-executor5' (7139) (tgid 7139), adj 1000, [ 3295.083767] to free 32824kB on behalf of 'syz-fuzzer' (2068) because [ 3295.083767] cache 1076kB is below limit 6144kB for oom_score_adj 0 [ 3295.083767] Free memory is -13316kB above reserved [ 3295.643688] kthreadd invoked oom-killer: gfp_mask=0x27080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOTRACK), nodemask=0, order=3, oom_score_adj=0 [ 3295.643696] CPU: 1 PID: 2 Comm: kthreadd Not tainted 4.9.141+ #1 [ 3295.643709] ffff8801da62f780 ffffffff81b42e79 ffff8801da62fb40 ffffffff833e92b0 [ 3295.643719] 0000000000000000 ffff8801da62fb58 0000000000000003 ffff8801da62f800 [ 3295.643729] ffffffff814fb526 0000000000000003 0000000000000000 ffffffff82816fa5 [ 3295.643731] Call Trace: [ 3295.643745] [] dump_stack+0xc1/0x128 [ 3295.643756] [] dump_header.isra.4+0x142/0x747 [ 3295.643764] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3295.643772] [] ? ___ratelimit+0x53/0x401 [ 3295.643779] [] oom_kill_process.cold.10+0xd/0xa6e [ 3295.643788] [] ? has_capability_noaudit+0x24/0x30 [ 3295.643797] [] ? check_preemption_disabled+0x3b/0x200 [ 3295.643806] [] ? out_of_memory+0x6d4/0xe90 [ 3295.643813] [] out_of_memory+0x292/0xe90 [ 3295.643820] [] ? out_of_memory+0x410/0xe90 [ 3295.643828] [] ? oom_killer_disable+0x200/0x200 [ 3295.643835] [] ? trace_hardirqs_on+0xd/0x10 [ 3295.643843] [] ? __alloc_pages_nodemask+0x1173/0x1bd0 [ 3295.643851] [] __alloc_pages_nodemask+0x18ee/0x1bd0 [ 3295.643858] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 3295.643867] [] ? gfp_pfmemalloc_allowed+0x110/0x110 [ 3295.643876] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 3295.643885] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 3295.643893] [] ? kmem_cache_alloc+0x246/0x2b0 [ 3295.643902] [] copy_process.part.8+0x280/0x6a10 [ 3295.643911] [] ? kthread_park+0xa0/0xa0 [ 3295.643918] [] ? __cleanup_sighand+0x40/0x40 [ 3295.643925] [] ? trace_hardirqs_on+0x10/0x10 [ 3295.643932] [] _do_fork+0x1b2/0xd30 [ 3295.643940] [] ? kthread_park+0xa0/0xa0 [ 3295.643946] [] ? fork_idle+0x270/0x270 [ 3295.643953] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3295.643960] [] ? kthreadd+0x1cc/0x420 [ 3295.643967] [] ? kthreadd+0x293/0x420 [ 3295.643974] [] ? kthread_park+0xa0/0xa0 [ 3295.643981] [] kernel_thread+0x34/0x40 [ 3295.643988] [] kthreadd+0x2a7/0x420 [ 3295.643996] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3295.644005] [] ? finish_task_switch+0x1e9/0x640 [ 3295.644012] [] ? __switch_to_asm+0x34/0x70 [ 3295.644018] [] ? __switch_to_asm+0x40/0x70 [ 3295.644024] [] ? __switch_to_asm+0x34/0x70 [ 3295.644032] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3295.644040] [] ? kthread_create_worker_on_cpu+0xe0/0xe0 [ 3295.644046] [] ret_from_fork+0x5c/0x70 [ 3295.644049] Mem-Info: [ 3295.644066] active_anon:57858 inactive_anon:4149 isolated_anon:0 [ 3295.644066] active_file:98 inactive_file:124 isolated_file:0 [ 3295.644066] unevictable:2 dirty:0 writeback:0 unstable:0 [ 3295.644066] slab_reclaimable:8633 slab_unreclaimable:87939 [ 3295.644066] mapped:16491 shmem:7275 pagetables:4431 bounce:0 [ 3295.644066] free:6092 free_pcp:0 free_cma:0 [ 3295.644079] Node 0 active_anon:231432kB inactive_anon:16596kB active_file:392kB inactive_file:496kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:65964kB dirty:0kB writeback:0kB shmem:29100kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no [ 3295.644097] DMA32 free:18716kB min:4696kB low:7712kB high:10728kB active_anon:100kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:8kB writepending:0kB present:3145324kB managed:3020132kB mlocked:8kB slab_reclaimable:32kB slab_unreclaimable:4312kB kernel_stack:544kB pagetables:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 3505 3505 [ 3295.644123] Normal free:5652kB min:5580kB low:9168kB high:12756kB active_anon:231332kB inactive_anon:16588kB active_file:392kB inactive_file:496kB unevictable:0kB writepending:0kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:34500kB slab_unreclaimable:347444kB kernel_stack:14784kB pagetables:17576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 [ 3295.644176] DMA32: 13*4kB (MH) 13*8kB (MH) 10*16kB (MH) 15*32kB (UMEH) 10*64kB (UMEH) 11*128kB (MEH) 10*256kB (UMEH) 8*512kB (UMEH) 5*1024kB (UMEH) 2*2048kB (ME) 0*4096kB = 18716kB Normal: 1295*4kB (UMH) 49*8kB (H) 0*16kB 2*32kB (H) 1*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5700kB 7571 total pagecache pages [ 3295.644215] 0 pages in swap cache [ 3295.644219] Swap cache stats: add 0, delete 0, find 0/0 [ 3295.644221] Free swap = 0kB [ 3295.644223] Total swap = 0kB [ 3295.644225] 1965979 pages RAM [ 3295.644227] 0 pages HighMem/MovableOnly [ 3295.644229] 313617 pages reserved [ 3295.644232] [ pid ] uid tgid total_vm rss nr_ptes nr_pmds swapents oom_score_adj name [ 3295.644247] [ 470] 0 470 5365 168 15 3 0 -1000 udevd [ 3295.644258] [ 1753] 0 1753 2492 572 10 4 0 0 dhclient [ 3295.644268] [ 1894] 0 1894 14263 175 23 3 0 0 rsyslogd [ 3295.644278] [ 1945] 0 1945 4724 52 15 3 0 0 cron [ 3295.644288] [ 1963] 0 1963 3767 70 11 3 0 0 mcstransd [ 3295.644298] [ 1969] 0 1969 12926 1231 27 3 0 0 restorecond [ 3295.644308] [ 1995] 0 1995 12489 153 28 3 0 -1000 sshd [ 3295.644318] [ 2025] 0 2025 3648 40 13 3 0 0 getty [ 3295.644328] [ 2053] 0 2053 17820 197 39 3 0 0 sshd [ 3295.644338] [ 2055] 0 2055 82529 47367 123 5 0 0 syz-fuzzer [ 3295.644348] [ 2105] 0 2105 17568 15 22 3 0 0 syz-executor5 [ 3295.644361] [ 2110] 0 2110 17568 16 22 3 0 0 syz-executor4 [ 3295.644371] [ 2111] 0 2111 17567 8220 23 4 0 0 syz-executor5 [ 3295.644382] [ 2113] 0 2113 17567 8221 23 4 0 0 syz-executor4 [ 3295.644450] [ 4394] 0 4394 17600 8197 24 3 0 1000 syz-executor4 [ 3295.644460] [ 4399] 0 4399 17633 8199 24 3 0 1000 syz-executor4 [ 3295.644474] [ 4544] 0 4544 17600 8197 24 3 0 1000 syz-executor4 [ 3295.644484] [ 4547] 0 4547 17633 8199 24 3 0 1000 syz-executor4 [ 3295.644505] [ 4972] 0 4972 17600 8197 24 3 0 1000 syz-executor4 [ 3295.644515] [ 4977] 0 4977 17633 8199 24 3 0 1000 syz-executor4 [ 3295.644537] [ 5611] 0 5611 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644547] [ 5619] 0 5619 17633 8201 24 3 0 1000 syz-executor4 [ 3295.644557] [ 7478] 0 7478 17600 8200 25 3 0 1000 syz-executor4 [ 3295.644567] [ 7504] 0 7504 17600 8200 25 3 0 1000 syz-executor4 [ 3295.644580] [ 7967] 0 7967 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644590] [ 7975] 0 7975 17633 8202 25 3 0 1000 syz-executor4 [ 3295.644609] [ 9273] 0 9273 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644620] [ 9298] 0 9298 17600 8200 24 3 0 1000 syz-executor5 [ 3295.644630] [ 9615] 0 9615 17600 8201 24 3 0 1000 syz-executor4 [ 3295.644647] [10401] 0 10401 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644677] [10403] 0 10403 17633 8201 24 3 0 1000 syz-executor4 [ 3295.644687] [10421] 0 10421 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644694] [10729] 0 10729 17600 8191 23 3 0 1000 syz-executor5 [ 3295.644702] [10788] 0 10788 17633 8202 24 3 0 1000 syz-executor5 [ 3295.644723] [12147] 0 12147 17633 8233 25 4 0 4 syz-executor4 [ 3295.644746] [13482] 0 13482 17600 8190 23 3 0 1000 syz-executor4 [ 3295.644767] [14369] 0 14369 17600 8199 24 3 0 1000 syz-executor4 [ 3295.644777] [14379] 0 14379 17633 8202 24 3 0 1000 syz-executor4 [ 3295.644789] [16305] 0 16305 17633 8201 24 3 0 1000 syz-executor4 [ 3295.644830] [17522] 0 17522 17600 8200 24 3 0 1000 syz-executor5 [ 3295.644874] [18154] 0 18154 17600 8200 24 3 0 1000 syz-executor5 [ 3295.644895] [18411] 0 18411 17600 8200 24 3 0 1000 syz-executor5 [ 3295.644905] [18436] 0 18436 17666 8204 24 3 0 1000 syz-executor5 [ 3295.645012] [20421] 0 20421 17600 8200 24 3 0 1000 syz-executor5 [ 3295.645022] [20465] 0 20465 17666 8204 24 3 0 1000 syz-executor5 [ 3295.645046] [22000] 0 22000 17600 8200 24 3 0 1000 syz-executor5 [ 3295.645058] [22028] 0 22028 17600 8200 24 3 0 1000 syz-executor5 [ 3295.645068] [22060] 0 22060 17600 8200 24 3 0 1000 syz-executor5 [ 3295.645083] [22880] 0 22880 17633 8201 24 3 0 1000 syz-executor4 [ 3295.645098] [25246] 0 25246 17600 8198 23 3 0 1000 syz-executor4 [ 3295.645108] [25266] 0 25266 17633 8203 25 3 0 1000 syz-executor4 [ 3295.645128] [26827] 0 26827 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645138] [26850] 0 26850 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645148] [26869] 0 26869 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645171] [28065] 0 28065 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645181] [28123] 0 28123 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645192] [28143] 0 28143 17633 8202 24 3 0 1000 syz-executor5 [ 3295.645207] [28765] 0 28765 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645223] [29295] 0 29295 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645238] [29525] 0 29525 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645248] [29626] 0 29626 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645292] [30679] 0 30679 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645308] [30819] 0 30819 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645326] [30945] 0 30945 17600 8191 23 3 0 1000 syz-executor5 [ 3295.645345] [31140] 0 31140 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645355] [31143] 0 31143 17600 8199 24 3 0 1000 syz-executor4 [ 3295.645370] [31277] 0 31277 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645380] [31279] 0 31279 17633 8201 24 3 0 1000 syz-executor4 [ 3295.645390] [31290] 0 31290 17600 8200 24 3 0 1000 syz-executor5 [ 3295.645404] [31465] 0 31465 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645419] [31474] 0 31474 17633 8201 24 3 0 1000 syz-executor4 [ 3295.645430] [31535] 0 31535 17600 8190 23 3 0 1000 syz-executor4 [ 3295.645440] [31536] 0 31536 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655492] [31689] 0 31689 17600 8190 23 3 0 1000 syz-executor4 [ 3295.655503] [31691] 0 31691 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655525] [31985] 0 31985 17600 8190 23 3 0 1000 syz-executor4 [ 3295.655535] [31986] 0 31986 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655551] [32154] 0 32154 17600 8190 23 3 0 1000 syz-executor4 [ 3295.655561] [32188] 0 32188 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655602] [ 1150] 0 1150 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655631] [ 2153] 0 2153 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655671] [ 3502] 0 3502 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655681] [ 3565] 0 3565 17666 8203 24 3 0 1000 syz-executor4 [ 3295.655692] [ 3715] 0 3715 17600 8200 24 3 0 1000 syz-executor5 [ 3295.655704] [ 3832] 0 3832 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655715] [ 4094] 0 4094 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655726] [ 4403] 0 4403 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655737] [ 4479] 0 4479 17600 8200 25 3 0 1000 syz-executor4 [ 3295.655754] [ 4937] 0 4937 17600 8200 24 3 0 1000 syz-executor5 [ 3295.655764] [ 4953] 0 4953 17600 8200 24 3 0 1000 syz-executor5 [ 3295.655776] [ 5060] 0 5060 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655793] [ 6851] 0 6851 17600 8200 24 3 0 1000 syz-executor5 [ 3295.655804] [ 6853] 0 6853 17633 8202 24 3 0 1000 syz-executor5 [ 3295.655816] [ 7116] 0 7116 17600 8199 23 3 0 1000 syz-executor5 [ 3295.655840] [ 8641] 0 8641 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655850] [ 8700] 0 8700 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655861] [ 8748] 0 8748 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655871] [ 8793] 0 8793 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655882] [ 8831] 0 8831 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655892] [ 8889] 0 8889 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655902] [ 8917] 0 8917 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655912] [ 9011] 0 9011 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655922] [ 9068] 0 9068 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655932] [ 9116] 0 9116 17633 8201 24 3 0 1000 syz-executor4 [ 3295.655942] [ 9150] 0 9150 17600 8199 24 3 0 1000 syz-executor4 [ 3295.655958] [ 9180] 0 9180 17633 8201 24 3 0 1000 syz-executor4 [ 3295.656010] [ 9212] 0 9212 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656020] [ 9238] 0 9238 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656028] [ 9278] 0 9278 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656035] [ 9301] 0 9301 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656043] [ 9332] 0 9332 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656051] [ 9359] 0 9359 17633 8201 24 3 0 1000 syz-executor4 [ 3295.656059] [ 9395] 0 9395 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656067] [ 9437] 0 9437 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656075] [ 9458] 0 9458 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656083] [ 9484] 0 9484 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656091] [ 9545] 0 9545 17633 8201 24 3 0 1000 syz-executor4 [ 3295.656099] [ 9580] 0 9580 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656110] [ 9659] 0 9659 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656120] [ 9699] 0 9699 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656130] [ 9752] 0 9752 17633 8201 24 3 0 1000 syz-executor4 [ 3295.656140] [ 9779] 0 9779 17600 8199 24 3 0 1000 syz-executor4 [ 3295.656150] [ 9807] 0 9807 17633 8201 24 3 0 1000 syz-executor4 [ 3295.656171] [12972] 0 12972 17699 8239 25 4 0 4 syz-executor4 [ 3295.656181] [12976] 0 12976 17699 8239 25 4 0 4 syz-executor4 [ 3295.656195] [13640] 0 13640 17633 8194 23 3 0 1000 syz-executor4 [ 3295.656205] [13655] 0 13655 17666 8205 24 3 0 1000 syz-executor4 [ 3295.656217] [17239] 0 17239 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656229] [17295] 0 17295 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656245] [19841] 0 19841 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656255] [19846] 0 19846 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656270] [21691] 0 21691 17633 8203 24 3 0 1000 syz-executor4 [ 3295.656280] [21709] 0 21709 17666 8238 27 4 0 4 syz-executor5 [ 3295.656291] [22681] 0 22681 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656302] [23533] 0 23533 17600 8200 23 3 0 1000 syz-executor4 [ 3295.656312] [23588] 0 23588 17633 8202 23 3 0 1000 syz-executor4 [ 3295.656326] [25473] 0 25473 17600 8199 23 3 0 1000 syz-executor5 [ 3295.656337] [25537] 0 25537 17600 8199 23 3 0 1000 syz-executor5 [ 3295.656348] [26058] 0 26058 17600 8199 23 3 0 1000 syz-executor5 [ 3295.656358] [26060] 0 26060 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656369] [26781] 0 26781 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656386] [28807] 0 28807 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656397] [28850] 0 28850 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656409] [29997] 0 29997 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656430] [31851] 0 31851 17600 8200 23 3 0 1000 syz-executor4 [ 3295.656440] [31854] 0 31854 17633 8203 24 3 0 1000 syz-executor4 [ 3295.656455] [ 1730] 0 1730 17633 8194 24 3 0 1000 syz-executor5 [ 3295.656466] [ 1763] 0 1763 17633 8205 24 3 0 1000 syz-executor4 [ 3295.656478] [ 2092] 0 2092 17633 8202 23 3 0 1000 syz-executor4 [ 3295.656488] [ 2440] 0 2440 17600 8203 25 3 0 1000 syz-executor5 [ 3295.656501] [ 3078] 0 3078 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656512] [ 3126] 0 3126 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656531] [ 8536] 0 8536 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656541] [ 8538] 0 8538 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656568] [12146] 0 12146 17633 8203 24 3 0 1000 syz-executor4 [ 3295.656579] [12944] 0 12944 5529 313 14 3 0 -1000 udevd [ 3295.656589] [13255] 0 13255 17600 8201 24 3 0 1000 syz-executor4 [ 3295.656603] [15661] 0 15661 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656614] [15667] 0 15667 17633 8202 24 3 0 1000 syz-executor5 [ 3295.656627] [16678] 0 16678 17600 8192 23 3 0 1000 syz-executor4 [ 3295.656648] [19397] 0 19397 17600 8201 24 3 0 1000 syz-executor4 [ 3295.656677] [19931] 0 19931 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656690] [21017] 0 21017 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656702] [21395] 0 21395 17600 8201 24 3 0 1000 syz-executor4 [ 3295.656712] [21397] 0 21397 17633 8203 24 3 0 1000 syz-executor4 [ 3295.656729] [23301] 0 23301 5364 169 14 3 0 -1000 udevd [ 3295.656741] [25104] 0 25104 17600 8205 25 3 0 1000 syz-executor4 [ 3295.656752] [25117] 0 25117 17630 8204 25 3 0 1000 syz-executor4 [ 3295.656764] [25367] 0 25367 17600 8199 23 3 0 1000 syz-executor5 [ 3295.656775] [25420] 0 25420 17600 8191 23 3 0 1000 syz-executor5 [ 3295.656785] [25421] 0 25421 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656796] [25424] 0 25424 17600 8201 24 3 0 1000 syz-executor5 [ 3295.656807] [25426] 0 25426 17633 8203 24 3 0 1000 syz-executor5 [ 3295.656827] [27563] 0 27563 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656837] [27573] 0 27573 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656849] [27791] 0 27791 17600 8199 23 3 0 1000 syz-executor5 [ 3295.656880] [ 4733] 0 4733 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656892] [ 4782] 0 4782 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656903] [ 5005] 0 5005 17600 8200 24 3 0 1000 syz-executor5 [ 3295.656913] [ 5007] 0 5007 17633 8203 25 3 0 1000 syz-executor5 [ 3295.656927] [ 6330] 0 6290 17666 4 26 4 0 1000 syz-executor2 [ 3295.656938] [ 6322] 0 6320 17831 2 26 4 0 1000 syz-executor0 [ 3295.656953] [ 6403] 0 6403 2666 33 10 3 0 0 init [ 3295.656963] [ 6404] 0 6404 2666 33 10 3 0 0 init [ 3295.656974] [ 6405] 0 6405 2666 33 10 3 0 0 init [ 3295.656984] [ 6406] 0 6406 2666 33 10 3 0 0 init [ 3295.656994] [ 6408] 0 6408 2666 33 10 3 0 0 init [ 3295.657004] [ 6409] 0 6409 2666 33 10 3 0 0 init [ 3295.657014] Out of memory: Kill process 25104 (syz-executor4) score 1004 or sacrifice child [ 3295.657038] Killed process 25104 (syz-executor4) total-vm:70400kB, anon-rss:180kB, file-rss:32640kB, shmem-rss:0kB [ 3296.085554] lowmemorykiller: Killing 'syz-executor4' (13655) (tgid 13655), adj 1000, [ 3296.085554] to free 32820kB on behalf of 'syz-executor2' (6330) because [ 3296.085554] cache 1176kB is below limit 6144kB for oom_score_adj 0 [ 3296.085554] Free memory is -13240kB above reserved [ 3296.093424] Out of memory: Kill process 1763 (syz-executor4) score 1004 or sacrifice child [ 3296.093454] Killed process 1763 (syz-executor4) total-vm:70532kB, anon-rss:180kB, file-rss:32640kB, shmem-rss:0kB [ 3296.188588] Out of memory: Kill process 25117 (syz-executor4) score 1004 or sacrifice child [ 3296.188632] Killed process 25117 (syz-executor4) total-vm:70520kB, anon-rss:176kB, file-rss:32640kB, shmem-rss:0kB [ 3296.331851] INFO: task syz-executor0:3320 blocked for more than 140 seconds. [ 3296.331861] Not tainted 4.9.141+ #1 [ 3296.331863] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3296.331882] syz-executor0 D28552 3320 2114 0x80000002 [ 3296.331895] ffff8801c78bc740 0000000000000000 ffff8801c79e3700 ffff8801a98a8000 [ 3296.331905] ffff8801db721018 ffff880199d17510 ffffffff828075c2 ffffffff83c27940 [ 3296.331915] 0000000041b58ab3 ffffffff82e33920 00ffffff83c7a7d0 ffff8801db7218f0 [ 3296.331917] Call Trace: [ 3296.331932] [] ? __schedule+0x662/0x1b10 [ 3296.331940] [] schedule+0x7f/0x1b0 [ 3296.331948] [] schedule_timeout+0x735/0xe20 [ 3296.331957] [] ? update_stack_state.constprop.2+0x7c/0x170 [ 3296.331964] [] ? usleep_range+0x140/0x140 [ 3296.331973] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3296.331980] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 3296.331988] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 3296.331996] [] wait_for_common+0x3ef/0x5d0 [ 3296.332004] [] ? out_of_line_wait_on_atomic_t+0x1e0/0x1e0 [ 3296.332012] [] ? wake_up_q+0xe0/0xe0 [ 3296.332020] [] ? lockdep_init_map+0x105/0x4f0 [ 3296.332028] [] wait_for_completion+0x18/0x20 [ 3296.332034] [] __wait_rcu_gp+0x137/0x1b0 [ 3296.332043] [] synchronize_rcu.part.55+0xfa/0x110 [ 3296.332050] [] ? rcu_pm_notify+0xc0/0xc0 [ 3296.332057] [] ? __call_rcu.constprop.61+0x910/0x910 [ 3296.332064] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3296.332072] [] ? trace_raw_output_rcu_utilization+0x150/0x150 [ 3296.332080] [] synchronize_rcu+0x27/0x90 [ 3296.332089] [] namespace_unlock+0xfe/0x120 [ 3296.332096] [] ? may_umount+0xb0/0xb0 [ 3296.332104] [] drop_collected_mounts+0x8b/0xa0 [ 3296.332110] [] ? put_mnt_ns+0x47/0x60 [ 3296.332116] [] put_mnt_ns+0x47/0x60 [ 3296.332125] [] free_nsproxy+0x44/0x1d0 [ 3296.332133] [] switch_task_namespaces+0x98/0xb0 [ 3296.332141] [] exit_task_namespaces+0x17/0x20 [ 3296.332148] [] do_exit+0x788/0x2a50 [ 3296.332157] [] ? __sigqueue_free.part.2+0x51/0x60 [ 3296.332164] [] ? release_task.part.4+0x14b0/0x14b0 [ 3296.332172] [] ? __sigqueue_free.part.2+0x51/0x60 [ 3296.332180] [] ? __dequeue_signal+0x79/0x5f0 [ 3296.332186] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3296.332194] [] ? recalc_sigpending+0x72/0x90 [ 3296.332202] [] ? dequeue_signal+0xc4/0x4b0 [ 3296.332210] [] ? check_preemption_disabled+0x3b/0x200 [ 3296.332217] [] do_group_exit+0x111/0x300 [ 3296.332224] [] get_signal+0x4e1/0x1460 [ 3296.332233] [] do_signal+0x95/0x1b00 [ 3296.332241] [] ? handle_mm_fault+0x54b/0x2350 [ 3296.332249] [] ? setup_sigcontext+0x7d0/0x7d0 [ 3296.332256] [] ? vm_insert_page+0x6f0/0x6f0 [ 3296.332263] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3296.332269] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 3296.332279] [] ? do_futex+0x1a30/0x1a30 [ 3296.332286] [] ? up_read+0x1a/0x40 [ 3296.332296] [] ? exit_to_usermode_loop+0xbe/0x150 [ 3296.332304] [] exit_to_usermode_loop+0x10e/0x150 [ 3296.332310] [] do_syscall_64+0x3e2/0x550 [ 3296.332318] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 3296.332321] [ 3296.332321] Showing all locks held in the system: [ 3296.332327] 2 locks held by khungtaskd/24: [ 3296.332342] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 3296.332356] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 3296.332363] 1 lock held by rsyslogd/1898: [ 3296.332376] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 3296.332380] 2 locks held by getty/2025: [ 3296.332393] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 3296.332408] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 3296.332413] 1 lock held by syz-executor0/2617: [ 3296.332425] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332429] 1 lock held by syz-executor0/2653: [ 3296.332441] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332444] 1 lock held by syz-executor0/2675: [ 3296.332456] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332460] 1 lock held by syz-executor0/2701: [ 3296.332472] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332476] 1 lock held by syz-executor0/2747: [ 3296.332488] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332491] 1 lock held by syz-executor0/2769: [ 3296.332504] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332507] 1 lock held by syz-executor0/2798: [ 3296.332519] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332523] 1 lock held by syz-executor0/2831: [ 3296.332535] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332538] 1 lock held by syz-executor0/2847: [ 3296.332551] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332554] 1 lock held by syz-executor0/2925: [ 3296.332566] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332570] 1 lock held by syz-executor1/2982: [ 3296.332582] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332585] 1 lock held by syz-executor0/2981: [ 3296.332615] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332619] 1 lock held by syz-executor1/2998: [ 3296.332631] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332635] 1 lock held by syz-executor0/3048: [ 3296.332647] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332651] 1 lock held by syz-executor0/3111: [ 3296.332663] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332666] 1 lock held by syz-executor4/3252: [ 3296.332678] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332682] 1 lock held by syz-executor4/3273: [ 3296.332694] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332697] 1 lock held by syz-executor4/3309: [ 3296.332710] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332713] 1 lock held by syz-executor4/3333: [ 3296.332725] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332729] 1 lock held by syz-executor4/3375: [ 3296.332741] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332745] 1 lock held by syz-executor4/3540: [ 3296.332757] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332761] 2 locks held by syz-executor0/3554: [ 3296.332778] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.332792] #1: (sk_lock-AF_PACKET){+.+.+.}, at: [] packet_release+0x4ad/0xb70 [ 3296.332796] 1 lock held by syz-executor4/3570: [ 3296.332808] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332811] 1 lock held by syz-executor4/3601: [ 3296.332823] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332827] 1 lock held by syz-executor4/3660: [ 3296.332839] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332843] 1 lock held by syz-executor4/3684: [ 3296.332861] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332864] 1 lock held by syz-executor4/3859: [ 3296.332876] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332880] 1 lock held by syz-executor4/3950: [ 3296.332892] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332896] 1 lock held by syz-executor4/3986: [ 3296.332908] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332912] 1 lock held by syz-executor4/4025: [ 3296.332923] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332927] 1 lock held by syz-executor4/4053: [ 3296.332939] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332943] 1 lock held by syz-executor4/4120: [ 3296.332955] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332958] 1 lock held by syz-executor4/4182: [ 3296.332970] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332974] 1 lock held by syz-executor4/4203: [ 3296.332986] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.332990] 1 lock held by syz-executor4/4264: [ 3296.333002] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333006] 1 lock held by syz-executor4/4293: [ 3296.333017] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333021] 1 lock held by syz-executor4/4351: [ 3296.333033] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333037] 1 lock held by syz-executor4/4374: [ 3296.333049] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333053] 1 lock held by syz-executor4/4431: [ 3296.333065] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333069] 1 lock held by syz-executor0/4432: [ 3296.333081] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333085] 1 lock held by syz-executor4/4451: [ 3296.333096] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333100] 1 lock held by syz-executor4/4480: [ 3296.333112] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333116] 1 lock held by syz-executor4/4677: [ 3296.333128] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333132] 1 lock held by syz-executor4/4718: [ 3296.333143] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333147] 1 lock held by syz-executor1/4744: [ 3296.333159] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333163] 1 lock held by syz-executor4/4771: [ 3296.333175] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333178] 1 lock held by syz-executor4/4791: [ 3296.333190] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333194] 1 lock held by syz-executor4/4820: [ 3296.333206] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333210] 1 lock held by syz-executor4/4843: [ 3296.333221] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333225] 1 lock held by syz-executor4/4881: [ 3296.333237] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333241] 1 lock held by syz-executor4/5177: [ 3296.333253] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333257] 1 lock held by syz-executor4/5209: [ 3296.333269] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333273] 1 lock held by syz-executor4/5266: [ 3296.333285] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333288] 1 lock held by syz-executor4/5344: [ 3296.333301] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333304] 1 lock held by syz-executor4/5414: [ 3296.333316] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333320] 1 lock held by syz-executor4/5437: [ 3296.333332] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333336] 1 lock held by syz-executor4/5470: [ 3296.333348] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333352] 1 lock held by syz-executor4/5489: [ 3296.333364] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333369] 1 lock held by syz-executor1/11082: [ 3296.333385] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333388] 2 locks held by syz-executor1/11401: [ 3296.333403] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333416] #1: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333420] 1 lock held by syz-executor1/11871: [ 3296.333431] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333437] 1 lock held by syz-executor4/16355: [ 3296.333449] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333453] 1 lock held by syz-executor2/16487: [ 3296.333467] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333471] 2 locks held by syz-executor5/16854: [ 3296.333485] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333499] #1: (rcu_preempt_state.exp_mutex){+.+...}, at: [] _synchronize_rcu_expedited+0x339/0x840 [ 3296.333512] 1 lock held by syz-executor0/21491: [ 3296.333527] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333531] 1 lock held by syz-executor5/22016: [ 3296.333542] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333546] 1 lock held by syz-executor5/22079: [ 3296.333558] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333562] 1 lock held by syz-executor1/24312: [ 3296.333577] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333582] 1 lock held by syz-executor2/27846: [ 3296.333614] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333628] 1 lock held by syz-executor4/2755: [ 3296.333643] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333648] 1 lock held by syz-executor4/5333: [ 3296.333660] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333666] 1 lock held by syz-executor2/10009: [ 3296.333681] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333684] 1 lock held by syz-executor2/10015: [ 3296.333699] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333703] 1 lock held by syz-executor0/11636: [ 3296.333717] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333721] 1 lock held by syz-executor2/11713: [ 3296.333735] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333740] 1 lock held by syz-executor1/19404: [ 3296.333752] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333756] 2 locks held by kworker/0:3/20961: [ 3296.333768] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.333781] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.333785] 1 lock held by syz-executor2/27371: [ 3296.333797] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333801] 1 lock held by syz-executor0/29653: [ 3296.333816] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333819] 2 locks held by kworker/1:3/29887: [ 3296.333831] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.333844] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.333847] 1 lock held by syz-executor5/30027: [ 3296.333865] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.333869] 1 lock held by syz-executor4/30504: [ 3296.333880] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333884] 1 lock held by syz-executor0/31484: [ 3296.333898] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333904] 2 locks held by syz-executor0/5738: [ 3296.333918] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.333930] #1: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.333933] 2 locks held by kworker/0:1/6190: [ 3296.333945] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.333957] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.333962] 2 locks held by kworker/0:5/10416: [ 3296.333974] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.333986] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.333991] 1 lock held by syz-executor0/15199: [ 3296.334003] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.334007] 1 lock held by syz-executor2/15704: [ 3296.334021] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334025] 2 locks held by kworker/1:0/16643: [ 3296.334037] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334049] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334052] 2 locks held by kworker/1:2/16645: [ 3296.334064] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334076] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334080] 1 lock held by syz-executor2/18301: [ 3296.334092] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.334097] 4 locks held by kworker/u4:19/19530: [ 3296.334109] #0: ("%s""netns"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334121] #1: (net_cleanup_work){+.+.+.}, at: [] process_one_work+0x774/0x15f0 [ 3296.334135] #2: (net_mutex){+.+.+.}, at: [] cleanup_net+0x13f/0x8b0 [ 3296.334146] #3: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334151] 1 lock held by syz-executor2/20267: [ 3296.334166] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334170] 1 lock held by syz-executor2/20274: [ 3296.334185] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334189] 1 lock held by syz-executor3/22597: [ 3296.334204] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334208] 2 locks held by kworker/0:0/23675: [ 3296.334220] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334232] #1: ((&rew.rew_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334236] 2 locks held by kworker/0:2/24365: [ 3296.334248] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334260] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334264] 1 lock held by syz-executor1/24659: [ 3296.334275] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334280] 2 locks held by syz-executor3/26043: [ 3296.334293] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334307] #1: (sk_lock-AF_PACKET){+.+.+.}, at: [] packet_release+0x4ad/0xb70 [ 3296.334310] 2 locks held by kworker/1:1/26123: [ 3296.334322] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334335] #1: (binder_deferred_work){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334339] 2 locks held by kworker/0:4/27483: [ 3296.334351] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334363] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334367] 2 locks held by syz-executor3/27841: [ 3296.334382] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334395] #1: (rcu_preempt_state.exp_mutex){+.+...}, at: [] _synchronize_rcu_expedited+0x3a7/0x840 [ 3296.334399] 1 lock held by syz-executor3/27857: [ 3296.334414] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334418] 2 locks held by kworker/1:4/30297: [ 3296.334430] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334442] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334446] 1 lock held by syz-executor1/2881: [ 3296.334458] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.334462] 1 lock held by syz-executor1/2913: [ 3296.334474] #0: (tty_mutex){+.+.+.}, at: [] tty_release+0xb79/0xe90 [ 3296.334479] 1 lock held by syz-executor4/5935: [ 3296.334493] #0: (&sb->s_type->i_mutex_key#8){+.+.+.}, at: [] __sock_release+0x8b/0x260 [ 3296.334497] 1 lock held by syz-executor0/6322: [ 3296.334508] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334512] 1 lock held by syz-executor0/6344: [ 3296.334524] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334527] 1 lock held by syz-executor0/6357: [ 3296.334539] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334543] 2 locks held by kworker/1:5/6383: [ 3296.334555] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334567] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334571] 2 locks held by kworker/0:6/6384: [ 3296.334583] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334617] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334622] 2 locks held by kworker/1:6/6385: [ 3296.334633] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334645] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334649] 2 locks held by kworker/1:7/6387: [ 3296.334661] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334673] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334677] 2 locks held by kworker/0:7/6392: [ 3296.334689] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334701] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334704] 2 locks held by kworker/0:8/6393: [ 3296.334716] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334728] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334732] 2 locks held by kworker/0:9/6395: [ 3296.334744] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334756] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334760] 2 locks held by kworker/0:10/6396: [ 3296.334772] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334784] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334788] 2 locks held by kworker/1:8/6401: [ 3296.334800] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334812] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334816] 3 locks held by kworker/1:9/6402: [ 3296.334828] #0: ("%s"("ipv6_addrconf")){.+.+..}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334841] #1: ((addr_chk_work).work){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334858] #2: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 3296.334862] 1 lock held by init/6403: [ 3296.334874] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334878] 1 lock held by init/6404: [ 3296.334890] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334893] 1 lock held by init/6405: [ 3296.334905] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334909] 1 lock held by init/6406: [ 3296.334921] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334925] 2 locks held by kworker/1:10/6407: [ 3296.334936] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.334949] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.334952] 1 lock held by init/6408: [ 3296.334964] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334968] 1 lock held by init/6409: [ 3296.334980] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 3296.334984] 2 locks held by kworker/0:11/6413: [ 3296.334996] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335008] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335012] 2 locks held by kworker/0:12/6414: [ 3296.335023] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335035] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335039] 2 locks held by kworker/0:13/6415: [ 3296.335051] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335063] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335067] 2 locks held by kworker/1:11/6416: [ 3296.335079] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335091] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335095] 2 locks held by kworker/1:12/6417: [ 3296.335107] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335119] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335123] 2 locks held by kworker/1:13/6419: [ 3296.335135] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335147] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335150] 2 locks held by kworker/1:14/6420: [ 3296.335162] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335174] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335178] 2 locks held by kworker/0:14/6421: [ 3296.335190] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335202] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335206] 2 locks held by kworker/0:15/6422: [ 3296.335218] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335230] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335233] 2 locks held by kworker/0:16/6424: [ 3296.335245] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335257] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335261] 2 locks held by kworker/0:17/6425: [ 3296.335273] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335285] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335289] 2 locks held by kworker/0:18/6426: [ 3296.335301] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335313] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335316] 2 locks held by kworker/0:19/6427: [ 3296.335328] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335340] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335344] 2 locks held by kworker/0:20/6428: [ 3296.335355] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335367] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335371] 2 locks held by kworker/0:21/6429: [ 3296.335383] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335395] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335399] 2 locks held by kworker/0:22/6430: [ 3296.335411] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335423] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335427] 2 locks held by kworker/0:23/6431: [ 3296.335439] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335456] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335481] 2 locks held by kworker/0:24/6432: [ 3296.335493] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335506] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335509] 2 locks held by kworker/0:25/6433: [ 3296.335521] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335533] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335537] 2 locks held by kworker/0:26/6434: [ 3296.335549] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335561] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335565] 2 locks held by kworker/0:27/6436: [ 3296.335577] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335589] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335611] 2 locks held by kworker/1:15/6437: [ 3296.335624] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335636] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335640] 2 locks held by kworker/1:16/6438: [ 3296.335651] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335663] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335667] 2 locks held by kworker/1:17/6439: [ 3296.335679] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335692] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335696] 2 locks held by kworker/1:19/6441: [ 3296.335708] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335720] #1: ((&map->work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335724] 2 locks held by kworker/0:28/6442: [ 3296.335736] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335748] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335752] 2 locks held by kworker/0:30/6444: [ 3296.335764] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 3296.335776] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 3296.335777] [ 3296.335779] ============================================= [ 3296.335779] [ 3296.335808] NMI backtrace for cpu 0 [ 3296.335815] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 3296.335826] ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000000 [ 3296.335836] 0000000000000000 0000000000000001 ffffffff810983b0 ffff8801d9907d40 [ 3296.335845] ffffffff81b4df89 0000000000000000 0000000000000000 0000000000000002 [ 3296.335846] Call Trace: [ 3296.335864] [] dump_stack+0xc1/0x128 [ 3296.335873] [] ? irq_force_complete_move+0x330/0x330 [ 3296.335881] [] nmi_cpu_backtrace.cold.0+0x48/0x87 [ 3296.335889] [] ? irq_force_complete_move+0x330/0x330 [ 3296.335897] [] nmi_trigger_cpumask_backtrace+0x12c/0x151 [ 3296.335905] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 3296.335912] [] watchdog+0x6ad/0xa20 [ 3296.335918] [] ? watchdog+0x11c/0xa20 [ 3296.335926] [] kthread+0x26d/0x300 [ 3296.335934] [] ? reset_hung_task_detector+0x20/0x20 [ 3296.335941] [] ? kthread_park+0xa0/0xa0 [ 3296.335948] [] ? __switch_to_asm+0x34/0x70 [ 3296.335955] [] ? kthread_park+0xa0/0xa0 [ 3296.335962] [] ? kthread_park+0xa0/0xa0 [ 3296.335968] [] ret_from_fork+0x5c/0x70 [ 3296.335974] Sending NMI from CPU 0 to CPUs 1: [ 3296.336343] NMI backtrace for cpu 1 [ 3296.336346] CPU: 1 PID: 33 Comm: kswapd0 Not tainted 4.9.141+ #1 [ 3296.336348] task: ffff8801d99417c0 task.stack: ffff8801d8418000 [ 3296.336356] RIP: 0010:[] c [] mark_lock+0x0/0x1290 [ 3296.336359] RSP: 0018:ffff8801d841f648 EFLAGS: 00000046 [ 3296.336361] RAX: 0000000000000000 RBX: ffff8801d99420e8 RCX: ffff8801d9942109 [ 3296.336364] RDX: 0000000000000008 RSI: ffff8801d99420e8 RDI: ffff8801d99417c0 [ 3296.336366] RBP: ffff8801d841f800 R08: ffff8801d9942108 R09: 0000000000000001 [ 3296.336369] R10: ffff8801d99417c0 R11: 1ffff1003b32841c R12: 0000000000000075 [ 3296.336372] R13: 0000000000000003 R14: 0000000000000000 R15: ffff8801d994210a [ 3296.336374] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 3296.336376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3296.336379] CR2: 0000000000bd941a CR3: 00000001cff6a000 CR4: 00000000001606b0 [ 3296.336381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3296.336384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 3296.336385] Stack: [ 3296.336388] ffffffff812079e2c ffff8801d994205cc 0000000000000000c ffff8801d841f820c [ 3296.336391] ffffffff81207a04c ffff8801d9942060c ffff8801d99420e0c ffffffff83c73d80c [ 3296.336394] ffff8801d9942098c 00000000000065b8c ffff8801d99420d8c ffff8801d9942060c [ 3296.336395] Call Trace: [ 3296.336397] [] ? __lock_acquire+0x632/0x4a10 [ 3296.336400] [] ? __lock_acquire+0x654/0x4a10 [ 3296.336402] [] ? trace_hardirqs_on+0x10/0x10 [ 3296.336404] [] ? trace_hardirqs_on+0x10/0x10 [ 3296.336407] [] ? trace_hardirqs_on+0x10/0x10 [ 3296.336409] [] lock_acquire+0x130/0x3e0 [ 3296.336411] [] ? find_lock_task_mm+0xf1/0x270 [ 3296.336413] [] ? check_preemption_disabled+0x3b/0x200 [ 3296.336416] [] ? wake_oom_reaper+0xf0/0xf0 [ 3296.336418] [] _raw_spin_lock+0x36/0x50 [ 3296.336420] [] ? find_lock_task_mm+0xf1/0x270 [ 3296.336422] [] find_lock_task_mm+0xf1/0x270 [ 3296.336425] [] ? wake_oom_reaper+0xf0/0xf0 [ 3296.336427] [] lowmem_scan+0x34f/0xaf0 [ 3296.336429] [] ? lowmem_scan+0x24e/0xaf0 [ 3296.336431] [] ? check_preemption_disabled+0x3b/0x200 [ 3296.336434] [] shrink_slab.part.8+0x3c6/0xa00 [ 3296.336436] [] ? trace_hardirqs_on+0x10/0x10 [ 3296.336438] [] ? unregister_shrinker+0x230/0x230 [ 3296.336440] [] shrink_node+0x1ed/0x740 [ 3296.336443] [] ? shrink_node_memcg.isra.19+0x12e0/0x12e0 [ 3296.336445] [] kswapd+0x7e9/0x13b0 [ 3296.336447] [] ? try_to_free_pages+0xb80/0xb80 [ 3296.336450] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 3296.336452] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 3296.336455] [] ? autoremove_wake_function.part.0+0x130/0x130 [ 3296.336457] [] ? __switch_to_asm+0x40/0x70 [ 3296.336460] [] ? __kthread_parkme+0x175/0x240 [ 3296.336462] [] kthread+0x26d/0x300 [ 3296.336464] [] ? try_to_free_pages+0xb80/0xb80 [ 3296.336466] [] ? kthread_park+0xa0/0xa0 [ 3296.336468] [] ? __switch_to_asm+0x34/0x70 [ 3296.336471] [] ? kthread_park+0xa0/0xa0 [ 3296.336473] [] ? kthread_park+0xa0/0xa0 [ 3296.336475] [] ret_from_fork+0x5c/0x70 [ 3296.336483] Code: c17 cf3 c03 c03 c85 cc0 c0f c84 c01 ca9 c1f c00 c48 c83 cc4 c40 c31 cc0 c5b c41 c5c c41 c5d c41 c5e c41 c5f c5d cc3 c4c c89 cff ce8 cf6 cd5 c2e c00 ceb cd7 c0f c1f c40 c00 c<55> c4c c8d c46 c20 c89 cd1 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 ce5 c41 c [ 3296.336987] Kernel panic - not syncing: hung_task: blocked tasks [ 3296.336993] CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 3296.337005] ffff8801d9907cc8 ffffffff81b42e79 ffffffff82a78560 00000000ffffffff [ 3296.337014] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d9907d88 [ 3296.337024] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 3296.337025] Call Trace: [ 3296.337035] [] dump_stack+0xc1/0x128 [ 3296.337042] [] panic+0x1bf/0x39f [ 3296.337049] [] ? add_taint.cold.5+0x16/0x16 [ 3296.337057] [] ? nmi_trigger_cpumask_backtrace+0x102/0x151 [ 3296.337064] [] watchdog+0x6be/0xa20 [ 3296.337071] [] ? watchdog+0x11c/0xa20 [ 3296.337079] [] kthread+0x26d/0x300 [ 3296.337086] [] ? reset_hung_task_detector+0x20/0x20 [ 3296.337092] [] ? kthread_park+0xa0/0xa0 [ 3296.337100] [] ? __switch_to_asm+0x34/0x70 [ 3296.337107] [] ? kthread_park+0xa0/0xa0 [ 3296.337114] [] ? kthread_park+0xa0/0xa0 [ 3296.337120] [] ret_from_fork+0x5c/0x70 [ 3296.337548] Kernel Offset: disabled