4250693da85974b5ef821edec3f8d3b8ffef977b9b1d14edc9d750e9ee2c84dd9e30ae4b55233c08d4127e1f774fcee96d40f3346c011807ddc4325b862fda81cef697d6e083d9fcd572f2a13635af0c4f63ca714ffd6aa797fee77310f6bea332e8be9a83ec9810137dc5ae661b01c2618dcea1dc27cb195734051e4f06d79c0987c0061a7920ec79f0e513699ffa572ede4601b680ed06980c952597345304d1bec264e5564abac8735cdb3274ba652e58738974aecbc88eb9f17f2ce7bee56d78974b33dcac64bef98fafbcf3756c0c7375d55d77ae95109301248378e811f0ced3f0cc2d45c30da2c1e4a3b0e95443dc53c5b2e9f5027fc458631f0e752b1c50935497b3f9bc4e666b59ee78e831818185863fc034b2c839373815b93b3cd28523982b331c8e40af4352c99c4a4088075537017b73ff8095d66023f02a40c3b24231dc470593307910b03d2270d3f91aebf866de83c46126f8de2cf4659fa982629d0efdc9bc40b316515672c679ddb704b801cc60aef74637f157405f2ca85448da232074574199373cc585d44d98e663bdff1a2dcde37fc28af7d7cd6d50f10daf54b7409bbcfde1216f2b7f863f1be5776d6c0930d9d86ca511c71922b947a60f40c059d647d4a503c97352e1b5da8df5c1f01b753e33df0fdc1dcb5078fc1864ce4a8f51f7059f588b8ceae0447480d5bcfd957d166ccdc539dd9f42f8eb4b390e590d5f018724db77fba5b6ef1debecae199e1a2d1b7a9962d6b78b5ffe2c8f994757985eea4963ce4b575c6c129f93afa0a3656edfa51c5f654a2cc4a5fabce34fa502516db53ee6820e7c0a278997d12242cd850e2a14ea2642b22363579451da9472478004bcd6ffac648e41fefdbb22eb9394909c047dda4f64aa8b035adc3ed535c07566ae402629cc6c9c88b5dc3c28511b73f4be6ba007a3442fbc4441d816033fd621f8bfa6e41dd01b635cacbf5ed79aa470f1182dceb26ffdb66864067c1dae9f87d3c1128a7ab088e883360cd9b00a4df2f409a1105c6875e1a86fe2dc9465244748afd775fa2ebefecee4bc51275e8d2b368cdf90bb9f07d9652b07b75ef07247ff3af442cd9a6b74c0e7d9229b19f30751c336e0132e87691ec95a7e5c13bccb368dd743c4fed5d38a0748dc672c600ecddbb65c482b40026cc0f564b10730c349cc49ba8d08176bada5d85224c7aad1d54c5cad2acd9e7c204acade9034f167188dd257c334a8e99755868d5cac7eb91a75113c7feab1d92931d7b12c43d7e366a1c81bd86cffc204d6503e55ca96d58a9f6a66ec7fafce64fce1cf59cb2c2432e0dc7300bd2f282323c49d782938b44ded25468d9f32b9725a767c9e8bb1f6c664dea7ac6a74b5b835c4b47364e590de13213e33cef8620ba4aa631b4a428ab87adeefa842cc33e0c39dafc01428ae3e1f7d44c6ec3b6e528525580e243faf9a610c65d0d7847e46d1353891375d1859c75316fc14417ab58040b06a70bef6d0c4151795edbc7d2b0fe4d0bc8ff3cba7545827bbc01739a2d59699d46dcbb89959c697a1bcab15bf6956737a1dd5f5fc266b8bb27853507a06b33853aceb8649d0f1139d48b88b2b3ae9e40bacae8acaef455db6c2603883deac1eec47f5e28765cc6ea991894589c9d43d200be9f442cbecf4df7e67bca6547b5290c380d5bc0dade771140846a0873fae5467f5410e58228f966415c479feb736e4f92df48b4d9989d4ce9e307495460a102f27b673a1b44251376dcf92f60af974e9cb94d0043deeabd057ae3e47ccfc7f8f3f01f658818133d8ff1074b9daa0ef9635216ee5039a14e14f981a12e4fcf3b29531c7c830bfd5cd8dece24d4e53e630be30d96b52cdc784fdc4b0c15af1bbb762b3ff71d472800bcf64ec0dec7836e1d63b7b7ec952567abee51e5e26bdf76299024578ea8136a8951140c621b463ec65d430f06939261eed133853284e5146b33c497fb0044124b2d75486b845f8c777e417a232095c8c95eb3fcbbb144b4c55c2be3dc2149ae993f5067f2d864550cf32c08b8679fcf7e914627fa7a0193a94552119bad8b50f9029916a65cfe245cf0ecfe1afe6c33f4dad19008b14e263b247699d89187486a8c7614c46724de8128e583bbc8daf51fa72a6e23560c30bbf56333b6b2a6d5b9ebcaa1f1626c7abb371e2d2cb823f62012334385652c9274b820e932b913a479bc1f3918e8288a4a85c95a56fdc294a834521a701c2b8ccc19c44fbaa859cc0e709685b24763bfd411b2dde607db44d3faf2889bdac8d5e90145bf8c3903e91e8106b43b734e23711336351deba58bb27dce376ffb2ecc105be9b8307664d6898a294790492bf103d84015f9746f2fda1dde6385675d4ec931f3970caeec974c637c0d5648f811705ef1b84d563d145ff535f5cf2a8a31a46cc592c1738f25047641b15b7fb4d05c0dd25132c57216d9abc637a4f717b90cf9afe153f66a92477d18cc61f785bd74539ad350c33aafdcb3291368a677e36dc555a44309c0b160da0c62134c52344e07c63e023dc3f75a23e43e9ce6b8ebdedc2ca046162e654277a21eb6f3a4bf71bd7cfa71dff60d87810563a9b9eb2af5b1cfd4ae8c0149619153c2ca076ab836092a181e95656f36e25513558a4057bff3773af5f9356b45db3680229ac43c280fef95f92d7718e2a03234f40aae77868d8fc9410b487e6a80a2932c9e5e3aaf2df2aed51cfeb4b2c4963ef6bbf4a22c33df6d6d11752c1628eebd2b18d57ab280f9e03c220688759e496e7935cf11a194a6805060b0c675740198011569409ef76bdc2653d56df6380b8436409410142095dd6186e7cd345ee421cbf4838f375e73d311e9cf33e0fb69c47da6ac4b19a03776f4aa61d3ef3d1b1bfbdcfb74e689de1e0be2c93f52b6f1f6ec24dffb89902951db9d8ebcf9e33a9a8b9b1b05eccbca37aeb25a13401417bad00519dfe3f847559c0918608a0da5d9dade887c53eb358bad797110e09bff8718c64826ad993cd0cac56b1f5af1945685c2050b8ede10a3f329ef657d791ecbf54f3d38f448e9125f0cc1f0d4f1e94b1d2c84f90d4fe7e6b713afe0b2bcab12bf481b2a44736dad473ee8fd25495a58865a7bd8c3df11b5754866491718a17a87e3eebe8c08307619301b25198c4284d1b7693024e7c9c47bf5fc634443bb61832fd1799c78bfac528b3a5ef82f8f9bcd623197f864369f41d0a6c1db12b2799929434cc12af57081fe810b976d08c01d65c81caa0b5884cd31cec1c91522ea36760eafe1ac1ca", 0x1000, 0x0, &(0x7f00000010c0)=@file={0xd9cb73154cfdcc4e, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000001200)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x101) perf_event_open(&(0x7f0000001180)={0x4, 0x70, 0x5, 0x20, 0x0, 0x2, 0x0, 0x8084, 0xbbfba01a68a8e37b, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe84d, 0x2, @perf_bp={&(0x7f0000001140)}, 0x20, 0x8, 0x1, 0xd, 0x8, 0x7, 0x2}, 0x0, 0xb, r7, 0x1) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000080)={0x0, 0x0}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0xc42, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001280), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x37a}, r9, 0x0, r10, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r12}) ioctl$BLKTRACETEARDOWN(r10, 0x1276, 0x0) 07:15:49 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$void(r0, 0xc0045878) r1 = epoll_create1(0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = epoll_create1(0x0) close(r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/de\xf6/net/tun\x00', 0x20700, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000780)) 07:15:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) dup(r0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000000)={0x8000010}) fchdir(r1) r9 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f0000000080)=""/78) unshare(0x400) r11 = epoll_create1(0x0) fcntl$setown(r11, 0x8, 0xffffffffffffffff) [ 1620.554728] audit: type=1400 audit(1571728549.213:516): avc: denied { set_context_mgr } for pid=31286 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1620.582212] audit: type=1400 audit(1571728549.243:517): avc: denied { call } for pid=31286 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1620.630044] binder_alloc: 31286: binder_alloc_buf, no vma [ 1620.639170] binder: 31286:31289 transaction failed 29189/-3, size 80-24 line 3284 07:15:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1620.672921] binder: undelivered TRANSACTION_ERROR: 29189 07:15:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffefe, 0x1, 0x0, 0x3, 0x9, 0x0, 0x2000, 0x2840, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa0}, 0x10, 0x4, 0xa58, 0x0, 0x0, 0xffffffff}, 0x0, 0x2080000000000000, 0xffffffffffffffff, 0x2) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r8}) open(&(0x7f00000002c0)='./file0\x00', 0x10040, 0x8) bind(r7, &(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x2}}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) fsetxattr$security_ima(r5, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "16fdea4caa26289926b6a6a9fb669c1a"}, 0x11, 0x2) [ 1620.767617] audit: type=1400 audit(1571728549.423:518): avc: denied { set_context_mgr } for pid=31308 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:15:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) fdatasync(r4) r5 = epoll_create1(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SET_TSC(0x1a, 0x3) fcntl$setown(r5, 0x8, r6) 07:15:49 executing program 5: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1620.798810] audit: type=1400 audit(1571728549.463:519): avc: denied { call } for pid=31308 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1620.826411] binder_alloc: 31308: binder_alloc_buf, no vma [ 1620.832477] binder: 31308:31309 transaction failed 29189/-3, size 80-24 line 3284 [ 1620.843087] binder: undelivered TRANSACTION_ERROR: 29189 07:15:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) close(r3) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) 07:15:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:15:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8020}}, 0x20}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x3e, 0x100, 0x70bd27, 0x25dfdbfe, {0x19}, [@typed={0x8, 0x6d, @u32=0x5b4c5b1b}, @generic="3e63b724a4196a0b6839ab898a8d4626d538d544f51a1592744c5f81d2c03da57bd106e7af62368881e8305dea1fa2544e6f48bcd7b02fec6596287862d684793ff4114c5e7d1fa342e17c4ef5b820d851206051818eb9d75a1be9d7b575a56fd30002e2de76123a69e5808e802a49b3f964a0731403f5d3991a211156bff538b9dc395cf037f6549c1560098299ec883803a3520c3b3d59395699332176a4d73efbefc78ba70c7140ecd38b0a6ee7782280992bc93bc9f80b9e87ae96c993e89d41aad1c7b3f39c18452a7fde", @generic="b0f5da40bb8c5df4b595f85828bf41451ba3881e1ae695c1460608795eb963189fbe5934300e7753ac7cac38ecaf0f658baa230ce255478c068979460de2a0142ad362fe514f528fc48abb073c"]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) 07:15:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 07:15:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r3 = accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) sendto$inet(r3, &(0x7f00000007c0)="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", 0x1000, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1e5) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002cbd7000fbdbdf250300000008000200090000000400040008000200020000000800050000000000ef26bc82"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0xd2a94948}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000326bd7000fddbdf25030000000800020002000000080005000300000008000300010000000800040007000000080006000700000008000500050000000800030035f80000201d06003c000000080006000800000014000100"/106], 0x70}, 0x1, 0x0, 0x0, 0x24044001}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:15:52 executing program 5: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) ptrace$cont(0x1f, r2, 0x100, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r7, 0x0, 0x2, 0x0) r8 = getuid() r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r9, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r9, 0x400454ce, r11) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={r7, r8, r11}, 0xc) connect$inet6(r3, &(0x7f0000000000), 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r13}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000440), 0x0) r14 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BLKTRACESETUP(r14, 0xc0481273, &(0x7f0000000000)={[], 0x30d, 0x4, 0x81, 0x2, 0x50, r0}) 07:15:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/9, 0x9) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) ioctl$FICLONE(r3, 0x40049409, r5) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, r6, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:15:52 executing program 5: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:52 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:52 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x180000) fcntl$setown(r2, 0x8, 0xffffffffffffffff) setrlimit(0x6, &(0x7f0000000000)={0x10001, 0x7}) 07:15:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0xfe) r6 = inotify_init() r7 = inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r5, r7) inotify_rm_watch(r4, r7) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x222561, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000140)={0x40, 0x0, 0x7, 0x5, 0x1}, 0x14) [ 1623.839006] audit: type=1400 audit(1571728552.493:520): avc: denied { create } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1623.866483] audit: type=1400 audit(1571728552.533:521): avc: denied { write } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1623.897688] audit: type=1400 audit(1571728552.553:522): avc: denied { read } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1623.961307] audit: type=1400 audit(1571728552.623:523): avc: denied { create } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1623.986915] audit: type=1400 audit(1571728552.643:524): avc: denied { write } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1624.016594] audit: type=1400 audit(1571728552.673:525): avc: denied { read } for pid=31365 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:15:55 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:15:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) fcntl$getown(r2, 0x9) ptrace$cont(0x9, r0, 0x0, 0x0) 07:15:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000200)={0x657be03acfaecfa, 0x70, 0x1, 0x7f, 0x20, 0x7, 0x0, 0xfe, 0x200, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x2000, 0x7, 0xf4, 0x2, 0x7, 0x8000, 0x1000}, 0x0, 0x10, 0xffffffffffffffff, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) r4 = accept4$inet6(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x2) 07:15:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/269], 0x10d) close(r0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x4000, 0xa4) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180)) chmod(&(0x7f0000000040)='./file0\x00', 0x94) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'nlmon0\x00', 0x801}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0xe000000c}) 07:15:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) epoll_create1(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r2, 0x8, r6) 07:15:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x40000014}) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x1) [ 1626.698778] audit: type=1400 audit(1571728555.353:526): avc: denied { set_context_mgr } for pid=31395 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:15:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000000)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000780)={0x4}) 07:15:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) signalfd(r2, &(0x7f0000000180)={0x6}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/113) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) r10 = epoll_create1(0x0) r11 = epoll_create1(0x0) close(r10) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000180)) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/create\x00', 0x2, 0x0) r12 = eventfd(0x202) signalfd(r12, &(0x7f00000002c0)={0x880}, 0xffffffffffffffd4) [ 1626.739309] audit: type=1400 audit(1571728555.403:527): avc: denied { call } for pid=31395 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1626.763288] binder_alloc: 31395: binder_alloc_buf, no vma [ 1626.770854] binder: 31395:31400 transaction failed 29189/-3, size 80-24 line 3284 [ 1626.780953] binder: undelivered TRANSACTION_ERROR: 29189 [ 1626.845269] audit: type=1400 audit(1571728555.503:528): avc: denied { set_context_mgr } for pid=31418 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1626.872918] audit: type=1400 audit(1571728555.533:529): avc: denied { call } for pid=31418 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:15:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = getpgrp(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r6, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="804709ac7bf836789d7cf913d2b50fe89789abb5e0b89b9213aa0ea46c8b5f27cbb537cbb2fa0cac3453bdd0443dd798631457913c2f718d047ef8d0d4f48c8b6fb54eaae5c582c54f2573fd50b7e26ed1525d8b0dc1c9ff8d4953bd965e123b8f468e836b18cd2e8a9893eeeea4dec48d208b19be67d0ebe757c39626e247833b0b072dd7caee07dac96b825a8df84e9d07964d6f8935979cea0e63fde83e27ca74c749baec1e5f9b7c7db5bcb08673de893d5339775a53c506746f7f06745708b4bef9e669386fbeda6fc93fae0054011ea09c8fbda9264a2b923c00496b1964546a7a4271eb3e79dc6ac3be3362499a2d3977b8d18b78fb", 0xf9, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000060ea4bfc8c4dc6ce2ce252045115e95abc3f4a6c00905b711f342400000000000000826606258528622114979ffd8c3f5057b23262cffab942467394dd2c9fdf5977"], 0x34}}, 0x0) listen(r7, 0x8) r8 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r9 = accept4$unix(r8, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x181000) fcntl$setown(r9, 0x8, r5) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r10, 0x0, 0x100000) syz_open_procfs(r10, &(0x7f0000000040)='children\x00') unshare(0x200) r11 = epoll_create1(0x0) fcntl$setown(r11, 0x8, 0xffffffffffffffff) 07:15:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1626.896670] binder_alloc: 31418: binder_alloc_buf, no vma [ 1626.902684] binder: 31418:31419 transaction failed 29189/-3, size 80-24 line 3284 [ 1626.915684] binder: undelivered TRANSACTION_ERROR: 29189 [ 1627.008742] binder_alloc: 31428: binder_alloc_buf, no vma [ 1627.031030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1627.048519] binder: 31428:31429 transaction failed 29189/-3, size 80-24 line 3284 [ 1627.070025] binder: undelivered TRANSACTION_ERROR: 29189 07:15:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:15:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$cont(0x29, r0, 0x0, 0x0) 07:15:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = accept4(r0, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80, 0x400) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0xfffeffff, {{0x2, 0x4e23, @broadcast}}}, 0x88) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) 07:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000100)=""/220) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:15:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) fgetxattr(r3, &(0x7f0000000000)=@random={'btrfs.', ')GPL\x00'}, &(0x7f0000000040)=""/2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:15:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x202000, 0xc0) syncfs(0xffffffffffffffff) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2100}, {r1, 0xc06e}], 0x2, 0x80000001) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000100)={0xa0b0, 0x9, 0x2, 0x401}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) sendfile(r4, r6, &(0x7f0000000280), 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r7, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) getsockname$unix(r8, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) r9 = socket$netlink(0x10, 0x3, 0xa) recvmmsg(r9, 0xfffffffffffffffd, 0x0, 0x2022, &(0x7f0000000180)={0x0, 0x1c9c380}) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r11, 0x0, 0xffffffffffffffff, 0x0) [ 1629.677176] binder: 31446:31449 transaction failed 29189/-22, size 80-24 line 3138 [ 1629.697415] binder: undelivered TRANSACTION_ERROR: 29189 07:15:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "f43f527d3dd8890b", "98c74f23e0062087c7001f99266223839d389a4dee913e0295278a46e617a41f", "05ec47f9", "ca5bbb40988dae3b"}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r7 = syz_open_pts(r6, 0x220100) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000100)) unshare(0x400) r8 = epoll_create1(0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r9, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r10 = fcntl$dupfd(r9, 0x0, r9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f00000001c0)=""/130) r11 = inotify_init1(0x0) fcntl$setown(r11, 0x8, 0xffffffffffffffff) fcntl$getownex(r11, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r8, 0x8, r12) 07:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1629.734424] binder: 31460:31461 transaction failed 29189/-22, size 80-24 line 3138 [ 1629.764176] binder: undelivered TRANSACTION_ERROR: 29189 07:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1629.820208] binder: 31472:31473 transaction failed 29189/-22, size 80-24 line 3138 [ 1629.828560] binder: undelivered TRANSACTION_ERROR: 29189 [ 1629.891131] audit_printk_skb: 6 callbacks suppressed [ 1629.891143] audit: type=1400 audit(1571728558.553:532): avc: denied { set_context_mgr } for pid=31478 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1629.934517] audit: type=1400 audit(1571728558.593:533): avc: denied { create } for pid=31463 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 07:15:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1630.102667] audit: type=1400 audit(1571728558.763:534): avc: denied { set_context_mgr } for pid=31485 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1630.551855] audit: type=1400 audit(1571728559.213:535): avc: denied { create } for pid=31463 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 07:16:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x44000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="4e0490c20272777274a2257829d203960eb7134cc885c8b4b163f5866307e6884c1bbcfc71045ee853a7d6a2775ead2806206538259bd101e924b21ae877bcb810f584063a3bddb13e1c9205632f8acc8e2076ed3ecab048ff006828e7c89805394a852c4b67d629a514d3fc73d1", 0x6e, 0x28008842, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x0) r2 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\x00', 0x0) keyctl$invalidate(0x15, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="140000110000808ad40000000012c97e"}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xffffffff, 0x2, 0xff}, 0x20) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000000)=0x1) r5 = epoll_create1(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000280)=0x400) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'erspan0\x00', r10}) fcntl$setown(r5, 0x8, 0xffffffffffffffff) 07:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200800, 0x0) sendfile(r5, r6, &(0x7f0000000100), 0x34) 07:16:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:01 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fon\x00') r7 = socket$inet6(0xa, 0x4, 0x1) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) fstat(r9, &(0x7f0000000440)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002300)='/selinux/checkreqprot\x00', 0x686200, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4}, {0x4}]}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf250300000008000a004e20000004000e00000b00", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4a0500}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x0, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x0, 0xa, 0x4e24}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x60014004}, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000004c0)=[0xac71, 0x3]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000780)) 07:16:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1632.722721] audit: type=1400 audit(1571728561.383:536): avc: denied { set_context_mgr } for pid=31500 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:16:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa41c, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1632.828653] audit: type=1400 audit(1571728561.483:537): avc: denied { set_context_mgr } for pid=31521 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x8, &(0x7f00000000c0)=0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000001640)={0x1}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000040)=0x8001, 0x4) connect$inet6(r6, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x2}, 0x20) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) r10 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/create\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) close(r11) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000180)) r13 = epoll_create1(0x0) r14 = epoll_create1(0x0) close(r13) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000180)) io_submit(r2, 0x5, &(0x7f0000001600)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x97b396fbc9396917, 0x7fff, r3, &(0x7f0000000100)="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", 0x1000, 0x7, 0x0, 0x2, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x3, 0xcc, r4, &(0x7f0000001140)="fa2f50ea9d1ae83e6d095d446fcbb8c94365d754164869094417965ef81441b4f6318a38f1ca36ed0cabef9b178fe63549bab9ff5f4ac508639109c3369d65ddc1a43324f64437f4fac14714a09d819b28178b7002badaf4e67745982c27472c94988b2f0c0bfe6c918f24fb2df6b2cf9ed0c95652b6170a81d7508bcaac610affb8a1072963514d76", 0x89, 0x800, 0x0, 0x2, r7}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x8, 0x801, r9, &(0x7f0000001680)="1e06d213cbfd9ccbf9c0532054f81dfdccbb1112cfb1bdafe554ddae3461049355b253eaa93c0d42337e11fbc4c543c5ea51cec3450dfccaa60ad94809e8f083d1b26bf0a3f5e7f329142a714afbfab33e7f41ce6f74ec23626f66737004ce15e9efd82d1dc66ba50e67a1a813316c0443234a6845f44e8ae05f2205efd0f61359b8a6de7238ae4a07fbf0ebae6def88e8eaf91fd37098307481f1ee7895a17afab00c37b0676979d3e16a3a6f616341aadb0996e06723ab5577a54923138544d88389e751223d57610d9c946d574396283da69edf26ed5c474b68834ca80a14ac32d6808d56e38c65d3fbe12880ea5ef14c25ea6cb057342b97ac5a0e8a7a49a46c377ddef4d026fc16", 0x10a, 0x1000, 0x0, 0x3, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x8004, r10, &(0x7f0000001380)="49c6dd9610f6b28b0d6ed355e24017aac1fb3b3c7d8b7226212c6388ff9921a6c2f66411ff954def8739785bf80f74f7279cec85bb75a55c74ffd1ecda0b234542019a892de8ba663b1c07f7215404d0beb484cdb22ac6daff0454a3e34d0e397450442fe1615182c10979a53f903193c6d3ec1b5faa209cb415e7375a8bce02241d7fd2c9fe04e236899b2fe3c9e11cadd5942cb169c6e63ce36c2f0d49a0cb6b09b0fd2beaf79eea05b433a0239c2c8531291ba789545df996e36aa7af766880533b0ebcfaf95f00200635beb520e48a9ccbf133bd8b76212dc4a1fe9db04443c464820b33", 0xe6, 0x965, 0x0, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x0, r13, &(0x7f00000017c0)="272e53e9bf099c238895be97ffd7aaab1dfb24483858949c1b9f24e10154434032820c7bdfe27c5a6f08622b60ff47dae856d0699d795f539808d8da88b7772b99a14fe65d2bc0cef86ce9ed924b97efeccbd9d7ef214befbf125fd154c01fcbfeef7ed1cad135d1445e832ba335414746d5ba48906d038cf765eb3a0c103fd00a37bf33ceeba14b9291b2b3030d3a4103498aa665093bb950f14f955bc4450e972de9fb23b5ad7a0ac0e6e5ea8fc16e5176b5dfd5f1ca88c8bb657f8c38d7f9d885889e0dea1c69ffdd03230359b090293af0a2a61a2bb0fc2dea88f6ba6e0b5eecafbbd2e61374d5dcc299734cb2550092ccd3", 0xf4, 0xfffffffffffffffd, 0x0, 0xc6aa32cfd95fe512}]) r15 = inotify_init1(0x0) fcntl$setown(r15, 0x8, 0xffffffffffffffff) fcntl$getownex(r15, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r16, 0x0, 0xffffffffffffffff, 0x0) [ 1632.947887] audit: type=1400 audit(1571728561.603:538): avc: denied { set_context_mgr } for pid=31538 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1633.000583] audit: type=1400 audit(1571728561.663:539): avc: denied { create } for pid=31515 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1633.034561] audit: type=1400 audit(1571728561.693:540): avc: denied { write } for pid=31515 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1633.098121] audit: type=1400 audit(1571728561.753:541): avc: denied { read } for pid=31515 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1633.108843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31528 comm=syz-executor.0 [ 1633.152850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31516 comm=syz-executor.0 07:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:02 executing program 2: r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r0, r0, 0x0, 0x8800000) getdents64(r0, &(0x7f0000000000)=""/43, 0x2b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x400) r3 = epoll_create1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) 07:16:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41041886}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)={0x94, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x940}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x548f9cc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9f8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x201a}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x478, 0x0, 0x0, 0x258, 0x258, 0x130, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0xae, 0x119, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x2, 0xfffffffffffffeff}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0x1fe0000ff, 0xffffff00], 'eql\x00', 'veth1\x00', {0xff}, {0xff}, 0x87, 0x0, 0x2, 0x8}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x99641c2c45b5db92, 0x2, 0xbe}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x9, 0x2, 0x98}, {0x1, 0x3, 0x6}, {0x9, 0xff, 0x97}, 0x800, 0x77f9}}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d6, 0x401, 0x9, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d6, 0x1, 0xf7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x0, 0x20) tkill(0xffffffffffffffff, 0x6) tgkill(r0, r2, 0x17) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3f) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RFLUSH(r6, &(0x7f0000000040)={0x82}, 0xfffffe32) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r7, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000780), 0x4000}]) io_submit(r7, 0x1, &(0x7f0000000000)=[0x0]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x654c, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r9, 0x0, 0x0) ptrace$getregs(0x7, r9, 0x1, &(0x7f00000001c0)=""/255) ptrace$cont(0x9, r3, 0x0, 0x0) 07:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0x3, 0x0, 0xffff}, {0x2, 0x5, 0x9}, {0x7, 0xff, 0x8, 0x7fffffff}, {0x0, 0x2, 0x20, 0x40}, {0x7ff, 0x3a, 0x6, 0x8000}, {0x6, 0x20, 0x8, 0x1f}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7f) unshare(0x400) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x40, 0x6) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x20, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1633.611975] binder: 31565:31574 ioctl c0306201 0 returned -14 07:16:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) finit_module(r0, &(0x7f0000000000)='-GPL&vmnet1systemeth1*+\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000040)="b1654c45cfea8429b1f0dc261752e2357266793d9ef83c1ed72f6e1b3c017270862c7d10f604c8699c844265dc67842033355419c72bbada05f1f9173aeebb928c28dc43239fccf983f778bacbe9fd10032e552272349473d4cfca179da0dcb4ac", 0x61) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:16:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1c, 0x0, 0x7, 0xff, 0x0, 0x0, 0x80010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) syncfs(r3) fcntl$setown(r2, 0x8, 0xffffffffffffffff) [ 1633.804163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31604 comm=syz-executor.0 [ 1633.946893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31604 comm=syz-executor.0 07:16:02 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14, 0x800) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$TIOCSIG(r4, 0x40045436, 0x37) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@remote, 0x31, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'ve\x00\x00\x00\x00 \x00 \x00', 0x201b}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) ioctl$FICLONE(r1, 0x40049409, r3) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) 07:16:02 executing program 2: r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r0, r0, 0x0, 0x8800000) r1 = openat(r0, &(0x7f0000000140)='.\x00', 0x0, 0x23) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000001740)=""/4096, &(0x7f0000000180)=0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) pwritev(r3, &(0x7f0000001500)=[{&(0x7f0000000000)="588f5f1af01719ef81d025d14a1476af09e7f8624dddd9bd6af7b893c7ba2fe202f99609a1b88848305922e77ae47b47730a8fa41ef55f0bc79f4fcc43eecbc8400f032cce1a8320f09c0d08a2134f92552f235dfdba2b0a17e8d79d7eb0a8b5113537c69c3d18a32d52c46dd379d10fbc91ceccc9299572a6192318c5fa6fd491ab68df5647a6628f9da8d945694681731d62e94f4946765a885621ea6c211b3a6981fdb001bc05dc51d2525084a4b4e47949c1fb312cd14dced62f62fab76687a3e0ffeab6", 0xc6}, {&(0x7f00000015c0)="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", 0xed}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="2ba8555407a944990bee4e", 0xb}, {&(0x7f0000000340)="15c2da1fb0fd0017b67a6009", 0xc}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="fdf7b55691a8e82bfd43ff40410b4f506dd7492e4d017307f28bbd83e0d57a8d8f89587f0b20644b8809add537a8584bba93aa9eaad3280d82575dad4e249007d435d445caa4c465c9f14b6ec9933d4eac81a1cfb2f7771426c5145b0db923ecd5b67aba15d2d638382c268c701959fb2073bb1877c62712bc2b9485ea51718010e9e3c03694b87c", 0x88}, {&(0x7f0000001440)="abd33071e8ae9cfa492ca9e993cf1f0366733d074d86e05343009f7bf27796afbc96227261a1cf3f363660cb5f2b8a2be4694ed8bb40f2ab86049a8484d362fead1b21c8d887387e35f18c9bbfe26162d47e32faac3ae8c5b14f747da6c59e982eea28eafbc38e14bc12a842aed2a64b4c694d8a9d4756257029d56fac994bb321e31ea11e76aab41b5c521b07911cd1ae1579c4699357765cf2d1a24761", 0x9e}], 0x10000000000000a5, 0x63) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r4, r4, 0x0, 0x8800000) r5 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x2, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xdb84) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x60400) r6 = epoll_create1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) 07:16:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xa1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r4 = accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0xc, "403d9698a11db0162238f800"}, &(0x7f0000000240)=0x30) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 07:16:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 07:16:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xa00600) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r2) r3 = getpgrp(r2) ptrace$setopts(0x4200, r3, 0x7, 0x2) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:05 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000000)={0x4, 0x2, 0x1}) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80, @remote, 0x5}, 0x1c) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x800, 0x0) execveat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='SEG6\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='SEG6\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='SEG6\x00', &(0x7f0000000340)='SEG6\x00'], 0x400) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) unshare(0x1a000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000100)) r7 = epoll_create1(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') fcntl$setown(r7, 0x8, 0xffffffffffffffff) [ 1636.659452] audit_printk_skb: 57 callbacks suppressed 07:16:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000140)=""/23) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) r5 = accept(r3, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r6, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd4, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc07}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x824000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r6, 0xd08, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x480}, 0x280280c0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0, 0x3, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x5}, r7, 0x0, 0xffffffffffffffff, 0x0) [ 1636.659464] audit: type=1400 audit(1571728565.323:561): avc: denied { set_context_mgr } for pid=31645 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1636.660807] audit: type=1400 audit(1571728565.323:562): avc: denied { create } for pid=31646 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.662650] audit: type=1400 audit(1571728565.323:563): avc: denied { write } for pid=31646 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.697107] audit: type=1400 audit(1571728565.353:564): avc: denied { read } for pid=31646 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.699099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31650 comm=syz-executor.3 [ 1636.727560] audit: type=1400 audit(1571728565.383:565): avc: denied { create } for pid=31646 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.728040] audit: type=1400 audit(1571728565.383:566): avc: denied { write } for pid=31646 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) unshare(0x400) r1 = epoll_create1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) [ 1636.839988] audit: type=1400 audit(1571728565.503:567): avc: denied { create } for pid=31659 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x2, @local}}) [ 1636.840920] audit: type=1400 audit(1571728565.503:568): avc: denied { write } for pid=31659 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.853015] audit: type=1400 audit(1571728565.513:569): avc: denied { read } for pid=31659 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1636.892706] audit: type=1400 audit(1571728565.553:570): avc: denied { create } for pid=31666 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4) unshare(0x400) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xdb41, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000000c0), 0x7}}, r3, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 07:16:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 07:16:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 07:16:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r2) keyctl$get_keyring_id(0x0, r2, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) ioprio_set$uid(0x5, r5, 0x6) [ 1637.222386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31708 comm=syz-executor.2 07:16:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x14f27eb4acc32f0c, &(0x7f0000ffd000/0x2000)=nil) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="b5912f0ead2f287a3e06ae4a7037012c486d5e17bb3dd05ae15fb12d0da879f9c817d9421f6016bba3cae4c2f2093f4d05d17bcb6eb34c612dc13bebf0f769b74b1a6572d706174a7536a7f79e3084e6711f85c0009a40477c1b5a73d8bc3176be3ed3b11dd96446be94d7ecbc2204c511e20abd27ef8cb215f58dd65bc9177f7f9f83", 0x83}], 0x1, 0x2) 07:16:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) 07:16:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @local, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x400) r4 = epoll_create1(0xc0000) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) ptrace$getenv(0x4201, r2, 0x7dd, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) getsockopt(r3, 0x8, 0x40, &(0x7f0000000140)=""/163, &(0x7f0000000080)=0xa3) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:08 executing program 0: r0 = epoll_create1(0x40000) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) fchdir(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @increfs], 0x1000, 0x0, &(0x7f00000007c0)="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"}) 07:16:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = fcntl$dupfd(r2, 0x89c79d67a40ccdf, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) [ 1639.730174] binder: 31717:31722 got transaction with invalid offset (0, min 0 max 0) or object. [ 1639.775752] binder: 31717:31722 transaction failed 29201/-22, size 0-24 line 3379 [ 1639.793456] binder: undelivered TRANSACTION_ERROR: 29201 07:16:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWSTAT(r4, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) unshare(0x400) r5 = epoll_create1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) 07:16:08 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = pkey_alloc(0x0, 0x0) pkey_free(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) 07:16:08 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, "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", 0x1000}, 0x1006) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)) 07:16:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) fremovexattr(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="6f3e5dc7318173322e2300"]) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = epoll_create1(0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f00000001c0)={0x40000000}) r8 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000780)={0x4000201f}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r4, r9, &(0x7f0000000140), 0x59b) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000180)) r10 = inotify_init1(0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x4) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) fcntl$getownex(r10, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r12, 0x0, 0x2, 0x0) fcntl$setown(r6, 0x8, r12) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) 07:16:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) [ 1640.203682] binder: 31745:31750 got transaction with invalid offset (0, min 0 max 0) or object. [ 1640.216289] binder: 31745:31750 transaction failed 29201/-22, size 0-24 line 3379 [ 1640.226625] binder: undelivered TRANSACTION_ERROR: 29201 07:16:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000, &(0x7f0000000000)="79f7bd7c06e81abe69177dbec64f7c22f3d3a34f0b0dabb39ccc6ca1052c2a223e521c37079a3c1f4853d27a580882f9222955df1b1bcc6b95bbc227d49ef01f76e006160061d81cc8711205164623204ee341", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="3c70973d4c70bc4352baa338a4dce15dab168f565cdcaf1bbabe3e7c18d5763b93bf0b669d0f19277d8567fc80bd83d5aebf2ff00dc02529914daf5e930da052eb03f9d1fac2aecf6aecd0d54ffa87766791871f3665da9bd0a0bee488dd47550fb06a952dd4207971ffc04fda7b72ac7679e07a") unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) [ 1640.269326] binder: 31764:31766 got transaction with invalid offset (0, min 0 max 0) or object. [ 1640.291719] binder: 31764:31766 transaction failed 29201/-22, size 0-24 line 3379 [ 1640.313078] binder: undelivered TRANSACTION_ERROR: 29201 07:16:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000001200)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r2, 0x0, &(0x7f0000001180)=0xfa86) ptrace$setregs(0xf, r0, 0x100000000, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000011c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x0, 0x1000, "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"}) 07:16:11 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socket(0x2, 0x5, 0xe0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1edfa0deb54ca0d0) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0xb15471e93c31f956, 0x80e, 0x99e1, 0x0, 0xc}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) 07:16:11 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) accept4$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x7408024706732102) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000000)={0x3, 0x16, "4e3532fdc861962c35aff76dc3919f9b30aaa44637a4"}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) [ 1643.195871] audit_printk_skb: 72 callbacks suppressed [ 1643.195883] audit: type=1400 audit(1571728571.853:595): avc: denied { set_context_mgr } for pid=31802 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14a) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) write$P9_RLINK(r4, &(0x7f0000000480)={0x7, 0x47, 0x1}, 0x7) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x85200008}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2bc, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24a}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffffff, @remote, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xedd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffd, @empty}}}}]}, @TIPC_NLA_BEARER={0x150, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x37b, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x20}, 0x6e}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65866fb9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @empty, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x120000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @empty, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x47e}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8000045}, 0x8090) 07:16:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@empty}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev={0xfe, 0x80, [], 0xe}, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) r6 = epoll_create1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) [ 1643.229942] audit: type=1400 audit(1571728571.893:596): avc: denied { call } for pid=31802 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1643.261900] audit: type=1400 audit(1571728571.923:597): avc: denied { transfer } for pid=31802 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1643.298668] audit: type=1400 audit(1571728571.953:598): avc: denied { transfer } for pid=31802 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1643.325037] binder: 31802:31805 got transaction with invalid parent offset or type 07:16:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = epoll_create1(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') renameat2(r1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x5) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1643.352054] binder: 31802:31805 transaction failed 29201/-22, size 80-24 line 3454 [ 1643.371898] binder: undelivered TRANSACTION_ERROR: 29201 [ 1643.420808] audit: type=1400 audit(1571728572.083:599): avc: denied { set_context_mgr } for pid=31826 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1643.547843] audit: type=1400 audit(1571728572.203:600): avc: denied { create } for pid=31818 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1643.572636] audit: type=1400 audit(1571728572.243:601): avc: denied { write } for pid=31818 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1643.598614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=31820 comm=syz-executor.3 [ 1643.621607] audit: type=1400 audit(1571728572.283:602): avc: denied { read } for pid=31818 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002480)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000002580)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@local, @in6=@loopback, 0x4e20, 0x9, 0x4e20, 0x8, 0xb, 0x40, 0x80, 0x74, r2, 0xffffffffffffffff}, {0xffffffff, 0x1f, 0xdc9, 0xfffffffffffffffa, 0x8, 0x100, 0x4, 0x10000}, {0x9, 0xb26, 0x0, 0x6}, 0x7, 0x6e6bb6, 0x0, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d4, 0xff}, 0x0, @in=@rand_addr=0x7ff, 0x34ff, 0x2, 0x0, 0x5, 0x59, 0x800000, 0x936}}, 0xe8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3f) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000026c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$cgroup_int(r4, &(0x7f0000002700)=0x8, 0x12) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000002440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x22f4, 0x13, 0x6084ab734a30d3a0, 0x200, 0x70bd2d, 0x25dfdbff, {0x1e, 0x0, 0x4}, [@typed={0xdc, 0x32, @binary="c89630d97d46894874d0f9022fa972b808a6fc42a5ccf1f9d300039861c6bb5b8a5bcdad1aa09cac49ed6c59f68177c402761efcf203ed73a31f2bb9e636149902a9c68ac31d1a2ba535d5ccfcd8ba5023849cfd58732065df727eecd91f72485fae0f33a20cb4d3ba38e8e0f806e00d8c5794930ceb0c364a5c90203c66084fff58a5ae7f81ca8b5fb40f49fb1a5aa405a4b76d7fbf699783f5583b1efa3e80e2730d4512490841e25e24bcf10ec5d4a12fafff2a9ca643d8e1376b5f67d1470ac4ef9e4aa0b84ec77976b02854d2071506027a4f1bcc"}, @typed={0x8, 0x21, @fd}, @typed={0x8, 0x68, @ipv4=@local}, @generic="d5d679e61e39f020b6de9b5d1e6fd842e021757d71b079186c2de3b4ec2d654d0620179817ac434861376cde654ba1854a167224a907dea724cab374952fc2aebafbc50763193e5e5a419066288c390e77c00a08fd93610a3545171b61da7f6d61a1823babbda1c7aa381794d5a5268057434f122e5f73", @generic="ac6a80df492971b5880442e50af5fea95e9b046d3d2e3dfb197814b3b51d9c3e2dc6138ccce5f3a5f26686c36489c72e82c9e56454b8489d511eeeae344be3a6a6705ac537", @generic="e884981dce4a0359ed8c4ab4e0c35bd0ecd9e0da2da1f669f0b2e816eff295b78798166fb6e37f03535c83d4bf10633407bd266362bee6ee33a444c674f0c124e17af0ac36026304d600db6eb5a677449a0d9612d652b756e77d4dd814484ab90fbfd4b7460c03a30ad7300ddf8f3266a91af17b54e0657aa2e21593bfaac39ae42f0673b5f317ecadd7c69234621bd0ef2dc59390e492e8e94849a0fab7a605ba7b39a9385197e18198a239a3159d3a1fc8c4f33172c1ad68c0068dadcd7d9ae81b042732743e73a77226db6a", @generic="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", @generic="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", @generic="2ac0939b593ec0741ce747635725596acffa3cc5c9e9763f5aa95c6af0e6b40471", @nested={0x48, 0x25, [@typed={0x14, 0x19, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0xc, 0x7d, @u64=0x7}, @typed={0x8, 0x31, @ipv4=@remote}, @typed={0x14, 0x21, @ipv6=@rand_addr="b9e80ad450259bf54f848baaf3423235"}, @typed={0x8, 0x80, @u32=0x4}]}]}, 0x22f4}, 0x1, 0x0, 0x0, 0x88000}, 0x40000800) ptrace$cont(0x9, r3, 0x0, 0x0) 07:16:14 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 07:16:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0xffffff69, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:14 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x54040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f00000000c0)=""/222) 07:16:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@union={0xc, 0x3, 0x0, 0x5, 0x1, 0xfff, [{0x10, 0x4, 0x7}, {0xb, 0x2, 0x7}, {0xa, 0x2, 0x401}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x58, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x3e, 0x0]}}, &(0x7f0000000140)=""/189, 0x69, 0xbd}, 0x20) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) delete_module(&(0x7f0000000000)='selinux\x00', 0x752abc8b3df6eb64) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='pkcs7_test\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r3 = epoll_create1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) [ 1646.236143] audit: type=1400 audit(1571728574.893:603): avc: denied { set_context_mgr } for pid=31851 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='dax\x00', 0x380480, &(0x7f0000000280)='\x00') r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000140)=&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETLED(r5, 0x4b32, 0x7) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r8}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0xe, &(0x7f0000000240)=0x8, 0x4) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, r6, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000180)) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r11) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r13}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000200000000000d00"/72], 0x48) 07:16:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9f) r3 = epoll_create1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) 07:16:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, 0x0}}], 0x0, 0x0, 0x0}) 07:16:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) [ 1646.421269] audit: type=1400 audit(1571728575.083:604): avc: denied { set_context_mgr } for pid=31883 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1646.438106] sock: process `syz-executor.3' is using obsolete setsockopt SO_BSDCOMPAT 07:16:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:17 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2590a87134aa2020, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000040)="b8bda10f6732b16f926944cb7818fa8cfc7f08692919550cbbe7cdb42033f33447b399b452cbdcb1452edcfccb8ef4535082f33c340a924ac83ad9ce7ff1edd29c0eb15cf3778b70a39b3ba3d3cdff3d985d7914e7d46e5ea6ea2c2ce527cdbc0f6a9748afc85404f496cef1694f367bed4f5f35f3a6cbc026dc5021a5c7c7552261437874ebe6c2612b8731095d61e86afe985af06f8b053a033b7d6eaa5319074869", &(0x7f0000000200)=""/209, 0x4}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:console_device_t:s0\x00', 0x26, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, 0x0}}], 0x0, 0x0, 0x0}) 07:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r4, 0x0, 0x2, 0x0) r5 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = gettid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r8, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r8, 0x400454ce, r10) sendmsg$netlink(r2, &(0x7f0000000580)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000100)={0x6c, 0x34, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0x40, 0x1b, @binary="53d1321abd044ccbb54ca60cb6c0db959d227298a4eeaab7f0a76d8e1b07c784db38da1d5cc5d35f43fed830b002cfa1788f157861982044a79d"}, @typed={0x8, 0x30, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x22, @pid=r4}, @typed={0xc, 0x2a, @u64=0x7}]}, 0x6c}, {&(0x7f00000005c0)={0x32c, 0x1d, 0x0, 0x70bd26, 0x25dfdbfc, "", [@nested={0x98, 0xa, [@generic="0c9f2d29b77b2c356d1e84db035122bd1b9b0d6b13d835ab6e87ec8820d702a38352fa0c06e5bd59308f4b0708831d956f619c797f994ecc4766dd4fc7b6347781cde4b2cdcdf4944a526cef9a3061733eb04020f42d19ed11cc471ae8b8c2e1bb8794a3cd7e72d9a836ef427d107eab5b1a917694cc1a899d9839e5ada666e856acbc1a7598944984b0821b20a1a06dfca69f"]}, @typed={0x8, 0x4, @ipv4=@broadcast}, @generic="3025f6749b53f7fa2b47626a5a9e5e39ad17a032cb241e1f82cfd4d2c4fda054efebcba33c5276c5bec7d4a265bbd83520e37f805e43566d8c30406790eac694a6f38bfe1ca306f0cafd001d77bc", @generic="46f8ef3c9393701d3bac543416805676ff9e96a81a9363eb2a17cf289a16138d80a89defc6f4dcbb6bd6bf185124c3a1aa2061a117cd7dfbd9df502eca4bbae470b8962785bcab3f68109a95e13502144490b36c9811e339fce3652df040d930d29c1bb74de40872ba9efbece810cf5dfd1558bbe823cdd5804b49b3502f8df963f82bd18aac4de1ef59b975b9317530ef418b3ce6a57a7503f22041af38a5b373fba103889bfe51d39c720e9b46c0fdd9cf1575ae12130cf2b1d4db394a309a5d9690aef17ca71a922757743d6340a7f675e94d9d", @nested={0x158, 0x8d, [@generic="117e8f3c307917bf397b7943a00d78e8a0cb57f773d9a7f59140af7c0f7959aaa2fa68b8ce975dca8085b2af72fb32cb0d8946d32e08383c08902b6e9ba16fe85f3243d8a8fec7813edb7e227cc91cd51428e020f38c922d0c89", @generic="2bb1de04b0f739e89c2f928469f3a8e82361ac890fc137cffb1e8ae52d6c9e6d3094d53b1aa4787534230fbd9c98f59431258348cc27c9aa5c5a87c04db40fb95e926e0cbd99df0221b76869fc3bedb235d32e637c52a7dc300f5d5a292024341ad8a2f081f952c10a3208c44d7c3b9b99e2596cd0b934c35f1de232a23d79fa091c870468f85970312d99f94a92b141916bdf362fb969bf846f374209774f122d5ccb671c86e5a3a78c895837c56bbed51b5035430041ca4fc2dccb780959f3110d7323312d0b84a2c3827919f9643ff10295238ec5becb3d", @typed={0xc, 0x8c, @u64=0x6}, @typed={0xc, 0x8c, @u64=0x9}, @typed={0x8, 0x14, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}]}, 0x32c}], 0x2, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r10}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x50}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r11 = inotify_init1(0x0) fcntl$setown(r11, 0x8, 0xffffffffffffffff) fcntl$getownex(r11, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r12, 0x0, 0xffffffffffffffff, 0x0) 07:16:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x100, 0x8}, 0xc) r3 = epoll_create1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000100)) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r9 = getegid() fchown(r7, r8, r9) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r11}) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @local}}) 07:16:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) fcntl$setpipe(r4, 0x407, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) [ 1649.287476] audit: type=1400 audit(1571728577.943:605): avc: denied { set_context_mgr } for pid=31915 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1649.305213] audit: type=1400 audit(1571728577.943:606): avc: denied { create } for pid=31912 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:etc_mail_t:s0\x00', 0x20, 0x2) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r11 = fcntl$dupfd(r10, 0x32252aa167f6cf32, r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) unshare(0x400) r12 = epoll_create1(0x80000) fcntl$setown(r12, 0x8, 0xffffffffffffffff) 07:16:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, 0x0}}], 0x0, 0x0, 0x0}) 07:16:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb8e027f430f583c75ef5773775bdb6e1f9b03ae96e477f0bdee2dc852889493f54697018145976735200d82d7e8bd908e5b5f7d71b41a78ade8defd5fd0cf2b35a24ec4a58af5ecd3ded68a8ba3cfd727562f06424c827e2de6004e91011b7bcdb8e9161780c62d5599b85b254e069f47d05576ef4ed649517eb597b9303ac4c3bdb1b1e472aacf2f210a758af713a4691652a6ec451b4b4517883985aad3cae87614d2c46848b121a52d9c313c7aaa19913fc7c6054320a49818b4d7623e557a4ec07a50c8b6d9f941e83f4c102b988ff68bb9ebb8870d14a0359c25c96a"], 0x8e, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffeaa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x9f3f, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}, r5, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0) [ 1649.441992] audit: type=1400 audit(1571728578.103:607): avc: denied { set_context_mgr } for pid=31941 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) pipe2$9p(&(0x7f0000000000), 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) fcntl$setown(r2, 0x8, r4) [ 1649.455013] audit: type=1400 audit(1571728578.103:608): avc: denied { create } for pid=31912 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1649.464877] audit: type=1400 audit(1571728578.103:609): avc: denied { relabelto } for pid=31939 comm="syz-executor.2" name="UNIX" dev="sockfs" ino=106807 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_mail_t:s0 tclass=unix_dgram_socket permissive=1 07:16:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fd/4\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000180)=0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x4000010, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) ptrace$setregset(0x4205, r3, 0x200, &(0x7f0000000100)={&(0x7f00000003c0)="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", 0x1000}) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KDGKBSENT(r10, 0x4b48, &(0x7f00000001c0)={0x7, 0x6, 0x400}) r11 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r11, 0x4b4d, &(0x7f00000000c0)={0xffffffff, 0x3ae}) ptrace$setopts(0x4206, r7, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0x1873f2604dabf74a) 07:16:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:20 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r7 = dup2(r1, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000140)="0240fe7d2819672c0bddda51", 0xc, r7}, 0x68) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:20 executing program 5: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000580)='./file0\x00', 0x0) 07:16:20 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) socketpair(0x2, 0x3, 0x1, &(0x7f0000000000)) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) unshare(0x400) epoll_create1(0x180000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r11, 0x8, 0xffffffffffffffff) 07:16:20 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x8, 0x7f24, 0xffff, 0x5, 0x9}, 0x0) r1 = epoll_create1(0x0) epoll_create1(0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000180)) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) close(r11) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000180)) r13 = epoll_create1(0x0) r14 = epoll_create1(0x0) close(r13) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000780)={0x2000}) 07:16:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$KDSETLED(r4, 0x4b32, 0x5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) [ 1652.325439] audit: type=1400 audit(1571728580.983:610): avc: denied { create } for pid=31963 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1652.357631] audit: type=1400 audit(1571728581.013:611): avc: denied { create } for pid=31963 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 07:16:21 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) unshare(0x400) r0 = epoll_create1(0x1c0000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 07:16:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xff80, 0xde}, {0x9, 0x5}, {0x483, 0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x8, 0xf63}, {0x7, 0xa6}]}) unshare(0x400) r6 = epoll_create1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) 07:16:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r5, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000180)) fstat(r10, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r12, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r14, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r14, r15) 07:16:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @broadcast}, &(0x7f0000000140)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000cffffffffffff0000"], 0x28}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r16}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r19}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r21 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r21, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r22}) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000300)=0xe8) r24 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r24, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r25}) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r28 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r27}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r24, 0x8933, &(0x7f0000000340)={'team0\x00', r27}) r30 = socket(0x11, 0x800000003, 0x0) bind(r30, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r30, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r32 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r32, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r31, @ANYBLOB="000000000c000200ffff060000000000"], 0x28}}, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r33, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r33, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r35 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r35, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r35, 0x8933, &(0x7f00000003c0)={'irlan0\x00', 0x0}) r37 = socket(0x11, 0x800000003, 0x0) bind(r37, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r37, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r39 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r39, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r38}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r40 = socket(0x11, 0x800000003, 0x0) bind(r40, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r40, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r42 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0xffffffba, 0x1d, 0x8, 0x0, 0x0, {0x7, 0x0, 0x0, r41}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r43 = socket(0x11, 0x800000003, 0x0) bind(r43, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r43, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r45 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r45, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r44}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r46 = socket(0x11, 0x800000003, 0x0) bind(r46, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r46, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r48 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r48, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r47}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r49 = socket(0x11, 0x800000003, 0x0) bind(r49, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r49, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r51 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r51, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r50}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r52 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r52, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_IP_IPSEC_POLICY(r52, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000500)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) r56 = socket(0x11, 0x800000003, 0x0) bind(r56, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r56, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r58 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r58, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r57}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r60 = socket(0x11, 0x800000003, 0x0) bind(r60, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r60, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r62 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r62, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r61}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB='T\b\x00\x00', @ANYRES16=r2, @ANYBLOB="020428bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="2001020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="0800010001656a95299541a803d39b6d0da2620843cf2eda35066542cc3f00afed86df1483131f434207aca87a512b2a6f", @ANYRES32=r19, @ANYBLOB="64020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r31, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100008008000600", @ANYRES32=r34, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r36, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r38, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r41, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r44, @ANYBLOB="280202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r47, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r50, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r53, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400ffff04010004000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ff7f0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r54, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004007651020006000000e0ff06ffff0f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r55, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYRES32=r57, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r59, @ANYBLOB="08000100", @ANYRES32=r61, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100008038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040004000000"], 0x854}, 0x1, 0x0, 0x0, 0x80}, 0x80) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getuid() r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x7f, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="d8c41d1e62d3d93f2d2fcec9ff40b0dde32ef4c0aeae40a13df113ad4562e0ae88addc9c31fb48ec7e3bec97201e2cb9c722c04d87a511d2a3076a0245c26d04fc98dc405d57a0850434ed8e834273d3cc2c2127ae60fa62b5b9b1ac88d9355043dee5b412193bf1c85eda948092cce7a65c5d50de6d8aa0b6a25e077c805fb9f7c4dea9a233d0a32a1bf79d1e73e7f3c4045fdccef3391ac2f49d8bac0d07c4f1a273", 0xa3, 0x4}, {&(0x7f0000000200)="41198d398368c286622a3dbcbd2c971ba8931e004b1eaeffe182802cb313cdc40ce2a1b00f096cba7c06667dcfc30aaee45e6737dbb13586635172a81e18239b", 0x40, 0x180000000}, {&(0x7f0000000240)="b783bd1badc9f89ccaa8db4d4e90b6e68a1cbc334a2a1902f57719320c76d786767a391f6a4b195b7bc9f8e973e0c0c2a41c4824cc5840ba618ef48fc4e9bcb5217d29e1874dd92f86f469af7f1e8471bcaf4f847b3f14539c29ff96321079135fdc28ffcd1b2a19b8a062b572ddbaae74aaea59052c6464ce8d30ffb1a1", 0x7e, 0x9}], 0x80000, &(0x7f0000000480)={[{@nodots='nodots'}, {@fat=@time_offset={'time_offset', 0x3d, 0xd6}}, {@fat=@errors_continue='errors=continue'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@discard='discard'}, {@dots='dots'}, {@fat=@quiet='quiet'}], [{@euid_lt={'euid<', r2}}, {@smackfsroot={'smackfsroot'}}, {@uid_eq={'uid'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, '(cgroup.(GPL'}}, {@uid_gt={'uid>', r5}}]}) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0x0, 0xffffffffffffffff, 0x0) [ 1652.595571] audit: type=1400 audit(1571728581.253:612): avc: denied { create } for pid=31995 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1652.620128] audit: type=1400 audit(1571728581.283:613): avc: denied { write } for pid=31995 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1652.661998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1652.666078] audit: type=1400 audit(1571728581.323:614): avc: denied { read } for pid=31995 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1652.697670] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.706912] PF_BRIDGE: RTM_DELNEIGH with invalid address 07:16:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r5) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x6eeb5f17161ffb0f, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)) fcntl$getown(r0, 0x9) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r11) fcntl$setown(r8, 0x8, r11) [ 1652.731404] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.737948] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.755243] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.892805] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.915699] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.947849] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.962500] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.971140] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.980929] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.989035] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1652.995139] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1653.000927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=31995 comm=syz-executor.1 07:16:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:24 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x11}}], 0x5b3, 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 07:16:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, r5) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8008904}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xd8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1d}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r8, 0x0, 0xffffffffffffffff, 0x0) 07:16:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) unshare(0x400) r6 = epoll_create1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) 07:16:24 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48) 07:16:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000400)={'icmp\x00'}, &(0x7f0000000440)=0x1e) 07:16:24 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) r0 = timerfd_create(0x1, 0x800) ioctl$int_out(r0, 0x6, &(0x7f0000000140)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) unshare(0x3c050600) socket$packet(0x11, 0x0, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="220000002100070777d0000009000701020000", 0x13) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)=ANY=[]) statfs(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="220000002100070777d0000009000701020000030000000000200003050013800100", 0x2f8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000300)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) [ 1655.370581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32045 comm=syz-executor.3 [ 1655.395979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32050 comm=syz-executor.3 [ 1655.476410] audit: type=1400 audit(1571728584.133:615): avc: denied { wake_alarm } for pid=32056 comm="syz-executor.3" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 07:16:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20000200) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="665b6c7465720000000000000000000000000000000000000000000000002592e6252e3272274e6e9ea000000e00000004000000c00300000008000000020000000000000000000010010000f0020000f0020000f0020000f0020000f002000004000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000002000000000000003c7f00000000000000000000000000000000000000000500"/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000002e01544545000000000000000000000000000000000000000000000000000001ac1414aa0000000000000000000000007465616d5f736c6176655f3100000000000000000000000000000000000000000000ffff00000000498d45ca4cb222b69763072918778429ffffff00000000ff00000000ff000000ff000000000000ffff000000ffffff0065727370616e3000000000000000000069726c616e3000000000000000000000000000000000000000fe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300800204000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800434c4153000000000000000000000000000000000000041d5ad53a0000000400000000000000fe880000000000000000000000000001fe80000000000000000000000000000a0000000000ffffffffffffffffffff00000000ffffffffff00000000000000ff726f73653000000000000000000000006e723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000c774050627000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0xffffffffffffff34) setxattr$security_capability(&(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)=@v2={0x2000000, [{0x3, 0x7}, {0x8, 0xcafe}]}, 0x14, 0x2) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r3, @empty, @dev={0xac, 0x14, 0x14, 0x29}}, 0xc) r5 = epoll_create1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) [ 1655.502670] audit: type=1400 audit(1571728584.173:616): avc: denied { create } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1655.503125] audit: type=1400 audit(1571728584.173:617): avc: denied { write } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x222a5500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1655.523396] audit: type=1400 audit(1571728584.173:618): avc: denied { read } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x89d, r3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1655.527853] audit: type=1400 audit(1571728584.173:619): avc: denied { create } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:24 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000080)={{0x0, 0x2710}}, 0xfe07) [ 1655.528302] audit: type=1400 audit(1571728584.173:620): avc: denied { write } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x125000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000040)=""/76) [ 1655.535839] audit: type=1400 audit(1571728584.193:621): avc: denied { read } for pid=32039 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1655.739802] input: syz1 as /devices/virtual/input/input4 [ 1655.769587] audit: type=1400 audit(1571728584.433:622): avc: denied { wake_alarm } for pid=32056 comm="syz-executor.3" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 1655.802158] input: syz1 as /devices/virtual/input/input5 07:16:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:27 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_HASH_MAX={0x8}]}}}]}, 0x3c}}, 0x0) 07:16:27 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x800, 0x0) write$9p(r5, &(0x7f0000000140), 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x6, 0x4) 07:16:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@empty, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "ce32a3d15535c4e8a63a92"}, 0xc, 0x2) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) io_setup(0x82da, &(0x7f00000000c0)=0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r6, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) close(r11) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000780)={0x4000201f}) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r13, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800028}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r14, 0x8, 0x70bd27, 0x3, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000180)) io_submit(r3, 0x4, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x200, r4, &(0x7f0000000100)="8565fdf5a7189d5b67f3ae61e870d6ee256d7af9a7cda6be198544f1ffd5dfee412f6c1f1910c57f673d31331346ba8ef48ae77e8ef559a372503ab22d1e6bcb9165017333570d862b5872238a2510", 0x4f, 0x0, 0x0, 0x4, r8}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r9, &(0x7f0000000200)="440b6f1a712fcb7866a8ca36d3a17fec4a4991fff2ba736c81135c60571a10016f72be487158177f6580a5969fae216bbf098a923b09b3a70c389232d43f5bc8f95653ed2ffbef0056312cd89e6381ea193bd73e8955da486d342b17f60ab3b9b866a34e340149b321de79d1a5529dc27aeb8fb7f44c0ca83048ff8de33ded6703503b025b39ea03afcdac5d4e3694416a8fd9dec708828adc2ffa49b3d9d0953d7111cfceb800cc39e7cdbeb74a92b522e7d82488d7f25ebd07f2204a33d364eb6c1078e90b05a8d8a8a6", 0xcb, 0x5ec000000000000, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x5f10, 0xffffffffffffffff, &(0x7f0000000340)="c0aa2d002e4e6e69df1515ec6a55815f03a14c630b9a94cd", 0x18, 0x2, 0x0, 0x0, r10}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x32, r11, &(0x7f0000000400)="80b1263c435c680602257c14667ff3d10805545b011e21f5a90f86fbca040f06bdfebce2e24108849e1d0626890f9fe84203f4a0d7d48982b0c9c42c37cf9475f6e774a360164e772f81036052ce2c97f2144a8b50d6eaf4e08bd62494790b104a51", 0x62, 0x3, 0x0, 0x0, r1}]) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x1f, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x508f18cf1a8bb3b9}, r15, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 07:16:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={@empty, 0x73}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000340)={0xe2, 0xa965, 0x0, 0x0, 0x0, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xd) r3 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000140)='\x00') bind$inet(0xffffffffffffffff, &(0x7f0000eed000), 0x10) poll(&(0x7f0000000140), 0x2000000000000055, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) 07:16:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032cbd7000fddbdf2501000000000000f50641000600000018ebff0a7d69603a6be069662900000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unshare(0x400) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x1f, r0, 0x1000000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1658.663337] audit: type=1400 audit(1571728587.323:623): avc: denied { create } for pid=32116 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1658.723777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=32122 comm=syz-executor.2 [ 1658.785951] audit: type=1400 audit(1571728587.443:624): avc: denied { write } for pid=32116 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1658.847675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=32122 comm=syz-executor.2 07:16:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) write$P9_RWALK(r1, &(0x7f0000000000)={0x4a, 0x6f, 0x2, {0x5, [{0x24, 0x4, 0x8}, {0x4a, 0x3}, {0x40, 0x2, 0x3}, {0x10, 0x2, 0x4}, {0x6, 0x2, 0x1}]}}, 0x4a) 07:16:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000000000000000000000000400000000001804000000000000000000000c000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000686e138c6c0ff77500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6599200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053cbf7eee533b170000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee7200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800"/2376]}, 0x9c0) 07:16:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x34}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x22000400) r2 = epoll_create1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 07:16:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000040)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x8) [ 1660.786356] audit_printk_skb: 12 callbacks suppressed [ 1660.786363] audit: type=1400 audit(1571728589.443:629): avc: denied { create } for pid=32300 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1660.816362] audit: type=1400 audit(1571728589.473:630): avc: denied { write } for pid=32300 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1660.846464] audit: type=1400 audit(1571728589.503:631): avc: denied { read } for pid=32300 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1660.875002] audit: type=1400 audit(1571728589.533:632): avc: denied { create } for pid=32300 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x178, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0x0) getuid() unshare(0x20020000) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) lseek(r0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000740), 0x4) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x4) write$nbd(r1, &(0x7f0000000380)=ANY=[], 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x7c8d645823812c52, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) creat(0x0, 0x1b4) rmdir(&(0x7f0000000700)='./file0\x00') 07:16:30 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) close(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xdbb7491dada74e84, 0xa) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x400) r0 = epoll_create1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 07:16:30 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000100)={0x20000011}) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) fchmod(r0, 0x246) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, r5, 0x0, 0xffffffffffffffff, 0x0) 07:16:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x101) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) unshare(0x400) r4 = epoll_create1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) [ 1661.423989] audit: type=1400 audit(1571728590.083:633): avc: denied { block_suspend } for pid=32310 comm="syz-executor.3" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 07:16:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) mknod(&(0x7f00000000c0)='./file0\x00', 0xa0, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x9, r0, 0x8062, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, 0x0, 0x3, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x140, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0xe19, 0x0, 0xffffff00, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x7f]}, 0x4, 0x81, 0xffe, 0x6, 0x5, 0xff01, '\x00', 'vlan0\x00', {0xff}, {0x80}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @multicast1, @broadcast, 0x8}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0xbb}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xd}, 0xff000000, 0xffffffff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x7f, 0xff, 0xff, 0xf519d807d381b9ca, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0xff]}, 0x6, 0xffff, 0x6890, 0x1ff, 0x18f7, 0x5c8, 'bond_slave_1\x00', 'bpq0\x00', {0x101}, {}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @remote, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:30 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000180)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETXF(r8, 0x5434, &(0x7f00000000c0)={0x6, 0x0, [0x2, 0x57f9, 0x1, 0x4, 0x7], 0xab}) 07:16:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) write$UHID_INPUT2(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c4000002b006f4e40398e8ba9f22dc305a9077822162cf1ee61f63be4db18e5843a90e1a0b7ec8df7d7e21f99a56dfda6"], 0x31) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x25) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 07:16:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x100000000) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0x200) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2000, 0x0) r4 = epoll_create1(0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'nlmon0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/l2cap\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000000000000000000000002100"/32]) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x178, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0x0) getuid() unshare(0x20020000) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) lseek(r0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000740), 0x4) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x4) write$nbd(r1, &(0x7f0000000380)=ANY=[], 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x7c8d645823812c52, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) creat(0x0, 0x1b4) rmdir(&(0x7f0000000700)='./file0\x00') 07:16:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000140)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x1, 0xe5, 0xba5, 0x8001}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x17b, 0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x2) 07:16:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = epoll_create1(0x0) clock_gettime(0x3, &(0x7f0000000000)) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xc6, "d2ab8027242d31357ecd633cb56bec5f3ccbd194836655602ee40b14574ab4ba4f2637c8e7e8be5314308c53c2d7345bad69f2826ab04e85e1f9c088ae1f7c2f002f139d2fe1a65f9821a2fbdfe1d198c8cc503127af47422fea1e19cce39513ddbc7067462bceb6dde25179bd37e36bc65f8dc42aa79a950ce87144b0d7af25f1633bb4eb40ede5783d4798849b5456cb5be517a14dde733e4c99ee7b0a2016df7380bd46ed764aad24f3bd8de999758ba09baaa2acf0367b71aed077bf2cc7c329b90bd126"}, &(0x7f0000000140)=0xea) 07:16:33 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) fremovexattr(r5, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r6 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x800) r2 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r3, 0x1, &(0x7f0000000140)=0xeb) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) 07:16:33 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x10, 0x3, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) close(r3) close(r2) pipe(&(0x7f0000000280)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r4) close(r5) pipe(&(0x7f0000000300)) splice(r1, 0x0, r5, 0x0, 0xc0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x2) 07:16:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x7fff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r2) ptrace$cont(0xf6aa2aaabd96b2a5, r2, 0xfb, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x80000001}}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x0, 0x3, 0x0, 0xb}, 0x20) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) [ 1664.775410] audit: type=1400 audit(1571728593.433:634): avc: denied { create } for pid=32398 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x101000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r7, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='syz1\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r7, @ANYBLOB="040025bd7000fbdbdf25160000002c00020008000100040000000400040008000100030000000800020007000000040004000800020005000000500007000c000300070c000000000000080001000600000008000100040000000c00040050000000000000000c00040081000000000000000c00030001000080000000000c0003002d0000000000000044000200080001000500000008000200080000000800010005000000040004000400040008000200070000000400040084000400080001007f00000008000200ff0f0000"], 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e8, r7, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffe1}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4463}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x59) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x13, 0xc55, 0x6, 0x7fff, 0x40, r5, 0x6, [], r9, 0xffffffffffffffff, 0x1, 0x5}, 0x3c) r12 = epoll_create1(0x0) r13 = epoll_create1(0x0) close(r12) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r0) ioctl$int_out(r11, 0x5460, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1664.836151] audit: type=1400 audit(1571728593.493:635): avc: denied { create } for pid=32398 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1664.940796] audit: type=1400 audit(1571728593.603:636): avc: denied { create } for pid=32406 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1664.967174] audit: type=1400 audit(1571728593.623:637): avc: denied { write } for pid=32406 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1664.996201] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1665.002446] audit: type=1400 audit(1571728593.673:638): avc: denied { read } for pid=32406 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1665.100890] PF_BRIDGE: RTM_DELNEIGH with invalid address 07:16:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:36 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_evm(r3, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000200)=@v2={0x5, 0x0, 0x2, 0x61af60ae, 0xf1, "05617e5a6155cd88b2aa42d10cfac4ff186b28ac1bc75e858f50132f6f6697b9555100d0dad2550f82b7354a0800c6714227d37152d0e8a58a608b46696e8779064b2aaa18abc82007bf5e5b344cc5530aee208798e168dba7ab599a7450a82a322c2cd2056781a727046a905c7a9feaca5d8bc67c02592708995fe6509af0d319fa96f3e912e9c3944d958fb3ba96815d6d07e8505be84405f0650e79335264cb407ffe1e8455e24856984eba4e1032f6cfaae563bbf194dc5b4318c320bf5981d0b9e50ac34e745fad33ef7d598c38cc6b0901d2aca2d9ceda55d513141df445df96d2c6f2f98436479e11de835391eb"}, 0xfb, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000033001901000000000000000004"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10003, 0x0) 07:16:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000080)={'ipddp0\x00', @ifru_hwaddr=@dev}) 07:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/l2cap\x00') r2 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x80, 0x40000) recvmsg(r2, &(0x7f0000000600)={&(0x7f00000002c0)=@ll, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/21, 0x15}], 0x4, &(0x7f0000000500)=""/193, 0xc1}, 0x2) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x4}}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) wait4(r5, &(0x7f0000000640), 0x4, &(0x7f0000000680)) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = inotify_init1(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x66, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r8, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:16:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00WD%l\x8c\x8e3\xf1vS\xdeK8\xd6R\xbd\xd3\x199\'\x95J[>u\xd4l\x8c\xd3\xa6\xcf\xc99\xe0\xed^OM\x9a\xd8\xa2\xef\xee]\x11\xadD\xbe\xf7P:\xc5\xf4\xc2q', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getuid() epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1667.455332] audit_printk_skb: 9 callbacks suppressed [ 1667.455345] audit: type=1400 audit(1571728596.113:642): avc: denied { create } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1667.567049] audit: type=1400 audit(1571728596.223:643): avc: denied { write } for pid=32422 comm="syz-executor.5" path="socket:[107365]" dev="sockfs" ino=107365 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 07:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r4, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000000c0)="e8462e8381c3f15ca890468bbc674cb4", 0x10) [ 1667.597117] audit: type=1400 audit(1571728596.253:644): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x52bc) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r4) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='big_key\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) write$P9_RWSTAT(r1, &(0x7f0000000340)={0x7, 0x7f, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="0e8ed2115b2c36c0315e109d551019cf", 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r8, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, r5, &(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x3}, r6) [ 1667.681363] audit: type=1400 audit(1571728596.343:645): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1667.725846] audit: type=1400 audit(1571728596.383:646): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r4 = accept$inet(r3, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000001c0)={0x9, 0x3, 0x10001}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010000510648f600000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c008a0fcb9196200a29000008001b0000000000"], 0x34}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x3d, 0x80000001, 0x0, 0x5}, 0x10) tkill(r0, 0x3f) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) recvmmsg(r6, &(0x7f0000001600)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/132, 0x84}], 0x6, &(0x7f00000015c0)=""/42, 0x2a}, 0xc2}], 0x1, 0x100, &(0x7f0000001640)={0x77359400}) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4000000000000000, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 1667.752905] audit: type=1400 audit(1571728596.413:647): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1667.788446] audit: type=1400 audit(1571728596.443:648): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) readlink(&(0x7f0000001400)='./file0\x00', &(0x7f00000049c0)=""/101, 0x65) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast1, @dev, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001440)=@ccm_128={{0x303}, "e7603fb2baf5b9a7", "d6a575b8fc8a0086a861b3466959ef32", "4b663cee", "3b8298f8d6e7b3d1"}, 0x28) pipe2(&(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) sendmmsg$sock(r4, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x101, {0x8, 0x9, 0x20, 0xb3, 0xb1}, 0x65, 0x5b}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="2cd149340b52b6241a3308a576a50cd9eb4d6373c844900c640556593c71000a30fa0cfd60a5919c89cc818a34788097a46761264676270286416cc509592773089a77e855516350b79346c698d4e71e254558ce2fa8", 0x56}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="ee19589fa199cc8a43d0d596877c989d3d13f65568200d89930ef1b36b084e1eb2145af7518c1f28372e41a712fa349ca71549d4290438ec04def888a99422e676123a4f5e35b38f4e3e195b", 0x4c}, {&(0x7f0000001280)="b26675eb8ae2644ff7ceae676caa1512b165e30a23607fe708f2e4d56005a4982fece1f59927236d67ce0f16dd5b63b2cee91dac8c0fc6ad87", 0x39}], 0x5, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f0000001380)=@generic={0x2, "1db0ca72cbee3aeb7a13fb161ba59c1d5fdd2e69717b4b6e445f69d02324b2a38398d17d9ef5f4a3340b5cd677db3f0eb96f3f4dd0733a30b41c79470fdb21b1d96b7333f35f4873d64e3f5bce413b71a76e89c8cff3669ccd966cd6d4feee4cbbfcce2c98abcc6830072251e808969eb424f6aaa6ec9572e02227d999f3"}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001400)}, {&(0x7f0000001440)}, {&(0x7f0000001480)="93efe93687e01234bd345e8eaae2ace313c18355dedd6f0efcbf886453eff2236553b3901ff43602d57e4abb27d370fb56360174f3687e74c0b6050276602e57037c835d35de8c5f30943c1e2b5cb53ea6508473125e1c030a3521f67e18a0841e72301e5cdd8f404a049d041016a661655ce57866fa99c71fcbc4a04099ed90fdefe79b818afbd20149a951de3eacd78db967166199579381ef8195ece98d8061fd66e6793128f2361f5667d8a63fc4195e6de562671fdb63", 0xb9}, {&(0x7f0000001540)="63382470f1a8", 0x6}, {&(0x7f0000001580)="797772e9687f43e02bff84d7001b0379bd5dbabbd2c82772883b525fd8862ba9d1d8d94200646736ca2b05f6eecc643fdf60e4276435d1bd1bbd96", 0x3b}, {&(0x7f00000015c0)="8e3c97ebeb85edac2f0b02d170384133ae82ecb7d159b322c47db44d8c3d9dbc5395dd660fc1dc1ae6a637f4fea5d9987dea2d6d7d87875496a9412b0f9cef028bb8c33e14fc3c4ea23f895784c0248a0cf044cf3fcb39e35bd13fb6ac8f326fadab40a0c4160569be9e936275ad23ab1c233bd617e9df27837a2251f5c09a0f75c7a413f4bcde047706b6847772613fde692ff1687d175c5ab6c148d0380da06f09466fb7982687b181cdde26a7856bceb48847064e9ad22550f653ccd4e00bf446e31b46c2439395b273ef592cae191c231496283c5c336e7dcba51280ee1cc09f971c3ae924434472e0cd9bbc", 0xee}, {&(0x7f00000016c0)="dd4d5571abbf9f5a5bd9ff3661cd65a7a34e98d0247434a80cedd0da0fa0dfc9b0ee70575eb8e10b777fd91faf930f75eaf493255b2283162b1981e4f91371bb42e19962deed74c6b20e68fb21f7c2a11489e29273322e412c1b214e377589f60ca1d33c15389235b99443eb73a95a12ec02788d742ac88e3d7d23ca6e13884e8b1b4f9d839e69bdad91b7c7c961b3ca11593dac96339a4e56ea1ea72cc20f02de4519d3aac2e07bd734", 0xaa}, {&(0x7f0000001780)="f5be74bdf68f22fcb93588b76b00ef21bd81b3ce25497aecba1d05ca2252fc99d7a3c8ac44c8920aeb9ee23cf758b828b95872efdfaa3b1187e3d32f9f03ec4914499aa71fe69872e5ae12ac2aa333cce7047d5af72b9e2a6aba2f2d00602f98231575db05408b90022778019b9e1894ceb2c70fc329fcf5247a98e0315ec182eb881b4328605ac0defcc2367704b120cb97893247ae4ff72449f59e666ce1bd7f3f1b8c1bbbdb624255aa90de145feaed5b0280746e09f6a804ec5de9b17b1e2503c58df88c582ac1679e388a047b2ca758dcfea3d4d24197ee45428b0a60672b671e2bf12b10799d8410f4a18f5da161de9ef8", 0xf4}], 0x8}}, {{&(0x7f0000001900)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001980)="2f4dc7c61c591510f9651f042fb8ceac7f01afb98d365a5cdf1406c76e189021906a2df46ee9607f5679bc982c97001f44f3c703825bb271316f19058ded1853372f1f1602d3671916feea89b416754e88f2b3ca998763afce4064d3f5fbdb406d560dc3caafc4c5b11c3bfd0b2607b404f1cafd230c8e256228786e546772f8a0c3f8ab2b09ec4088ba2c0bd08a8b6f9c08ac2fd950", 0x96}, {&(0x7f0000001a40)="4c798ddc8a849f3c8b37214e8297733b68bcd56c012910b9291c69e18c679b029db1848f14752d4f95ff501945937e2b5110d92dc3c11bfeefb4b3fd50ea110cccdf1d12aab40f3c1c42d091c92ff5c4ad1a5fc46f0374d9e6aa00c45409feee63371f5d9db1546302f327da114af7632cf65fb1d0312f20255a6999596e4ea32f1eb3471a2c770791eeb1311aaa84246d5284eb3887a4aadef648430b6cffe914274d50f36161d30e0521412ff2e60b80c604233519da633a0d6430d67e29fa91d61e973c0b6b0cfdafa959bc841de556f7d0d4e41c98c22024330d449c7fe2b6e65e5008c0de58cc9d0ec6b5167ac444646fc6", 0xf4}], 0x2, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x30}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}], 0x90}}, {{&(0x7f0000001c40)=@rc={0x1f, {0x0, 0x0, 0xe5, 0xb6, 0x5, 0x3f}, 0x4}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001cc0)="1a32dc135810c90dce035721c3cb7fa7c54f8a7fe0c1533eb94c80cca52c82b3f473c5bca0b64c5399f41534bc879eb065836795e307f3fc4f89e0112def5633e5b253f5f28330b64167a9b8c346d3d0e38f9185045b42736ab0de8f4ba0b20cc90ae87454850a84fa08c9dcad94c23f710684f80763dcb14f1049fedecc48282b0129be45e6778e199605d665e88a6cbbb63ce0b3186332ec1e65e96406ad03ef14921c", 0xa4}, {&(0x7f0000001d80)="f89e4f13f6502804d21fd0206a782748eade4af25ddf60c75b7028b5abbd7f32720ee59de3850b5c926c0149547a2190c2c9daee9f0c50c3c1b17eb1dd11b25e1e6a68a2e33d509f3df12c282e38937f913ce8f2b395a04808d9c2d0cc6555c27126cf01ccc35ee3b6514a0b2cb00f0415875ce0e1a662080bdee69e0d1754fcbcfb8fb882f5b6e5accf5e5452233cb9ea051d832aa9ead734afb59cac286232450c29b6a4d248ee45e798b0a3e0048ffc955f79536cd382f013b4215ab5f920ef8dc9744d92bf7999b6c9cf3c7e53736ebc1a66668d01f7c53298e09542ffc609a8aec2192f0dec6e83949b822d9489a6ad", 0xf2}, {&(0x7f0000001e80)="02ddef1b5a6de8578a383cd18470099e7008b18bf937589e896dae061feb9f06", 0x20}, {&(0x7f0000001ec0)="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", 0xfb}, {&(0x7f0000001fc0)="23147a96e1acad2493f2a90fe9c84d9b1af16c195c3919b2391082d9fae14cf4bfe1ee0392949e71a17694594e02e2c2795dd3107ef60e1e3cc9f2051f83", 0x3e}, {&(0x7f0000002000)="a801f87901faba6c89346419be08d3a7eec93cfb6a6b058d9d350ee9098e5f0a1c62836f5dd6b61a4b8703f8d663cafdf5841bb071da9e7ff53ee5fdca9940fbd3b741a2eb453e1838eccff59a02a3bc7fce40da204055ed1f3b1b7b04d5cc1cf6a3b1a83f9507a9", 0x68}, {&(0x7f0000002080)="781b2503ce363f5283f05c18b9be98bae0ce279f26f6592fddab4b5617c43469f4918ad060c142cc61cea9acacb5ac2ae6fbf80dc6606213e4475727cf7c0740482d9238f7cc296ad17a6a92965adf2a88aaf175e9c6c188cc47a8e6d3bc3970f6b19214b7bccb44651d2a009701aec4764f564e93df2405faf17c187943b8309b13115ae12d64829f15c232fa482361386e05c0b294b841f8d681465b0d4e630fbdf41b8bf4a23950188a686973a920041f15bacfbac70a4e4ac7ca38564e187c11804823", 0xc5}], 0x7, &(0x7f0000002200)=[@txtime={{0x18, 0x1, 0x3d, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x78}}, {{&(0x7f0000002280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000002300)="3e1e4d285ace33b965f3adb115e7cb7a4796be77b154cadf276e81c7ac75a437bc891be89d5cb301de8f8dc4cdc347d00639a5e9e86763696664d97e17eb2e47aeccad757335d4233d37acdf3dfd6b11cee6d7b439d442962e3783c5f256a2ed181225ff44ed16da2e13a4f45accacc5c8ddef32055fbcce63b11fadf84706102ca78726c847c9d511f5a8a4647f12993e8301f028bf34bf8eb21390d541f08a", 0xa0}, {&(0x7f00000023c0)="b24e3b0c2d1b207cc55679e7dad5db6e8640a435e4894ef2028fb16364fc1830058a84e5fe3c1e5b138392e851bb30ab3cd4234367fd01dbba2f48f9c9053f2a111018cd7b6c2933c437e3b763943eb1b667b69284d4863b986ccf5ca6aaeee754d7339ec853d25f079257739174e50d166455399ebef391e3c0fff159da52b321fa20b1a09541ba09cba44b0702ba7ea0034dce8ea05e85cba9ca", 0x9b}, {&(0x7f0000002480)="010c5d2b8b52a8a77e9dc64e0d8631eb", 0x10}, {&(0x7f00000024c0)="b54e5515792a56e7fab80240deeadd7a66e213d79dd889058a6b71c7f1e6496552c8dd73f3e7d23dae3b9ad464efd44961e30b08247a765317edd890e18c69caf229167382bdaa54cf4a7b0aa604e463030c068be65e2f1bd01e6e83c21464c51d20b576c0b27a5cf0de24d94fbfa12f0f0cebdecb5d0b2c728663f6", 0x7c}, {&(0x7f0000002540)="fb49f0a210ffd42009d7f9e23fa04e0fcf42cf15bf7f774493ebca5c0a23e76d8f94af2d8fad667157266f52bc2447d269f85f8c13cb30948afc7c8d51c136e38a8e284b2931bd4608279677894b44a0d420b3a00069f749e0fb3d1071a2fe5f385ad71b395ec51f4fbd4c76105ce411b53b7903180045c534a43d9b132063e0c6faf824b87f7aabdb7bd6aec4503893a54ae807bb0926dc6ccfc6334ad69c618ecf30c13b461f9f357b2ea32d510dcee6c105c9bc0380ab9f01f60ba00d0ad9bcb0c54c716cfdf98e3f4635875c8f01ddffc74d", 0xd4}, {&(0x7f0000002640)="9ce8523a5c4af17db91d3846a335c369232271720c8695e814a8b234fae48964a7d5299da3ecb63ff1a78ecbdb4e", 0x2e}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="5868973716ce566866bd19f674a529a7db6e4a3630a298b0d79e404f3a9966c607ae1d", 0x23}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f00000046c0)="40c9ceb85e14a78e1050ba411bc4e4869a4394b556c551d8142d922c631309c7895b7b0064edcd93364ce909b117bd3bd11141cb1207240bfe8234c8d4c70396858331df2c37720f97606e048b520c8941e5c8cf2abb52360b7f045c413295ab976803751edf555f59ab5e4d2e19627494b9dee0583c8c2e7f317ec23043bcc03cba53f9bf3015bd5e4c707bd90c6d8afd556de450676c25399174d8fd48bc03c5cdeabbfbb5a5fdcdd5dd41422f969d61d7c4e673cc817bc052baca7c7637468eb7f80cdecc2afa", 0xc8}], 0xa}}], 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1667.854810] audit: type=1400 audit(1571728596.483:649): avc: denied { write } for pid=32422 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1667.907827] audit: type=1400 audit(1571728596.563:650): avc: denied { create } for pid=32466 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1667.908665] audit: type=1400 audit(1571728596.563:651): avc: denied { write } for pid=32466 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x100000000) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0x200) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2000, 0x0) r4 = epoll_create1(0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'nlmon0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/l2cap\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000000000000000000000000000002100"/32]) fcntl$setown(r4, 0x8, 0xffffffffffffffff) 07:16:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$VT_DISALLOCATE(r2, 0x5608) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:39 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000000)="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") epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) 07:16:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e001000000000000008a0200089dbf5b3b8c3cfe5f0028213ee20600d4ff5bffff00", 0x48}], 0x1) 07:16:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x16}, @void, @ipv6={0x3, 0x6, "a2e77c", 0x75, 0x3a, 0x8b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@routing={0x87, 0x8, 0x2, 0x7f, 0x0, [@ipv4={[], [], @empty}, @remote, @dev={0xfe, 0x80, [], 0xb}, @ipv4={[], [], @local}]}], @tipc=@payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x7ff, 0x0, 0x3, 0x3, 0x3, 0x1, 0x40a, 0x4, 0x2, 0x4e21, 0x4e24}, 0x2, 0x1}, 0x0, 0x4}, 0x2}}, [0x0]}}}}, 0xa1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000180)=0x7f, 0x4) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000140)={0x8001, 0x3, 0x4, 0x40, 0x7, 0x1}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, r6, 0x1, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000100)) 07:16:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) sendmsg$sock(r1, &(0x7f0000003600)={&(0x7f00000000c0)=@llc={0x1a, 0x110, 0x5, 0x4e, 0x9, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="c726e49273837a4eca48a20d069df52bdc0269c6861919a88c4b4294255df5a3e7cc419f30a54b9ffce9748be0639943afc454172e029534acb459614285385b2c8195ed535255c9a92cd4a40c4e81c533f48c39eae16784b04a26c6f361092b1400c4f19795b04cee6fe533253bc5261370fa4092ae811a794a498f762ef19359d8491eb8c1e2708153e4ed9d695d797fe4e97b19706615e2d432abd15ff6a31adf1b83431f56372733b5abac25562ad736b8deee4ae3fec0aaa955d459a23d82be1bec7da01381443e3ace01", 0xcd}, {&(0x7f0000001240)}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="74bda51caed736f752ff3ff1bd408ab6fe16272675676efc18406a0301ef85513cb80a165d46d7cee30f6be575ba41fc1607175c0bd3a5c2c46650d859b30117a7b9b2b799399847d5033b6f0ad15e876a7dfff79b8414dc49c9ee0fdbdfd76096eb19202067a0e24e8473781163bf7b2bd985515d0c3c09a26b1b7c3432b2dc0dd0807a8f2e18c414d5397b8778b8f448d20ec97505955af47b737f0511f27427fe4e5c50154f5eb566f9b1e8cb33b8acc38bfa76a6391b72cab1923a0b443e91a3cfd904b540a2b246ed48f28415180e375ddc07121c4c3deffe1c", 0xdc}, {&(0x7f0000002380)="b8bfdf8be431a3930bf77c364e3d818ceae27dcf0035b17c365cb6ec6f19d6b87760263d26ca4fdb4dcc12c75254acde4b31afa7eb051053415c48e1ab52172097e95b518b536597369e96410f6c6ddb847fa140c2c5f39e484d033674356b7b4e77f7b7aa13080bb521160fc7d351e4f1ef4252808644d8d672eaac3c5764ed1d513a80896964332da767d78379379fd65bc755f65057be4eae4f752e340ab2c47023d77cbf7a50776d1d18a49c969636864512baf0a38bbd615c53ee1411f8e1ad7500244825e53ce898d57e4cc00c25e18afeb9a10a372025e11c95de0fe18b2da738", 0xe4}, {&(0x7f0000002480)="bdf24344396b54f9c27945060f44a9ad3b1c6b8c2f1c27c40c7c9fbdd08406be86961cff8839222bb03d7ae6bf6921d206903d375437653a54245f0720a5d4ccf19024f3a067a855b743dde4d9274bdff574747b28c663bdb15cf74bb9af3ce7ac7eed0462d0ad98df378661981cb019f84f9688e2c1f0a82777ef71f1c0a37352b77ff7dc466b8c2e32f36c51b06c10290c71395a2cc5902e58af955f0157bd3c2bd6b2dc6a7de11bec347961f5f0d8614c6d126bd973fe88db8e65deb23c2825a15e1a35eae87607c9cb877fe350653d15debdf572589eae3def39fdabf389eb61c19ccb5ec07399625fad6c9ba85d012f05d7a7b05e2421a310faab1e2041ed86a5985a2df99e8a0d64b3f8962f07085f5e5fc16e9e06d5cf49c6809e72c1714ff2a407b694dfb8544eae8746899b187a118f7f8e4b149fd73bc9420f7f7131bbf737e83c0298f200e8eb02974c0de8645bd686db73ec9348e6adbededd8c82a7bb62c41a4a79d6bf945527c0c25933ea6deb213ded91519f171246cac04325f0cbccd71f427c9209f5be71277120a9af6e6b66f61d24038e5830921c00475df61f398baed8a4db600857806412abfe9873b75d2e819d7805478504b55b880e00e2af21d7464f83077dce27a3a5da7172a5958e6a5664c47fc0833293eb5b1b5e2bed85c9c33c909d8042b984f0cc5f5d4b6dd922c2ad91eb9ddf36d600dc8aa997dd5b20e8fdfa7c6b65f1fc75de909cd61ac68f38ab62fa303c30b810807f757d77045d04343c5c155c807142fe7ed2ab45921bc88dc166ca4ed3d06b6fd80112e70dcb4e583a81623a82e31ab791569d13ccc74ce42420a7210ecd960aff2ca89441dad43566d84ff6f1678b18a8ed33eb7eebdf57f5757d64d92e7e48ef4feaf62443699ecfcc85d67c689cc6d4632720033d5a97a1f210166445f463b1cea30ed30e4bd568e1733157ddfbf5bcd2714700ef6c8900d2abc106bd4cbe29eb9dd5880bc760d5ff67e0a2b5cf53d8a589c471127f6dc772796f8ecb16f892f06981dcfaf78496b7eb12339fa315688d9885194a59f2953f33e04311412cf7350f28d75603de99c565ffd527ae6129f8bb02b6ce1f70d988e149182d249b80eeb60b05af0540742e82b020801d4d965d3373e95cfcb3722b96120773fa2d5f406f77a3528e62f0201337ea7c2e6d9fded9ba976bef70fb4b7c0d58a225073d37eff741c565d6f189d3a0b73ed59f6a5e8b6902dfe1aa05b09fcf956428fd689b913ba113ca97ab432404ab63ca97c301df6984705809750b95c8e6fbd9cd81cb9a105c06d64c988ade12aeb053dcc70ca429e947fbde1e4e8e321035697d9d783436624b6842499528d381c91680a997d7be13759d1900ec11adaa62f8f543a47160e4b48e1276bc31ea9600ecc0a7005cd077f91ffb13eee77e2e33e7010b87c62334f2ef35529d96b44455bd40c56aed6d5758f47ce3e14a6ab530afbd610ca8ddd9fd1ea278575709edbe08960e258345765b13c9bf35b1b5430cdc39acc14bb83cad998c51f36e5096f73f5a8babae49996600204e8eff490dea59b81636bb34da8069eaed67b16d09ce80b6a41351b5877a71c8d122c50459c8bf5415e7d58fc707141d071a0c1f41d862a7d014e024566aa18bfe7592f8d517d2a299d6e8ec35d3c8938bd84517ac00b26b241fdf67d8a9ebfa6c3fabece044bb530970a1e604be7c61b76d45809a9b4d126bd163b32141a25eb8c6fa0102001205cf938dfc027d146ce585c38e154628cd586bc4759e3e4b300487d295308a639d8f4a0f30dec2cf87dd87203f5b2929a3d37dcfc613a17cf008fe5f9d719114e62c624075791eb9ca7c4ac1ed1f84848862ead11aef596be515f1c6e6d404b69b8778a75f3f6edfa981ab47e554e62144c64447640396a02ecc84d3b161d823368f9bd3859f9d449ae5b38ed571bc4b82b1d2387103faf04372cfb1c99b2e6901a45a1f56658cbbe6f754d2e684771655b2485abfecc3ba87499d2d13933c06c2e83f8b8477e5cd92ac11ac7c7403847280729080582543c3de07e69db9d108f0a21317212c3e80dd8340e0632bb5e325b194d9a4c6e6688112563ddbe4c398b6adfc0c05c7ecd94da2ddcba564cc98d507affc116c5b8689777a4da989ef14aa98f27c217c748be3bae29a804683672baa3474f977daa1edd66bb93074c5a7c61c07b331127be4c58530d2e1678711bd7d032154eb1638b9b68ef86b4f187ac82cd44bb5ce7e6be2a147db5de6c1c55e9ce3481f595f69f398682976183be72dcc8c687c57f2cbf2cc633818071e18e8a17d082ade941a287c301d43062079ad8e5ab0126f219c699acad89e87a4c5782628a095b278567b1ba80a16f260b0c217fd01966c854f0b7ab8edc40bd396916d968925eb77051b20ac5bba66cdbc9ba83ba66b00c10f312b8f75ef6c3a87ac04f4c99e9b9e0651ff4944392bea09f80c8724a1abda046f9c1e767eb3466b69ca8e21626f6878d7c334d5a0bc376e31acef9c31e534ee1262bd91f9a93c5a39c9785a54ca676ef82366cf7ac502d6709b4b1b78b7f33c595b1cec54ccc2d812977fbad572b4da9c8b7f31d4e1798de1500b0024d1ff821d3f7a1c0db278e5d234f04ae9f419af706a74dc0be74a5f54a8ab1327e229e6467ab9a885a041dfbbab9c537b1ed3e2d3f12b00aaa91b05454be2f28149985e97723d1d3cc88aa8dc985f749f6cda06b25a60b0ada23d3f4cf1ce88e0039122d726638e5efd14a576075f62052d0cb31b904e6a4f9d2f09262c411c29c33012ebceaf81cc76b2506d6de1ada965f0058100dc58111ed53b2c07234a2e2a5784fda6d230c9b04140bc416746106466624e0dca3209bab90953a8561398483cfb24e86fb149a341a9efa33c6ff45629f8cc1a485b4bcbb22cfc4ce09a86934b45f23803c9fb30a827880475f0e15f20754eaf98f7d0186578860fa38481c14b027c79562596a17a4f94904d1d6c805889fa978d23a5fdc6227ec5b012c65d7ffd6a5304f5238f4f7609891da58b018316bcb234ea1c4a4708fbc25fcd66f702996804c30d6831bbd983496d36dd98815215256aa96d554253d5b0e315421ed8bca8f936be976e679cdb2f39ede23f6d85bb3f4fd9a69ae541720370dcb9f7f8ff807ec966716eb618aba3356cfbbdde588e1cecf287edf060dfc81df31dcb025a9f4cd87adfb5e34e6255a7b9fda780d29fa6b0e92229610457b942fdb395b371dc06fa8e3ddc514b76ea327bfe104e581bd0442a18175fdc522b4aa870b6655a235b9038c786535e30f0167e3525999d453c7c3df5e53aa1340f29169bbc638f116c2617aa1783ce43143106f4ea3923c5b04ff7e2ce0fabfb842d7f02a16e6aebb82987cde157ffecf71f05dd2ecc7720d0237fbb2566bf1155a4965c7e3edd72d89e89b6df235a9f7b7d34401ad19f25e83698eee1bf9c298e499107dd1b9f918f42785be53a1588c5facc095ccd48261cd642a5e2cdbc45874361cf0b25b4ff74e7d479e87aa0ed0e57ebfa8ddaccf0ac7f73108d73fb638d96b7b6931c75cbcb3929bb1296ccf83e3cbd5ff7d1b4b400fc851d1df5303f30dd87bd8ec957f903340fe637cfd70cb61c472bc049cf022a70492b6ce67778b8065b3f2f223926ca5110a0ca68cd4a33d9f40d61bbe75affb4a1579dc28066533b45a98da99743176c45ee3726f6e29b56397a021eb19cdb9e2fd26420d7779928c94e31e55d0c3561989a2378ff4f38f321d52b993b84341375537f0e544ccd91a6982873beb0249a1eaf634deec4874586f57cf48c8d0acf6fa11c57a96a4300fff58c1d4d197c0dcd396930532d76acb6115f6615361fb3e8752108b9da39d8c12a8959389c2b12fad1f558d745622ccf635322e267345f041fc1f076624cdcbde3fc2742d1b4b9e7a4cb66f745d0c3744f37e5319b3575a77efe666b7cdb547fdc37b479aeebbe94f484b9d160791dc0c62a14849749dcdba9cb7841db7c92d63f24c0c94ecb91e1b7e184921bae2401181d87b05513bdd8fd902b47956827f6bf0fbb5b34327a93573beb24d50d0c38ec2a60493ef3008e6f4f3b7db025990acf2e73fbb7976adc0c23b097c1a91527da9d89012e505f79b0f9ffca2a99e064d83b85bd97146cdafba6de3e45634cc7cb32c5b8fa2c628f04e90581feed9de142580c05f9b3217a8624ea9abe9b49f4ea2fafe3fe6873ef9b49142cd75af5ae5780ca52ce60a680c9cd21f5b0fa3eb5eff6017a08c0abcd1f37b46a2ceaf8894ea13094ba05bd15e3421c90f1e0801cd8b49b4c2a074ca8c964688f868e62cb516ad677c1ddaed08db913ee3176a85edcaa80db95842d6476c141fe58a4daedccecdf13f97f1e56c4236b664f32688d6419f1b175cd3ea26e2bdde81fb165da953493527c8f3c79eb945c2386d22586ee90c46f5b30b897b14c6b2b55b395cac7b682594d7303e7c53f274834cc6dc4ca18fd752627e09648f39b284fc8045456fcd7b0cc7f60004418c74afe048eedc59423dfbc4bb6c477bd26449280a8f65475ca08d0667250c62ae0e81c552718e36109a9e198e3f3dfa6fb6134e6659826cf8dbb185f010d1314486464cb7ccbdaf0bb4f86e1d5f900d8216dc341a0d7dd63b5b19ea3de5b316d2679f17270ee06422ebd9e8a745e313beb87d3f1df76a9f502b5c838d48611fab796063244742ab8800d9674c524f29572ee270937d3e736e21d07a87fff59ce98866185733d40eece464858843d18b49aceb22bef4b898b5cc2662eb5e36ed52222b9e325b5127a662f88f136bb7751ffd9feda5202bea30a735a1ac5ac1c6b1dcba472735cf4db3a1aa2294facb23e8002c4c7a3ace88be14b40b7099878cd85b6d674c91d72ddad2cc38a585e916f605cb225fb4dfd80ef571236df0dff62e2fb529fb99420b4bf09fcd1f5e2a002a8900db55ff646575cc1404c74ef16903dbd0b490d3f36afd1bb0b78d9b10713de73fe442f55075fae5264f3bbd1a0df1666d00f086c0aa21bafde0032e34536ee25678e54b34612482770c005fb831cd6a9221de6c9a559d8001d3b2870cf26268ff1fce09cf4f50a4f6e3df48ff1138b22e966bf27c9e8b0ebddb2759e370e38c5715a0fc1df7083894c056e678034458bae3348c80025d786c9b2d77f47d664a8b11bae7620e9f2270d37c2c4748b3f3150a7382eac3f7ea0f8887f3b6e5d6a766f7f603f48d3ef3499c08013d01da5d0342d5407c6d93c57197f5a78c355b5a4673c4f5e52063029bc000344f2ed92e62fd7ace9dec2f04b88cbce905a6a8e37afe769814aa20d0c7dffb8bb21c74add5d7b792a0e44cd83e921e2bce2b2b88d85109d643c0d609d3b6c791dcace5ddd788c32f5e92b3f6a9e1ab7328fc623a8e779055de2d4abec165051f90e251f0a7a8ea7371450bc2abf53b3e5a17f7e0a9088b60c993215f15f1e483b84188a8b5b6dc7ba8db04491304437f56713814e64893e9c8a7f9a4f8ebb0ea60b5d872938e14815030d2e2214c064a0a26cbb197d8da9f2bd03db9fbf9e39e879fe6d6bdaf68fd92fa1f7899bd35bb459e77a673a887a20648f5c85487787d90a07e4cbfce3bca02e171a378d1dfe98c86aeb57fc2479de92229ba286cf62c84de6786e888df161d9b935b91bf3bb7b95f2c691c181da6b8ce8354a664e78eafc773632aa22435e5d85bcaf36ccac6afaa2c90fa4002761b6f0900e3af2ba5a8a68688f014f2d0f41e93a232893ca0a8d2a2a0f03", 0x1000}, {&(0x7f0000003480)="75d98352a17d28b69571c27648a10d2611a1dea8bd0b33f1fcb6b62cbfda85ed8f7111fd763443ca75df3c89539ec8", 0x2f}], 0x8, &(0x7f0000003540)=[@timestamping={{0x14, 0x1, 0x25, 0xa2}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xec14b8e}}], 0xc0}, 0x105) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x401) 07:16:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x1f, r0, 0x1000000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48) 07:16:39 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x7, 0x8}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) 07:16:39 executing program 2: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) r0 = timerfd_create(0x1, 0x800) ioctl$int_out(r0, 0x6, &(0x7f0000000140)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) unshare(0x3c050600) socket$packet(0x11, 0x0, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="220000002100070777d0000009000701020000", 0x13) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)=ANY=[]) statfs(0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="220000002100070777d0000009000701020000030000000000200003050013800100", 0x2f8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000300)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) 07:16:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fsetxattr$security_ima(r2, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="03021000381484b8831e8c2f2800000000000019000000000000"], 0x1a, 0x3) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, 0x0}}], 0x0, 0x0, 0x0}) 07:16:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETLED(r5, 0x4b32, 0x7) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r8}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0xe, &(0x7f0000000240)=0x8, 0x4) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, r6, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000180)) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r11) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r13}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000200000000000d00"/72], 0x48) 07:16:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x4, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x1f, r0, 0x1000000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r3) r4 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='vboxnet1(\x00', r3) time(&(0x7f0000000340)) pause() r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r5) r6 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='[&@\x00', r5) keyctl$KEYCTL_MOVE(0x1e, r4, r6, 0xfffffffffffffffc, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) read$char_usb(r9, &(0x7f0000000240)=""/255, 0xff) [ 1673.707969] sock: process `syz-executor.0' is using obsolete setsockopt SO_BSDCOMPAT 07:16:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETLED(r5, 0x4b32, 0x7) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r8}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0xe, &(0x7f0000000240)=0x8, 0x4) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, r6, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000000180)) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r11) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r13}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000200000000000d00"/72], 0x48) 07:16:42 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fon\x00') r7 = socket$inet6(0xa, 0x4, 0x1) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) close(r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000180)) fstat(r9, &(0x7f0000000440)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002300)='/selinux/checkreqprot\x00', 0x686200, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4}, {0x4}]}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf250300000008000a004e20000004000e00000b00", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000000c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4a0500}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x0, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x0, 0xa, 0x4e24}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x60014004}, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f00000004c0)=[0xac71, 0x3]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000780)) [ 1674.130516] audit_printk_skb: 15 callbacks suppressed [ 1674.130522] audit: type=1400 audit(1571728602.793:657): avc: denied { create } for pid=32574 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1674.160845] audit: type=1400 audit(1571728602.823:658): avc: denied { write } for pid=32574 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1674.194180] audit: type=1400 audit(1571728602.853:659): avc: denied { read } for pid=32574 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1674.211850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32576 comm=syz-executor.0 07:16:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1674.313168] audit: type=1400 audit(1571728602.973:660): avc: denied { set_context_mgr } for pid=32581 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda={0x66646185, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1674.345740] audit: type=1400 audit(1571728603.003:661): avc: denied { call } for pid=32581 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1674.368561] binder_alloc: 32581: binder_alloc_buf, no vma [ 1674.374269] binder: 32581:32582 transaction failed 29189/-3, size 80-24 line 3284 [ 1674.390546] binder: undelivered TRANSACTION_ERROR: 29189 [ 1674.415719] audit: type=1400 audit(1571728603.073:662): avc: denied { set_context_mgr } for pid=32583 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1674.442008] audit: type=1400 audit(1571728603.103:663): avc: denied { call } for pid=32583 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1674.465290] audit: type=1400 audit(1571728603.123:664): avc: denied { transfer } for pid=32583 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1674.488817] audit: type=1400 audit(1571728603.153:665): avc: denied { transfer } for pid=32583 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x2f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7fffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0x0, 0xffffffffffffffff, 0x0) [ 1674.511921] binder: 32583:32585 got transaction with invalid parent offset or type [ 1674.521897] binder: 32583:32585 transaction failed 29201/-22, size 80-24 line 3454 07:16:43 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) dup(r6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r8 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r7}], 0x1cf, 0x100) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r10 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r10}], 0x1, 0x100) dup2(r9, r10) dup2(r9, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r11) r12 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r12, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x10000) [ 1674.565171] binder: undelivered TRANSACTION_ERROR: 29201 [ 1674.573862] audit: type=1400 audit(1571728603.233:666): avc: denied { set_context_mgr } for pid=32583 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5035bbec4ca233b6c8e8e970cf62c19c234497885a903d6e79faff1957ec6845c45a10ccbe1f6bb2874c590172706e7b5f1b85488fdedce49c15916d5d1618703281ddb67c627e717eb34f93219909bf948322ddecc7832c8fa3af6b24ffc22c7f34ad584a782494a9cae810a61e539a5dc40d9e974c2e542961e6f22374f4e8f575b767a496e072dcb1d87c64856cd66be613908c43feae2f06ddfaea599f81f9e93a895ce4191561dc09"], 0x50}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x0}, 0x20) tkill(r1, 0x3b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1}}, 0x18) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x18) 07:16:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x230446b7, 0x8, 0x3, 0x16ca, 0x6}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000100)=""/45) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) [ 1675.707913] binder: release 32750:32752 transaction 2421 out, still active [ 1675.715115] binder: undelivered TRANSACTION_COMPLETE [ 1675.723460] binder: send failed reply for transaction 2421, target dead 07:16:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)=""/158) 07:16:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x1f, r0, 0x1000000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) getsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f00000000c0)=""/205, &(0x7f00000001c0)=0xcd) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r7, &(0x7f0000000000), 0x1c) r8 = fcntl$dupfd(r6, 0x203, r1) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x11) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r9 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$RNDADDTOENTCNT(r9, 0x40045201, &(0x7f0000000200)) 07:16:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socket$inet6(0xa, 0x2, 0xea) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r1, r1, 0x0, 0x8800000) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x80000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x4e24, @multicast1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00') setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={r3, @rand_addr=0x7ff, @empty}, 0xc) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @rand_addr="46217f3ba42ef1cc173c6a113fa3090e", 0x5}, 0x1c) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) [ 1676.723689] binder: 304:314 got transaction with invalid parent offset or type [ 1676.732042] binder: 304:314 transaction failed 29201/-22, size 80-24 line 3454 [ 1676.746009] binder: undelivered TRANSACTION_ERROR: 29201 07:16:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x21, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1676.876602] binder: 331:332 got transaction with invalid parent offset or type [ 1676.884421] binder: 331:332 transaction failed 29201/-22, size 80-24 line 3454 [ 1676.894656] binder: undelivered TRANSACTION_ERROR: 29201 07:16:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000100000000001489c533e0c5f456", @ANYRES32=0x0, @ANYBLOB="00000000000000000c000200788e49f16750000008001b0000000000"], 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r3, 0x1410, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x390}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8cc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa6a9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48005}, 0x800) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000280)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x1000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000100)=0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)=@sha1={0x1, "3368bab38cafc3764d67fefb0e7d4b24fcadd39b"}, 0x15, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKIOMIN(r7, 0x1278, &(0x7f0000000480)) 07:16:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)={0x39, 0x6, 0x0, {0x4, 0x5, 0x10, 0x0, 'securitywlan0#.\''}}, 0x39) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r2, 0x61f3b62137bb581, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe49}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x857}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2f8c}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaaa9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44008008}, 0x4000) [ 1677.023946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=356 comm=syz-executor.0 07:16:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRES64, @ANYBLOB="dda149e2d4aa344a4c6609fe9cb2df090b2df3b20d983593b60cb92a06f3e28bdd4274b4cbdc25d01b7ea2782fa5626c644cbb61f90ae8821646d0c5a83e58d145e53684368db78206d00149035f862cfdb59bcbdfefd21b45dec411f6cb0bbf1433d6b27fca05da41da905893d4b575d9e3d78c41cf96cffc890cff35c713e2f327cf1a4b677131ad3ef4a22f99884010eb26e163b0a6dbffe25a9c8a122f279ebe9b7b6f77b81e1dbb56cb48205d133af040c826c2aae63c6902d221decd058679cd1ba6076db2d07d2e887dab550c0ee9b0beb7d76182", @ANYBLOB="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"], 0x0, 0xef, 0xff33}, 0x20) tkill(r1, 0x3b) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) fadvise64(r3, 0x0, 0x41e000000000000, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "d079bec07c60fe"}, 0x8, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, r7, 0x0, r5, 0x0) 07:16:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x5, 0x0, 0x0}) 07:16:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200), 0xfffffffffffffd4d, 0x0, &(0x7f0000000140)="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"}) 07:16:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = fcntl$dupfd(r1, 0x0, r4) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0xfff, 0x2, 0x1, 0x34b2}, {0x1, 0x8, 0x8, 0x329fe0cb}, {0x4, 0xff, 0x6, 0x9}, {0x9, 0x59, 0x2b, 0x4}, {0xff, 0x4, 0x3}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f00000001c0)=0x7) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r9, 0x0, 0xffffffffffffffff, 0x0) [ 1679.664343] audit_printk_skb: 63 callbacks suppressed [ 1679.664355] audit: type=1400 audit(1571728608.323:688): avc: denied { set_context_mgr } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1679.708808] audit: type=1400 audit(1571728608.353:689): avc: denied { call } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/ip6_tables_matches\x00') lseek(r0, 0x0, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200), 0x66, 0x0, &(0x7f0000000300)="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"}) openat$selinux_member(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000040)={0x60, 0xdb, 0x7, 0x7ff, 0x3f, 0x1, 0x8, 0x8ee2, 0xfffffff9, 0x8, 0x6, 0x10000, 0x1, 0x7, &(0x7f0000000100)=""/163, 0x484e}) [ 1679.750665] audit: type=1400 audit(1571728608.413:690): avc: denied { transfer } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1679.775963] audit: type=1400 audit(1571728608.433:691): avc: denied { transfer } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1679.800270] binder: 379:380 got transaction with invalid parent offset or type 07:16:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1263484000"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x501002, 0x40) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) ioctl$LOOP_SET_FD(r6, 0x4c00, r8) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r9 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@local, 0x2000000, 0x1, 0x1, 0x4, 0x5642, 0x2}, 0xfffffffffffffe93) ioctl$UI_DEV_DESTROY(r9, 0x5502) setresuid(r1, 0xee00, r4) 07:16:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000140)=""/3, &(0x7f0000000180)=0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, r3, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x3d, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e23, 0x2, 'wrr\x00', 0x0, 0x0, 0x3}, {@multicast1, 0x4e24, 0x2, 0x9, 0x1000, 0x8001}}, 0x44) [ 1679.823339] binder: 379:380 transaction failed 29201/-22, size 80-24 line 3454 [ 1679.853955] binder: 379:380 ioctl c0306201 20000140 returned -14 [ 1679.892875] binder: 397:398 got reply transaction with no transaction stack [ 1679.892884] binder: 397:398 transaction failed 29201/-71, size 0-0 line 3046 07:16:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$getflags(r0, 0x40a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x18) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r7, r7, 0x0, 0x8800000) mkdirat(r7, &(0x7f00000001c0)='./file0\x00', 0x10) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r9 = getuid() pipe(&(0x7f0000000340)) ioprio_set$uid(0x0, r9, 0x4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r8, 0x6c, 0xc}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'vmac64(serpent)\x00'}}, &(0x7f0000000440)="5ccf9db5fe98afe1ad682b127b8c003a0626abedb85ee0f4dca46694773223474bfe6ffec02838d1dad7894194b66716c1a80bd6cced02f74350e1f524eadd58306f2677b06bf776f25dec4a3d55792ac5b349897a8fd96832ebf838b37b20d126b8904529305f3f8f4ec268", &(0x7f0000000240)="fbe2888e3432a81256b2cc4c") [ 1680.029226] audit: type=1400 audit(1571728608.683:692): avc: denied { create } for pid=408 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1680.053721] audit: type=1400 audit(1571728608.713:693): avc: denied { write } for pid=408 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="dc458fe31a1f995f60620b74095a44f9c8f3b6a916148ecc82438f9b5d5084f57aa99118e051efdcdef7", 0x2a, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r2) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0xb42111ea5f59ed2f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000b86b64846b00000000001800"/29]], 0x0, 0x0, 0x0}) [ 1680.054007] binder: undelivered TRANSACTION_ERROR: 29201 [ 1680.056924] audit: type=1400 audit(1571728608.713:694): avc: denied { set_context_mgr } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1680.058014] audit: type=1400 audit(1571728608.713:695): avc: denied { call } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1680.058371] audit: type=1400 audit(1571728608.713:696): avc: denied { transfer } for pid=379 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1680.058412] binder: 379:410 got transaction with invalid parent offset or type [ 1680.058561] binder: 379:410 transaction failed 29201/-22, size 80-24 line 3454 [ 1680.058869] binder: 379:410 ioctl c0306201 20000140 returned -14 [ 1680.059097] binder: undelivered TRANSACTION_ERROR: 29201 [ 1680.090154] binder: 397:398 got reply transaction with no transaction stack [ 1680.090162] binder: 397:398 transaction failed 29201/-71, size 0-0 line 3046 [ 1680.237602] audit: type=1400 audit(1571728608.893:697): avc: denied { set_context_mgr } for pid=413 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1680.270672] binder: 413:415 got transaction with invalid offset (7747427672795381760, min 0 max 80) or object. [ 1680.286031] binder: 413:415 transaction failed 29201/-22, size 80-24 line 3379 [ 1680.295759] binder: undelivered TRANSACTION_ERROR: 29201 [ 1680.304993] binder: 413:419 got transaction with invalid offset (7747427672795381760, min 0 max 80) or object. [ 1680.315291] binder: 413:419 transaction failed 29201/-22, size 80-24 line 3379 [ 1680.323021] binder: undelivered TRANSACTION_ERROR: 29201 07:16:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000280)={0x10, 0x13, 0x8, 0x2, 0x6, 0x7ff, 0x4, 0x146, 0x1}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x9b9f546ddce01a5e}, 0xc040014) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r7, 0x0, 0xffffffffffffffff, 0x0) 07:16:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) seccomp(0x2, 0x1, &(0x7f0000000640)={0x9, &(0x7f00000005c0)=[{0xfff7, 0x80, 0x1, 0x400}, {0x0, 0x0, 0x0, 0x800}, {0xb33, 0xa, 0x8, 0xce}, {0x4, 0x2, 0x93, 0x3}, {0x3899, 0x2, 0x1, 0xfe00000}, {0x2, 0x7, 0x80, 0xffff7fff}, {0x2, 0xfb, 0x7, 0xffff}, {0x6, 0x4, 0x4d, 0xfffffff7}, {0x3, 0x40, 0x3f, 0x8}]}) r4 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x101) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r6}) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000140)=""/140, &(0x7f0000000040)=0x262) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101100, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x9, 0x40, 0x81, 0x0, 0x0, 0x4, 0x1080, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x8000, 0x6, 0x1, 0x2, 0x100000001, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000400)={0x0, r4, 0x79, 0x9, 0x5, 0x100000000}) getdents(r7, &(0x7f0000000440)=""/226, 0xe2) r9 = dup(0xffffffffffffffff) connect$inet6(r9, &(0x7f0000000580)={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x18}, 0x9}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfa, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3a, 0x0, &(0x7f0000000540)="6e6adf4b598bd663440fdac75bedefcd8f874679047b1a5c0c45c13076f6473d2a2cd9fcf7d5773436df85d353924eb5a799f184ad2e225d1c1e"}) open(&(0x7f0000000080)='./file0\x00', 0x60000, 0xd3) 07:16:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000acc5000000000010002800000000000000"]], 0x0, 0x0, 0x0}) [ 1682.580980] binder: 434:437 got transaction with invalid offset (-6052837899185946624, min 0 max 80) or object. [ 1682.600080] binder: 434:437 transaction failed 29201/-22, size 80-24 line 3379 [ 1682.611013] binder: undelivered TRANSACTION_ERROR: 29201 [ 1682.630478] binder: 435:436 got reply transaction with no transaction stack [ 1682.637917] binder: 435:436 transaction failed 29201/-71, size 4294966819-4294967213 line 3046 [ 1682.648953] binder: undelivered TRANSACTION_ERROR: 29201 07:16:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f1"], 0x6}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) pidfd_open(r4, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) 07:16:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r4 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x3ff, 0x1, 0x7f, 0xfffa}) 07:16:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000002d010000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000001800000000"]], 0x0, 0x0, 0x0}) 07:16:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x0, 0x23}, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda={0x66646185, 0x0, 0x0, 0x200}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) [ 1682.772972] binder: 435:436 got reply transaction with no transaction stack [ 1682.781208] binder: 435:436 transaction failed 29201/-71, size 4294966819-4294967213 line 3046 [ 1682.799869] binder: undelivered TRANSACTION_ERROR: 29201 [ 1682.803506] binder: 462:463 got transaction with invalid offset (0, min 48 max 301) or object. 07:16:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x2}], 0x1, 0x0, &(0x7f0000000f40)='n'}) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000140)=""/181, &(0x7f00000000c0)=0xb5) [ 1682.803548] binder: 462:463 transaction failed 29201/-22, size 301-24 line 3379 [ 1682.807771] binder: BINDER_SET_CONTEXT_MGR already set [ 1682.807778] binder: 462:467 ioctl 40046207 0 returned -16 [ 1682.861301] binder: undelivered TRANSACTION_ERROR: 29201 07:16:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d000000000000000001012e000000000000000000000000380648a60c05e087e124403ee72f851f0a60d4e823bc9574417db3b5cac4fceca084d35d71e3553009e6b455cb8285ce3c9aeb50bc2bacba90fcb23b3cbb3bf6acd1fe907cdf9806180001f8dafff31ab6b3522db94ca1"], 0x18) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r6, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r7) keyctl$update(0x2, r7, &(0x7f0000000240)="241e40cbedcc60e3ff4b15256a3a893403386b6a2f1cd0878f9cbf9f8d81b3dc915ea0ab0ed660b7d67d7578fb5950293c769fea33bf06dfba3e1cabeab6c7db8d7ff592", 0x44) r8 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TCSETX(r8, 0x5433, &(0x7f0000000100)={0xe1cd, 0x6, [0x6, 0x7fff, 0xc154, 0x2, 0x8001], 0x6}) [ 1682.883708] binder: 472:474 got transaction with too large buffer [ 1682.968418] binder: 472:474 transaction failed 29201/-22, size 96-24 line 3493 07:16:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl(0xffffffffffffffff, 0x8, &(0x7f0000000f80)="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") sendmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="f1732e882f788e95b67f8ec04f25ce7495eab7b460cd4747394ff1d353a1af15b6277494629abaecd692d4d9bfd331dac45d63635f74098f573cf2c53f4e79678cab50b0554954010427343ba3abd396c1497de7d6e02d3b2f865316e51de5657bb257e4cbc2c6210c66db796f5b2f6b852bdb93b607793f2e3a93de128abab8898020530f31a0383233933e9041255b97b66e6f1a482119221d", 0x9a}, {&(0x7f0000000080)="33cd6a5ea8", 0x5}, {&(0x7f0000000300)="b287dcbd8dbdcac96a259cb43be48513255fe69c1e5120a2b10af584f4bc46b55b06329df9f24285123162b8e71e151de52cb3de0721c0c5634c9cb81cc90d7dfe2e618abe63bf23bbfe774474ebb5ed48a860193ab31d8fafaa619c97db8653b54eef68cac419b8", 0x68}, {&(0x7f0000000380)="0a3d820759fa98b7e3c104f0fd7ffb04b181f43a4b499a7f3780405d6a793e5e30a7e3f8fe218479046f44ad2dd6e2f44eeb706fb383f0cb77ca480156bb857e17261472485834c43fd5da903a154fbd257249ae41d58e1c2c1eb852a72b513c9aebf742f967cc5a66f467eb", 0x6c}, {&(0x7f0000000400)="406491335528653ed2f83048db5f0b2865dc03c9e720f049d28819b20d8c9051c93859404cb14846700d8e692670a5f047938132c0d211a176261bd9176c7a7ae308c8574a61052d04e3cd958032a1476fdfc390ec7d832b5da6e7fbd997696e8072d881ee9d7496517c3584c82499a4067ee21c15b75e9518ff9c90434674", 0x7f}], 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x118}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="3781385349883f515a3cddfa9f877171eec1cd661a7b641ff14cb3a8b2d7c5e475973f6ed5b1b185a4a240ff7ac0866942101ddeb9175e99b0860b0dd7828dc5e7224015725c5c5f3cf13c808f03a699cc643331639290c5e286ac29a8b660b3734d083e828ed1ac49be93a9b10d3a669c1673f316085448ad7c5c8532b5", 0x7e}, {&(0x7f00000006c0)="067e7c612d581231e8fbfda107f52f0e37a716bafc6c6057eb4c43af578ada259ffc7765393123d44d8f6b081e4c845c6582ecbcfbb093aeb34c7a9592a557f12d5f654ff298", 0x46}, {&(0x7f0000000740)="7514f1dc4991423983738fad3d8d86520cb3335236d5bae6379068f044774347b21c6c86fd5f782df9e47d309b47d8b93d30ed3a9783e1a13f966ab5616d7fd3d3d4274f1954d581e33e804e6c0de6da6f7f420f663501db3e519178214c1acbe41d17334a9e666335b404262de70a6dc6d9a4813f698658c87b73d116fb2af3cc80e51ad589eb140de2b7a564799a8586ce6d0c3521b1d7797bf8899199f479072236a50ce3d5fcf607120011b327e6ecb677ff853e067ca229c7f2551c30ff5567cd84b1de0214d07abf86b62cc002cd9d07a3f9d40f8a4d4a3eb61ad9541b9795992548d0896989d465507dff", 0xee}, {&(0x7f00000000c0)="98f5ed", 0x3}, {&(0x7f0000000840)="06e10b0a8367cf85baa7a3bb9ef6b4d74b0a12b9f3dfd3716aad88bb357a1186d503b56725bc27830e7ce526e7636489da18ac82b6ea01cb990012427f9ab4a08e5bd768f326fcec27fd933b593481e9df24d8c818926402c8466fb9275dfdb0e3d3be83dd8ce4b98ee55dd91300664ca2f95c0df0085b72a6e7a1e21c6a2be6029bf542be95c0b4946ab8dea73020d70b2007b6c577d36184a0389072990d0a2367576af6f7beb6787f2655", 0xac}], 0x5, &(0x7f0000001f80)=[{0xd0, 0x10a, 0xa3, "f9fc8a817a146acbb8c485b65567e66677fe69c84f235a5b41268b05a23c0d2ce95b499801422942d61ce6f21dfc825ca0ad3cc63943bbb0ddce7bfd6001453f4bfad9bc1d92a80c6237fcc7bd4da7b5a53054633f20f9f8145ecc154be23fda582c4e3dba56c86b40120511bc6c674e90b16488492eecbeb1d4861413d0512b3cb1c2890485517de5b3d9be4f5b0509308e04f619227b17d21886d5b038a19326e1b025ae484473ca61bbd65377dd374c03b9a0363356636c"}, {0x48, 0x113, 0x1e194f8b, "614c51674ca225c25428e07be259dfe71925de056d7af1c457f2752a11c116a18bbd1833f6a63458c887aac66f8fee61e8a5d7"}, {0x90, 0x104, 0x8, "ff21cfcf0c18a9c44ecac538ed449af0e5b0c96ff2e6ac8f241c418ae7b667ef20179fce2d5821b5f86fbcf347bfe534ac0e25e1e83a958177a4cbef69d6cfed9db3bfb43a6f68707667237be458ddafb81399ba0c74ea23ada9031fb42b6e5bdfe149c1ea697bfd14a0490d5e090b51518ad087f2f73ec51389096ff18985"}, {0x1010, 0xa, 0x8001, "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"}, {0x88, 0x88, 0xb47, "8587bfdd1878f84cbc5ab699880c89931858879c5f1e0e09aafd92940546ad8dd1e3d737cb6ff00a33348a4f5f33b228f5e196941c1cd0503de2c8f52e3b4a43bf24ef652f1bf4f7a62c5da62985c7ab9cb273d921c3c6282d71ab26d8505666c0c98deffb272ad53e278bb5651705253aa0"}, {0x60, 0x108, 0x7, "ea9a7b93e7d7cf3186192292f76dc90fecf4d03c7899ef2cb94e1a3816149b236c09a04e2ce6f03e30b2a59aa30c2a939e3d76f1f953a7765bd2c7c980963628196652d44c0bea8dc6131d"}, {0x38, 0x10a, 0x8, "121120fbd24b3dbfbdfbf295410d4b24030881e0d41864b9d8d1dc7fe8b996c54cad2839cb71cb93"}], 0x12d8}}], 0x2, 0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000a8be279853eb87000000000000000000000000000000000000000000000000ea9ba24aa13879cb9fa8bf519dafac371dc7652c8167d005851d8209718adf47241f338c99db6f3d81bf8c06b181bf2000be0f38e644c3ba297a3695ed5c5dda645594fecddb134f01b7069c7adc850aa9e6ad66"], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1683.023894] binder: undelivered TRANSACTION_ERROR: 29201 [ 1683.031681] binder: 476:477 Release 1 refcount change on invalid ref 2 ret -22 [ 1683.041894] binder: 476:483 Release 1 refcount change on invalid ref 2 ret -22 [ 1683.108066] binder: 489:490 got reply transaction with no transaction stack [ 1683.124267] binder: 489:490 transaction failed 29201/-71, size -1489679755259674624-135 line 3046 07:16:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev\xd8\xe6),der#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a68770010000001000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600000000000000000000000000000900"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:16:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xcae39da1818640e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:16:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDADDIO(r1, 0x4b34, 0x6) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x7, 0x3}}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x680, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x1ff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0806ce5bc88b921bf23b6fc04629a9958eb2f2bf43e811093542a510f7a94363958c57ef3467df8605629c7b307259ddc50f5e34a123201b5c634a336073e0e908174a9e16396f6140b7cc36a4267efad98cbf98d4ef579bcd962f4b3bbf6ab00ff2535fe1125771b885810b88b8ed9dad88a95e134fbb062117eafece5e1541713cf5184a405325e13069fa3c37a2ef1b19fe52d36329dbf217313bbbeafff43189ceae5ed23809e892c8bbe005f18b1dd18e6b8da00d90204afc9c559efc3c3a6e91ef9f45bbf3e8a74364e7491509b5b1c0680a468b493b76357aa4fc2ef1240c02eef7563c33476294808cf6847228c49dfd5d54de618ae49e00261076"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e903bed5d3971ceb34ea1dc23a84b7eb722dffacb0022080f675aee345b5196096571067eae0021c9654fd3ea026ea4fe23b8cbf64ee42fe4eb0181b38999c3132cefac9c3ed6bf0d6b6775c574b218cfeb585134f8c50e3b53473473fd7c2c6dd08414cc77ef2a108351a5846f8e02efa23fa6e0b783439de7bf5ddd46e23386dc8cf872b17d5c6e122285a644fb16eda0"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2, 0x0, 0x2}, 0x20) ioctl$TIOCCBRK(r4, 0x5428) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$KDMKTONE(r6, 0x4b30, 0x9d) 07:16:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet6(0xa, 0x4, 0x89) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x14, &(0x7f0000000000)={@flat, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x0, 0x0, 0x2}}, &(0x7f0000000180)={0xfffffffffffffea8, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) 07:16:54 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1263484000000000000000de0000000000000000000000000000000000000000000000000000000000000000000000009cf80000000000000000000000000000000000000000000000000000066cc18aadc4c179543924a78c73b65fc5663288c8eb772633354eef2d657d3ac662f6602d5bf26967b255cf47e3e21db4c8c5dac6a836bdcd9049696e515e713444788d47de58798d7d4e2cc25be7be4bb661671a4744b55228906de0221c0ddde520b969199d53ab95a7ded2cd4a262ec3722fea1718432994f592b81358b987"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:16:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @window={0x3, 0x8, 0x9}, @timestamp, @timestamp, @sack_perm], 0x5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000000)={0x4, 0x9, {0x56, 0x0, 0x3d, {0x4, 0x9}, {0x3, 0x6}, @const={0x4080, {0x100, 0x1e, 0x0, 0x7fff}}}, {0x57, 0x2, 0x800, {0x1, 0x70d2}, {0x3, 0xff}, @rumble={0x2, 0x1000}}}) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="d3d2b53c388d9c0400cd8034becf1c52225929b9e66079db76a66e75c5af1c024df9f9fa6256b59bfd1bf820c2d22c9b5551be1f6c068dec089b053a9193567e13d874af32d4274a1e6ba804f1c6fc10fce5b84c70e9ac2d514d1d7c3e4688df88383f27b244665d270dbbadc9e76e56dc3429c309dd83fef1fd99d860180b37a6cf0c948a1dfd4179d0c78fdaf994d4ef699fda9dd7c76bc7ed8b7e8dd2d85e951e91b3e9b1ffffffffffff63f81537d4ff92e85dd5eef1a98f1a530689107c9b0868c577"], 0xc}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 07:16:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0xadbd4893f3001e7a, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0xffff}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'\x00\xb9\x00', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x4}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, 'keyring(em1md5sumselinux)&^})user]'}}, {@seclabel='seclabel'}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:16:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x11000}, r3, 0x0, 0xffffffffffffffff, 0x4) [ 1685.812285] binder: 516:521 got reply transaction with no transaction stack [ 1685.832536] binder: 516:521 transaction failed 29201/-71, size 0-273348898586624 line 3046 07:16:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000035fb0714000000000000000000000000000000000000000000005444b3c01187888100"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1685.884215] audit_printk_skb: 78 callbacks suppressed [ 1685.884230] audit: type=1400 audit(1571728614.533:724): avc: denied { set_context_mgr } for pid=515 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:16:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0xde2d49a0e33539b1, 0x9, 0x1, 0x5}}) [ 1685.942907] binder: 543:545 got reply transaction with no transaction stack [ 1685.942918] binder: 543:545 transaction failed 29201/-71, size 0-0 line 3046 [ 1686.001488] binder: 550:551 got reply transaction with no transaction stack [ 1686.011507] binder: 550:551 transaction failed 29201/-71, size 0-0 line 3046 [ 1686.023970] binder: 550:551 got reply transaction with no transaction stack [ 1686.032198] binder: 550:551 transaction failed 29201/-71, size 0-0 line 3046 07:16:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1686.049729] binder: BINDER_SET_CONTEXT_MGR already set 07:16:54 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/de^/binder#\x00', 0x0, 0x806) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/247, 0xf7, 0x2, 0x3b}, @flat=@weak_handle={0x77682a85, 0x181, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x1d}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1040}], 0xe7, 0x0, &(0x7f0000000280)="d433634f53104107ebaf4d2a2a7916d6fba101e266e70f764839aa121ab004f1f0b89caff0bb6ad4dc14cad2a1cdff65f2e230d8d2bb7b674eebff52b8a083a1f0e9ae6c2abc610b1fd961334674ac9ec296c7feaa23c810f74fdf2f97852ae2210b47747fbbf02bc714bc74d1875262fbbb1c3de857198acb3f5f28cb88d661c8e69c1aed67f1eb1864cfc19cc0eed0015bba0e28db6f9aed9ebffbf1febc47a8748f31b084bb2ca85c6b1f2f18ae67bf888f4426dd715996459a576c6e413b86088e6f60c0c4f41d96e1c52903ec00847ce4b95e8f93f750f2c329fcac28f8cc1cca6c80ec57"}) [ 1686.088599] binder: 515:544 ioctl 40046207 0 returned -16 [ 1686.096072] binder: 555:556 got reply transaction with no transaction stack 07:16:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = dup2(0xffffffffffffffff, r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x1, 0x0) ftruncate(r6, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0xe, 0x3}, r8, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(r9, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r9, &(0x7f0000000100)) [ 1686.096081] binder: 555:556 transaction failed 29201/-71, size 0-0 line 3046 [ 1686.167600] audit: type=1400 audit(1571728614.823:725): avc: denied { create } for pid=562 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1686.192080] audit: type=1400 audit(1571728614.853:726): avc: denied { write } for pid=562 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1686.229053] audit: type=1400 audit(1571728614.893:727): avc: denied { read } for pid=562 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1686.256804] audit: type=1400 audit(1571728614.913:728): avc: denied { create } for pid=562 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:16:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:16:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xd7, 0x2, 0x0, "910d22dfdd3e3b8931597c97a4d7b013", "5185890f8881cf883626c30b27d43c9af7add4bdf2eace484f7d027615afdc23733d83033137b48a4d9ee508495be733eeafbba5a628e8ba89c4488d30245fddfc65fbdf3e72e022e6892ec83637b301e7655a8858281b3a6fa9d80c98a21b38f564c9cc5616bba15612a478dbd52f3facab9de6d8b522c70ab1d2ee21a3af488e17b8590e7d7d7bb9412a5183c4189eb96b71cd6e80a007e04d8ef092b71af477e43d5b1c463672f6f5974b8d9c5a0dd7b89b8aba1cc23f0cac9845309e57e0052b"}, 0xd7, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x5, 0x1000, 0x0, 0x10000}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0xc0080, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}], [{@dont_hash='dont_hash'}, {@fsname={'fsname', 0x3d, 'trusted.overlay.upper\x00'}}, {@dont_hash='dont_hash'}, {@obj_role={'obj_role'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xd5'}}, {@subj_role={'subj_role'}}, {@subj_role={'subj_role'}}, {@dont_hash='dont_hash'}]}}) 07:16:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x0, 0xd, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x40a0) 07:16:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x6, 0xa0, 0xa4, 0x0, 0x8af, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x7e6, 0x3ff}, 0x2, 0x2, 0xffffffff, 0x4, 0x80000001, 0x4, 0xffc1}, 0xffffffffffffffff, 0x3, r2, 0x6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000240)={0x5, 0x70, 0x1, 0x1, 0xff, 0x40, 0x0, 0xc8, 0x100800, 0x15, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xead0, 0x4}, 0x0, 0x8, 0x7, 0xe, 0x7, 0x6, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:16:57 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x2) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) r2 = dup(r1) timerfd_gettime(r2, &(0x7f0000000000)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x8) symlinkat(&(0x7f0000000540)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00') r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000006c32f65900ae5f8b12325d000000000000000000000000000000000000000000000000000000000000100000000000000010000000000000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r5 = socket$nl_route(0x10, 0x3, 0x0) fstatfs(r5, &(0x7f0000000400)=""/172) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r8}) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e20, 0x3, @mcast1, 0xc7}, {0xa, 0x4e21, 0x6, @mcast2, 0x3}, 0x1f, [0x3f, 0x46a1, 0x1, 0x4, 0xe907, 0x401, 0x2, 0xffff0000]}, 0x5c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r10, 0x80047456, &(0x7f0000000600)) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 07:16:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='user\x00', 0xffffffffffffffff}, 0x30) fcntl$setown(r0, 0x8, r2) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 07:16:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffeaf, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1084}, 0x0) r7 = socket(0xad2cb77b5957c377, 0x8000a, 0x95) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@deltclass={0xfc, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, r5, {0xfff6, 0xf}, {0xffff, 0x4}, {0x1, 0x4}}, [@TCA_RATE={0x8, 0x5, {0xff, 0xb0}}, @TCA_RATE={0x8, 0x5, {0x8, 0x40}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xc0, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0x6}}, @TCA_ATM_HDR={0x3c, 0x3, "33f8112c1f645c6a5f54d37f2e4639dfc4e7334283c318e06076636f2af7d8de58d9b3ac67626d019e8affa6aa77270e69c23799604f79"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7ffa, 0xfff3}}, @TCA_ATM_HDR={0x30, 0x3, "dec22e1093655cd63a223518a81efd354af9046369dc0ce4a2a6ebb6592e9048c7251672a9a5c3c0bc41b5"}, @TCA_ATM_HDR={0x28, 0x3, "6b5146522ecfec021eed4be22f3e6d8bb76cf5f8c9e4387672f8aaf7031647c356b0d2"}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5b034a715e0aad55}, 0x20008180) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r8, r8, 0x0, 0x8800000) mknodat(r8, &(0x7f0000000340)='./file0\x00', 0x4, 0x8000) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r9, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) [ 1688.873984] binder: 572:578 got reply transaction with no transaction stack [ 1688.874534] audit: type=1400 audit(1571728617.533:729): avc: denied { create } for pid=577 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.876508] audit: type=1400 audit(1571728617.533:730): avc: denied { write } for pid=577 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.927253] audit: type=1400 audit(1571728617.583:731): avc: denied { read } for pid=577 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.950561] audit: type=1400 audit(1571728617.613:732): avc: denied { create } for pid=572 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.951690] audit: type=1400 audit(1571728617.613:733): avc: denied { write } for pid=572 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1688.965264] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1688.999341] binder: 603:604 got transaction with invalid parent offset or type 07:16:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0xd9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) 07:16:57 executing program 5: exit(0xffffffff) getrusage(0x0, &(0x7f0000000380)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x70) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x500, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc36, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) setuid(0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x1c2, 0x76c5, 0x8001, 0xfeff, 0xb, 0xc5, 0x1, 0xfd, 0x1, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) keyctl$session_to_parent(0x12) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0xffffffffffffff24, 0x3}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1688.999384] binder: 603:604 transaction failed 29201/-22, size 80-24 line 3454 [ 1689.000072] binder: undelivered TRANSACTION_ERROR: 29201 [ 1689.052426] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1689.091687] binder: 572:578 transaction failed 29201/-71, size 93-0 line 3046 07:16:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x680, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x1ff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0806ce5bc88b921bf23b6fc04629a9958eb2f2bf43e811093542a510f7a94363958c57ef3467df8605629c7b307259ddc50f5e34a123201b5c634a336073e0e908174a9e16396f6140b7cc36a4267efad98cbf98d4ef579bcd962f4b3bbf6ab00ff2535fe1125771b885810b88b8ed9dad88a95e134fbb062117eafece5e1541713cf5184a405325e13069fa3c37a2ef1b19fe52d36329dbf217313bbbeafff43189ceae5ed23809e892c8bbe005f18b1dd18e6b8da00d90204afc9c559efc3c3a6e91ef9f45bbf3e8a74364e7491509b5b1c0680a468b493b76357aa4fc2ef1240c02eef7563c33476294808cf6847228c49dfd5d54de618ae49e00261076"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e903bed5d3971ceb34ea1dc23a84b7eb722dffacb0022080f675aee345b5196096571067eae0021c9654fd3ea026ea4fe23b8cbf64ee42fe4eb0181b38999c3132cefac9c3ed6bf0d6b6775c574b218cfeb585134f8c50e3b53473473fd7c2c6dd08414cc77ef2a108351a5846f8e02efa23fa6e0b783439de7bf5ddd46e23386dc8cf872b17d5c6e122285a644fb16eda0"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2, 0x0, 0x2}, 0x20) ioctl$TIOCCBRK(r4, 0x5428) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$KDMKTONE(r6, 0x4b30, 0x9d) [ 1689.160679] binder: 603:604 got transaction with invalid parent offset or type [ 1689.168316] binder: 603:604 transaction failed 29201/-22, size 80-24 line 3454 [ 1689.189234] binder: undelivered TRANSACTION_ERROR: 29201 07:16:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/de\x00', 0x0, 0x2) timerfd_create(0x6, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x9d) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 07:16:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1689.316614] binder: 624:628 transaction failed 29189/-22, size 80-24 line 3138 [ 1689.326642] binder: undelivered TRANSACTION_ERROR: 29189 07:17:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400"], 0x9}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000100)=0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x121142, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000240)={{0x67, @local, 0x4e23, 0x3, 'sed\x00', 0xc923f6c544a5d563, 0xd35, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0x9, 0x9, 0x1a76}}, 0x44) 07:17:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RUNLINKAT(r6, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) 07:17:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000340)=""/134, &(0x7f0000000180)=0x86) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$VT_DISALLOCATE(r3, 0x5608) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000400)=""/78) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x2b, 0x37, 0x2, {0x0, 0x5, 0x3, r0, 0xd, '/selinux/mls\x00'}}, 0x2b) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x3) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1691.914310] binder: 637:644 got reply transaction with no transaction stack [ 1691.931172] binder: 637:644 transaction failed 29201/-71, size 0-0 line 3046 07:17:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) ptrace$peek(0x1, r2, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)=@builtin='builtin_trusted\x00') tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r4 = dup(r1) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000040)) 07:17:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = pidfd_open(0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r2) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_tgsigqueueinfo(r2, r4, 0x22, &(0x7f0000000040)={0x32, 0xfff, 0x4}) read(r0, &(0x7f0000000140)=""/4096, 0x1000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) sendfile(r6, r7, 0x0, 0x9) unlinkat(r6, &(0x7f0000000000)='./file0\x00', 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3f) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) [ 1691.959447] binder: 637:652 got reply transaction with no transaction stack [ 1691.981306] binder: 637:652 transaction failed 29201/-71, size 0-0 line 3046 07:17:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket(0x8, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/88, 0x58, 0x2, 0x40}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="061fe57799d31ada00c55c5d9eb883"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1692.074606] binder: 663:665 transaction failed 29189/-22, size 88-24 line 3138 [ 1692.089953] binder: 663:668 transaction failed 29189/-22, size 88-24 line 3138 [ 1692.092900] audit_printk_skb: 24 callbacks suppressed [ 1692.092911] audit: type=1400 audit(1571728620.753:742): avc: denied { write } for pid=636 comm="syz-executor.0" name="net" dev="proc" ino=109247 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1692.093271] audit: type=1400 audit(1571728620.753:743): avc: denied { add_name } for pid=636 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1692.093772] audit: type=1400 audit(1571728620.753:744): avc: denied { create } for pid=636 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 07:17:00 executing program 3: exit(0xffffffff) getrusage(0x0, &(0x7f0000000380)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x70) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x500, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc36, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) setuid(0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x1c2, 0x76c5, 0x8001, 0xfeff, 0xb, 0xc5, 0x1, 0xfd, 0x1, 0x2}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) keyctl$session_to_parent(0x12) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0xffffffffffffff24, 0x3}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = dup2(0xffffffffffffffff, r2) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0xc59, {{0x2, 0x4e24, @rand_addr=0x5}}}, 0x88) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setopts(0x4206, r0, 0x0, 0x10) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x1, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1692.173127] audit: type=1400 audit(1571728620.833:745): avc: denied { write } for pid=636 comm="syz-executor.0" name="net" dev="proc" ino=109247 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1692.173732] audit: type=1400 audit(1571728620.833:746): avc: denied { add_name } for pid=636 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1692.174232] audit: type=1400 audit(1571728620.833:747): avc: denied { create } for pid=636 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 1692.294777] audit: type=1400 audit(1571728620.953:748): avc: denied { set_context_mgr } for pid=685 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1692.320815] audit: type=1400 audit(1571728620.983:749): avc: denied { call } for pid=685 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1692.346458] audit: type=1400 audit(1571728621.003:750): avc: denied { transfer } for pid=685 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1692.369598] audit: type=1400 audit(1571728621.033:751): avc: denied { transfer } for pid=685 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1692.392389] binder: 685:691 got transaction with too large buffer [ 1692.398696] binder: 685:691 transaction failed 29201/-22, size 88-24 line 3493 [ 1692.408147] binder: undelivered TRANSACTION_ERROR: 29201 [ 1692.416772] binder: 685:695 got transaction with too large buffer [ 1692.426075] binder: 685:695 transaction failed 29201/-22, size 88-24 line 3493 [ 1692.434585] binder: undelivered TRANSACTION_ERROR: 29201 07:17:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1263484000000000000900"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/234, 0xea, 0x0, 0x23}, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda={0x66646185, 0x0, 0x0, 0x200}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 07:17:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x7) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1263eda076b9a4a71a48400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/83], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1694.920303] binder: 702:703 got transaction with too large buffer [ 1694.927530] binder: 702:703 transaction failed 29201/-22, size 96-24 line 3493 [ 1694.929006] binder: 701:705 got reply transaction with no transaction stack [ 1694.929013] binder: 701:705 transaction failed 29201/-71, size 0-0 line 3046 [ 1694.959700] binder: 710:711 unknown command -1595055342 07:17:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x20) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r3 = epoll_create1(0x0) r4 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000140)=0x78) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000780)={0x4000200f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000180)) dup2(0xffffffffffffffff, r3) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, 0xfffffffffffffffe) [ 1694.959708] binder: 710:711 ioctl c0306201 200002c0 returned -22 07:17:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d63000012634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af0800000000000000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/binder#\x00'}, 0x10) [ 1694.996011] binder: undelivered TRANSACTION_ERROR: 29201 [ 1695.000819] binder: 714:715 got reply transaction with no transaction stack [ 1695.000827] binder: 714:715 transaction failed 29201/-71, size 0-0 line 3046 [ 1695.004542] binder: 714:715 got reply transaction with no transaction stack [ 1695.004550] binder: 714:715 transaction failed 29201/-71, size 0-0 line 3046 07:17:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40000ad3) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r3, 0x3b) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7f, 0xf4, 0x5, 0x5, 0x0, 0x7, 0x400, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf3, 0x2, @perf_config_ext={0x7, 0x4af6}, 0x20, 0x7fffffff, 0x5, 0x8, 0x6, 0x400, 0x3ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1695.087133] binder: 721:724 got reply transaction with no transaction stack [ 1695.087142] binder: 721:724 transaction failed 29201/-71, size 0-0 line 3046 [ 1695.087198] binder: 719:723 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1695.087205] binder: 719:723 got reply transaction with no transaction stack [ 1695.087212] binder: 719:723 transaction failed 29201/-71, size 0-0 line 3046 [ 1695.095259] binder: 721:724 got reply transaction with no transaction stack 07:17:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1695.095266] binder: 721:724 transaction failed 29201/-71, size 0-0 line 3046 [ 1695.163408] binder: 728:730 got reply transaction with no transaction stack [ 1695.163415] binder: 728:730 transaction failed 29201/-71, size 0-0 line 3046 07:17:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000000040)=[@dead_binder_done, @exit_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x277, 0x0, 0x0, 0x0}}], 0xa0, 0x0, &(0x7f0000000140)="fd3753253efdbee656664272e4fc724fa0d5f59f8c7b1390e0df4e321572075ae808fb1f082e60de6f79c46a98fdd1422641656d46963c0f83e5bf4632aa7b1fa7480430546f5690b83de848c04f82298fbc8c4f18438d86f7eabddd6cc79fd58c1ef5a32c4ad496de816bdf604c5c96b56b2545e1781f73271a7ca7340f256c1c633418299089e8340b475d988980ed24a674ae0cfffa180223be3b721ece5b"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RUNLINKAT(r3, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000240)={0x8, 0x1ff, 0xffffffffffffffff, 0xfff, 0xa64}) [ 1695.293267] binder: 736:742 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1695.303587] binder: 736:742 got reply transaction with no transaction stack [ 1695.312141] binder: 736:742 transaction failed 29201/-71, size 631-0 line 3046 07:17:06 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x7}, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}, 0x1}], 0x242, 0x20000000, &(0x7f0000001180)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000011c0)) 07:17:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$full(0xffffffffffffff9c, 0xffffffffffffffff, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200040, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, r4}) fcntl$setlease(r3, 0x400, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) r9 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ee9e47f5", @ANYRES16=r9, @ANYBLOB="ba7c040d2fc6666edf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42595117194974d9}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4600000051a0973138da93651c72e2ec3712d0c019c3c844fe823ba3a70a3922c5c687cf7cdb26b923c5fc5ad4ed5eb2b0352326c5a84418091cffbabfe2c24b2b2f24e5c02818a2a0cd97d5e1dcd51dcf123112ab64fe7b6a2455ad1b2bad43961114b86c78411dfdf35d41cb412a7567b90b67884b21a784418a57ae83a0af04076f2cd971b6c7f764813b881633dc9b92539c2a74477729e9e7b4f55995ff9ea046ed337a0ab0873ffb13c043d4e4ae7522e1667b14c7dc1a220764912ceb74f7ccf54f3ede0707310779bb3bce4332615a3484cedba893", @ANYRES16=r9, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0x40091}, 0x40d8012) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x40801) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r9, 0xee1646c1bd9deb84, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3c80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x984efc2917936c42}, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r10, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r11 = fcntl$dupfd(r10, 0x0, r10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x404000, 0x0) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) r14 = epoll_create1(0x0) r15 = epoll_create1(0x0) close(r14) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r14, &(0x7f0000000180)) r16 = epoll_create1(0x0) r17 = epoll_create1(0x0) close(r16) epoll_ctl$EPOLL_CTL_ADD(r17, 0x1, r16, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r17, 0x3, r16, &(0x7f0000000180)) r18 = fcntl$dupfd(r15, 0x605, r16) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94001500", @ANYRES16=r9, @ANYBLOB="001025bd7000fedbdf25030000001c00070008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0c00050020000000000000001c00070008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002007c030000000000000c00060000000000000000000c00080007000000000000000c00040001000000000000000c0008008100000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x44000050}, 0x8000) 07:17:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) 07:17:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/bindez#\x00', 0x0, 0x404) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1697.957205] binder: 749:753 got reply transaction with no transaction stack [ 1697.986370] binder: 749:753 transaction failed 29201/-71, size 0-0 line 3046 [ 1698.018307] audit_printk_skb: 21 callbacks suppressed [ 1698.018316] audit: type=1400 audit(1571728626.673:759): avc: denied { create } for pid=749 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000000c3400000d6300001263484000000000000000e000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000b9"], 0x1, 0x0, &(0x7f0000000f40)='n'}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "37c00b92b42edccd0520adf1ca19ae3f03a0e26474e183d0159f40c4b9c5ec959699828c789b5888b700e33e478307c48c1c27fda2d69e9894617a1e52e63f0a7d2a48c076b9d472d04f80e4697059564cd57266f8801a441800edd1f9cfb7600ef7ef22fd51885c0e6ec2dece67cde253a4fb91a507"}, 0x7a) [ 1698.053227] audit: type=1400 audit(1571728626.713:760): avc: denied { write } for pid=749 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1698.111375] binder: 767:768 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1698.118852] binder: 767:768 unknown command 13324 [ 1698.124092] audit: type=1400 audit(1571728626.783:761): avc: denied { read } for pid=749 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000340)=""/146, &(0x7f0000000180)=0x92) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00') 07:17:06 executing program 3: set_tid_address(&(0x7f0000000380)) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x22b, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5, 0x0, &(0x7f0000000440)='\x00\x00\x00\x00\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = open(&(0x7f00000000c0)='./file0\x00', 0xd0000, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r4 = fcntl$dupfd(r2, 0x0, r2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/load\x00', 0x2, 0x0) epoll_create1(0x80000) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000180)) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) close(r11) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000180)) r13 = epoll_create1(0x0) r14 = epoll_create1(0x0) close(r13) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r13, &(0x7f0000000400)={0x69280a0dfd5d3785}) r15 = epoll_create1(0x0) r16 = epoll_create1(0x0) close(r15) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f0000000180)) ioctl$FICLONE(r15, 0x40049409, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r17 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FIONREAD(r17, 0x541b, &(0x7f0000000340)) [ 1698.168748] binder: 767:768 ioctl c0306201 200002c0 returned -22 [ 1698.222762] binder: 749:753 got reply transaction with no transaction stack [ 1698.237106] binder: 749:753 transaction failed 29201/-71, size 0-0 line 3046 07:17:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r2) tkill(r2, 0x14) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x7, 0x8, 0xf0e, 0x28000, 0x1000}) ptrace$cont(0x9, r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, '\x00', 0x1}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0xd1dc, 0x95, 0x0, 0x3}, {0xbe7a, 0x3f, 0x4, 0x40}, {0x7, 0x1f, 0x5a, 0x2}, {0x2, 0x6, 0x7, 0x5}, {0x7, 0x0, 0x7, 0x4}, {0x7fff, 0x40, 0x0, 0x1ff}, {0x5, 0x4, 0x6b, 0x8ec}, {0xea, 0x1, 0x3f, 0x9}]}, 0x10) 07:17:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=""/205, 0xcd) [ 1698.247458] audit: type=1400 audit(1571728626.903:762): avc: denied { create } for pid=749 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0xb2, 0x18, 0x42, 0x3f, "fceaf34ea9e858ecf31dd0a6e74c24a64455bc6ad476297aa7c93b99a3795759"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1698.247901] audit: type=1400 audit(1571728626.903:763): avc: denied { write } for pid=749 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1698.264065] binder: 775:777 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1698.264075] binder: 775:777 got reply transaction with no transaction stack 07:17:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa4, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x1101, 0xfffffffffffffffd}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1108, 0x2}, @flat=@handle={0x73682a85, 0x101}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1440}, @dead_binder_done], 0xfffffffffffffe90, 0x0, &(0x7f0000000f40)='n'}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10000, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) [ 1698.264085] binder: 775:777 transaction failed 29201/-71, size 0-1446781380292771840 line 3046 [ 1698.461469] audit: type=1400 audit(1571728627.103:764): avc: denied { set_context_mgr } for pid=758 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:07 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xffffffff, 0x0, 0x0, 0xfa}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) close(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r3, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, r3, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000040), 0x2, &(0x7f0000000140)) [ 1698.540591] binder: undelivered TRANSACTION_ERROR: 29201 [ 1698.596445] binder: 806:814 Release 1 refcount change on invalid ref 1 ret -22 [ 1698.598861] audit: type=1400 audit(1571728627.253:765): avc: denied { set_context_mgr } for pid=758 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1698.637641] binder: 806:814 got reply transaction with no transaction stack [ 1698.648892] binder: 806:814 transaction failed 29201/-71, size 80-24 line 3046 [ 1698.659906] binder: 806:818 Release 1 refcount change on invalid ref 1 ret -22 [ 1698.667358] binder: 806:818 got reply transaction with no transaction stack [ 1698.674810] binder: 806:818 transaction failed 29201/-71, size 80-24 line 3046 07:17:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd80"], 0xb}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) epoll_create1(0x80000) epoll_create1(0x100000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) 07:17:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0xffffffffbffffffe, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) umount2(&(0x7f0000000000)='./file0\x00', 0x6) 07:17:09 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "1d01000e180dd383", "d0ff29b7ffe056d201dd5c2d3983cb8a", "96791023", "b76cfdc719e6cce5"}, 0x28) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r4) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) open(&(0x7f0000000140)='./file0\x00', 0xd1394c783895811a, 0x90) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x2000}, {r5, 0x6604}, {r0, 0x5176}], 0x3, 0x101) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1700.984289] binder: 820:825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1700.995571] binder: 823:828 got reply transaction with no transaction stack [ 1700.998847] binder: 820:825 got reply transaction with no transaction stack [ 1700.998857] binder: 820:825 transaction failed 29201/-71, size 0-0 line 3046 [ 1701.001271] binder: 820:825 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1701.001279] binder: 820:825 got reply transaction with no transaction stack [ 1701.001286] binder: 820:825 transaction failed 29201/-71, size 0-0 line 3046 [ 1701.039227] audit: type=1400 audit(1571728629.693:766): avc: denied { set_context_mgr } for pid=834 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1701.085725] binder: 823:828 transaction failed 29201/-71, size 0--302 line 3046 [ 1701.098940] binder: 823:828 got reply transaction with no transaction stack [ 1701.099610] binder: 837:839 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1701.099619] binder: 837:839 got reply transaction with no transaction stack [ 1701.099626] binder: 837:839 transaction failed 29201/-71, size 0-0 line 3046 07:17:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) syncfs(r1) [ 1701.130822] binder: 823:828 transaction failed 29201/-71, size 0--302 line 3046 07:17:09 executing program 3: r0 = gettid() r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xf1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="59b84e8aae41e0046c7fb4af9381d38fbb849eba34ffd85e984f7b3b4c0886c46c0e81a4fb9dd1189383a5d725e84480a8070fc3b65de8b21abdf47c05861ff24a448943eeac3bf7d0a86b4ee180bf9fd5cae7b85cf4b5c10872952aa9b3009ead5ee691af8b4f6cae062d9d7c259a21e4b39c0b317f449236c327255c983fd76ef9c1face6141d1d097e433eabf6d320fbe79074b71a527d6af82bcb1c312ba1f3c4aafb400dbf0b22e56e43ef3aa0b2cfae3d3b0582af194f8319f6707b9f740ed709cba1a5443b14f7a50974ecceab33665107d1afadadde3fd11f4a76d7027e2894e02d03ecb91687ec651a3343409"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x38}, 0x10) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x2}, 0x28, 0x3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2100, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)) fcntl$getown(r6, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) fcntl$setown(0xffffffffffffffff, 0x8, r0) [ 1701.195060] binder: 844:846 got reply transaction with no transaction stack [ 1701.196138] binder: 847:848 unknown command -1974552487 [ 1701.196145] binder: 847:848 ioctl c0306201 200002c0 returned -22 [ 1701.198923] binder: BINDER_SET_CONTEXT_MGR already set [ 1701.198931] binder: 834:840 ioctl 40046207 0 returned -16 [ 1701.217882] binder: 847:848 unknown command -1974552487 [ 1701.217890] binder: 847:848 ioctl c0306201 200002c0 returned -22 [ 1701.259138] binder: 844:846 transaction failed 29201/-71, size 0-0 line 3046 [ 1701.279484] binder: 844:846 got reply transaction with no transaction stack [ 1701.286883] binder: 844:846 transaction failed 29201/-71, size 0-0 line 3046 07:17:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) flistxattr(r2, &(0x7f0000000500)=""/83, 0x53) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) dup(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1c, 0x1, @perf_config_ext={0x0, 0xfffffffffffffc00}, 0x82, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x5}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x7, 0x8}, &(0x7f0000000340)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x7}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r1, r4, 0x0, 0x6, &(0x7f0000000000)='nodev\x00', r5}, 0x30) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d630000126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0d303a43dadf69383e2b9db22611e8f449cf0aefd69149d2b2ea95d42e8989a355209dfb6c6cec9e22917c7c05bd1b1f2d3114e7c68fe08a178ebd412cfceecfc6efa8379cf78163034f5f27e5dbd293a019e03193dd91bbe9a38f94d4e47eab887dc12e1df3088788aec9008eb19bccaaa9db9e3af0dc59d597deee1d12e9be78a70cb1293a64c52a186a687664f380067d383d04f7277974ec234c72380913a172a9f6c8cebf5a763e6b3dbaff325dec746cd7d4fe1a8029f2f29f691f737d62db94ba6e8bbf84f7983df3"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126348400000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000220100"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1701.395531] binder: 859:862 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1701.402882] binder: 859:862 got reply transaction with no transaction stack [ 1701.403686] binder: 858:861 got reply transaction with no transaction stack [ 1701.403693] binder: 858:861 transaction failed 29201/-71, size 0-0 line 3046 [ 1701.433499] audit: type=1400 audit(1571728630.093:767): avc: denied { set_context_mgr } for pid=864 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1701.436280] audit: type=1400 audit(1571728630.093:768): avc: denied { call } for pid=864 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1701.443432] binder: 864:865 got transaction with invalid parent offset or type [ 1701.443476] binder: 864:865 transaction failed 29201/-22, size 80-24 line 3454 [ 1701.444888] binder: undelivered TRANSACTION_ERROR: 29201 [ 1701.503537] binder: 859:862 transaction failed 29201/-71, size 0-0 line 3046 07:17:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() chdir(&(0x7f0000000000)='./file0\x00') wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r3, 0x0, 0x2, 0x0) ptrace$setopts(0x4200, r3, 0x401, 0x40) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TCXONC(r4, 0x540a, 0x4a2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000140)={'ip_vti0\x00', 0xcad}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) getsockname$unix(r4, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) 07:17:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1263484000"/60], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000088000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:12 executing program 3: gettid() r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000"/89], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:12 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x47, 0x8, 0x762fc1f9, 0xfa1, 0x8, 0x6, "d1b55ff7cf98b5827f58fc5e8aa0efb31d2221e1502234f3eb166f330f086ba2a0bb3a680d6139228e882b774f6a4062f733ba59b514f2ff3f2912de9ed6f850afcebe2e833310"}, 0x15f) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1704.013823] binder: 875:878 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.028263] binder: 874:880 got reply transaction with no transaction stack 07:17:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1704.034697] binder: 875:878 got reply transaction with no transaction stack [ 1704.034707] binder: 875:878 transaction failed 29201/-71, size 0-0 line 3046 [ 1704.036398] binder: 875:881 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.036409] binder: 875:881 got reply transaction with no transaction stack [ 1704.036419] binder: 875:881 transaction failed 29201/-71, size 0-0 line 3046 [ 1704.132821] binder: 890:892 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.132832] binder: 890:892 got reply transaction with no transaction stack [ 1704.132840] binder: 890:892 transaction failed 29201/-71, size 0-0 line 3046 [ 1704.210043] audit_printk_skb: 9 callbacks suppressed [ 1704.210055] audit: type=1400 audit(1571728632.873:772): avc: denied { set_context_mgr } for pid=885 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1704.210885] audit: type=1400 audit(1571728632.873:773): avc: denied { call } for pid=885 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1704.211458] audit: type=1400 audit(1571728632.873:774): avc: denied { transfer } for pid=885 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000f80a0000000000000000000000e2ff826da136eada4ad200000000000000000000000000000000000000a7f79a9200"/96], 0x0, 0x0, &(0x7f0000000f40)}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000200)={0x0, 0x8, 0x3f, 0x80, 0x4630, 0xffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000240)=r3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8600000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd6, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffffc0, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x822}, 0x4) 07:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r3, 0x0, 0x2, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='numa_maps\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="0700001ea56950ec0a2570c1895a8d4e0000000000000000000000001878a4605ab8b2688e08d2e5e5971c192bf838b2b4a3022c59e987dce25546e9370d70c3b5cabe153a0d76bee9c653a7cbb657e78598cea0b5b66a11e7d1da9656c6745e29391324d296a7b16b71528d3371127e455a22d7af3aadf2b70d8c0202008f5fe69d4b28ac19e7df1a74516872379422eaf6ca29f758f4d5"]) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0429bd7000fcdbdf25010000000000000001410000001400170000000cf000000269623a68737230008eae42ebfcc45933916bbde2baba8c8b67d95620d86863055afc4e5f39413bda488df6b144"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x4, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@sco, &(0x7f0000000240)=0x80) tkill(r5, 0x3f) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) 07:17:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1704.211501] binder: 885:900 got transaction with invalid parent offset or type [ 1704.211541] binder: 885:900 transaction failed 29201/-22, size 80-24 line 3454 [ 1704.212230] binder: undelivered TRANSACTION_ERROR: 29201 [ 1704.214325] audit: type=1400 audit(1571728632.883:775): avc: denied { set_context_mgr } for pid=885 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1704.336525] binder: 874:880 transaction failed 29201/-71, size 0-0 line 3046 07:17:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) ftruncate(r2, 0xfffffffffffffff7) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x4, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @remote, 0x2000000}, 0x1c) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 07:17:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='v/\x80M\xb8der#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x94382, 0x80) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x773, 0x80, 0x4, 0x6, 0x11, 0xbb, 0x80, 0xaf, 0x5, 0x1, 0x3, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x2a86d311fdc903ff, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xd9}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 07:17:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:13 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r3) ptrace$getregset(0x4204, r3, 0x20a, &(0x7f0000000080)={&(0x7f0000000340)=""/243, 0xf3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000000)=0x3) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1704.400649] audit: type=1400 audit(1571728633.063:776): avc: denied { create } for pid=908 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb8"], 0x0, 0x10a}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840010000000000000000000000000000000000000001000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/100], @ANYBLOB="64ffff0000d82032020000000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a6873001100000200"/36], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0004000000000000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_create(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x4e) 07:17:13 executing program 3: io_setup(0x6, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}]) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x22) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffd, r3, &(0x7f0000000300)="c791ef401c03316969675bfd06ce5b3ef23634abc19a4917be0f35fa2ff01981582c6c3a65ee286c67ee06ced069da2341b070a1053ada624e2c105c44e9b19eb31b0cbfd2f928c7777e6e56753918e2cca36f70b8d7b78e3955caa8e34323ce2ccbf0ca0fd38b426832720193cae690f57fff1ab9d4a7b7c2b251bdce2262a7507f20070704f1252613511b8770c8200ff33ba35b5d1bf7cecda04e47fa88b15455628fdeb8ccaa524aa90f81c74a75813ab31255ec", 0xb6, 0x200, 0x0, 0x0, r4}]) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000002000c6300000d6300001263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000600"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1704.414528] audit: type=1400 audit(1571728633.073:777): avc: denied { create } for pid=909 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1704.415617] audit: type=1400 audit(1571728633.073:778): avc: denied { write } for pid=909 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1704.459627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=923 comm=syz-executor.1 [ 1704.462182] audit: type=1400 audit(1571728633.123:779): avc: denied { read } for pid=909 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1704.473757] audit: type=1400 audit(1571728633.133:780): avc: denied { create } for pid=909 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1704.474281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=911 comm=syz-executor.3 [ 1704.477587] audit: type=1400 audit(1571728633.133:781): avc: denied { write } for pid=909 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1704.583626] binder: 941:946 got transaction to invalid handle [ 1704.583635] binder: 941:946 transaction failed 29201/-22, size 88-24 line 3138 [ 1704.622856] binder: 942:947 BC_DEAD_BINDER_DONE 0002000000000000 not found [ 1704.622866] binder: 942:947 got reply transaction with no transaction stack [ 1704.622875] binder: 942:947 transaction failed 29201/-71, size 0-17179869184 line 3046 [ 1704.663326] binder: 950:954 got reply transaction with no transaction stack [ 1704.663334] binder: 950:954 transaction failed 29201/-71, size 0-0 line 3046 07:17:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000a2fa309cda1a2e516e96a82bade34cad0e28f31eb6bcf892270cafb61eff03c57d64ba19f521178adfa4808130b68a1da350587b96f096f9a132b1564843a63f1c3f74"], 0x110, 0x0, &(0x7f0000000f40)='n'}) socketpair(0x7ea06dcd9c321bfd, 0x80000, 0x94, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @mcast1, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x3}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x104020}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 07:17:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000240)=""/231) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000100)={0x40000008}) 07:17:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x5, 0x5, 0x0, 0x4, 0x844, 0x31e}) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:13 executing program 3: openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000080)='n'}) [ 1704.701806] binder: 955:957 got transaction with invalid parent offset or type [ 1704.701848] binder: 955:957 transaction failed 29201/-22, size 80-24 line 3454 [ 1704.702814] binder: undelivered TRANSACTION_ERROR: 29201 [ 1704.704141] binder: 955:958 got transaction with invalid parent offset or type [ 1704.704178] binder: 955:958 transaction failed 29201/-22, size 80-24 line 3454 [ 1704.704379] binder: undelivered TRANSACTION_ERROR: 29201 07:17:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1704.887037] binder: 961:963 got reply transaction with no transaction stack [ 1704.894345] binder: 961:963 transaction failed 29201/-71, size 2147483648-0 line 3046 [ 1704.904424] binder: 962:965 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.904435] binder: 962:965 got reply transaction with no transaction stack 07:17:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x200, 0x0, 0x0, 0x0, 0x5244de44f6badb26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1704.904443] binder: 962:965 transaction failed 29201/-71, size 0-0 line 3046 [ 1704.910283] binder: 962:967 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.910294] binder: 962:967 got reply transaction with no transaction stack [ 1704.910305] binder: 962:967 transaction failed 29201/-71, size 0-0 line 3046 [ 1704.913495] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 1704.960104] binder: 974:977 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1704.960115] binder: 974:977 got reply transaction with no transaction stack [ 1704.960123] binder: 974:977 transaction failed 29201/-71, size 0-0 line 3046 [ 1705.028322] binder: 961:963 got reply transaction with no transaction stack [ 1705.037475] binder: 961:963 transaction failed 29201/-71, size 2147483648-0 line 3046 [ 1705.051885] binder: 972:982 got transaction with invalid parent offset or type [ 1705.061313] binder: 972:982 transaction failed 29201/-22, size 80-24 line 3454 [ 1705.071074] binder: undelivered TRANSACTION_ERROR: 29201 [ 1705.112311] binder: 980:990 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1705.120151] binder: 980:990 got reply transaction with no transaction stack [ 1705.128113] binder: 980:990 transaction failed 29201/-71, size 0-0 line 3046 [ 1705.150172] binder: 980:991 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1705.157436] binder: 980:991 got reply transaction with no transaction stack [ 1705.166269] binder: 980:991 transaction failed 29201/-71, size 0-0 line 3046 07:17:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72d17d72b01d720e1de5797e6c7d4a8560c47ae97d867811955f982fb7572ee18eed0884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c76510eafaaa0f8ba7c6748736df7420d45fb3f0238d63d5601ebd74196f10ce9df88a4b79bd60b503173d21169a600329705e79da272078aa76dae26ea75aa4ff2f8dcde9f0d05059abfc4424c2cce2f5316ba4b2db1fdb73cae1aaa7aa059014b7ec99a45bae3157636604dc0b3f3db5f7d4d16e0196ba00c9ab5d3d69456e738a392b25118c4c05c2ff21a4b40d09090846dd401749a2484112d36ded4285c1d61f65042c927c9438d53f8fa33b873eb0caf1d857c738dc30a43c237125dc6d5af383b021334ef7df09c09b0f1267b33020c5c6aab32752e00dee7f3093b136c1b466eef98cbc02df6616a553c1a01d29e2df95a46b82e51c59e25099f702b693a40da0e06f0d9275fc57edfd6ced44d4346e57b25bdbfa131571f773bd2bfac0b59cbeb56b5f5e7c4d412cbe131a2674c83dd466a358ac08da1952d576f537a36a5e133", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x68200, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffffa, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 07:17:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r3, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x3, 0x1ff, 0x6, 0x1, 0x0, 0x5, 0x1, 0x1, 0x8001, 0x7f}) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000040)={0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x2, 0x20) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "d65a9958c0ebc946", "24e0f5c75dfb6e2feddde82c5d8082af", "5796d5c5", "0a2d9c77b15ed45f"}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1707.480809] binder: 1000:1002 got reply transaction with no transaction stack [ 1707.489100] binder: 1000:1002 transaction failed 29201/-71, size 0-9895604649984 line 3046 07:17:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000040000e1ffffff84416466000000000000000000000000000000000000000000000068e18da700"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa}) 07:17:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x212200) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x70, 0x0, &(0x7f0000000040)=[@dead_binder_done, @increfs_done={0x40106308, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x840}], 0xffffffffffffffa7, 0x0, &(0x7f0000000f40)='n'}) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='mountstats\x00') [ 1707.604794] binder: 999:1003 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1707.611946] binder: 999:1003 unknown command 25331 [ 1707.616861] binder: 999:1003 ioctl c0306201 200002c0 returned -22 [ 1707.641592] binder: 1012:1013 got reply transaction with no transaction stack [ 1707.652548] binder: 1012:1013 transaction failed 29201/-71, size 0-0 line 3046 [ 1707.691377] binder: 1014:1018 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1707.701446] binder: 1014:1018 BC_INCREFS_DONE u0000000000000002 no match [ 1707.713323] binder: 1014:1018 got reply transaction with no transaction stack [ 1707.722651] binder: 1014:1018 transaction failed 29201/-71, size 0-0 line 3046 [ 1707.735335] binder: 1014:1018 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1707.743533] binder: 1014:1018 BC_INCREFS_DONE u0000000000000002 no match [ 1707.752528] binder: 1014:1018 got reply transaction with no transaction stack [ 1707.760962] binder: 1014:1018 transaction failed 29201/-71, size 0-0 line 3046 [ 1707.805813] binder: 1026:1027 got transaction with invalid offset (48, min 48 max 80) or object. [ 1707.814811] binder: 1026:1027 transaction failed 29201/-22, size 80-24 line 3379 [ 1707.823736] binder: BINDER_SET_CONTEXT_MGR already set [ 1707.829512] binder: 1026:1027 ioctl 4018620d 200000c0 returned -16 [ 1707.836318] binder: undelivered TRANSACTION_ERROR: 29201 [ 1707.844350] binder: 1026:1028 got transaction with invalid offset (48, min 48 max 80) or object. 07:17:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x9, 0x4, 0x3}, &(0x7f00000000c0)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3}}, 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d63000012634840000000000000000000000000000000000000000000000000000000000000000000000033b748a900"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:16 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socket(0x10, 0x6, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{}, {0x0, r4+10000000}}, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r5}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x18}, 0x10) r6 = epoll_create1(0x0) epoll_create1(0x0) close(r6) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0x200, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='.\x00', 0xfe) r9 = inotify_init() r10 = inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r8, r10) inotify_rm_watch(r7, r10) write$P9_RXATTRCREATE(r7, &(0x7f0000000680)={0x7, 0x21, 0x2}, 0x7) 07:17:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xc00) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x6, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/268]], 0x0, 0x0, 0x0}) [ 1707.853423] binder: 1026:1028 transaction failed 29201/-22, size 80-24 line 3379 [ 1707.861168] binder: undelivered TRANSACTION_ERROR: 29201 [ 1708.025657] binder: 1032:1045 got transaction with invalid offset (401789036580044848, min 48 max 80) or object. [ 1708.036442] binder: 1032:1045 transaction failed 29201/-22, size 80-24 line 3379 [ 1708.047140] binder: undelivered TRANSACTION_ERROR: 29201 [ 1708.069468] binder: 1032:1046 got transaction with invalid offset (401789036580044848, min 48 max 80) or object. [ 1708.080097] binder: 1032:1046 transaction failed 29201/-22, size 80-24 line 3379 [ 1708.087808] binder: undelivered TRANSACTION_ERROR: 29201 07:17:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[]}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d63000012634840080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc40045efa1c09749e8c53a30bda7c8338ffa731a5dfe0a93afddc45bb311239f48638f8af89bcfd80"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:19 executing program 5: mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x30, 0x6, 0x7, 0x7, 0x1, 0x40, 0x3, 0xef, 0x203b36682d3df416}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RATTACH(r3, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x40, 0x4, 0x7}}, 0x14) r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1710.488005] binder: 1051:1054 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1710.507202] binder: 1051:1054 got reply transaction with no transaction stack [ 1710.514894] binder: 1051:1054 transaction failed 29201/-71, size 0-0 line 3046 [ 1710.559019] audit_printk_skb: 84 callbacks suppressed [ 1710.559027] audit: type=1400 audit(1571728639.223:810): avc: denied { set_context_mgr } for pid=1049 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.599434] audit: type=1400 audit(1571728639.253:811): avc: denied { call } for pid=1049 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.622998] audit: type=1400 audit(1571728639.293:812): avc: denied { transfer } for pid=1049 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xb2, 0x0, &(0x7f0000000000)="6b6fa965ec1884576834d0f13adaed349d053911b7424cee0cfb5b0017f5b7191bdbd34b31e41890359b297e395cc34444da60727f4821d3481e8e9a614286d77c79248f2248210aff6e982174107209e27b79dda8a9865d043c2e7f13a6c84c3cf65ecfb45f1893eed85328ed7460d3b2095bb5c63d32b8d19820955f7ef2e7fad337d22424ba25e544204596754de344deee021897ab0b2ac4fdef347e935c9254f84b644a199571957648ef88b671742d"}) exit(0xfffffffffffffff7) 07:17:19 executing program 5: set_tid_address(&(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket(0x4, 0x3, 0x18) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x20, 0x0, @tid=r4}, &(0x7f0000000180)) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) [ 1710.648024] audit: type=1400 audit(1571728639.313:813): avc: denied { transfer } for pid=1049 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.671087] binder: 1049:1062 got transaction with invalid parent offset or type [ 1710.678863] binder: 1049:1062 transaction failed 29201/-22, size 80-24 line 3454 [ 1710.720381] binder: 1065:1069 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1710.727753] binder: undelivered TRANSACTION_ERROR: 29201 [ 1710.737800] binder: 1065:1069 got reply transaction with no transaction stack [ 1710.748914] binder: 1065:1069 transaction failed 29201/-71, size 0-0 line 3046 07:17:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x172, 0x0, &(0x7f00000005c0)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0xa}, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000280)}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/85, 0x0, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/15, 0x0, 0x2, 0x2c}}, &(0x7f00000000c0)}}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/210, 0x0, 0x0, 0x1b}, @fda={0x66646185, 0x5, 0x2, 0xd}}, &(0x7f00000001c0)}, 0x1000}, @acquire={0x40046305, 0x3}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1710.764189] audit: type=1400 audit(1571728639.423:814): avc: denied { set_context_mgr } for pid=1049 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.818033] binder: 1083:1084 Release 1 refcount change on invalid ref 3 ret -22 [ 1710.818041] binder: 1083:1084 got transaction to invalid handle [ 1710.818049] binder: 1083:1084 transaction failed 29201/-22, size 0-0 line 3138 [ 1710.820492] binder: 1083:1085 Release 1 refcount change on invalid ref 3 ret -22 [ 1710.820500] binder: 1083:1085 got transaction to invalid handle [ 1710.820509] binder: 1083:1085 transaction failed 29201/-22, size 0-0 line 3138 07:17:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x202000, 0x0) r2 = syz_open_pts(r1, 0x800) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/136) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$peek(0x6, r4, &(0x7f0000000140)) 07:17:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x57, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000400000000000008000000000000000000000000000000000000000000005000019d88eff1629e236e466398073de853cbbe00"/71, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[]], 0x0, 0x0, 0x0}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 07:17:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b358b70f98131aaa1c06d87d"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/25, &(0x7f0000000180)=0xffffffffffffff39) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1710.964171] audit: type=1400 audit(1571728639.623:815): avc: denied { set_context_mgr } for pid=1089 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1710.985764] binder: 1088:1092 got reply transaction with no transaction stack [ 1710.985772] binder: 1088:1092 transaction failed 29201/-71, size 0-0 line 3046 [ 1711.027405] binder: 1098:1101 got reply transaction with no transaction stack [ 1711.027413] binder: 1098:1101 transaction failed 29201/-71, size 0-0 line 3046 [ 1711.061210] binder: BINDER_SET_CONTEXT_MGR already set [ 1711.066776] binder: 1089:1100 ioctl 40046207 0 returned -16 [ 1711.516393] binder: 1065:1105 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1711.523688] binder: 1065:1105 got reply transaction with no transaction stack [ 1711.530980] binder: 1065:1105 transaction failed 29201/-71, size 0-0 line 3046 07:17:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x6d047253c8beff1a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x42, 0x0, &(0x7f0000000000)="0059f90eb7c3c4bbbbec8572e7c357407a1a04080028620adfa0e4b423a9c495eb1e3db44c99692d4231ff0f0280f692aa81e65359d979328cb55d02ff342f592b2c"}) 07:17:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAPBSET_READ(0x17, 0x1d) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r3, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd4, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc07}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="b0a519fd9adccce853ab9b3d2061cbd7223f00b944aebf178778aeb1e69dc869a3f3e2daa295f531e6911770e9195ae22ea08461994fda8ab14fff1ebf6f4c2dc072b1b3c8587a4b9ff87d5ddafdc3228e576655d4cdc451c718408074fd8fef9140cfd7d11f58643d3f8ae89c8a58442e951756997c3e0e9cef872f29fd9677c6b36064c815b9ff1952b5ddb63a6ff0d4ad7b173968fc5708b17c26a661cd32014bfa0f22a513f195eecfd12191b6b1b0e720925ff5098878b674b8733177787fca4bfd029c9798586c49cebe124442fe3e2c78132af524a5e99f", @ANYRES16=r3, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = socket(0x8, 0x2, 0x80) dup3(r4, 0xffffffffffffffff, 0x180000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffe9c, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2db, 0x0, &(0x7f0000000f40)='n'}) 07:17:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r7, 0x0, 0x2, 0x0) r8 = getpgrp(r7) r9 = geteuid() r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r11}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={r8, r9, r12}, 0xc) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000340)=""/199) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="eac55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1713.579715] audit: type=1400 audit(1571728642.243:816): avc: denied { set_context_mgr } for pid=1118 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1713.612798] audit: type=1400 audit(1571728642.273:817): avc: denied { create } for pid=1118 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1713.649356] audit: type=1400 audit(1571728642.303:818): avc: denied { create } for pid=1118 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000100000000000000000000ca0013ce00000000000000000000000000000000000000f300001000"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:22 executing program 3: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0xd6996363345d0c9a) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00'}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xc, 0x2, @broadcast}]}, 0x28}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000c000200ff12000000ff0000"], 0x28}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@local, @rand_addr="a6dd0e5212a74b74e0f3f573e934ab5c", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1950118, r7}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={r1, r9, 0xee00}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r11, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r12 = epoll_create1(0x0) r13 = epoll_create1(0x0) close(r12) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000000180)) r14 = dup(r13) write$P9_RLERRORu(r14, &(0x7f0000000000)={0x2e, 0x7, 0x1, {{0x21, 'user-lo$ppp0nodevcpusetcpuseteth1'}, 0x1}}, 0x2e) tkill(r1, 0x3b) r15 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r15, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r15, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r15, 0x4008240b, &(0x7f0000000540)={0x1, 0x70, 0x7, 0x8, 0xd5, 0x20, 0x0, 0xe683, 0x20, 0x43a125db235abba6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0xccd41b57d562f249, @perf_bp={&(0x7f0000000500), 0x2}, 0x400, 0x6, 0x1f, 0x0, 0xac3, 0x8, 0x8001}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1713.691822] audit: type=1400 audit(1571728642.353:819): avc: denied { write } for pid=1118 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1713.739062] binder: 1127:1131 got reply transaction with no transaction stack [ 1713.739072] binder: 1127:1131 transaction failed 29201/-71, size 0--936748722493063168 line 3046 [ 1713.773419] binder: 1129:1135 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1713.773428] binder: 1129:1135 got reply transaction with no transaction stack [ 1713.773436] binder: 1129:1135 transaction failed 29201/-71, size 0-0 line 3046 [ 1713.780277] binder: 1118:1125 got transaction with invalid parent offset or type [ 1713.780325] binder: 1118:1125 transaction failed 29201/-22, size 80-24 line 3454 [ 1713.810943] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1713.811953] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1713.833269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1133 comm=syz-executor.2 [ 1713.886815] binder: undelivered TRANSACTION_ERROR: 29201 [ 1713.893214] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.898915] binder: 1118:1125 ioctl 40046207 0 returned -16 [ 1713.918706] binder: 1118:1125 transaction failed 29189/-22, size 80-24 line 3138 [ 1713.926546] binder: undelivered TRANSACTION_ERROR: 29189 07:17:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x2, 0x3}, @flat=@weak_handle={0x77682a85, 0x100f, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/141, 0x8d, 0x2, 0x16}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @exit_looper, @request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r1}], 0x6c, 0x0, &(0x7f0000000380)="5b98953d2d322ed1cc1638a91a7b830fe3756f308b8abe6b449fa1d14fb7b44985e54ee7c4b60f2655b58d06bf52d908e648e048ddfd237227316b68a4316e82c7b39d67b048171bf1d7b183ec2f91fd8b59e808e1a5469b0a1b775ff0f67b8b224d99e29824d449c413fe0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000280)=0x1) 07:17:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x10000, 0xff, 0x200, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:22 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}, {0x77359400}}, 0x200) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a6273000000f4ffffffffffffff000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:22 executing program 3: setxattr$security_selinux(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x2) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000140)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xad73f617cd78cfd}], 0x3b, 0x0, &(0x7f00000000c0)="8d9b5adcb855b56fefa52e0f0b7d67761706f465499ed1699a575f6283b9c2304a67f56bac22786a8eaff9051c00"/59}) [ 1714.001977] binder: 1149:1151 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1714.011526] binder: 1148:1155 Acquire 1 refcount change on invalid ref 1 ret -22 [ 1714.027507] binder: 1149:1151 got reply transaction with no transaction stack [ 1714.027518] binder: 1149:1151 transaction failed 29201/-71, size 0-0 line 3046 07:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0158c978c315f6a000000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x820001, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@seclabel='seclabel'}, {@measure='measure'}]}}) [ 1714.027998] binder: undelivered TRANSACTION_ERROR: 29201 [ 1714.032440] PF_BRIDGE: RTM_DELNEIGH with invalid address [ 1714.033554] binder: 1149:1159 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:17:22 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x242a0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/188, 0xbc) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r4) ptrace$pokeuser(0x6, r2, 0x2, 0x10000) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x101c00, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000000c630000066304400200000012634840000000000000000000000000000000000000000000000000000000000000000000005a2a7af2fcfa00"/100], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1714.033564] binder: 1149:1159 got reply transaction with no transaction stack [ 1714.033573] binder: 1149:1159 transaction failed 29201/-71, size 0-0 line 3046 [ 1714.033839] binder: undelivered TRANSACTION_ERROR: 29201 07:17:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/7, 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/185, 0xb9, 0x2, 0x2c}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x3d}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x11, 0x0, &(0x7f0000000000)="5212c09562f649cf990b18ca1e20860f0e"}) [ 1714.061239] binder: 1148:1167 got reply transaction with no transaction stack [ 1714.061249] binder: 1148:1167 transaction failed 29201/-71, size 0-0 line 3046 [ 1714.078111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1150 comm=syz-executor.2 [ 1714.101981] binder: 1169:1171 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1714.101990] binder: 1169:1171 got reply transaction with no transaction stack [ 1714.101997] binder: 1169:1171 transaction failed 29201/-71, size 0-0 line 3046 [ 1714.179311] binder: 1163:1164 got transaction with invalid parent offset or type [ 1714.179358] binder: 1163:1164 transaction failed 29201/-22, size 80-24 line 3454 [ 1714.230345] binder: 1177:1178 got reply transaction with no transaction stack [ 1714.230354] binder: 1177:1178 transaction failed 29201/-71, size 96-24 line 3046 [ 1714.230610] binder: undelivered TRANSACTION_ERROR: 29201 07:17:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1714.234477] binder: undelivered TRANSACTION_ERROR: 29201 [ 1714.236909] binder: BINDER_SET_CONTEXT_MGR already set [ 1714.236917] binder: 1163:1179 ioctl 40046207 0 returned -16 [ 1714.237682] binder: 1163:1180 transaction failed 29189/-22, size 80-24 line 3138 [ 1714.237972] binder: undelivered TRANSACTION_ERROR: 29189 [ 1714.290407] binder: 1148:1155 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1714.305394] binder: 1148:1155 got reply transaction with no transaction stack [ 1714.313380] binder: 1148:1155 transaction failed 29201/-71, size 96-24 line 3046 [ 1714.314110] binder: 1185:1186 got transaction with invalid parent offset or type [ 1714.314152] binder: 1185:1186 transaction failed 29201/-22, size 80-24 line 3454 [ 1714.314830] binder: undelivered TRANSACTION_ERROR: 29201 [ 1714.351016] binder: 1148:1167 Acquire 1 refcount change on invalid ref 1 ret -22 [ 1714.358981] binder: 1148:1167 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1714.366503] binder: 1148:1167 got reply transaction with no transaction stack [ 1714.373951] binder: 1148:1167 transaction failed 29201/-71, size 96-24 line 3046 [ 1714.381622] binder: 1148:1155 got reply transaction with no transaction stack [ 1714.389045] binder: 1148:1155 transaction failed 29201/-71, size 0-0 line 3046 07:17:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'io'}, {0x2b, 'memory'}, {0x2b, 'cpu'}]}, 0x11) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x202002) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x28, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @register_looper, @increfs, @increfs={0x40046304, 0x2}, @exit_looper, @increfs={0x40046304, 0x1}], 0x5e, 0x0, &(0x7f0000000180)="e4114f2865145435b653375f5fae26e5e47e9c3ad30cb9243e7d8fb5816295fb9527368bc662b83ee8c5c3a3ad44e1ff7e3455dd179637ffcec3c819c336990c92c29265b6e9d4e8bf17178ee9c138ce65d363cc270af9fe4e1a54729ab0"}) 07:17:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340400000000000000000080000000000000000000000000000000000000000000000500000000000000018000000000000000a9df84f33f87c1663d7ff62d1c7a882f63b6454c0645c90b669e6ceb5478e417f6ca6d4ae2f99b18a10f54fff2c4dfb43e6cfcc9c9ac2f6541d788aac077fc7de2717e7ae18569ef51f", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a6273000000000000b93c4551bf71a45c000000000000852a6277000000000000000080000000000000000000000900002000000000000000000000000000000064780000000000000000000000220000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xd904, 0xa308d7564dc86e6b) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000040)=""/55) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x40, 0x0) getsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180), &(0x7f0000000340)=0x4) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1716.764081] binder: 1193:1197 BC_ACQUIRE_DONE u0000000000000000 no match [ 1716.772145] binder: 1190:1196 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1716.772156] binder: 1190:1196 got reply transaction with no transaction stack [ 1716.772163] binder: 1190:1196 transaction failed 29201/-71, size 0-0 line 3046 [ 1716.847850] audit_printk_skb: 66 callbacks suppressed [ 1716.847862] audit: type=1400 audit(1571728645.503:842): avc: denied { set_context_mgr } for pid=1192 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1716.887659] audit: type=1400 audit(1571728645.543:843): avc: denied { call } for pid=1192 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1716.910561] binder: 1192:1205 got transaction with invalid data ptr [ 1716.914572] binder: 1190:1196 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1716.914581] binder: 1190:1196 got reply transaction with no transaction stack [ 1716.914588] binder: 1190:1196 transaction failed 29201/-71, size 0-0 line 3046 [ 1716.951068] binder: 1192:1205 transaction failed 29201/-14, size 80-24 line 3316 [ 1716.960441] binder: undelivered TRANSACTION_ERROR: 29201 [ 1716.966754] audit: type=1400 audit(1571728645.623:844): avc: denied { set_context_mgr } for pid=1192 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r3) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r5, 0x0, 0x2, 0x0) rt_tgsigqueueinfo(r3, r5, 0x2a, &(0x7f0000000000)={0x2e, 0xffffffff, 0x4}) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xd6, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1263484000000000040000000000000000000000008000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055755bb7b7af59e03ad9885ba7f1b207d6123944141c01037e45cfeb5fd8ec1a5bece4c3711550bf5aeaf8724b8611e5a41bc7cea5267f9f58c0ed4da33b08444093dbce3e2567c2b2adbdff363b86317381d7df2b2cfce3cf57cd293c5cb3facdb4a0e6d910a4f24aea015b098803573e80140d83bcf85d5c1dccacd411152321ce6b883062173ef5b6"], 0x0, 0x0, &(0x7f0000000f40)}) 07:17:25 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r1, 0x0, 0x2, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3f) ptrace$cont(0x18, r6, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 07:17:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000"/86], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000000000)) dup3(r1, 0xffffffffffffffff, 0x100000) sync_file_range(r2, 0xaed, 0x3f, 0x7) [ 1716.991007] audit: type=1400 audit(1571728645.653:845): avc: denied { call } for pid=1192 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffd, @loopback, 0xfffffff9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cbc00"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x81) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0xf9c63d73d0eef2bf) [ 1717.043936] binder: 1192:1207 got transaction with invalid data ptr [ 1717.044134] binder: 1210:1212 got reply transaction with no transaction stack [ 1717.044142] binder: 1210:1212 transaction failed 29201/-71, size 0-0 line 3046 [ 1717.044192] binder: 1209:1214 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1717.044201] binder: 1209:1214 got reply transaction with no transaction stack [ 1717.044207] binder: 1209:1214 transaction failed 29201/-71, size 0-0 line 3046 [ 1717.050590] binder: undelivered TRANSACTION_ERROR: 29201 [ 1717.092911] binder: 1209:1214 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1717.092922] binder: 1209:1214 got reply transaction with no transaction stack [ 1717.092931] binder: 1209:1214 transaction failed 29201/-71, size 0-0 line 3046 [ 1717.134203] binder: 1192:1207 transaction failed 29201/-14, size 80-24 line 3316 07:17:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/145, 0x91, 0x60, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @mcast2, 0xf7}, 0x1c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) rt_sigaction(0x30, &(0x7f0000000200)={&(0x7f0000000740)="c4a33d0635831e4c20f7660ff543a3f0418162de5dbb0f326666f04410abcc000000c4c1ac5c1cf9440ffa19c442d58e4500654781b9e88b00000000008145be0800000043d33e", {0x3}, 0x0, &(0x7f0000000180)="c4a37d1d775b60470800410f401e2626660fdef1400f988bfeefffff43fe8e03b00000c4c13bd036c4a1ff7ce12e66400f383df4c4420ddcd0"}, &(0x7f0000000880)={&(0x7f00000007c0)="66666626f236653ef3c1dc0044081cc6c4a181f64f02c482693bae000000008f69689bc6c4e3896fd855c4c37bf05200cc0fc7f7c46239aab0feefffffc4437d096507fa", {}, 0x0, &(0x7f0000000840)="64653e660f38f5bd00800000440f0112c40260f517c4a23d966918c42165e8b58d000000c4c3554be2fc67f010710636406fc4a2d93e11c40168579509000000"}, 0x8, &(0x7f00000008c0)) sendmsg$unix(r3, &(0x7f00000005c0)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)="e6f1515d4027591a4004f7", 0xb}, {&(0x7f00000003c0)="b144c975e33b8343f663b33b9891423764f23ea21fc1e4fd26f420afb17eb9644f4af50aacfdd968c69845f3e103a427", 0x30}, {&(0x7f0000000400)="c0d4a58fbf04800b7360150f6c6790ce8be439e1f7a73dab6d425ca91befd2a41a38d4acac2428498465901a8589f5a0a46b237b5f2117b332ec", 0x3a}, {&(0x7f0000000440)="ade4b9585dcbcf6e45bdaf18a226b92d34c34bec3d4b68e713b237b1b10ab2d1c4d122f3a8e6becc7d1e3509a50073f3c3ec654db99bbeee28b708a159eec5", 0x3f}, {&(0x7f0000000480)="4b90abe41357ab8e02d79f271e9c66b3038842f3c8541fbb99e16b0e9736f8b465c6c66ddd8d2a7704127532b86d527b286099be8488ae7518aba42bcafda3125db37d223d1aa0a8e68d532872c7cb4908ea79b8b6b55275704b4b56efed29", 0x5f}, {&(0x7f0000000500)="eb142a3f22976e6a4f162b8e6017522a0cdd3e0b33689db85e205c84093362", 0x1f}], 0x6, 0x0, 0x0, 0x40820a0}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006340400000000000000000800000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="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"]], 0x0, 0x0, 0x0}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x2, {0x8000}}, 0x18) 07:17:25 executing program 3: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x40) [ 1717.141873] binder: undelivered TRANSACTION_ERROR: 29201 [ 1717.215831] binder: 1233:1234 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1717.225182] audit: type=1400 audit(1571728645.893:846): avc: denied { set_context_mgr } for pid=1235 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1717.233215] binder: 1233:1234 got reply transaction with no transaction stack [ 1717.233223] binder: 1233:1234 transaction failed 29201/-71, size 0-0 line 3046 [ 1717.285178] binder: 1233:1239 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1717.285188] binder: 1233:1239 got reply transaction with no transaction stack [ 1717.285196] binder: 1233:1239 transaction failed 29201/-71, size 0-0 line 3046 [ 1717.346860] binder: BINDER_SET_CONTEXT_MGR already set [ 1717.354724] binder: 1235:1238 ioctl 40046207 0 returned -16 07:17:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet(0x2, 0x100002, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000600)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1263740a0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ce3fa771c24"], 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xff, 0x3, 0x7}) 07:17:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x2, 0x28ab}) 07:17:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x30, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @enter_looper, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x1}, @release, @acquire={0x40046305, 0x3}], 0x28, 0x0, &(0x7f0000000040)="599a3953754fcf57355c7df54059c9504c20698e1568b0ed25c48b993f589076f326edbeb2cc3fd2"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x1a, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES16, @ANYRESOCT], @ANYRES64, @ANYRES16], 0xcc, 0x0, &(0x7f0000000400)="6b17d68e744e1b926b2876b229f3248cd5531250530b4c48ea79290bd57a3c35db72a3c748296315192bc1111986fed06017591d6ccef6424944d5184f4349f306f9df051845c086d1d2a49c93107c5ba2a899bbe5691aa9c83e10238f83614f8f7615a404fd19cd521faf3d4e29ecbaeb5ae5f39cf8016e23556175542aa7713c96459470e8862c447ca59e9d6bc87d1fdca67f29afd790cdf88a4121ce1d70cc9b4f43cf61ec8dfa6b4173a3c76e43fd5a9b0b633b39a7cc727c2f6cc27ed2c107683e37ce3d4bb77ee364"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x400000, 0x0) [ 1719.796161] binder: 1244:1245 unknown command 175399698 [ 1719.805510] binder: 1244:1245 ioctl c0306201 200002c0 returned -22 [ 1719.810692] binder: 1243:1247 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1719.810702] binder: 1243:1247 got reply transaction with no transaction stack [ 1719.810709] binder: 1243:1247 transaction failed 29201/-71, size 0-0 line 3046 [ 1719.816310] binder: 1243:1247 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1719.816319] binder: 1243:1247 got reply transaction with no transaction stack [ 1719.816326] binder: 1243:1247 transaction failed 29201/-71, size 0-0 line 3046 [ 1719.862237] binder: 1254:1255 BC_FREE_BUFFER u0000000020ffc000 no match [ 1719.862249] binder: 1254:1255 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1719.862257] binder: 1254:1255 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1719.862264] binder: 1254:1255 Release 1 refcount change on invalid ref 0 ret -22 [ 1719.862272] binder: 1254:1255 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1719.971428] binder: 1254:1260 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1719.978981] audit: type=1400 audit(1571728648.633:847): avc: denied { set_context_mgr } for pid=1256 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1719.982523] binder: 1254:1260 got reply transaction with no transaction stack [ 1719.982531] binder: 1254:1260 transaction failed 29201/-71, size 0-0 line 3046 07:17:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)) 07:17:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b0", @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYPTR64, @ANYRESDEC], 0x0, 0xf2}, 0x20) tkill(r4, 0x39) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41400044}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)={0x55, r3, 0x400, 0x70bd25, 0x25dfdbfd}, 0x60}, 0x1, 0x0, 0x0, 0x4b3}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) creat(&(0x7f00000003c0)='./file0\x00', 0x131) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1719.986314] binder: 1254:1257 BC_FREE_BUFFER u0000000020ffc000 no match [ 1719.986325] binder: 1254:1257 Acquire 1 refcount change on invalid ref 3 ret -22 07:17:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(0x0, 0xe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) gettid() 07:17:28 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x6c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @request_death={0x400c630e, 0x3}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDMKTONE(r1, 0x4b30, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1719.986333] binder: 1254:1257 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 1719.986340] binder: 1254:1257 Release 1 refcount change on invalid ref 0 ret -22 [ 1719.986347] binder: 1254:1257 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1719.989966] binder: 1254:1257 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:17:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:28 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) setsockopt$inet6_tcp_int(r3, 0x6, 0x20, &(0x7f0000000180)=0xa, 0x877cb6e0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) r6 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1719.989975] binder: 1254:1257 got reply transaction with no transaction stack [ 1719.989982] binder: 1254:1257 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.062643] binder: 1264:1266 got reply transaction with no transaction stack [ 1720.062652] binder: 1264:1266 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.066430] binder: 1264:1266 got reply transaction with no transaction stack [ 1720.066437] binder: 1264:1266 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.114710] audit: type=1400 audit(1571728648.773:848): avc: denied { create } for pid=1269 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1720.115042] audit: type=1400 audit(1571728648.773:849): avc: denied { write } for pid=1269 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1720.137069] binder: 1272:1276 got reply transaction with no transaction stack [ 1720.137078] binder: 1272:1276 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.138786] binder: 1271:1274 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1720.138800] binder: 1271:1274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1720.138810] binder: 1271:1274 got reply transaction with no transaction stack [ 1720.138818] binder: 1271:1274 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.145057] audit: type=1400 audit(1571728648.803:850): avc: denied { read } for pid=1269 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1720.156563] binder: 1271:1280 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1720.156579] binder: 1271:1280 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1720.156591] binder: 1271:1280 got reply transaction with no transaction stack [ 1720.156601] binder: 1271:1280 transaction failed 29201/-71, size 0-0 line 3046 [ 1720.165052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1279 comm=syz-executor.2 [ 1720.196563] audit: type=1400 audit(1571728648.853:851): avc: denied { create } for pid=1265 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1720.224577] binder: 1289:1292 got reply transaction with no transaction stack [ 1720.224586] binder: 1289:1292 transaction failed 29201/-71, size 2-0 line 3046 [ 1720.721890] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.727627] binder: 1256:1261 ioctl 40046207 0 returned -16 07:17:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4b, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000f40)='n'}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0x71, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x8, 0x5}, 0x0, 0x0, &(0x7f00000005c0)={0x5, 0xffffffff, 0x6a74cb1f, 0x5}, &(0x7f00000003c0)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x6}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r1, r4, 0x0, 0x5, &(0x7f00000002c0)='sit0\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000380)='ppp0\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00', r8}, 0x30) syz_open_procfs(r9, &(0x7f00000001c0)='net/udplite\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000000c0)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4487d7eac9ad11fc}}) r11 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) fadvise64(r11, 0x0, 0x5, 0x3) 07:17:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000006900000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:31 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x2, 0x9, 0x6, 0x5, 0x0, 0x8, 0x2002, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x5100, 0x0, 0x0, 0x0, 0x800, 0x4, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r2, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="d400005a729e1192af574c68ba31f73100", @ANYRES16=r2, @ANYBLOB="040025bd7000fbdbdf25160000002c00020008000100040000000400040008000100030000000800020007000000040004000800020005000000500007000c000300070c000000000000080001000600000008000100040000000c00040050000000000000000c00040081000000000000000c00030001000080000000000c0003002d0000000000000044000200080001000500000008000200080000000800010005000000040004000400040008000200070000000400040004000400080001007f00000008000200ff0f0000"], 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r3, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd4, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc07}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}}, 0x80) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xdc, r2, 0x610, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d630000126348400000000000000000050089677dab328f8d42f17100"/106], 0x1, 0x0, &(0x7f0000000f40)='n'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) write$P9_RRENAMEAT(r6, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) 07:17:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0xb38}) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12634840009526fceeb0eee9e95e00"/85], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1722.837354] audit_printk_skb: 6 callbacks suppressed [ 1722.837367] audit: type=1400 audit(1571728651.493:854): avc: denied { create } for pid=1314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1722.863134] binder: 1312:1319 unknown command 0 [ 1722.863143] binder: 1312:1319 ioctl c0306201 20000000 returned -22 [ 1722.875855] audit: type=1400 audit(1571728651.533:855): avc: denied { set_context_mgr } for pid=1310 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1263484000004b617a5623064b572285baa9356300000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000ffefb5e7b2f34e5b18ed61223cde954e228ef11c4662dfe54662efebfe5fcd4c92090a4bc54dbc6960133f7ec6b3e2537b0c7aa32296eac9695cdb301f0e3c5dfd63f5825b8571c43959b130e4673189d065c4813356271440"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='t}\x00') [ 1722.886216] audit: type=1400 audit(1571728651.533:856): avc: denied { call } for pid=1310 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1722.886982] audit: type=1400 audit(1571728651.543:857): avc: denied { create } for pid=1314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1722.887643] audit: type=1400 audit(1571728651.543:858): avc: denied { write } for pid=1314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1722.896412] audit: type=1400 audit(1571728651.563:859): avc: denied { read } for pid=1314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1722.899289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1325 comm=syz-executor.3 [ 1722.900387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1325 comm=syz-executor.3 [ 1722.910120] binder: 1328:1329 got reply transaction with no transaction stack [ 1722.910128] binder: 1328:1329 transaction failed 29201/-71, size 0-0 line 3046 [ 1722.915295] audit: type=1400 audit(1571728651.563:860): avc: denied { transfer } for pid=1310 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1722.915712] audit: type=1400 audit(1571728651.563:861): avc: denied { transfer } for pid=1310 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000d"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) [ 1722.915737] binder: 1310:1317 got transaction with invalid parent offset or type [ 1722.915781] binder: 1310:1317 transaction failed 29201/-22, size 80-24 line 3454 [ 1722.917057] binder: undelivered TRANSACTION_ERROR: 29201 [ 1722.919347] audit: type=1400 audit(1571728651.563:862): avc: denied { set_context_mgr } for pid=1310 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x201a}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000040)="aecc03725033b9d4f73ada311f21a8a9a386f2fc84d0342ceb42403e14701d01094537ba1e1b26545e4e5872285ce4e0a64d6de8ae73c8b3e587") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1723.004964] binder: 1332:1333 got reply transaction with no transaction stack [ 1723.004973] binder: 1332:1333 transaction failed 29201/-71, size 0-134217728 line 3046 [ 1723.192601] binder: 1337:1340 got reply transaction with no transaction stack [ 1723.192610] binder: 1337:1340 transaction failed 29201/-71, size 0-0 line 3046 [ 1723.202223] binder: 1337:1340 got reply transaction with no transaction stack [ 1723.202231] binder: 1337:1340 transaction failed 29201/-71, size 0-0 line 3046 [ 1723.253842] audit: type=1400 audit(1571728651.913:863): avc: denied { write } for pid=1314 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d630000126348008f000000000091187b1deb7129d1f400"/105], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1723.303985] binder_alloc: 1336: binder_alloc_buf size 1378128816 failed, no address space [ 1723.314846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1316 comm=syz-executor.3 07:17:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000000000000000000000000000000000006f0000000000000000f100000000000000000000000000000000000000000000e2b44da421840c9e196f2bff00"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'\f-', 0x9}, 0x28, 0x2) write$binfmt_elf64(r0, &(0x7f0000000f80)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x5, 0xe4, 0x10001, 0xe2b66c98da9ba6b2, 0x6, 0x8, 0x24a, 0x40, 0x3b4, 0x3, 0x800, 0x38, 0x1, 0xffff, 0x4c}, [{0x2, 0x1, 0x7ff, 0x5, 0x0, 0x3, 0xfffffffffffffffa, 0xfffffffffffffffe}, {0x60000000, 0x5, 0xff, 0x100000001, 0x0, 0x7f, 0x8, 0x1}], "42154246f9b843d8fb691aa0157e707acb6e48ecb6c0a283fbad7a54fd4624fa3824c8f552c5050a074b671614f5c2dbb43b21d48761e09870d1d20c4866ec585a2f218287b13f7d5803915f5db9c51e7ab08eef401ab4c3abea60b020b5169936c93f3a716c2158d0324e8b92d2f232506fc05269e55e8318e93bb012d41b575302416fa317f78b3400f50cdcd82bff7d60510608a9347a45f8625fb413997f278f310f42f23ba187198c66e466358bfcf9c574dfd731f2d11c1a3ac2bc0a83e76a2890d2ee30922cec79156d207bc49b4fde677bc5628bef4392a1b496e8b8d6f8122bb5f946425cea4b997a936bc7399c9dc4cfaa97269c3951e03ae9f15c22525254aaec20a2d2a97a98a7269174f8c743f45dc256a48026d4d5cce12bd7ac3158d63d9aee4b565cff97c0363065b708fd980b711b01f28aef44bc4993380ab2b5468bfb7bb5cd0badca25a5eab52992854a2b24f7fe72f8704e05c36c28fb8c97bba35a089d691478898fa30d724672bc3c903fc0db48220b174efc5da67ff490445f08ffcdaf1bbd083cfc37f26aaafd97384ff2d1d1ddcf6e8c9bc9e0d378b9dadf7b212336b12321fcd5e141ea064268ae45edfdcf81afbeae83ca18736351f3079ade858bb0b7bc67664b8acb21115edb49c298b0e3e449a2fdff92cc71d520536c96d358fb8479ba5ac6aac16c319b6239914bbc522fef662594127bdda9ec6aca2db0d677cea2df85f8536782da5028a0ca5e8a4303b464e5f6108aa5f65ff7576d612b5d29e9e2b9873947fd2f0df3ff1ce8f28a7f5ec44a4ff6574836ec3c6c2f6abd091c69860db4b2c6c1d45e9114f689965a556635f4512ccb6cd97e026efdf3688c9985cd763d379744784d7b46de034be46976d0b39e46970e670e029549c826b039200d11d811e2a1c917a540a0709f8127056f285592218c2c854878cc4ad5623c2d2852ba43906267f9f5933ecc0e966243d6126f180b2a41b3d4d09ebd301e0c4291a0b61a8734b6bad9651ef76fc660c99083bd9f8d0d91b575d3d4f799a5efc022cdfd7df21d77dec988e7dcccbb5a388c54daee39f27c738e9edb196448b813569cb1900c415289c39bbcfeccf1b2915fea09e0be9012ad3f5933f74a035871d4dfa99160680d71255ae35ca5bdfedd7fcb715e315928e4063a4278d23e23faf22f128893f50d0696d393cca40fea5653786ad60518167f4bb2b6c83311f2fd8dc7694af40f61364059127d1a3c616567f84de969ef1bb6e86a91355f4a7c2aad0119564e95a7737f1e973b5316f4f569a04ae3c497e7541221f66d7b4c4c4cab59de7f24a6d658a940763f4345b141f0947ab6d0281d0b54fd31a8e18620f1e7e485b58bc766d1f295ace6e03c365b3fee47360e177815c2d933ce122ccf9dc5c77528498aa4ca0468a5a6d469147c5cebaed0f5abf85659ebac1e8defdd560e6d95c5f47b5b2bb87b9bab9a1407679720b425f35d345924a22048ae83ad19f7aa75d402cfeeeef602f1e4da2e4dfb6ed4717602368961debc2e3c572a36b837457533cb62f58b1e9885fecb012e8a1f86428e663ce177d0c3846a4472b1c9dc4ccbd158df693f201510410b37c556e283d7f3efeb6f598eaebb3dda4326441eef3194e799fd0fb5055284bfdfa94075fcf7709e8581e3e0af8854456f807b021d5310a499f5796808aa8cc8d0b38141fc86aaebfe24d9c6a733dfcbdccb7eb72dcc11fa4976995133017c8c4bfdf0a5852b1cc3f2d569673b5dd297195c436c170029d7d72e1e556349d2503a323fc51a5a96b47610ec42d1b37a0810963cce162f3f335da5edea98b8bab5f033b4697e86a1ef352f2ffc5638ccc9a75799074d3a3b59a9180ebf4299900f0f4d3e9db54a02e1938464c2cbf98b89c9ef6fc86b5263937a1452e9c698fbf7b263c20c1234af2548d68329f9b2ea4784158426d0164ecfb8c5a5128dc2515bf60411b4e52c89616b8ca898540c5a4464a89a368c14385cfd5c94b3710b61fbd821a5108f4d63ee107e0449f77d25c3e3d99b6f88858b66ab8b17b7737c2d632fc6d3f36cf45828bb19412b1fd1de9dbbcd4048ab467bb94d346532d9244e1b2c4133770517360115ff5e03e36861c70875aaf1bedb7ab16a665587fe77b0e88c0ec5e4b6fbc4c0bf2c413f4bd1c41f9c86dd99a4997e3c8bcfba2db910f6c0ba5286d148cc00685168faeb1b409a41d5e21a99ee331168560721c4a83d1808000296874f834952d1bfdae8f211abbcdfac130612dd938d865d88cc6771cdf49e454b5b773c470f8cd06e3e95e425ead4087130a2d7282a81738efec5a54dfe4febaca4daf50aac0412ea4733d571d5090ffbbc29ba2e594f5a83ab8a38e789915f176fa703176ee55e3b50e2ad638b319159eb85c219c6e39b9c9ccef64926f16df822b216ebc748235bdb3cddc09f15f9a31fbf3e4c3891fa39563b60dc156311b0c3209f366629a6c314ee17ff9141715f23a999fecffe24b564566727407049eba7e92f7aff334e46051053bc20690811e338c69f5db638954aead89995d21ec8da1f4f857d616495616098dbd38b3909b39e5ac749deeab92ded98cde53ec687a0c40bf7043ebf6f5d227bd53165446fae87795b2181ef143d31c561e5ef1e722d60a8920a9d72a05a7fe17ade8ada14628ab670a5b47abb06f75099161e8871f0b643c65e59b170e537926ff455e8f3fadf164fb3c413d12de0c3e5802248acb0062b9cc2ddb41c4ea415c2b079012782c10a969183384802e8dda515eef49e6b1f34e8619c66c5964fb83dce3c7693c93800e6a48ded35e89e8d39b6a326ad894c489fb8c53a928e6396a541bdfd483dd859fb33c3bd5a341f4f12d8b3e781ef700c880e4d026eace27b2b0a190cb9732c7495268b4b05ba813db7ece73cfc7dd790ef5a76f763b41bc8755462136773209b08d3b1c7976f86afb40814bfb00fcad45cdc493dee9c954e5fd65be9b7457b3fbd626a94476dd5d36461402a2825a94c3a1a4dc32f600ef5e4fd6ccdb716c7dfe51dd9579f596a76a2343011ac5c2f8a1ec10dae65d74791916ff838216023c8ac1c667b7518234f9a6ff7ec70427e296920739efbc33e8c80c42c354ebf8e9ab92220668083bf720a61f6c55c9fbf091a2361f177dee60ec8791e60254142485f6ad42b658b3c9cb78db9e81b6ebf43adebb6773469be0f6242c69fe3d7437aa2ef1248e51cc74a2037a0d46cef40efc7e092ff0e3ce283db43690cd207b28ad36baaea9f3da22ba21d77122e6b8a183cdd49e727419741ddcce58a5cbbbc23c98155b04e9f15f8ddd86613d787135602327974db85868541f67974e25aa8c9a35a01fea14504bc8ed01f4690a175f53ff0b0b19958c192f3cd69510d60ec49a9f053e20d1a38a78bb71c35a7d7654d5c47816fb800f145492d6e3ac54ab7f6d4fdacc7db526f1577cf357fd9e66c1bcceadcd5d99893f88100b3669af8bbda4aea1088dc2c889f726fe39f63af6820a45695c0c100653950943c0a27e65530aece9d1df76e2e8024e6028f51dc8509a7b81b44119c1dab900d75ace3fa850ef771fe87a4152ca490858a7350e903e03d7fa32e968a328afb9938c8572efad7804b19da01f7198798ca380877f23b9beb70d17080eef5e0f9de930bdc676c71bccacb7fd0c5cfd0f881f39313a8045bdc8ebbe73fb135bb399bd6ae50afe10e8ac5f0d3a9fbd5985df4ddfb64536731d8f15d6fab83c030c6a8ddd8b9bc160b1cca3cb66b1b95787eda0965cfe5f1dca420e8b69729e2aefcedca83a9c7736e210e0e19de3fafa64e5eed1f498f1e13d31d3a9a6470a1cfebd2b8edc55426297d367e2443af6bf85ac22adc8c4444f5f497ad40e8ea226c9ddf3c9bb62b8f4d3e7eae35192b76076e80a6e867567174f1bc7d03f43f00bfef1d1f24f074a431260d34915d35ecb81b88f9e6ef6223ee2f6a10fa4be3a2ad69bdbbd932de83bc025de624b256fc3cebf25e9567173714fae23c90b8e805e100b62a5d4aba3a9a05c09b36fbbc8aad6eb3c7ae7a9baa195c7341ffe88fd53213be21d66b5723a64beed7a10406fc56f2da6f429d909ea8ef1cc5fe108b7eb0dcc700b00217dd3a9c83dbfdad4eaf624d3ebb0b4444d452e965b163f8025c7345646565208b08ba5df9d03756ad21c0876201a10bbc1e75a19a83ea9e65c4f09cc7d3cf79f259c26ed41cdbdf682d309f0b19498e3b4a651a2ee7187c04415fc5c413383c798deee6487abb5a2192ad24b915e4731b79ec95c0ee67350b71bf35dcbb6b331f4c45719d8359566454788e259cf80b5c8f701c02e30e29f12d6eb8cfee94deab3c6ed840f2ed26d382151c4c5c1f899aff2813981da724178f4dd127fc867cbd47e6e397ff34fee6682ac703467b39cfc4e2532005add318681bbae360aaa9ffaaa18b5bfbe615153366b79e3171c06e386026ee1d6d2c3690f7ef2ba2c77098671ff408f6c6f52912167a15d078a33db2c8aa6ef35ceca32ea841e14a9773b0b5911cb4e48229c7d354f438f8790e25e6e54919e110e98c685b5c5d115151eccba83b916e2ce573fe21e57ac33723e02331b3cc44c75fa099f4d87ce4d205a446663056e55333117dbf39cf29e21d2d55320ecfff11e43dd08f9bee3dbeabe68a9afaa4d9cda6e5b1bf1e22fb04fa52322062ac38e7caf733404b4712624d31860da69b2626bd94e98830e3ab7bd823a031068680dbd7494020f459e8124b18e83ea7c2cd36d39a1ffece770f64dded3238a2619af473ffa55848e72837f0dd01eaef88b262e2bfd183a3b4ca4f0ccdedd90c9c5546c9b7c29c2373776450442b3bbd0c12cfc429727be94ec009dea8ac61013098afaefb0a13cda5721a33ddd8b88846a5ef1877509d5b0890c5331eca11055eb4cc11fffae713150f63d031cb32d320bbe516e5e25a35cca0afe1f095bac5008f7eb86423dae9e62ac54f001bbfb58fc9f1150e03e63394882817daf72fcce2badd569085c2249f354a6e26e8b32bdf0655be06fd57f29c90487aca5c2b357e8e78326ad64e87f1f275f65414a1f47f881750f727d34b6490a09d9797a13b8eb3a32bfef3af4c441ce7f5661187798042dafc6af764da093d5b2ec4057eff95290242445a54da89e242832933a4d626baf058c777347de4df3394804e1eecd296db54102d89529248a8fa483bc619fe897c194cccdfe9809200ff506d3ed3dab437e7547643a3e6d43dc7268e90f8016597961726d2171421aceaf7c02cd98ef3780880920b81bcb33ac4ddc0556c0045c9e24465b1854587d0d10991f120f08ee71ba7dcd286d7931147490f89c2bcc685a8ca7b9ef0b95fcd0302c9c62da8ebb59544b744c87d2bfcd9cc6c14e3b064e4a529e479fb1c18436f550b31cc0deff0e1276159b403eee235457297bda4aa74eb308cbbc84a2915561986c86d3946e7b8e9ec004f30379645e3fec7f821e1e7b5a9be2d7f762739154a99205778922617ccf9935317c8e942b95fff22d863d0e8f4037977d68ddd95b64996500e0e84e78b08c27c90472c651a8ef4b913f954703d985e6cfd0e21cc9b79414d99d961c55a6cc139d192dd19e88e1400a01187d2065245bbb24ab12bf95f31f193f6d8973c706eb93f4b128aebe1afb58bf0d637d90436bf4b0bbf07b2b7ccf2c2470e81a4e08825fca9d714fd444ffe33c052108e22c62047e172b9f4aa11ba5b6b7581b3de484362d392abdbbb520dd298032de5e1134c58425e1aa3dd7272", [[], [], [], [], []]}, 0x15b0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1fe5e93ce24c4671}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x8001, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSETLED(r4, 0x4b32, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000002540)="64ede5a288e50388de23f3c28f74d6ccbdbe46cb762dc1a21e668daa2aa354cb2d5b2dce9df5cedb5e9d3557ac834ea00e71ed539972df92d80ace824b6744e6656256c908f406084378d0ca7c3e605a4e83ca09b7fda927823b1729b26ba7a687d2c6acf584a8984884a3131ff3028da785f55d640fbd8a6b0894e0014ba084bff062cf0092073cdaf94a72b7625fb94851963d16db51f1072ca7d0e06f0eadb296076eb965fa19e154c3f35ed2cb2d53adfb2f01c1127bdf3807e442edc0a0adff989dc0d4321ade51f77b0d96a4615cb467ffe5f830ea6c2fcad2f04daf788d6fd8ef1ec695882636a23928243cc6c77b0bd4947fa19db772c5785bc0de496910ae845ea376c8c3c3b3eb65546bce11916c5bcac2fb4e21ff7a6c54b68ba3c550125d9360707a011e88660efa8c48cfa6d3035c7a8b8425f5ed4366306bdaa8d1ed7d9ac6d8fa20cdc3e27ca0d7827fc3cf54d729c0a28284c66aa4dd04bac710bc9b9c951791b6973cb83b3a3daef8cd8d79f7a7b0a2f879763709f88a3efd163f34a87699a96b1bbd20d1d7837989f6b0addabf9ab9f3a7eb0cb9c6e3039ad17693e7eef04e36562adb9032809dd079b64e502c1feec4f30e1e5fd4537f0b9cf15e03936dee363145da7c461aa681c14cf1e01fefd5f850c38ff8827944725443727fce6e6b714c8152c4f72373fa24952da1ee985f895dcdef5d8bfd4cd23e1dfee40d941377f2cafca4b7b7991989a487ddac15b3db8e6c66ea9dcba63af35e211c5f23f94ce600d83aa6e2a1c7b180f6bdd6130f60969c39b7a4354b8b5a113d4fe0ac35dc640ac66ac5ad7b38fcf8faae7f8ad4b5eb513199a1f23b706466583adab29ec5754755df7aa9c1790ddb33c95d3735f74441675b8f066a0a269b2b6ec6830e3f2dd122bb579898afeb69d8a7880972b33a9e098715bee8dce0bfb8a2e1c8dd32c472674b1a21328764da2e909015728a4d80dd4637d8086f9625acd3f9c5677368062d116161fb0401f9566ec11dd9f7ca1147251ccbda97e4904c84e85bcacf43c27bf1583bc29608915a4ed1c07598191c62c1d3a4d50a02934e929c077ab44c512cc129b950face6d1ec0f688744c7ed60de964576499b226655c0fc6f304d30979fc8efe275aa1f2431a4d4a902916b8f026ea1f7010a0a09ebc525f394502d0c55ef36bfdc6962fa5bcf07e63a7a1dd6687480e168be780569e24484d9769d6b685057003cdddc0301b3528d39e3fe19c0b6b1d6f118b6b6e9339d839547fab4f61e8d8d611dd29f8a5fa4ba9042d7137532632416a9d68049e7f822a3f771c1aa95f983dacac3496e262834b62f82f16454fd5e842440076c3a821cc09c706bb1883e6d1d5fd0f1d54839bbde0e99f10269c9f5e114435a2cd076b89f5b4ebe21ea89655d047916b0c1ea14f71ba507c42d55cd5930d9b79483f20f6cbc3f5ac944270744ec051e37bb18acc6ec26bb00014a8c5edeb2d71b12de5bea592585354040bd925e5a307844be5bf43c86202fb76d3717c9d14711288b8bbdcab697de8495e1994a5cd428c55b2e89713f12d515b403d3be39513b25003f556729e811e3ee228a0306e5d03b3d824db04cfc05351abaaf72cffdc903e2f74ba9e181c42ee0ce52191822944a74838d0f0b862f497336330221a78d8522f270e0ff4dbfd01a26b3d629817842953381591a9b6bc9c9b09a213046e70940149c0a94e0e90ef104ff61d78c9d4fbdd18114b2e624b1eeef0f771287ee3d892dbeab20b5a68be344f497b1ddc2ad77a1fc393be73f8dd9073358fff334cd5fbd313e3229b966307e43a6e3b2c095eb2aa444ba13be46d4ae00b746d24dc4019fd3475f07d11610facc6e6429b32cf07dc89b7d97d7020dea2bdb63228efe016b4020543545a3738697a0df76242d2fe51d5f80d2b508c1f681b28f460de94cf6635e83fb2560aac3a0ca90155093bc450732d7f88e676a37bdbc695cb6dcaa7dcf7e57dcc4f5279054bea701a29dacf598b728e3e06615e1c85c22f3f7ca4e08e3aa0b616565f94f9f95fc8d66957b6d6c9eb757b240c182d52beb9363ccc77eaa1ec472fbb2ca068e662441fa499689f89a2455979ae5f21db618c0b03ac343298bc9b904a23f4ffce2169ce782f8196085ce95f819a009fecb280bb5bad01ba97e0ad67d2911b3d1f6925e296d0205dcc43fa68ea6c4c4a283ae4ffd42a2abc724a07b9bfca3f1fde1a92c1a777fdf9e7d3851619b1c021f1fb880fa39d58fc90749af8260675aee94f213f46912f876f52828529b70dcc7716863fa162c8c915caa5a26dc1016e296c0b6f1269603d29a09940c7ffd09926391ab383eef96ae2cc81d48cf14fc9617ece19165389eaa45ae7794222c4f5a35f5b82a2e296ab04f4f07687647af3c15204bc942f8c78a12cce0772969cd0dd8f727b276d4c0c48676c94ba0635b85dc11cbcea14f053ee70ac9b8066d79795e63fd45ed30e223da1be8748859380b35d8bd1b34ce50423511e8f277d862422e89a4220a7568fa5fd38e76023053e0285ca04e5afe5174b40966a046d9abd5024d896769719e1071a518b58fabb4268a104b9fab2433b07a0ac52d7adbb3790069976993a53e8acf32dedd54e010a9c0ed8b3e71dbc1c8f4fe793d5b77aaa3de9836e144265436b92ee19e9319b473ab242909d540d0c15b605890fb7a20ce39691e8af2b6794b21a1daba2d6ac967f69d44d828aca8221bb4af1f46a930c7f93a6bdfa2c078cf0e7ae42b17b8c3e039bc29e54a1346ba312204103a7cc961bb6b2e3506496c260e0de25121ed1a979dee47cb6ecbdc03ac8ef530a5d82107ef28c8a8791f0e7386c3dfcedfa6c2381050068ae2d2c9a95ccdfc5e9a6a21942e29c077594da20a5d96875eebb778084eabf0399d67e207b1b785cf4785058fcbbbb06d05c9a8703926f5196a4d6812094447c30df37a2844c74cb39b71c96a4f5ac07652ee4dcf8a330f675ccad8958fad411a51bd15b449652ae88d5ededbc1cca3460e8d753fc3db7ba24f0f4991463cb193e34a0318665fbd885357cc4811fb217bbc8107f571c6fc5544ed7802775583960ac254e673830375c62f89d92087878eadb865bf7bcb370f869197d5ca1d2ed4f2ab477df726dd8f9be4803548adb64011d6b493548b48d030515f5032725c44cb1a1bf62f921a624e2b8f8e29492686baf569f8cbb9c7b445926e38f4d0ca3dd107c954120e67f1fb1ef1083dd87a34b44d9318e86436729649a646b479f3036020c7b4c73e0da0b8b8c550ff665e670e6e3c787e8af33632930ad191978a61bc1af88f7b02ef0b86e3b6b676069a34f3e02744343d4bc50cd38cff42fc660544b33072e17335774fbf1cf72f23cf5b9fcab77597c7db2d18d13ef728620afe34600229493a7bb28bfae45beecf942b15816a74bd8f053d34077e46586d8accaff041820036e477310856786c1ecf273b395d141952606855e6c94ab6abc5f95a7f716aadf4f892772145766df0fe72fb46d200acd8b560a950683b6971a79b80f2a80ff3bd2c444a511f88c940fd4efb44554d980a5c37cd0793861b7e115f23632785ad7ad91e6d866a677360b06d0e59d6c7cf06297fbabf0f2ab457cdc447faf7c43aec7460ef6fbb51a1e2af094ccc46c5c2b99f3f9dd340534f4731bd32da61e8f763bb990e539afa0a6a3ff380ba9e7f534ac1bea2591bd7167c817d17cd898402308bd62f3e67bb290373cf42e6bd8e1968c2213ec7b75ba31f5d6cb371c2692d2d8712a22e510ab2e8df10c7dcd03b503e53e5fff41cfda02682922e8fa9af3bfa32a0aefd71cd9128d3edbafdcfcbb50fae4132099de625bd2910e440fd9679443aedb724c29b1769e1d486dfbf4536199737a1c0c28ba32f94e1bcfe5f48505a5108c865988a269afd641c88f819d6e0027131b25396ee5cd6f811502ad8c0ab70226756e0b40da2fccf0799229340e47a5fa0055c24749235a30845c7cdeeac85c5643af457d87aa7efaafc8e5c5f83cca4b23ecfedd3fe377a1368c27667ed1bed5b1d5179ac65cdecb2acc33da2cf27f13b7c8c8fcac498010b4a0ea08dcb4cbcdda36149af90a135caaad671e848a3222fd5752c252c16d3e00aab84cc27198aea0418a6c1f1865bcaeffa30e42053b9b5bd0ff2924d5a8b2bc06c5b4e3f49eac9b6ba82f43a5b868245d3eddc77cf3f843bfcb4ca072e28a0eb70a13efa86edf05f00bd09e508c8db9bc6856e546153cef62bfb0d226816349909088fa1dc2332961ca14b475aba6327631cc76587951046bbe0e7b1579d546e1af840bb673379983acfa5ad7412216e64442b3103c6093091a76fd3ac574e88f3c0883976f170f58bba25731530e9ea566496a41d3f15cc666dc9700628d2430c72098bd81705d1c7992ec14d32be78b66a70c414e8f4fe936cf7bdb4f14fea2270a87bdd957795d3ffe08b31966ad211ddb6a73af77becde25916d54f920c26f116e5cb98291db37170ed42563a036d07e4e5b56b75e3a6757fdf3beb9362cd8e1a4afc9521d40a70a5cd240eb45ba4fbfa60ffdfc33d58dc10f85b763440bc9e61e585dee7debe725b83dc6610f6e698a1a011bc5b5b7baa3dc6741cc4aae04e3a2f56713822ff0ded3dc332ff304c46946d397cc174f93bcc7dde9794a0cc6af16fa16368282045d09cbaf128b1439c007eefca94d177e508cdebe58632f04dd88661ecafacbcba90141a82336fdde39ea2f7118b233712ee9ca54d22f4932a6cef7bcd594be569cf8b6d422b1ca5cd3621bfd09c95978a5e605c96e82e9518705e0e67c3fd5a2a10ff47ccc9a627d735522cb8daac3ca5892262e49ec2290008a4c7caf326034a690494d0fe5bf2ecea52b017bc151b90b15365e48dc62ad485b5a48b1c4bfb403bdbbe06156096a7bb0dc90f4de99d071def4d35c35546acd7ae2bcdb9fa51f3d51b0cb720e2a8da22eb18a7dc3e3081c41df01b66bbae335a1238c05c9ce6e8ca552c30cbc34eef913f6bf2cc08222932c3e676ee05f60029880be5182c1d287f713546bbf1dea9316d6399a628f46ce5427e4500e0bb578ca9edcfcf85dd4884595a799f429a46321f9c9edb116b6c8db6967ecbc3ff65debc642b3beced4cc763474b7f99255fa1c468ccd2c409f3e5e50543880ccc29d9ec95f76a204292e435a17eadce73d7cb819b6efacd17d0274ac5bbb458e3305bcdc144c73268defcba7571834329736a4a77b827b98de0e16a6722f42e221284a7d32075d88fae7cc62791cb182cd1e0c70333da0681cabb172bd204b887a12e79e72189aa289c0fd108b4e3e47322164b5ea28c86dcab0aab6b9fc447d4bec0ed8441c48fb0a16f07732a1ed4c39218107eada3021265c70541bf93985268398dd58cc6d778c7f656d19bd29201f0612967cf2370082e21dae86a87788f408fb64c4a77649a4fefc2a98f3be7785cf79d66482a4b301a0ff9751e237f90d4758990d4c0db1f59aa50e896ae180994d31739269f3428bac9a6fadbeb4b0317cf4227d1f5f20ada8f9fd72ef4cca9cca8c9b62ac8e1064a5fd01b27b09d1c4b5e2d6d4a1ab788a7e542cdf82b923b82d253df4c68fe45577ba1079766166e9662e518d0030c235d6b4fac933f99fc5834447770b60c63ed0ed85c0fc061309d30ee2ec730353192c903e3f4792c90bdf35b31c1cec650b1be72b5a7760de47cc6dd1652c98fd045b09f7b69fab633be1170044057e01f61f5d4eb01f148a84848bc9b9bf89e424e", &(0x7f0000000380)=""/12}, 0x20) [ 1723.314911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1325 comm=syz-executor.3 [ 1723.355895] binder: 1356:1357 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1723.355903] binder: 1356:1357 unknown command 4743954 [ 1723.355910] binder: 1356:1357 ioctl c0306201 200002c0 returned -22 [ 1723.381626] binder: 1346:1358 got reply transaction with no transaction stack [ 1723.381635] binder: 1346:1358 transaction failed 29201/-71, size 0-0 line 3046 [ 1723.416038] binder: 1360:1361 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1723.416050] binder: 1360:1361 got reply transaction with no transaction stack [ 1723.416057] binder: 1360:1361 transaction failed 29201/-71, size 0-0 line 3046 [ 1723.433883] binder: 1346:1354 got reply transaction with no transaction stack [ 1723.433893] binder: 1346:1354 transaction failed 29201/-71, size 0-0 line 3046 [ 1723.510019] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1723.518875] binder: 1336:1350 transaction failed 29201/-28, size 1378108333-20480 line 3284 [ 1723.528611] binder: undelivered TRANSACTION_ERROR: 29201 [ 1723.534323] binder: BINDER_SET_CONTEXT_MGR already set [ 1723.539779] binder: 1336:1366 ioctl 40046207 0 returned -16 07:17:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:34 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x98, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06630440000000001163484002000000000000000000000000000000000000005bbb9a68000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="85616466000000000a00000000000000010000000000000013000000000000008561646600000000040000000000000002000000000000002300000000000000852a747000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/146], @ANYBLOB="920000000000000003000000000000002a00000000000000"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="401000000000000000634040000000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="85616466000000000a0000000000000001000000000000003f00000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000ffffa8efafff2a10f0f09c27b0a4fa9ca0a6324167a0a4f2852762b413fe89177adfb812ec4d3ad61e4321a0cb52d5f2640bae05cd3256242fc416a953f1914c4d37c76b500b13f740f625c087dc2048f69fcf6443bd20567774973cec628c406086afe9f64095d169ba8a6b15cfc46feac4fb5b688c037c565be509fd90a74a9898303a81560d4372131fd1def932f3467b3af1e4cc915659fc27f59c53ea777a7c2507249c339a4028ee4e7b47c3e4f62728a6dfac738be38b9b1cfd4e2db3acf78225ebdb458c7cd754"]], 0x1, 0x0, &(0x7f0000000f40)='j'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r7}) getpeername$inet6(r6, &(0x7f00000000c0), &(0x7f0000000200)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/ipc\x00') 07:17:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$VT_RELDISP(r2, 0x5605) 07:17:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xd, 0x0, 0x0, 0xc, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/235, 0x34, 0xeb, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) fstat(r4, &(0x7f00000004c0)) getgid() r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r9, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r9, 0x400454ce, r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) getgroups(0x1, &(0x7f00000005c0)=[0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r12, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) accept(r13, &(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r15}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r18, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r18, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r18, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r19 = fcntl$dupfd(r18, 0x0, r18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r19, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r20 = openat$cgroup_ro(r19, &(0x7f0000000840)='memory.swap.current\x00', 0x0, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) ioctl$TUNSETGROUP(r12, 0x400454ce, r21) r22 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r22, 0x0, 0x0) r23 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r22, 0x400454ce, r24) r25 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) read$char_usb(r25, 0x0, 0x0) r26 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r25, 0x400454ce, r27) getgroups(0x3, &(0x7f0000000700)=[r21, r24, r27]) fsetxattr$system_posix_acl(r1, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x4}, [{0x2, 0x3, r3}], {0x4, 0x1}, [], {0x10, 0x65152e8100d65bb0}, {0x20, 0xd57e84a7f6e11a80}}, 0x2c, 0x1) r28 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r28, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10000b85) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b53ccbfa9c0400cd8034b53436871e421276eb3c12510d746c895a10f779b7f04a123e79e866bae4d6c2b3e885e192f2acb580ddf85401d12448ef934198fe50b12a219ca831c9a9bed9a3e30e41f388662fc149b0f0ad8b0aa3d20a528f70a06ad4c7f3498ee9ddd14e8d3803f6e9a003de8823435255c1cc43ffd41429d62aea4df898a9cbf86ad4f0c01c66fe658e0dd6600000000000000004814e79fb7a0000000000000000000000000000ace3669c7fb7ddfe83fc50060b8973"], 0xc}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000004c0)=0x8) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000400}, 0x0) ptrace$setopts(0x4206, r3, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b, 0x233}, 0x20) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000340)="f604ee980e2ebb7bb796074cf720400cd5ac52e2f7ba9f05fa8c1fab1e8d210a03a45a16a6ad92f16d9c96d0a17116de09e6969f9f5c") [ 1725.881699] binder: 1369:1372 got reply transaction with no transaction stack [ 1725.898269] binder: 1369:1372 transaction failed 29201/-71, size 0-0 line 3046 07:17:34 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xb4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1063084000000000000000000f630c4000000010000000000000000012634840030000000000000000000000000000000000000001000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="856164660000000006000000000000852a646600"/34, @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a747001000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/157], @ANYBLOB="470400000000000001000000000000001c00000000000000"], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00100000000000001263484000000000000000000000000000000000000000001000"/84], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1726.039825] binder: 1369:1372 got reply transaction with no transaction stack [ 1726.052109] binder: 1369:1372 transaction failed 29201/-71, size 0-0 line 3046 07:17:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = dup3(0xffffffffffffffff, r2, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0xf548ba8545875cce, 0x0, 0x8, 0x1, 0x6}) r4 = inotify_init1(0x0) ptrace$cont(0x7, r0, 0xd897, 0x9b) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0xe3, 0x401) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r5}, &(0x7f0000000040)={0x6, 0x5, 0xe26, 0x2, 0x20, 0xfffffff8}) ptrace$cont(0x9, r0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x78) 07:17:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) mlockall(0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r2) r3 = getpgid(r2) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x9, 0x5, 0x2}, &(0x7f0000000140)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffffffff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r4, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00', r7}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ebfcf6c7eeb4200000000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setregs(0x3c05a53ee157dc8e, r3, 0x5, &(0x7f0000000000)="ac1ac42de0f5ca0729fb3e95896fedce697f2b868c51e9b47d665b88bf0c136cbf07fde9e575ec625ca65f046c5bb09775c3cb3d898bbaaa30e96e0187228b032843cfffafe262620c25a6152ffef8c7f47e35355c1290eb4d55eaac5c7e4ac3602cf8c64a5990eda835de0211c0d42d7ff46690b63cdbce7bdc7fa041dcd64034ecd42a072cdb4d2833fa3376018563acd6658b30385011bd0367f338039ed5f5c4fef04d5087824d") ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c67926f705f6964", @ANYRESDEC=0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) truncate(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0, 0x0, 0x4000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r5, 0x5606, 0x60) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x3, 0x2841c2, 0x10b, 0x8001, 0x7, 0x8}}, 0x50) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r3, 0x0, 0x2, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/anycast6\x00') read$eventfd(r4, &(0x7f0000000040), 0x8) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r5, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000001c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r4}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f0000000040)='n'}) [ 1726.379650] binder: 1398:1417 got reply transaction with no transaction stack [ 1726.401411] binder: 1398:1417 transaction failed 29201/-71, size 0-0 line 3046 07:17:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000228ff887bbb60bb8daa3aa57812abf00"/91], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) [ 1726.773673] binder: 1440:1441 got reply transaction with no transaction stack [ 1726.781800] binder: 1440:1441 transaction failed 29201/-71, size -9126638499117134922-48938 line 3046 [ 1726.817520] binder: 1386:1395 got transaction with invalid parent offset or type [ 1726.833335] binder: 1440:1441 got reply transaction with no transaction stack [ 1726.833344] binder: 1440:1441 transaction failed 29201/-71, size -9126638499117134922-48938 line 3046 [ 1726.851062] binder: 1386:1395 transaction failed 29201/-22, size 80-24 line 3454 [ 1726.861738] binder: undelivered TRANSACTION_ERROR: 29201 [ 1726.867727] binder: BINDER_SET_CONTEXT_MGR already set [ 1726.873336] binder: 1386:1402 ioctl 40046207 0 returned -16 [ 1726.914495] binder: 1386:1402 transaction failed 29189/-22, size 80-24 line 3138 [ 1726.922972] binder: undelivered TRANSACTION_ERROR: 29189 07:17:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/161, 0xa1, 0x2, 0x9}, @fda={0x66646185, 0x0, 0x0, 0x2000000000000}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 07:17:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000200), 0x1b2, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x80001df) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = dup(r5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x1000, 0x7ad, 0x7, 0x4, 0x7}, 0x14) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) 07:17:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0763084000000080000000000c6300000d6300001263484000000000000000000000000000d65c5e2f2cd2c568e5d9dac0260000000000000000000005000000000000000000000000004000"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1728.897365] binder: 1450:1451 unknown command 0 [ 1728.906270] binder: 1450:1451 ioctl c0306201 20000080 returned -22 07:17:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10630840d62d0000000000000c6300000d6300001263484000000000000000000000000000000000000000000000000004000000000000000070f9548b7b48e21c7b000000000000020000000000000000000000746f9d69143d8231650900"/106], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1728.906811] binder: 1449:1453 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1728.906821] binder: 1449:1453 got reply transaction with no transaction stack [ 1728.906828] binder: 1449:1453 transaction failed 29201/-71, size 0-0 line 3046 [ 1728.957979] binder: 1457:1460 unknown command 1074291463 [ 1728.957987] binder: 1457:1460 ioctl c0306201 200002c0 returned -22 07:17:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c630000228f14fb2c338d2200"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @mcast1, 0x8c}, 0x1c) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1728.959752] binder: 1457:1461 unknown command 1074291463 [ 1728.959760] binder: 1457:1461 ioctl c0306201 200002c0 returned -22 [ 1728.994556] binder: 1462:1463 BC_DEAD_BINDER_DONE 0000000000002dd6 not found [ 1728.994566] binder: 1462:1463 got reply transaction with no transaction stack [ 1728.994574] binder: 1462:1463 transaction failed 29201/-71, size -2141325784458366976-31516 line 3046 [ 1729.003315] audit_printk_skb: 60 callbacks suppressed [ 1729.003325] audit: type=1400 audit(1571728657.663:884): avc: denied { set_context_mgr } for pid=1448 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1729.003942] binder: 1448:1464 got transaction to invalid handle [ 1729.003950] binder: 1448:1464 transaction failed 29201/-22, size 96-24 line 3138 [ 1729.004095] binder: undelivered TRANSACTION_ERROR: 29201 [ 1729.005332] binder: 1448:1465 got transaction to invalid handle [ 1729.005340] binder: 1448:1465 transaction failed 29201/-22, size 96-24 line 3138 [ 1729.005570] binder: undelivered TRANSACTION_ERROR: 29201 [ 1729.078934] binder: 1466:1469 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1729.078942] binder: 1466:1469 unknown command -82538718 [ 1729.078950] binder: 1466:1469 ioctl c0306201 200002c0 returned -22 [ 1729.122768] audit: type=1400 audit(1571728657.783:885): avc: denied { set_context_mgr } for pid=1470 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1729.126915] audit: type=1400 audit(1571728657.783:886): avc: denied { call } for pid=1470 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1729.127337] audit: type=1400 audit(1571728657.783:887): avc: denied { transfer } for pid=1470 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1729.127389] binder: 1470:1472 got transaction with invalid parent offset or type 07:17:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup2(r0, 0xffffffffffffffff) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000340)=""/244) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 07:17:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='\x00\x00\x00\x00\x00@\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10630840000034cc000000000c6300000d630000126348400000000000000000000000000095246ec7997a96f9929720233900000000000000000000000000000000000000000000000000000000000000000000000000009b9a04f20000"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) 07:17:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a627300000000000000000000000000000000863b5dbf00000000852a6277000000000000000080000000000000000000000085616466000000000000000000000000000000000035ad4c08e8178595007bef392497b03c059b662f5c48f93a1d815555d26652efeebb99dbe1eed53481bdc20184aca77c2b5f091e983ed2fae39819d7f5770ee0d0ea1de554aa74c10a9a41588135e75f0fe977b7575c03e3e9ff96481a61571e92fb727273622215376c06d00cbb958ad3be9de8078e2cc43811072230c87f57edaf6a640c33136e4167b2d7b4106d32685e77b8a5ae73b7d93130994433646f73f686ccf36ef587"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1729.127794] binder: 1470:1472 transaction failed 29201/-22, size 80-24 line 3454 [ 1729.129272] binder: undelivered TRANSACTION_ERROR: 29201 [ 1729.132353] audit: type=1400 audit(1571728657.793:888): avc: denied { set_context_mgr } for pid=1470 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000280000000000000000000000000000000800005d3218b38850403cb592809519001fba0c7074de53e5038000000000000000000000000000000000000000000017c15c92659aeac89479d9bdf748ad64fbcf6db5abd24037af0f212b20df96330bc81d"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0xfffffffffffffc42) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000140)=""/219) 07:17:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x1, 0x0, 0xfffffffe, 0xffffffffffffffff, 0xfd}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1729.354494] binder: 1481:1486 got reply transaction with no transaction stack [ 1729.394511] binder: 1481:1486 transaction failed 29201/-71, size 0-576460752303423488 line 3046 [ 1729.417089] audit: type=1400 audit(1571728658.073:889): avc: denied { set_context_mgr } for pid=1477 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1729.422108] binder: 1481:1486 got reply transaction with no transaction stack [ 1729.422118] binder: 1481:1486 transaction failed 29201/-71, size 0-576460752303423488 line 3046 [ 1729.466898] audit: type=1400 audit(1571728658.123:890): avc: denied { set_context_mgr } for pid=1477 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x90000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x50000, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0x3, 0x2e5f, 0x5842, 0xfffa, 0x12, 0x0, 0x7, 0x2, 0x2}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x0, 0x8, 0x0, 0x9}, 0xffff, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084000000000000000001063084000000000000000000d6300001263485a0000000000000000000000000000000000000000000000000000000000000000a2030000000000000000000000000000000000000200"/104], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x7ff, 0xd000, 0xb7, 0x9, 0x9, 0x6}) 07:17:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa0, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/20, 0x14, 0x2, 0x12}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/196, 0xc4, 0x1, 0xf}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}, 0x2000}, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1731.938730] binder: 1504:1507 got reply transaction with no transaction stack [ 1731.946429] binder: 1504:1507 transaction failed 29201/-71, size 0-0 line 3046 [ 1731.954728] binder: 1503:1506 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1731.963143] binder: 1503:1506 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1731.971157] binder: 1503:1506 unknown command 1514693394 [ 1731.978150] binder: 1503:1506 ioctl c0306201 200002c0 returned -22 [ 1732.040157] binder: 1516:1518 got reply transaction with no transaction stack [ 1732.061048] binder: 1516:1518 transaction failed 29201/-71, size 104-24 line 3046 [ 1732.081707] binder: 1504:1507 got reply transaction with no transaction stack 07:17:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) uname(&(0x7f0000000240)=""/135) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x1d5) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000440)=0x2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @remote}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000200000c000200788e49f16750000008001b0093000000ba7a68fef6be8f4ef26416b72f6e3005060e9db0fdcff0b978955c7428a8837abcb10def088faf9261e2fa7c10e93257ccea709266ab1dfef7"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x261000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r8 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000540)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@rand_addr="7579ed610ba9f675fd1661d1857a9ffb", r5}, 0x11) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000180)) ioctl(r9, 0x7, &(0x7f00000007c0)="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") r11 = syz_open_dev$binderN(0x0, 0x0, 0xa49920586610b667) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1732.089533] binder: 1516:1520 got reply transaction with no transaction stack [ 1732.089543] binder: 1516:1520 transaction failed 29201/-71, size 104-24 line 3046 [ 1732.118999] binder: 1504:1507 transaction failed 29201/-71, size 0-0 line 3046 [ 1732.156198] binder: 1523:1524 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1732.164894] binder: 1523:1524 got reply transaction with no transaction stack [ 1732.172989] binder: 1523:1524 transaction failed 29201/-71, size 0-0 line 3046 [ 1732.222238] audit: type=1400 audit(1571728660.883:891): avc: denied { set_context_mgr } for pid=1526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1732.266392] audit: type=1400 audit(1571728660.923:892): avc: denied { create } for pid=1526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1732.291553] audit: type=1400 audit(1571728660.953:893): avc: denied { write } for pid=1526 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:17:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000380)='/dev/\xde\a\x00\x00er#\x00', 0x0, 0x806) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x1000000, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x800000000000000}}, {@mode={'mode', 0x3d, 0x3}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'user'}}, {@uid_eq={'uid', 0x3d, r4}}, {@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, 'systemwlan1eth0systemselinux/'}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000012c0)={0x58, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x95, 0x0, &(0x7f00000000c0)="f5fc2d323851bfde160609cb454ff348e8fae1987fcbcbca03a6a5010ac4a5df9d5ffbccd702229216d8eaead9acd359889a9663a7d3b33ce84d52f3be51ecc7e4c2ca257bb0c338b77866f99b5f7b9a97e135fc5baf026975d8b3a6ff73c9d6a1becaa42aba3f22a486fb8c3664cd7bdbde4a0e8a90723bd6667f2fa39f045b402ea750c0107557f9f01a71f20672d4b90e59207b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1000, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) r4 = accept4(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) 07:17:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x64, 0x200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x80, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000080)={0xc, 0x0, 0x9}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x1853) [ 1732.320821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1530 comm=syz-executor.0 [ 1732.336703] binder: 1526:1528 got transaction with invalid offset (48, min 48 max 80) or object. [ 1732.348554] binder: 1526:1528 transaction failed 29201/-22, size 80-24 line 3379 [ 1732.400631] binder: 1533:1537 unknown command -619339936 [ 1732.418149] binder: 1536:1538 ERROR: BC_REGISTER_LOOPER called without request [ 1732.419752] binder: undelivered TRANSACTION_ERROR: 29201 [ 1732.428048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=1545 comm=syz-executor.0 07:17:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0x2, 0x0, 0x6) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000400)='veth1\x00') r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10000}, 0x4) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000003c0)=0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1732.451637] binder: 1533:1537 ioctl c0306201 200002c0 returned -22 [ 1732.463324] binder: 1533:1554 unknown command -619339936 [ 1732.469180] binder: 1533:1554 ioctl c0306201 200002c0 returned -22 [ 1732.473043] SELinux: duplicate or incompatible mount options [ 1732.474562] binder: 1536:1557 BC_FREE_BUFFER u0000000020ffc000 no match [ 1732.474570] binder: 1536:1557 got reply transaction with no transaction stack [ 1732.474577] binder: 1536:1557 transaction failed 29201/-71, size 0-0 line 3046 [ 1732.565202] binder_alloc: 1559: binder_alloc_buf, no vma [ 1732.570839] binder: 1559:1560 transaction failed 29189/-3, size 80-24 line 3284 [ 1732.579705] binder: undelivered TRANSACTION_ERROR: 29189 [ 1733.197372] binder: undelivered TRANSACTION_ERROR: 29201 [ 1733.203802] binder: 1536:1538 ERROR: BC_REGISTER_LOOPER called without request [ 1733.209808] SELinux: duplicate or incompatible mount options [ 1733.217143] binder: 1536:1571 BC_FREE_BUFFER u0000000020ffc000 no match [ 1733.224029] binder: 1536:1571 got reply transaction with no transaction stack [ 1733.231850] binder: 1536:1571 transaction failed 29201/-71, size 0-0 line 3046 [ 1733.242266] binder: undelivered TRANSACTION_ERROR: 29201 07:17:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioperm(0xfffffffffffffeff, 0x0, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 07:17:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7fff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700060000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="106308400000000d6300001263484000"/87], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1734.960150] binder: 1574:1577 BC_DEAD_BINDER_DONE 120000630d000000 not found [ 1734.977381] binder: 1574:1577 unknown command 4212835 [ 1734.982739] binder: 1573:1578 got reply transaction with no transaction stack [ 1734.982749] binder: 1573:1578 transaction failed 29201/-71, size 0-0 line 3046 [ 1734.997909] binder: 1574:1577 ioctl c0306201 200002c0 returned -22 [ 1735.047197] audit_printk_skb: 57 callbacks suppressed [ 1735.047210] audit: type=1400 audit(1571728663.703:913): avc: denied { set_context_mgr } for pid=1575 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1735.079728] binder: 1585:1586 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1735.087084] binder: 1585:1586 got reply transaction with no transaction stack 07:17:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) clock_gettime(0x3, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1735.096060] binder: 1585:1586 transaction failed 29201/-71, size 0-0 line 3046 [ 1735.106393] binder: 1573:1584 got reply transaction with no transaction stack 07:17:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r1, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r2 = fcntl$dupfd(r1, 0x0, r1) getuid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x90, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}, @request_death, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x3}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/204, 0xcc, 0x1, 0xb}, @flat=@handle={0x73682a85, 0x18a, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x40}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1c00}], 0x12, 0x0, &(0x7f0000000580)="1ccd0910fd061c31af2c0bd8cfb5df503f60"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_delrule={0x34, 0x21, 0x200, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xf4, 0x8, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x34}}, 0x0) recvfrom(r5, &(0x7f0000000100)=""/18, 0x12, 0x100, &(0x7f0000000240)=@nl=@unspec, 0x80) close(r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000180)) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)) sendfile(r3, r7, &(0x7f00000000c0)=0x4c, 0x4) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x46, &(0x7f0000000080)={@loopback, @initdev}, &(0x7f00000000c0)=0xc) [ 1735.116521] audit: type=1400 audit(1571728663.773:914): avc: denied { set_context_mgr } for pid=1575 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1735.151143] binder: 1573:1584 transaction failed 29201/-71, size 0-0 line 3046 [ 1735.242913] binder: 1598:1600 got reply transaction with no transaction stack [ 1735.257496] binder: 1598:1600 transaction failed 29201/-71, size 0-0 line 3046 [ 1735.279309] binder: 1598:1600 got reply transaction with no transaction stack 07:17:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1735.293850] binder: 1598:1600 transaction failed 29201/-71, size 0-0 line 3046 [ 1735.341357] binder: 1607:1608 got reply transaction with no transaction stack [ 1735.356137] binder: 1607:1608 transaction failed 29201/-71, size 0-0 line 3046 07:17:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r2, 0x0, 0x2, 0x0) ptrace$cont(0x18, r2, 0x0, 0x7fffffffffffffa) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x6, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x600180, 0x0) 07:17:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/decbinder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfb, 0x0, &(0x7f0000002640)=ANY=[], 0xffffffffffffffaf, 0x0, &(0x7f0000002800)="6692d455819163362b95a417764f7c1bf78f8f1fff8e8ad0cc89f72efee6fa8ffb05731eb35ceca3dcb7201c9b3d6b3042bff3dc67c618613a1ca125627267f5f71702f2d584d24b5c68b30b3655beebda1f5aedb0b3810273b4444c97959ef328a8e071afc16fbc922b4a9712b57585072debcf086c00050c3b3c2c8230ba310bc304ef35d664c0c509a921e0719bfbd4c6c49e"}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200040, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r6}) fcntl$setlease(r5, 0x400, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r10, &(0x7f0000000240)=0x202, 0x4000000000dc) r11 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ee9e47f5", @ANYRES16=r11, @ANYBLOB="ba7c040d2fc6666edf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42595117194974d9}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4600000051a0973138da93651c72e2ec3712d0c019c3c844fe823ba3a70a3922c5c687cf7cdb26b923c5fc5ad4ed5eb2b0352326c5a84418091cffbabfe2c24b2b2f24e5c02818a2a0cd97d5e1dcd51dcf123112ab64fe7b6a2455ad1b2bad43961114b86c78411dfdf35d41cb412a7567b90b67884b21a784418a57ae83a0af04076f2cd971b6c7f764813b881633dc9b92539c2a74477729e9e7b4f55995ff9ea046ed337a0ab0873ffb13c043d4e4ae7522e1667b14c7dc1a220764912ceb74f7ccf54f3ede0707310779bb3bce4332615a3484cedba893", @ANYRES16=r11, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0x40091}, 0x40d8012) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r11, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x40801) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r11, 0xee1646c1bd9deb84, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3c80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x984efc2917936c42}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/119, 0x77}], 0x2, &(0x7f0000000500)=""/235, 0xeb}, 0x8}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x3, &(0x7f0000000940)=""/141, 0x8d}, 0x8}, {{&(0x7f0000000a00)=@xdp, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000a80)=""/90, 0x5a}, {&(0x7f0000000b00)=""/86, 0x56}], 0x2, &(0x7f0000000b80)=""/26, 0x1a}, 0x4bb8}, {{&(0x7f0000000bc0), 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/174, 0xae}, {&(0x7f0000000d00)=""/35, 0x23}, {&(0x7f0000000d40)=""/200, 0xc8}, {&(0x7f0000000e40)=""/19, 0x13}], 0x4, &(0x7f0000001f80)=""/211, 0xd3}, 0x6}, {{&(0x7f0000000ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002080)=""/144, 0x90}, {&(0x7f0000002140)=""/243, 0xf3}, {&(0x7f0000002240)=""/144, 0x90}], 0x3}, 0xfffffff8}], 0x5, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000002540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x58, r11, 0x120, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3e0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r12}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4888) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) r13 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r15, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r15, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r16 = fcntl$dupfd(r15, 0x0, r15) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r16, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x3, 0x6, 0x9, 0x100, r14, 0x1e3, [], r2, r16, 0x1, 0x1}, 0x3c) pwrite64(r13, &(0x7f0000000300)="225b042460ed6012944b135e0e9b6443c3ca75f82a5c22cfd4b47cd722d283c325e7f425c640b8ab456d80c2a0f5d3d31d5fd407c5aa6d60a69ca8168fc258845000df93b55d562e56c7ebd522065ef6076fec6afd807b34d06638ae53eed50792fc32c09f46059f497ffbe81cd141fbbe6915d971a8d5520a7cd695c1aa5ec7ab35f54a6fb5ec9115734d9ebc3dd29106a6f515ff73b60a9249cfc0daa3c97b96fa59aa979445cb30ece40186489901069ed296f39fa766555372ba978e048b1ce1", 0xc2, 0x0) [ 1735.453182] binder: 1613:1619 unknown command 0 [ 1735.468930] binder: 1613:1619 ioctl c0306201 200002c0 returned -22 [ 1735.479539] audit: type=1400 audit(1571728664.143:915): avc: denied { set_context_mgr } for pid=1601 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1735.501674] audit: type=1400 audit(1571728664.163:916): avc: denied { create } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1735.502063] audit: type=1400 audit(1571728664.163:917): avc: denied { write } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1735.514107] audit: type=1400 audit(1571728664.173:918): avc: denied { read } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1735.602201] binder: 1613:1619 unknown command 0 [ 1735.602209] binder: 1613:1619 ioctl c0306201 200002c0 returned -22 [ 1735.635744] audit: type=1400 audit(1571728664.293:919): avc: denied { create } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1735.636180] audit: type=1400 audit(1571728664.293:920): avc: denied { write } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1735.639827] audit: type=1400 audit(1571728664.303:921): avc: denied { setopt } for pid=1613 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1736.055641] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.061254] binder: 1601:1609 ioctl 40046207 0 returned -16 07:17:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB], 0x0, 0x104}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, r7, 0x0) r8 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x101) r9 = perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x1, 0x9, 0x28, 0xff, 0x0, 0x7, 0x40028, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8000, 0x7f, 0x4, 0x0, 0x1ff, 0x0, 0x7f}, 0xffffffffffffffff, 0x6, r8, 0x2) sendmsg$nl_generic(r2, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8510000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x4f4, 0x35, 0x400, 0x70bd26, 0x25dfdbfc, {0x13}, [@nested={0x11c, 0xa, [@typed={0x8, 0x78, @uid=r4}, @generic="2021dce5fc193d402090593212db80b58539bbd95d04cc8627f75401096d505b0c1bc64184913e8c78f752561687889b79fc2633fbf9321c48b47ce21102ead8217438882a27e3b974f53d4a895d9262e266ef01", @generic="83097f51aee9c29eafb4773e88a0a8d5020d5db3bbc2d1f987de89f153a1d515341b56ef55b701d12c28a17b5e6e50fd119048a5cc2acd7a548e166007876b7613e05056e0aa67332b155e83f0f82c5d1fb1402a2cccb5d0bd75d15ea460a2cd58748f3e0030aedc5d46d4307bf1a206398886d855fd9e29b60892d67e1bee3ff1e68131dc3d2796175a18441ed8c166261b146894e1f1323a74873274428463951a9fb1dcb9", @typed={0x14, 0x4e, @ipv6=@ipv4={[], [], @broadcast}}]}, @nested={0x2a0, 0x0, [@generic="1bbff6bc4b14006bffd07bc0c30890ebe47e09a7478f9e14725f8e98d8735dbe05de6475b4f66918a64a82452bbffc542e8c6000c0f2f2c35beb21db96fc6db8b2cd3195207bc4b0d09c296a6198620bcf769f1c083b2c4cc17f9d75b544a340e9ef37d131c0a296a5769a8079a612f2f7bf2fb3031bc7c871cfeb05ec28048f189f199aa5ec6046a872a2a5c088158349d984a2b37fc499a1", @typed={0x8, 0x7a, @fd=r6}, @generic="ba810231f4ea3f2caffed00fafe605a7fa5d45f74a24adf556c4b8244586c3991833b5c718855178c0d0d7c790fce4a0b1993db10b5fc0c1b5351dd41362e66e54563c28958d6a9dbfb732e7239a8e40660a1835566b3f7b4942a3f7c2c57ba042c4d34d532ed9d20a346b402f122daadb977d4ab2c26d16bcc71c632089994471cf9c197439955661dba265908c354adc6d5eceea1d9a4b3d0f579e4557ac76abcb1d7e2f9e30db96a60848eebc59e410864785fcda", @generic="c4c622e268d6209d52d642407df00538edaf2e8831cdf1bde61fa919c0129a43b038ee13685d5647614fb37bbdbd5718aea3cda9a79a71658f76d89f2e7c195a76fba0a7d33496ec5bb679ed0873d132900ee4cc3094b87ef382dc44956d3501b57d5a00c80df63dc55da8aa30c5504ffcbc32acb04922a18352954f52818feea92918e75265df3275703e11", @generic="588f88e3151acd36ccd061a1033aeb78b7092417b51d5a38ca90d05f5ed30c407253e224f22ef56207ae34a3bdbf008757a65010048f62fd468e35c1bd0f69e87f5866e1be883ffa120ad1571a5a3fe874", @typed={0x4, 0x18}, @generic="66ef5da68d2ec8093d8cb23c0b908010de0b941178016f34c5651f972adca40c8e05754734042db7feb3baacd48a5795b846595e5fd423e05b12a27a8d280871a211653bb0dc91a963e1ebd7d7cb7cc902c903e006404125dd68c8b5313449c946752cbd"]}, @typed={0x8, 0x86, @fd=r9}, @generic="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", @typed={0x8, 0x3b, @u32=0xfb1}, @typed={0x14, 0x7e, @ipv6=@local}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYBLOB="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"/346, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)="929fdb8cf097bf4c600332e38cae24f839e67ea05ebb08feb3c4f2d46f8be4eb8ebe787e5aa9dbadf9a5594c8bff954f48404be3dbba57772bd5f41fd4957b") ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000032c0)={'icmp\x00'}, &(0x7f0000003300)=0x1e) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1801) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d630000126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a422860a000000000000005fe0"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x80000009}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000000)) 07:17:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000200852a627700000000000000008000000000000000000000008561646600000000000000000000000000000000000000000000000000000000480126823c8b6e"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 1737.994704] binder: 1637:1641 got reply transaction with no transaction stack [ 1738.010406] binder: 1637:1641 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.029812] binder: 1639:1643 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1738.030925] binder: 1637:1641 got reply transaction with no transaction stack 07:17:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a05ba0f0b8336c8100"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s\b\x00', 0x200000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000500)=@v2={0x2, @adiantum, 0x4, [], "57f4455b313786e576ae1ec0adc398ae"}) read$char_usb(r6, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r9) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r11}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x2}, [{0x2, 0x3, r1}, {0x2, 0x1, 0xee01}, {0x2, 0x4}, {0x2, 0x2, r4}, {0x2, 0x6, r5}], {0x4, 0x6}, [{0x8, 0x0, r9}, {0x8, 0x1, r12}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x1) 07:17:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x807) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a62770000000000000000800000008561646600"/80], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/196, 0xc4}], 0x3) [ 1738.030933] binder: 1637:1641 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.034484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pig=1653 comm=syz-executor.2 [ 1738.071632] binder: 1639:1643 got reply transaction with no transaction stack [ 1738.075922] audit: type=1400 audit(1571728666.733:922): avc: denied { set_context_mgr } for pid=1648 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1738.078187] binder_alloc: 1648: binder_alloc_buf, no vma [ 1738.078206] binder: 1648:1649 transaction failed 29189/-3, size 80-24 line 3284 [ 1738.080317] binder: BINDER_SET_CONTEXT_MGR already set 07:17:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket(0x1, 0x3, 0xff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000300)={{0x9c3b63f855418018, @remote, 0x4e20, 0x0, 'wrr\x00', 0x4, 0x1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4e23, 0x4, 0x5, 0x800, 0x8}}, 0x44) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b000002cefea560000000000000000", @ANYRES16=r2, @ANYBLOB="200025bd7000fedbdf25030000004000010034000200080001000f00000008000200080000000800020002000000080001000100000008000300190000000800020008000000080003000800000014000600080001000300000004000200040002002c00090008000200ff7f0000040000000000000008000200000000000800010086bb000008000100010000001c00090008000100ffffffff080001000900000008000200ff010000cac2a5f8259a72169c871723fc602f08cce306000000f189b8f38af48717a3701557206be54847dbf8d493ca59501a623894013d5f"], 0x3}, 0x1, 0x0, 0x0, 0x2001c000}, 0x24042024) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd4, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc07}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x50}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2d}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x230, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7f, @mcast1, 0xb034}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xff, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2d}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8299}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xed9f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x98}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x683}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb94a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x195e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x230}}, 0x2000046a) [ 1738.080325] binder: 1648:1655 ioctl 40046207 0 returned -16 [ 1738.088384] binder: 1656:1658 got reply transaction with no transaction stack [ 1738.088392] binder: 1656:1658 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.088965] binder: undelivered TRANSACTION_ERROR: 29189 [ 1738.116606] binder: 1656:1658 got reply transaction with no transaction stack [ 1738.116614] binder: 1656:1658 transaction failed 29201/-71, size 0-0 line 3046 07:17:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) socketpair$unix(0x1, 0x4b20f4bfd00a04a1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) pkey_alloc(0x0, 0x3) [ 1738.191926] binder: 1639:1643 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.200288] binder: 1666:1667 got reply transaction with no transaction stack [ 1738.202841] binder: 1668:1669 got transaction with invalid offset (48, min 48 max 80) or object. [ 1738.203253] binder: 1668:1669 transaction failed 29201/-22, size 80-24 line 3379 [ 1738.204471] binder: undelivered TRANSACTION_ERROR: 29201 [ 1738.244087] binder: 1666:1667 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.246236] binder: 1675:1676 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1738.246244] binder: 1675:1676 got reply transaction with no transaction stack [ 1738.246251] binder: 1675:1676 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.247022] binder: 1675:1676 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1738.247030] binder: 1675:1676 got reply transaction with no transaction stack [ 1738.247397] binder: 1675:1676 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.335628] binder: 1666:1667 got reply transaction with no transaction stack [ 1738.344122] binder: 1666:1667 transaction failed 29201/-71, size 0-0 line 3046 07:17:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa, r1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:47 executing program 5: r0 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000f80)="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", 0x1000, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000009c0), &(0x7f0000000a00)=0x14) keyctl$search(0xa, r0, &(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, r1) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r3 = add_key(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="dcdf027a9823442d54b9626a51ac6695d56411b63c31cf50c02a8800d53d479c3182f4b616eb5c861032c6de2b9bbeee7e", 0x31, 0xfffffffffffffffd) add_key(&(0x7f0000000640)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="c6fb611cf509cc0cf7ed5bcb1ab37dceca1678857f9055c88fa560de0efa1b1d88f23af21526760744bb8fd88df087db4395c2cc22402368965a14117cde43c47b0042babc7c028ab9", 0x49, r3) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000180)="fa98f77a9be84c83fea57a90c48d6fbef4708d4c8bf26151579519857824182625", 0x21}, {&(0x7f0000000400)="d6ce0e41d3e45641bdfa9ba44ad05cb2be12cbed4d761514ef1ce03d19a9ed74d8b8fa3f5c9e3f93d3ef8d01f33cc2b05a25a09884ac03e106148fca28ec724e361dd9eaf507622ce9dcd3bbbc786fee0f31cb59149817c23d4d403b08d6a6bc1db5737d3c8012ce6691083fdd495bd631a168227477eb3680285182b876464c1fa7104cd69b7d1b", 0x88}, {&(0x7f0000001f80)="0e7aa1b9a46e4cc2441867d21f1d75a8f2cab2adb9d7d7bb2415384d03919c22034b61374228e7297b63838b36468f6753df7813f4589e389a838205f78850f906b5d83d996f98bb022606799fed93c13a1c88b2a02fb7f76bd343dd626d26d384319c233b3a4cd30d468c9580b0641851150dd2d1cf9d63ab61a5b1187d71974a8c2aa1933a825cfab8864ef2de5395e0ff34decb77d92ccd6677565ce12ccb4b25e235730ad645ca9b53e999361bec75ed7cc3f0ea6cb74e2ed5d2519a385b4956573d79e04690eb57d46c1ca0afa2b2bda6ff7af9b0834ae0d0b4d81a79f1d8d3f4dcd15ebc862435f21aadba9c0bce3b970f91bcc37698519d4d981ce20460746855047818a71229fbeb4b9c1180ae6ec688b0e6a3a497009da3d54469ae4b67e2ea5e13482b12a91da938c35366cdec67ffcea3418668a47536c95a667c89db5563b10a3db3a24d1ffcc15d5daf2d5bf660f6f7576766ce404f0a8a7c225760dce7301868d4d8bdd615aaca713b1eafcca086611904fc442756b5247b9aead92bac25af27bff0aef7ce96da845ca7063840e93d9db6b9ec4f08dc41d3a66c37c2ff08e40b84eae11619a802924dc6e41d5dd15c565a436f15e3ad26a6d9e1e67bc94ee24cbd0fe4485b4a75b35e80c764e01447ef8763d0ad162a163c53ed831959be8dc59ed0c1f6e4a4f4fbb70a82c068b48958fbe2c37586ee9c479efe0bfe476ab65c5bfa44547e54acacad2d4ce7b68c2151039d1a8b27d42870cd3d27deb497e2b1fdb8301760e12384a5b7220d9f081386c66793bcec10cacb924317473d316f0b64fbdf90abb7f2abe9350022a183591a898a3dcb3b464b506c2acf159ace43b99b7fcda15f6c80326eec0a0d95be07d48ce9110bdaa647ec748680e60fc96e8b946780cf5d9d458ccf7a62ed2004c4e8c24372b3ef57e7d38a128044d2b081f89fddbf66eff56f030ec3f5e9632ec0dc77572dbf7886cfd6167f620858981e2f63a0cf059593113ef7efeeb84d98ec45f81fb49560d8bb0cfdeaaa68f71a96a4ea3fe91e9ff47eab1c532261e5d097ba9305481752c6d0c046ddedb834738bcf229636ac0fbc0988bd8c7aceee32d66eaa8acf17a5198c07f503858a6097d2b13d5a7186a7c884ca228ae32659ae4865fbdd89e5ef7a5a145d78acfedffdc499abfc5aae69a7acd59aceda26d9f9f4e5a3b5982d28c89af70c5d9d5526199b002db2852916d858ccfedbf157c58072e7519b1c7177a4d62e7ed6cff56ba90633e73607ba439dfaadba61ee7fb5b20bf5f339dcb699b703c215abcfc69f2b42788a0f636f754db59701e608e03ac907e95e6e1e0f717a71925a6e9fdc1a7c9694b4352d426a43f80af5c54b038ebab1222ba8c826bbba0fac29d11b9bddfdc0ac35a617832b3a5c18b40423eb5134b74d5ed78ff2fbe1c824185415216acadc1ba4751b62bf54581e862bfa4b8a90c9e61292ac1a5a3562e369a308431dd17f947d8ed22b611acceb88bc67659ea88659150d0787b1bd04d8b8a6a43ce4e774e636bdd46e89e476121fe03814b36856c07c6f71e09c05ee4ad3a5cd21908f5650e0e8091782d5744724594454e2476b9e9d473eadfe3e48260925baa5efa8316fa082b37d529a287be6a0e46efd7f2fcd9b7af2f4ca0e698df0d1a92cb124be6ff0d3ca886e8b63ecf715cd7049f845cb02c8db9eb6c19d21c1d0fba2af7d83a2682c0f7e7cf1ade07e657c349a2250237ec64007e9b1306c9175ac5bcdfd45468aab7726c30146df268bbf3ca0a2e582efa85a07da130ee72a3448f59bd32d572b1d3d7fe76ae5d6e70d3e78502ba65472d23494e88e2b6f9ee83353e3a8bf2d87e29741ae6c745ad3585b55dc0a1777b4312333031d26cad633245f80344d7099ff2ca77c2f69212bda08890d7ca107eb7fd426355aa4bdef0d986d873e377956b31c819ca68eabd74e74bc5467fd00dab0ffae300fdc694ba9e3a5ebb4f9a8f90fcee57582096bb0ec4c1354370d2d4d2a68a3f8acaf86f4929fc36cc219dbc9f5285b9b77e3035ccbf88226a60962248901f25009826f4a946bf38ae5f9737e88f1f1760e8d9cfdb227c1222165d53e859d872252202bb64d5ae8dda155375a868084a5e45eeace80f4610ed8f2387f676210dec6c35b8af5525e67e21a70925318d0548faa0fcd321583bea3bc8cc54a2caef959fc404586e958f4e7c05b899f159fd7e1992035eaecc20e94cbebd64f0953fbbd189d2ceef439539cb64d1eccb54f6e6035dbcefa1f76943882ab4729f127884453817540fc7253e997467c07e1937b8d792ae8ea5822fd51244a0c02cd76b6ff8af84edf91918dd3fc7a8faddb61c9fcfb6526b30f814d720e0fb600967fa37a5ac111552931fac81e44ea2198f1876ebece662da7522bc382964a3bd6c5618ac2b7a929ed88127cf6ea4b2ea083c7c451a7c98fe84d3bf58397babd35ef30bf3496c2b758166954910657f202ef214bce06cc9bbc57680d6ef0b24c7a4b920e714fbc77aca685cc47e20c49efd19c42b3ba7158669b57acae1d386df2ce91f2b16ce0c9d5c401414624b8d5c8a89fa63a7ba5c2bb847a450a3e21c9a7fe50074d2a95e145b9c053db55974d76cc54429d3e29eb2a94db381fa6f678d38f637d475f1017efba49c18fadc885a8d9926d1b3b8eb3b94c9dfa3d0a19b19bca22a6fd17131c3d3ccbbd7fac2da4447be22b595d51aa346e9ba54ab1acb3e1de7ef0c7d2984a128fb69be2a70ee2a712ae0d9b859b19df36ad9cd00ac3bf47cd4c2c2baedbff9a2f91633cd84966bc726bf03699051de541f00f7dd19a4bddd093a42e9c50ac34d402359e7ca789a3aa72392ae5830ecaad4e7782de30bf95fb9cd1d2c2996c5e281981e938e6daa816c37612cd1ab4fad34c8f2f6c6b0d3c40da1fb2fd4fdd4cf080511f2da52a5f69dd1f8eae1f088af7e6661784aa565cebfbc0d2f1c9ffaa9926d07c65c5a24d4ce2aff21cab8a435391b28c5abdfa5e5493189e28347b4a9177f6a9b1f90e48281f0d8d1492259aae5e054d55f8f533a2338fad61c2780bae345d55c7aa2e5073abbbc63201ffdf4bd096a955fc36f74039fbc8854b45e3870a52f2687d6103503fb4cb95ccb7c0a6c839462ad100093057028e11c6988c331f45e24d11a553c25bc557149834229780b6ae49db17dd7372f5e8857897af7315ec8a0d7f75ada6cd8e09544f602e82461044547d3d084624ccfb3b3bac40c5766cbb6c00c9b11d695b9f39ef40be8aeb9c183373bca00aa0852dbcf7073c0c4f43797b9b0c9004052bc67b8c382b87e604e9daeada19902811b55066781ff44c776d6e77ad457e37c9c69e8c855712a795c12eb140eee05b54feae945730c920d99598a4adcbfb9646d20f819b16a13e2513e11febddda1ad17a6ddd67ea9bf0a42a062bc09ed3486d0a53237efd86f33f9c7690512ca07bf9e65b1446b89f9facec40a372024c82d73af27175dabfc029f8e8e150f166cd8614dbadbb72096857e60faf7ad99b9e733e1dc480e42a2d5d4ffcfeac6f756859dd6b30d570ed550062dbed2093bf9ecb533a2fad054b18609d37c061542b969460a29f62f0e51d29b853362550b754c05297551ae2ee6147777f2c4796fe4994097b38896f50ed2875629a2f2f0bfad61f33dadd492d1ccd1414c678dc23a933c71728c10c2dbd858190638d858bca52f7395f30256d6cce569d2e0ca8e24f098b600aeaae719490cda7095a56b1566d2218628e2a7d594f4501a5e1eda61a484322edcd8c97f25e53b80c7f55baf9a87f9976685fd0020729d45c88ac99931a5fd452ce17235770a46218de9d0f4f6d1591e6589a4a522b06a93b01c7966420ff6e6dbb0752b66adbf2f7297910745b9ba7014869d00fb6addf04e31c0c2b4cd40096d02f19888224f92a4f201a312f8cdf6a10214184fe565e12e560ccbb67519e7f1335109d0bc91b99c4b193e0622a2c595f09b81e645389534055a8bae2d1192fe24d0233449488247f0af2c4a1a8a2b05b21f0069c71507977a2a101e35b97ca89515e19a7da948a731fa9b2b38817775643523d02d9ffce6cd4aa58c58e32e5a0f59cda283b5666e029113def427aa0c974990dacc44064a965f637842a19209f9a7ac0d3cbe00d36e6f3d1e1c4d05a1955729cdc383d9325107dccaff9e511955cac486f76a082a206e3635ab9eb59a9e1bfb8189f56a206bef8634e1ca9e91621ba23e8c4ab5606fd5edc37308009845c4577c94cfbded40393e2eec9780eebe4597539bdd89fa3b7647a359ff87e9357235825f8b54b56ef9b14178aa02623afc0ed703ff9d01531e3a4f559c2145ad2f53996f3aa6c8a2a7f1af53ed7e8cc697110057303032ddcf41bf800969a140c7b608340923594f5734ca10cd978204976f168785f710d37406c551d8b45d0d469beb7de9bf5de9fb53e12552779673b617bf65510241f23286bab5ce44dc88e57e352a7679efdde73a6476b7b04101962c2820f5e7093b55fcc57b704f669cdb747d4e79259ea5a8f2699f8ec91664612f71e6c9cca19b1dad0c4e859163703c97a9e0da4ad2a8456ecefbac4d6071b765085c0a8b0f8b8156686677f3714937a0a69e96a8d44ad17a720591e4e951c4fa3ca82587b338ffd3b61873fe16ebce6619f0e19604c3c4b7fda09f2c696b6ae93fc871193e8663f0829a970f9c06e02ecf4197afb98ab9604a463c77d1bac89601589ebd4e59b9edbb59c3f1f519d7928bde477e7203a0740f0f89667c92d95fd847d6ae155af26a2d88177e99962cd7547c68a44d2daf2a8bef39d9e7ae0727587d2785fa7728018693faf8782205ac5cf7fa9507ac7dd0b3cc48cc69acbc29c77dacce7a8f0a2154fe91bd625011ffe34d388d61334b74328ef828d47c8e65e2269710678930c42aeb17043d5b98415d11d3a089ec30aa05ef6cef90cd3ddf1b6f57385d63cc1462f6a5b8d4ba1282214c6245215eff099909f871fd28e534ed54af7a173377ff96bf0b437a308b82bdc08167e8bb15bac354799d43e1a0456d73f91bb672fa0a638c6639ca8556ec63252291852e1ca8e24d392871b7a91eab1a07081f8f688cd35256d4bda612452ac1167bfd8787d8da42eaa2b04ab12b3e595841a9f85b43de0e87629beec85baf639c8c1d1f0c33e2c79a79b995a4f3db440979f76b57ee7018008f871701a0868323f0289278c755640277bf1f4305f38d383d62d6ee3d50bd35ea0d3152b45dc0a1060dc1b3c442128613b1f9cf288769344960d54a10c60b3345362b1869e3dbd5e50a62ed21f98d52bd87f36357a6ae141592cc72eb5fc4343968764b72f981d9371634ae309b1aa6e6ca7ae63aa317337b70775bc47519496f1ec8ad6283568a3e1fb035d18f258821a7eb600d69779d32f3065811f948e5ed0d70794a3647cecbb3fbe1c8f61fd9c6ab71ea5f486db0322d0684850f5a40ba71b9685fbd41b2db42e109da826537303672905efd5048c9b4ed5b4df14e30f19e7ea0cb1c1fff6d057ea048f47d2af0ce06d80824107cdb12811f9ede89d7268099b4643572e3b2f4a0cba224bc8fe23a4fad030915406249e28024211966078186a1ded43b0baa31034afd3cea23a28cd6813afc347ec660f03bd14c59912fb9dec11394f01d8167000fc5ffffe52ae33d4260e71b61c06c326463b5e475dadf8d9fc05fa1432bb210ad26b798809de6249002f0a65053b61065f33f2cc81946dc7ac987eba494aecbeb8e436d422dd", 0x1000}, {&(0x7f00000004c0)="f891a76e1c7508450cca629b57d402cbd1f3d28272f33a05e01663876ba4b5f84a98d701c3f801044bf9bd8be80cdf41b9bbab2d1911c002d9ef7cc3de366fe45b45ccbca1ebad090999da8a160c2055e1f8eb82174caa81ea27aeb84d33ec41e4f152ba5d00f8903d55aa6f57624f34b3d46b201f92f29f1ec07b258de39b86f8e4c7b03326d3daef47b914d885c94d7c41f913de9c1bb6a670bcc164242b1d0383c7cb5928c5728fbb44ccf914532209e98b08be57d242ea8d6d34ab55ed2ac57ae6a04fcceee7fee008f6c31e4edc8f40b0b8a62d4f9c9d7c86c34ea2283835d87eea5f2a04dfde", 0xe9}, {&(0x7f00000001c0)="dcf48d8fdc391bc5e2579d4b815b5408a0306050232cc250569e8dca19986a27848f3f7127b5f0f714", 0x29}, {&(0x7f0000000280)="dee2f53b1a8e0a7d36b3352bae3921ef02235afa0fcf5ce591682b48650edc0ab5f6682932966f8a", 0x28}], 0x7, 0x0) ioctl$RTC_WIE_OFF(r4, 0x7010) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'.yz', 0x0}, &(0x7f00000000c0)="e6", 0x1, r5) r6 = add_key(&(0x7f0000000800)='asymmetric\x00', &(0x7f0000000840)={'\x00', 0x3}, &(0x7f0000000a40)="ad807900f644073d53242681d5e515b2101a6e4fa58d41999f2404d9c1569aedca17ea185b59b64de2ddd1f6ba3b918387253fa333f48b0f784ae5f04cb80c8d698b2c385c59cf8bf0f66e67aa6c6e0ffd8177fc96fa4307082e763d4ff447b23e2890642682520529c1310523c1ea55905efd73ca0b98ddebbfdd3d0ded82aee17900f124464d13287d62a207fb206881afc5da2106b7c1ff66bdf19fb18ab4331185aa58af08c3db26d0b2678c4dcd15dbcdd1c99d576cb10e04e5e10d363b227943cd08949115cd31bdd8981bd56baa64d1c2b3fb9a", 0x20a, r5) keyctl$clear(0x7, r6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840004200"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000980)={0x1, [0x0]}) 07:17:47 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0xfffff35f, 0x4) [ 1738.473932] binder: 1686:1688 got reply transaction with no transaction stack [ 1738.481785] binder: 1686:1688 transaction failed 29201/-71, size 0-0 line 3046 [ 1738.508323] binder: 1686:1688 got reply transaction with no transaction stack [ 1738.515985] binder: 1686:1688 transaction failed 29201/-71, size 0-0 line 3046 07:17:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c"], 0x0, 0x107}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) poll(&(0x7f0000000300)=[{}, {r0, 0x1008}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x1, 0x17, 0xffc1, 0x5}, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340)) ioperm(0x1, 0x450, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) recvfrom(r4, &(0x7f0000000240)=""/166, 0xa6, 0x1, 0x0, 0x0) 07:17:49 executing program 3: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) 07:17:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='+\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYBLOB="317da4ebfaf6f6545a3c2c04bbac8d2c9dcfe4464bcdfd4cefcafe2fc442bf062d235baf3daa001e8871d69f19075abe3e03d7dac57f4a924165f20af8c4e7beaa33e69e147612bf8f51b14bd60dbf27271b21e68f5a1c2badf1"]], 0x0, 0x10c}, 0x20) tkill(r1, 0x3b) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffca8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="35b267e53df3c1665352606121d367bfc1728bab3d342619afa37ceb9f18d2d341409c5ae7439da05cfff365b199d9a31f3236261e49475362579d59c2153dba71d6b4dcfaca8f32e2c159a3b835ed87f929a89222cca9042bc042d638c9a15f97edbfd4fccfcace973a6917bf05fcf05b49f4d33e328558f5b186ace080c15809c013d8df531d321bee9ce0f512ad92c2aaf3f911d156960c4cc4383293d8fc9e75f08a83f2222e89f0e440f9ace6b3"], 0x0, 0x0, &(0x7f0000000080)="6e5705f17a239c9f29a1bf8fbd7f9520"}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:17:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='inder#\xa8\xd6\x00', 0x0, 0x1404) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) r2 = getpgid(r1) sched_getscheduler(r2) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab56ad8e39808e0b61a0bf7a301ffe8dac0726906da58a5d1ab066f24351eda628769d37cbcb5c0c5d6b03e4c0487a0c5c3ced0b6983", @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eecc7510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd8ece5ff1b9d9e2afb67443e955f96c787fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6a"], 0x0, 0x134}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r3 = getpid() r4 = getpid() tgkill(r3, r4, 0x13) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) 07:17:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) getpgrp(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000000c0)={{0x88, @broadcast, 0x4e23, 0x4, 'wrr\x00', 0x10, 0x8, 0x40}, {@loopback, 0x4e20, 0x3, 0x40, 0x5, 0x101}}, 0x44) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r3, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000780), 0x4000}]) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) sendfile(r7, r7, 0x0, 0x8800000) r8 = openat(r7, &(0x7f0000000380)='./file0\x00', 0x408001, 0x140) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) close(r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000180)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r11, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r12 = fcntl$dupfd(r11, 0x0, r11) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) r13 = epoll_create1(0x0) r14 = epoll_create1(0x0) close(r13) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000180)) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) io_submit(r3, 0x4, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, &(0x7f0000000240)="b1d8c2310e7fb263c702ca2736511c903812c8fc40ebff19ddf615ca4b", 0x1d, 0x0, 0x0, 0x0, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000300)="09a31dff7e26988d07e42ecaca192d6b4a952a35047507abed08c04868df30d57fcee590a58a0cf20890bcf2ab7d58e6a0693ff1bbe82f1b9fccb0d0c937ea99740e29e07db335a48dc035999f9b5ba7fa", 0x51, 0x10001, 0x0, 0x1, r8}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9, r10, &(0x7f0000000400)="13472ec0425c26f18455906670949e59c67c175a46df047ea5b73a3cf0f9da0f", 0x20, 0xee7, 0x0, 0xb0f2417757ea9153, r12}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfbff, r14, &(0x7f0000000480)="6df3bdd4815d473c13739a19a4204bdb225c5a5cab94bedbd1885d3410ced2c1657572818c437c34456723212b6c8a2d2abd78cdb25b9ee4cdd4d5d455f407a4098792a2fd6409e32785103c8948e2c9c0fe7a346be926d8a6a79d781362", 0x5e, 0x8, 0x0, 0x2, r16}]) [ 1741.143739] binder: 1726:1727 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1741.149839] audit_printk_skb: 39 callbacks suppressed [ 1741.149850] audit: type=1400 audit(1571728669.813:936): avc: denied { set_context_mgr } for pid=1723 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.153315] audit: type=1400 audit(1571728669.813:937): avc: denied { call } for pid=1723 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.153683] audit: type=1400 audit(1571728669.813:938): avc: denied { transfer } for pid=1723 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.154157] binder: 1723:1724 got transaction with invalid parent offset or type [ 1741.154244] binder: 1723:1724 transaction failed 29201/-22, size 80-24 line 3454 [ 1741.158142] binder: undelivered TRANSACTION_ERROR: 29201 [ 1741.163258] audit: type=1400 audit(1571728669.823:939): avc: denied { set_context_mgr } for pid=1723 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.214304] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.214311] binder: 1731:1732 ioctl 40046207 0 returned -16 [ 1741.215914] audit: type=1400 audit(1571728669.873:940): avc: denied { call } for pid=1731 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.215940] binder_alloc: 1723: binder_alloc_buf, no vma [ 1741.215958] binder: 1731:1732 transaction failed 29189/-3, size 80-24 line 3284 [ 1741.319638] binder: 1726:1727 got reply transaction with no transaction stack [ 1741.328129] binder: 1726:1727 transaction failed 29201/-71, size 0-0 line 3046 [ 1741.339973] binder: 1726:1736 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1741.347434] binder: 1726:1736 got reply transaction with no transaction stack [ 1741.355464] binder: 1726:1736 transaction failed 29201/-71, size 0-0 line 3046 [ 1741.363171] binder: undelivered TRANSACTION_ERROR: 29189 07:17:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) setfsuid(0xee00) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0xffffffffffffff4d) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) write$selinux_user(r4, &(0x7f0000000000)={'system_u:object_r:dbusd_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x2f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x5, &(0x7f0000000140)="f7ff179369956fc97a089659d0d5ef0801c807f9fecadcfd5a0a463033e05ebc0c7fdf63c2112bbe3b4b149ffb7cd745b4134af1a835ffeeb8f73e0d79f444fdd8bdcf6497428dfa0dd5d8e6d70fd4ae7cd8286db68b74430b723073bbab63c3a2a6d2de6259e12eedf838d776a8e8a19caf9281c4f959ee80b6ad31a2a4d5d8a2f9e43f21d3ddb7d111c5ae71bf694268b09a9ced54786b7b43acaee06bdea1ae1f20b30667ad0a5639e31f2fa58249f4ac5cd276d738211753fed293fa52604f17248dfe41310395f2868d") ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xb9e, 0x0, 0x0, 0x10000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000000)=[@dead_binder_done, @enter_looper, @release, @increfs], 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 07:17:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600"/80], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="5bd4410e585823d2000000003000000800000040000000000010000000000000"]], 0x0, 0x0, 0x0}) [ 1741.466720] audit: type=1400 audit(1571728670.123:941): avc: denied { set_context_mgr } for pid=1739 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1741.478241] binder: 1740:1741 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1741.478253] binder: 1740:1741 Release 1 refcount change on invalid ref 0 ret -22 [ 1741.478262] binder: 1740:1741 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1741.479911] binder: 1740:1745 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1741.479922] binder: 1740:1745 Release 1 refcount change on invalid ref 0 ret -22 [ 1741.479932] binder: 1740:1745 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1741.509526] audit: type=1400 audit(1571728670.173:942): avc: denied { create } for pid=1748 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1741.510210] audit: type=1400 audit(1571728670.173:943): avc: denied { setattr } for pid=1748 comm="syz-executor.1" path="socket:[112754]" dev="sockfs" ino=112754 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1741.527506] audit: type=1400 audit(1571728670.183:944): avc: denied { create } for pid=1743 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1741.637248] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.642851] binder: 1739:1751 ioctl 40046207 0 returned -16 07:17:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0xc0400) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'ip6_vti0\x00', {0x2, 0x4e22, @rand_addr=0x800}}) 07:17:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c"], 0x0, 0x107}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioperm(0x9, 0x5d, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 07:17:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0x5, 0xa3f9, 0x2, 0x6}, 0xf, [0x1, 0x8, 0x60, 0x5, 0x1, 0x3, 0xfff, 0x8, 0x8, 0x7, 0xffffffff, 0x1f, 0x8001, 0xffff, 0x7, 0x496, 0x9, 0x1, 0x9, 0x6, 0x1, 0xffff8000, 0x4d7, 0x7, 0xe23, 0x3, 0xf4cf, 0x200, 0x15cc, 0xfffffffd, 0x0, 0x4000000, 0x101, 0xfe2f, 0x6, 0x9, 0x20, 0x5, 0x2e, 0x8b, 0x8, 0x8, 0x101, 0xff78, 0x9, 0x7, 0x7fffffff, 0xa456, 0xdb, 0x5, 0x0, 0x80000001, 0x81, 0x181, 0xff, 0x241, 0x6, 0x3, 0xb4, 0x3f, 0x4, 0x4, 0x7fff, 0x10000], [0x101, 0x5, 0xfff, 0x1, 0xffff, 0x5, 0xdc1, 0xfffffff9, 0x1ff, 0x80000000, 0xfffffffc, 0x800, 0x4, 0xa1fe, 0x1, 0x1, 0xdb, 0x800, 0xfffffffd, 0x7f, 0x10000, 0x4, 0xbb, 0x6, 0x4d8, 0x80000000, 0x8, 0x40, 0x9be5, 0xf8b0, 0x5, 0x7, 0x1640, 0x0, 0x7fff, 0x667, 0x6, 0xadf7, 0x80, 0x1, 0xf76, 0x4, 0x8, 0x3f, 0x9, 0x2, 0x7, 0x4, 0x81, 0x10001, 0x64d1, 0x7fffffff, 0xf3, 0x80000001, 0x8, 0x6d9537ab, 0x81, 0x2, 0x40, 0xff, 0x457e, 0x60f37fae, 0x2b48, 0xffffffff], [0x7, 0x4, 0x0, 0x7ff, 0x5, 0x2, 0x9, 0x80000001, 0xfa, 0x4, 0x1aa1, 0xa9, 0x4, 0x0, 0x2, 0x4, 0x1fd, 0x4, 0x7, 0x8, 0x4, 0x8, 0x4afa, 0x8, 0xffff, 0x5ad, 0x41800, 0x401, 0x8, 0x8, 0x7, 0x8, 0x403, 0xffffff7f, 0x2, 0x5, 0xffffffff, 0x1000, 0x1, 0x0, 0x81, 0x4, 0x9, 0x400, 0x4, 0x7, 0xff, 0x7f, 0xa3, 0x9, 0x0, 0xffffffff, 0x3, 0x3, 0x10001, 0xfff, 0x8, 0x4, 0x7, 0x5, 0x9, 0x9, 0x45, 0x80], [0x100, 0x7, 0x9, 0x8, 0x72, 0x1ba, 0x1, 0x9, 0x1, 0xf0dc, 0x8, 0x4, 0x2, 0x1, 0xfffffffa, 0x5, 0x2, 0x4, 0x80, 0x8000, 0x6, 0x0, 0x4, 0x6, 0x3, 0x7, 0x800000, 0x3, 0x2, 0x8, 0x4, 0x6, 0x0, 0x1, 0x4, 0x81, 0x1ff, 0x1, 0x6, 0x1f, 0xffffff81, 0x3ff, 0x5, 0x6, 0x80000000, 0x0, 0x9, 0x4, 0x80000001, 0x3ad, 0x4, 0x7fffffff, 0x5, 0x80000001, 0x14000, 0x2, 0x6, 0x6, 0x5, 0xd3, 0x7, 0x2, 0x9, 0x1fe]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x9, 0x402) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}], 0x7, 0x0, &(0x7f0000000000)="2df9a78972d9fd"}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x144102, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) [ 1744.066100] audit: type=1400 audit(1571728672.723:945): avc: denied { set_context_mgr } for pid=1756 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000"/83], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="126348080000000000000000000000000000000000000000000000000000774a000000000000000000000000000000000000000000000000000000000000000f00"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) prctl$PR_CAPBSET_READ(0x17, 0x8) [ 1744.090740] binder: 1757:1758 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.090749] binder: 1757:1758 got reply transaction with no transaction stack [ 1744.090758] binder: 1757:1758 transaction failed 29201/-71, size 0-0 line 3046 07:17:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240200, 0x0) sync_file_range(r1, 0x9, 0x2, 0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x1b, 0x8, 0x10, 0x17, 0xa, 0x3ff, 0x2, 0x146, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x34, 0x0, &(0x7f0000000300)="00d5dfa5af09909b2f84e3a37683860c6d1bcc464398c9e0e5a7e2d43175754e147b76e3a74a145c74e330a5ba90f10000000000"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/12) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0)) accept4(r2, 0x0, &(0x7f0000000080), 0x141400) [ 1744.204674] binder: 1779:1780 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.204684] binder: 1779:1780 got reply transaction with no transaction stack [ 1744.204692] binder: 1779:1780 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.210438] binder: 1778:1781 unknown command 138961682 [ 1744.210445] binder: 1778:1781 ioctl c0306201 200002c0 returned -22 [ 1744.211006] binder: 1778:1781 unknown command 138961682 [ 1744.211302] binder: 1778:1781 ioctl c0306201 200002c0 returned -22 [ 1744.259135] binder: 1783:1786 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.259145] binder: 1783:1786 got reply transaction with no transaction stack [ 1744.259153] binder: 1783:1786 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.262972] binder: 1787:1789 got reply transaction with no transaction stack [ 1744.262980] binder: 1787:1789 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.270778] binder: 1783:1788 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.270788] binder: 1783:1788 got reply transaction with no transaction stack 07:17:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000300)="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"/571) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000240)=""/64) 07:17:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @dead_binder_done], 0x1, 0x0, &(0x7f00000000c0)='n'}) r1 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0xe1}, 0x28, 0x2) 07:17:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xc00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000000000000000000200"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1744.270797] binder: 1783:1788 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.355696] binder: undelivered TRANSACTION_ERROR: 29201 [ 1744.356403] binder: 1787:1789 got reply transaction with no transaction stack [ 1744.356410] binder: 1787:1789 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.358710] binder: undelivered TRANSACTION_ERROR: 29201 [ 1744.518168] binder: 1796:1798 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.529936] binder: 1796:1798 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.530344] binder: 1795:1800 got reply transaction with no transaction stack [ 1744.530352] binder: 1795:1800 transaction failed 29201/-71, size 0-0 line 3046 [ 1744.554143] binder: 1796:1798 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.563764] binder: 1796:1798 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1744.611337] binder: 1808:1809 got transaction with invalid parent offset or type [ 1744.619045] binder: 1808:1809 transaction failed 29201/-22, size 80-24 line 3454 [ 1744.628043] binder: undelivered TRANSACTION_ERROR: 29201 [ 1744.634698] binder: BINDER_SET_CONTEXT_MGR already set [ 1744.640215] binder: 1808:1812 ioctl 40046207 0 returned -16 [ 1744.652999] binder: 1808:1809 transaction failed 29189/-22, size 80-24 line 3138 [ 1744.660865] binder: undelivered TRANSACTION_ERROR: 29189 07:17:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c"], 0x0, 0x107}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000012c0)={0x58, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@enter_looper], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1406) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d630000126348400000000000000000008000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000007f0d6a900"/96], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r2}) accept4(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80, 0x181000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@rand_addr=0x7fffffff, 0x4e24, 0xffff, 0x4e21, 0xfff7, 0xa, 0x0, 0x20, 0x9e, r3, 0xee01}, {0xffffffff9c915893, 0x800, 0xffffffffffffffae, 0x5, 0x7, 0x6b2b, 0x8, 0x2}, {0x6, 0x3, 0x34b, 0x400}, 0x3f, 0x6e6bbc, 0x1, 0x1, 0x5, 0x20c440d37a5db5b2}, {{@in6=@rand_addr="7b5ae17f5c1d8d9fb8ae6e5d90a2ec42", 0x4d6, 0x3c}, 0xa, @in6=@local, 0x3504, 0x2, 0x0, 0x1, 0xfffffffa, 0x81, 0x43834630}}, 0xe8) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) 07:17:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0xc1) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "7f2e45a806106698", "960fe8c82eb753f610f2c49eba62dcca", "03a0bab0", "76a30285f800694d"}, 0x28) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x288080, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffdb7}, 0x1, 0x0, 0x0, 0xcd55aec73934a076}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r6, 0x0, 0x2, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x2, r8, 0x0, 0x2, 0x0) tkill(r8, 0x8) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1747.122682] binder: 1817:1820 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1747.125498] audit_printk_skb: 30 callbacks suppressed [ 1747.125509] audit: type=1400 audit(1571728675.783:956): avc: denied { set_context_mgr } for pid=1816 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.126094] binder: 1816:1821 ERROR: BC_REGISTER_LOOPER called without request 07:17:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1747.159367] audit: type=1400 audit(1571728675.813:957): avc: denied { set_context_mgr } for pid=1823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.160755] audit: type=1400 audit(1571728675.823:958): avc: denied { call } for pid=1823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.161194] audit: type=1400 audit(1571728675.823:959): avc: denied { transfer } for pid=1823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.161237] binder: 1823:1826 got transaction with invalid parent offset or type [ 1747.161278] binder: 1823:1826 transaction failed 29201/-22, size 80-24 line 3454 [ 1747.162323] binder: undelivered TRANSACTION_ERROR: 29201 [ 1747.164371] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.164378] binder: 1823:1828 ioctl 40046207 0 returned -16 [ 1747.246207] binder: 1816:1834 unknown command 0 [ 1747.246215] binder: 1816:1834 ioctl c0306201 200002c0 returned -22 [ 1747.280973] binder: 1816:1831 BC_FREE_BUFFER u0000000020ffc000 no match [ 1747.287742] binder: 1816:1831 got reply transaction with no transaction stack [ 1747.296429] binder: 1816:1831 transaction failed 29201/-71, size 0-0 line 3046 [ 1747.305543] binder: 1817:1820 got reply transaction with no transaction stack [ 1747.313283] binder: 1817:1820 transaction failed 29201/-71, size 0-1095216660480 line 3046 07:17:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) close(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)) finit_module(r5, &(0x7f00000000c0)='nodev]vboxnet1\xdb(\x00', 0x5) ptrace(0x4207, r4) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1063084000000000000000000c6300000d6300001263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086c6518a00d6d97067a29f22c35c7bdd72d74450bd91f11e1130a3b8fe47252682438c469912"], 0x1, 0x0, &(0x7f0000000f40)='n'}) r7 = epoll_create1(0x0) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000001c0)="86050d5c41dbb023131c721d385b2c66cfb3c2188c351ad6e2ae5bdb8870710e4906a3c076ca8c2fb0f3778e705fbf3b2c4ca2c4d14ff509a6205f26ed68d9b1e5018754a4ae8aa32e7745cf745a9de77d3f3f5477a821a6d022ee7f5d80b783bf94aee8de68f06f540de57a1157936588e4a3572890a5ef248845f3601ab8ec2ad2079a7773653f7ed1275c98eba67236abff34da4e6596e59b3dedf82f132828da740504f2ef94e3b5ce0a24030c34fae693cbdb8031cb9424c14912859f6cdde2bb366d891dfd1a61f3eae72cf5deea4edf7ab6f02b790ba216f7ccef45fa10d3", 0xe2}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f00000003c0)="65a636621f5e1fc7bae3b77eb30e70fb0d1ad37357519acd64a7242dc7bd66b4e97a3d982408be3b6c9db002e9d507685c3dab4e0e19acb00d37f3f443bf31fbdc4b8654", 0x44}, {&(0x7f0000000440)="6317c1fa3b274c455fb93d649b3495011d733507e37c2acdb1ec4b7e29f6b22b2d6a6728f68fb603016c27e33c7f44fc72472699c0cd650d94cfbf352efa11f8cf940be539e804173785ecbb67ac53303b218c7bffa7feaa7c45134db974f934bcedaae702e4b6f65617717bf13a3d55b3f5de75e4c0538c2dae7f7536b09799632a46f0df75fd4fb0e8b685764c240cc97890ce6f7069cf87d912c6672bf7e40a", 0xa1}, {&(0x7f0000000500)="988fe10c6eadf6fd5f5d976c9e9b6bbbc6114d7fb8ad9be736972f1466d30c05f99ffcb4636931d73603713bf9a0700953ae5675e8f8231333bd3c63b9a52d805237a23a57681a881de181d473414db1029a358dd492d8431db941cf321d22a966c45555ebbe66d4861a68cf3085f955efbc3fe4050b73b66fc00e80c200612a9d6cea105af5f0b66169973090a82c4bc353b240bb1ef39280b9e8ca44661cd3e7968716da65f9903674b1e46d65233d3f4a7db8fece8da4e2a4f83c9e807322b8bd3e67ff94e2661a000f225af68f435f55d7abb4a9a458541d510176a4db07908787ad9eb68c367a1d51d5e53e397e5e", 0xf1}, {&(0x7f0000000600)="5dcf1f9c588c7f43a5a0d19d3e6735d5fb52ab1d91dd8fab96234c845ce48a2613139036cb7d158d24c5826fbfb438212364330095350c4ab99a1c4cb905c90e1fd7ebb360091840bd", 0x49}, {&(0x7f0000000680)="f5cf4cb664f50cac86696e91c8b6924910ffe5c330f09c9756aeee79fba89451ff9aa2b20242853378e6d5828c80cb171c741a99ba91f5c8f3e53a3089143c7809fe2d3bf21fdee60ec05adce46a258ff15ad29ef9d43388db6a27d29d2d582f35995a1a9df9c941a19a6599d87c591117a7c882f226ec4d59ee1615fc2f605f648c8fdd723b3229d977a616b0d487579fe28aef", 0x94}], 0x8, 0x8) r8 = epoll_create1(0x0) close(r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000180)) r9 = dup3(r7, r0, 0xc0000) ioctl$TIOCGETD(r9, 0x5424, &(0x7f0000000040)) 07:17:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) tkill(r2, 0x40) r3 = gettid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setregs(0x3ad3f8c1bffd6b49, r3, 0x4, &(0x7f0000000180)="5aab6e2867e194") r6 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x6}, 0x28, 0x3) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1747.330744] binder: 1817:1820 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1747.342264] binder: 1817:1820 got reply transaction with no transaction stack [ 1747.349958] binder: 1817:1820 transaction failed 29201/-71, size 0-1095216660480 line 3046 [ 1747.413851] binder: 1846:1849 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1747.428043] binder: 1846:1849 got reply transaction with no transaction stack [ 1747.436457] binder: 1846:1849 transaction failed 29201/-71, size 0-0 line 3046 [ 1747.447364] binder: 1846:1849 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1747.456024] binder: 1846:1849 got reply transaction with no transaction stack [ 1747.464143] binder: 1846:1849 transaction failed 29201/-71, size 0-0 line 3046 [ 1747.479546] audit: type=1400 audit(1571728676.143:960): avc: denied { set_context_mgr } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)) r3 = fcntl$getown(r2, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') 07:17:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b5a5d8cd2d7eb2d78cda181a073c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@flushpolicy={0x11c, 0x1d, 0x400, 0x70bd27, 0x25dfdbfe, "", [@tfcpad={0x8, 0x16, 0x9}, @algo_comp={0x104, 0x3, {{'lzs\x00'}, 0x5c8, "78c2eacb6c38cee91d6586235a80b05ea437e905815b6c071f2b44d00f657bb79ba0dff2aefc7ffa3d39b636fd89329c9b795e835dad5ba2887fc94c96ae84ca8d816d84b7f0d24344b74e2debd95d6e80d51a7bbea0d13fc7a394736b349bd880b03a41f26878393a08315ed6688f3afa90f2e7dcc9ed9c01a26257fa467ca82bec410b1e3cbc91a497241a6c45f4b433f5248906ed6f99315cbef094a3a3476ca9a0a996f26653c838619af522da5a5b65eb1bf0a9c0c9d1"}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x801) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="055f24d7632a3d5fd8568dcb593b1067084000000000000000000c6300000d6700001263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdb7fd8669b3a59f7196c3b9a5ec6181962258f5c8af465ed422b76803ed3623940c25f070bcb37849955841f6b2d3888de3bbe0c06c2335b43e6c2502a1faffbd58ffbe13775408544f741f650197ea5caf6f6e38f2cac9357add5c0ddaa91e15aff365a52985ecf705db83b6ae2cedfb2b3e1e9a899f4a4b0a235be072c5449f1264cf2485b54d8a32170e96f9f919611bb45574be4d5e784838da53d7a8514f927a9ec4edbafffbf4f6a279b59aa5569db07c6cff0cf7ca976e7ff20a8d13ce4dd569d9f0e894c9f30620d9a27c0288d612ac88726fe77ca5de4f0aee9d8f6d1bfe36c42ed1362bae028cc302099b430ed30bad6a6003199640f0"], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1747.505525] audit: type=1400 audit(1571728676.163:961): avc: denied { call } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 07:17:56 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x11d) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1747.553118] binder: 1863:1866 unknown command -685482235 [ 1747.553132] binder: 1863:1866 ioctl c0306201 200002c0 returned -22 [ 1747.594372] audit: type=1400 audit(1571728676.253:962): avc: denied { transfer } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.596147] binder: 1872:1876 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1747.596156] binder: 1872:1876 got reply transaction with no transaction stack [ 1747.596163] binder: 1872:1876 transaction failed 29201/-71, size 0-0 line 3046 [ 1747.659833] audit: type=1400 audit(1571728676.323:963): avc: denied { transfer } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.682850] binder: 1857:1858 got transaction with invalid parent offset or type [ 1747.690702] binder: 1857:1858 transaction failed 29201/-22, size 80-24 line 3454 [ 1747.701673] binder: undelivered TRANSACTION_ERROR: 29201 [ 1747.710858] audit: type=1400 audit(1571728676.373:964): avc: denied { set_context_mgr } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.735759] audit: type=1400 audit(1571728676.393:965): avc: denied { call } for pid=1857 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1747.758999] binder: 1857:1879 got transaction with invalid parent offset or type [ 1747.766922] binder: 1857:1879 transaction failed 29201/-22, size 80-24 line 3454 [ 1747.775163] binder: undelivered TRANSACTION_ERROR: 29201 [ 1747.915413] binder: 1816:1831 unknown command 0 [ 1747.915418] binder: 1816:1821 BC_FREE_BUFFER u0000000020ffc000 no match [ 1747.915426] binder: 1816:1821 got reply transaction with no transaction stack [ 1747.915433] binder: 1816:1821 transaction failed 29201/-71, size 0-0 line 3046 [ 1747.941739] binder: 1816:1831 ioctl c0306201 200002c0 returned -22 [ 1747.948370] binder: undelivered TRANSACTION_ERROR: 29201 [ 1747.956001] binder: undelivered TRANSACTION_ERROR: 29201 07:17:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9e"], 0x0, 0x109}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:17:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/de\x00\x00b\xb5n\xf9\x04r!\x00', 0x0, 0x802) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RREAD(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x56) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="106308400000000000000000e7d800000d630000f9a548400000000000000000000000000000000000000000000000000000000000000000000000000000000082fdffffffffffff0000000a000000000069818fb1770c9f79000000000000001add7b7f00d55102e234139a197a3dc28193758e73c72912fb0e09b2439b0fd5"], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x54) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = epoll_create(0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)) r4 = fcntl$getown(r3, 0x9) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r4}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="80634a4000000000000000000000000000000000000000000000002000000000e584c6b600000057d15ee353ed44aa000000001a000000000000000800"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x1e, &(0x7f0000000940)={@empty, @remote, [], {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "5be2ac34482b81fb"}}}}, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) prctl$PR_GET_FP_MODE(0x2e) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @dev}, &(0x7f00000000c0)=0xc) sendmsg$sock(r3, &(0x7f0000000280)={&(0x7f0000000140)=@ll={0x11, 0x10, r6, 0x1, 0x6, 0x6, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)="746fff833e08af94ce648efd279f3c5bebe1b32d20e705f2d1253410913fbdde61e4e8b4a187d7879c6c8f8c2faa01e35d7617173388e7f01a03ee7df2f1763b30b18475fab472f6", 0x48}, {&(0x7f0000000380)="3015db33f91f9c28f8b9c119980d3900119f4ed7931444b63400c1de515fb825ee69759e8cc1a2a05ca24de2b5749ca4f627d8745a09ff7fcb17acec8f2417ba4cdd15f8b42a719cbfc89c21b5c705938d122b58af446d0edc70d112cdbbe25500eb7dc7f8eb787c4d4d5f87981c5fbb01", 0x71}, {&(0x7f0000000400)="c11277921ad33b92779503c26498ac3cfcbdd8450a4f1c10297c738507e84838f65859ce3547e23ee39c64fcf4b701e342aabffd0a4682797a271d5fe6f9607fea5a934621ef3b02756fdde2a232e54e6215da08bc03ce8e700e8e3be3ad785693a2c607718d2379657c9a761b7d8e1a03b12fb9e3db8549d0d8f95fada000a1a8e90bf2d62675e5fb794ad344bf9e905c612e3774705ce8de82e2547de37aa5114109df8961bcb79a9339574ed930acf57460bd5038c1e73eb4961aeb3aa44f3b3a5be69eed9c131bc038aa9964b4eeeb5eababdf99368632a9ed3656ddf0ade202a47e95607e", 0xe7}, {&(0x7f0000000500)="b4852bcd50cc1485bf95f63db2fbbb50cf824ad1493cb3cc8f6788b783f9fd4d907b74ea00eff37d44ea9586a38417567414f5e0702e8d3874ff6e15af413c8865b50f9576dbf72fdd76ab9bb44862420006246e8818bc647c4d8dbda1ff7d0fc2f24810334558e3b2c2378bb1296d88bbdffcbd31934f578ca3b0e321473ef33022c7ca1f07f1b0c23bd148612edbc9", 0x90}, {&(0x7f00000005c0)="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", 0x59}, {&(0x7f00000001c0)="02155f4b7ff882b48744cb3fc5d520ff", 0x10}, {&(0x7f00000006c0)="090dda119d6aa142631bd9082524622fb6aca673254da2c3aa82229b3a8ef6fbdfd51db4440a90ff457ef48df473b27858fb66c424eacc2c2336e2c777a79ac03e9240f0e521e0217e09f2c34a38e471b7a429998e0ccf0677f1f3753b1a38514dd55791027ceaaf2a8f9701c6d7232bd55fb5fef40e13a9c006de9f55279a5941158c2c579f5ab8f08f61f8900fab11593c0bd9a6e9b5f9a5448aeb573b4bb9a49edda938c8a4db9765679ee2b7bc28fd7c6a944684abf4bcc747c1190702abdff934f6997769d2d2c7e1d23cdfe94d939c6a811ee64286ac59", 0xda}, {&(0x7f00000007c0)="4deb729cbb0c5238f7357f33854001e8d78766c5270baca20e30d3296787ce80ebfa453dc12b9437fcea86cb45ea44a81861b856579a98b39de8b0055564e93b6a7d46e178e432254eba2a7e897edfcdcddd4e88828500d68c4983306745bfacfc65633b93ccaf2552c5950c8b35a4d8a7f1aa9009ad311700669d138dce983b1f5a4bf63b8e73c6e3d87085e1463209221f04b2ff4cd4b0f3332dc10a0bb5219d6916210c5f2566a397d4710aef6b35633674b65675643da02304fc12d9f83518bc5d63cd5532ad3317d3a85ae115c7465be99cc54571b56510dff5b5b199afcc843c539ab4c00d5d0c5a8482ecc166", 0xf0}], 0x8}, 0xf2fe228fcfcb0382) 07:17:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffeef, 0x0, &(0x7f0000000140)=[@dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x2, 0xc}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe8a}}}, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) syz_open_dev$char_usb(0xc, 0xb4, 0xbe31) [ 1750.143832] binder: 1884:1885 unknown command 1078616960 [ 1750.154709] binder: 1884:1885 ioctl c0306201 200002c0 returned -22 [ 1750.201678] binder: 1890:1893 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1750.212180] binder: 1890:1893 got reply transaction with no transaction stack [ 1750.219879] binder: 1890:1893 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.230968] binder: 1890:1899 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1750.238572] binder: 1890:1899 got reply transaction with no transaction stack 07:17:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000200788e49f16750000008001b0000000000a87cd9d2e7bcd31bde265d36acdbb972154cb8e75deeaa828a75e1d5d0ca9dc9c4f2cf6d61fe319526d98cf8244717b15b43e74796c8a50aca71b494b3528eeafb3f7fe03a603f829b645bc7f767de717a049dd15238ef0dbe0847ec0147db713801a911d4e70c3226b4575ab0c3d5725c84624b2ce38d8d5d4ac80d592c5a"], 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, 0xffffffffffffffff, 0x100ac0d0) 07:17:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0xa7, @multicast1, 0x4e22, 0x0, 'ovf\x00', 0x20, 0x8, 0x35}, {@multicast1, 0x4e23, 0x3, 0xfffffffe, 0xd9, 0x8}}, 0x44) [ 1750.246393] binder: 1890:1899 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.323002] binder: 1902:1904 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1750.324357] binder: 1903:1905 got reply transaction with no transaction stack [ 1750.324365] binder: 1903:1905 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.326297] binder: 1903:1905 got reply transaction with no transaction stack [ 1750.326305] binder: 1903:1905 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.334088] binder: 1883:1907 got transaction with invalid parent offset or type 07:17:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @dev, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3950118, r3}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1750.334130] binder: 1883:1907 transaction failed 29201/-22, size 80-24 line 3454 [ 1750.334895] binder: undelivered TRANSACTION_ERROR: 29201 [ 1750.396531] binder: 1902:1904 got reply transaction with no transaction stack [ 1750.404742] binder: 1902:1904 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.455337] binder: 1911:1914 got transaction with invalid handle, 1 [ 1750.461958] binder: 1911:1914 transaction failed 29201/-22, size 72-24 line 3411 [ 1750.471728] binder: undelivered TRANSACTION_ERROR: 29201 [ 1750.482708] binder: 1911:1920 got transaction with invalid handle, 1 [ 1750.489265] binder: 1911:1920 transaction failed 29201/-22, size 72-24 line 3411 [ 1750.497038] binder: undelivered TRANSACTION_ERROR: 29201 07:17:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) get_robust_list(r0, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000140)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4f6d6a44007cba70) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @multicast1}, {0x6}, 0x4a, {0x2, 0x4e22, @remote}, 'ifb0\x00'}) ptrace$cont(0x9, r0, 0x0, 0x0) 07:17:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x2}, @register_looper, @request_death, @enter_looper], 0xd2, 0x0, &(0x7f0000000300)="d8c22dbe72908296f7ed992cd82a2bde1cd703ed016c886a61fab09f165f19a784bcd60904958b59400ad9f50c6ea9604fd6ed884d28cb7b6b3fc713b479198b0c96928d37b592484df43bf830735fbb0284c777b6b99db350157fc2ab5779e01a9bef51df0c555c227f187b156d664577da45924f11f76f1217c46df37ae02fd3237ae815e49175896dbe992c47837a493b7b96624989da7f8fde56fe7ebcf3d440f1714dc41cb6a653f85025b27242d71b09f8e62898fe21a6c6d4d6bd63091367c6b743c44e9394fcddcb4bcfe2640d81"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) 07:17:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000000c0)={0x3, 0x7f, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 07:17:59 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000000)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) [ 1750.578238] binder: 1924:1928 got reply transaction with no transaction stack [ 1750.606489] binder: 1924:1928 transaction failed 29201/-71, size 0-0 line 3046 [ 1750.637489] binder: 1937:1938 got transaction with invalid parent offset or type [ 1750.646097] binder: 1937:1938 transaction failed 29201/-22, size 80-24 line 3454 [ 1750.655792] binder: undelivered TRANSACTION_ERROR: 29201 07:18:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9e"], 0x0, 0x109}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:18:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r3, &(0x7f0000000240)=""/105, 0x69) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r4, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000340)) 07:18:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="b64e5462db7c7c9a53a0a6a5daad53e7a8881b46c6a890866c74d155c36c0b1111fa36e3fc7a84a537d6d23272b45b1f078fc94df1eb6b2830591baa525d1776e199d525f582149328aa010ad386f822e5143be2b380aee5c9965ade5741ac3ebb478f248c588e014e29af72bb7d72b01d720e1de5797e6c7d4a8560c47ae97d867884eedf490470e233aa15f82abdb3ae06be3289dea54480ef7e0e5045e854c5134a66587259f9965e39aa1f294f0308a279880952c055467d51a4891758c7c9fb516a7ea29e466c", @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82e"], 0x0, 0x10b}, 0x20) tkill(r1, 0x3b) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace(0x4207, r3) tgkill(r3, r1, 0x9) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 07:18:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@dead_binder_done, @enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/106, 0x6a, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x1101}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @request_death], 0x8e, 0x0, &(0x7f0000000300)="5c6f180df73e42c0e92f340da9744b0b27ab3562f5eed3cfa11b76e9bf2f0e17563aa18206580e359d713b365238d82173e9175cd53126de35ff514833613fbe7ea08804fc3fc4f85e5a7cb87c82a0e16b785f1ab6309d78c46387e50aff5884373907c4a16de395e44cf09c09185815a7b3d02bc323809baf4519d14e8067d7aa28fe1a19a0751bd27d8519a99b"}) 07:18:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0xfb) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0xfffffffffffffeff, 0x5, 0xe464}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4e54c988c6d6976a}, 0x4000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1753.192180] binder: 1950:1955 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1753.201436] binder: 1950:1955 got reply transaction with no transaction stack [ 1753.211186] binder: 1950:1955 transaction failed 29201/-71, size 0-0 line 3046 [ 1753.214851] audit_printk_skb: 45 callbacks suppressed [ 1753.214860] audit: type=1400 audit(1571728681.873:981): avc: denied { set_context_mgr } for pid=1941 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1753.227304] audit: type=1400 audit(1571728681.873:982): avc: denied { call } for pid=1941 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1753.227733] audit: type=1400 audit(1571728681.883:983): avc: denied { transfer } for pid=1941 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1753.227775] binder: 1941:1957 got transaction with invalid parent offset or type [ 1753.227819] binder: 1941:1957 transaction failed 29201/-22, size 80-24 line 3454 [ 1753.253968] binder: 1950:1958 got transaction to invalid handle [ 1753.253978] binder: 1950:1958 transaction failed 29201/-22, size 88-24 line 3138 07:18:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1753.306148] audit: type=1400 audit(1571728681.963:984): avc: denied { create } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1753.311208] audit: type=1400 audit(1571728681.963:985): avc: denied { write } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1753.335812] audit: type=1400 audit(1571728681.993:986): avc: denied { read } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:18:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000f80)=@updsa={0x1314, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in6=@mcast1, 0x4e23, 0x0, 0x4e24, 0x6, 0x2, 0x180, 0xa0, 0xb1, r2, r4}, {@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d2}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, {0xffffffffffff0b40, 0xa0b, 0x80000000, 0x3, 0x2, 0xffffffffffffff81, 0x0, 0x5}, {0x98, 0x9, 0x1ff, 0x8001}, {0x2, 0xffffffff}, 0x70bd28, 0x3505, 0xa, 0x7, 0x1, 0x30}, [@user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@remote, 0x0, 0x2}}, @replay_thresh={0x8}, @tmpl={0x184, 0x5, [{{@in=@rand_addr=0x83b, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x3506, 0x2, 0x1, 0xa8, 0xbb93, 0x1, 0x8001}, {{@in=@local, 0x4d4, 0xff}, 0x3d67d3d5b2e47dd, @in6=@mcast2, 0x0, 0x0, 0x2, 0x3, 0x6, 0x1, 0x2}, {{@in6=@remote, 0x4d3, 0x50}, 0x8, @in=@broadcast, 0x3504, 0x1, 0x2, 0x3, 0x7, 0x70a3fc3f, 0x2}, {{@in=@multicast1, 0x4d4, 0x33}, 0xa, @in6=@empty, 0x3500, 0x0, 0x2, 0x7f, 0x20, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3505, 0x1, 0x1, 0x3f, 0x8b, 0xa972, 0xd509}, {{@in6=@mcast2, 0x4d4, 0x33}, 0x0, @in=@rand_addr=0xffff7fff, 0x3501, 0x4, 0x7, 0x4, 0x3, 0x0, 0x2}]}, @lifetime_val={0x24, 0x9, {0x1, 0xfffffffffffffffb, 0x9, 0x7}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@loopback}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x4}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x0, 0x1000, "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"}}]}, 0x1314}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r5 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840000000000000205ed6ee2d5bc2ad66f800"/76], 0x1, 0x0, &(0x7f0000000f40)='n'}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x1ff, 0x10001, 0x6a}, 0x10) 07:18:02 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x400, 0x1ff, 0x4, 0x800, 0xa, 0x6, 0x6, 0x80, 0x3, 0x46}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a627700000000000000008000000000000000000000008561646600000000000000000000000000000000000000000000000000000000538530813ebef43200a5788278af58f6a44ca783e7f5f003b96745bd2b0787c19f56b3b0d8ea03015bc2df1f6d0b3ce1dc938d2acb075ef8be7fa63d69f83072ff37c8a7eab1e60fbf030e8ce8b6c4d913e60321d8d160540a93ffb32ac33d9c709b3691f119d5dd418fce8decae6eb3c90e5263954e52d4310469d9806ab03e1a5fc92412d49b90b40917b13b7ed5c4c91b5ed46168"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000041800000000000000300000000000000048e38a73aea38e283f917661e88530b4600d425239c1fc7c5a82db323021c0fd35ed85469592140c2834d7dbd3cd9e95a21ae1e221370f8065a51aceb30aba005c7c06236fc17e28"]], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r7, 0x0) setresuid(r4, r5, r7) [ 1753.365993] audit: type=1400 audit(1571728682.023:987): avc: denied { create } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1753.366478] audit: type=1400 audit(1571728682.023:988): avc: denied { write } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 07:18:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1753.375296] audit: type=1400 audit(1571728682.033:989): avc: denied { read } for pid=1943 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1753.376292] binder: undelivered TRANSACTION_ERROR: 29201 [ 1753.377469] binder: BINDER_SET_CONTEXT_MGR already set [ 1753.377476] binder: 1941:1960 ioctl 40046207 0 returned -16 07:18:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xd298) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') write$input_event(r2, &(0x7f0000000040)={{}, 0x0, 0x1f, 0x1}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101000, 0x0) 07:18:02 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @random="788e49f16750"}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x1, 0x0, "4e09c81f7d7bda3bdc03d4d3e4d2211632578f", 0x5, 0x80000000}) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, &(0x7f0000000f40)='n'}) [ 1753.469927] audit: type=1400 audit(1571728682.133:990): avc: denied { set_context_mgr } for pid=1968 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1753.472089] binder: 1968:1970 got transaction with invalid parent offset or type [ 1753.472136] binder: 1968:1970 transaction failed 29201/-22, size 80-24 line 3454 [ 1753.472864] binder: undelivered TRANSACTION_ERROR: 29201 [ 1753.564459] binder: 1973:1974 got transaction with invalid offset (288230376151711744, min 0 max 80) or object. [ 1753.564485] binder: 1973:1974 transaction failed 29201/-22, size 80-24 line 3379 [ 1753.569091] binder: undelivered TRANSACTION_ERROR: 29201 [ 1753.573952] binder: 1973:1975 got transaction with invalid offset (288230376151711744, min 0 max 80) or object. [ 1753.573975] binder: 1973:1975 transaction failed 29201/-22, size 80-24 line 3379 [ 1753.576967] binder: undelivered TRANSACTION_ERROR: 29201 [ 1753.665785] ------------[ cut here ]------------ [ 1753.665789] kernel BUG at drivers/android/binder_alloc.c:1108! [ 1753.665796] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1753.665801] Modules linked in: [ 1753.665810] CPU: 0 PID: 1986 Comm: syz-executor.0 Not tainted 4.9.194+ #0 [ 1753.665816] task: 00000000504a3447 task.stack: 0000000084e79234 [ 1753.665835] RIP: 0010:[] [<0000000074c40767>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 1753.665841] RSP: 0018:ffff8801c7adf4a8 EFLAGS: 00010216 [ 1753.665847] RAX: 0000000000040000 RBX: 0000000020ffc000 RCX: ffffc90000947000 [ 1753.665852] RDX: 0000000000019725 RSI: ffffffff8223a8fb RDI: ffff8801cebd25d8 [ 1753.665857] RBP: ffff8801c7adf528 R08: ffff8801c7adf5a8 R09: 0000000000000008 [ 1753.665863] R10: ffffed0038f5bf11 R11: ffff8801c7adf88f R12: 0000000000000060 [ 1753.665868] R13: 0000000000000140 R14: 0000000000000008 R15: ffff8801c7adf5a8 [ 1753.665876] FS: 00007f08f3b08700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 1753.665881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1753.665887] CR2: 0000001b2df23000 CR3: 00000001c8196000 CR4: 00000000001606b0 [ 1753.665895] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1753.665900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1753.665902] Stack: [ 1753.665915] ffff8801c7adf560 0000000000000246 ffff8801c69117c0 ffff8801c7adf4d0 [ 1753.665926] ffff8801a2d8f030 ffff8801cebd2c58 00ff8801c7adf870 ffff8801cebd2c00 [ 1753.665936] ffffffff814fdcb6 ffff8801d99e1d00 0000000000000140 ffff8801c7adf5a8 [ 1753.665938] Call Trace: [ 1753.665949] [<00000000293d2b53>] ? memcpy+0x46/0x50 [ 1753.665959] [<00000000428747f3>] binder_alloc_copy_from_buffer+0x37/0x42 [ 1753.665970] [<0000000038811c8f>] binder_validate_ptr+0xc5/0x1b0 [ 1753.665980] [<00000000590231c1>] ? binder_get_object+0x1b0/0x1b0 [ 1753.665988] [<00000000428747f3>] ? binder_alloc_copy_from_buffer+0x37/0x42 [ 1753.665997] [<00000000da99701f>] ? binder_get_object+0x12f/0x1b0 [ 1753.666005] [<0000000037b12269>] binder_transaction+0x20a4/0x5890 [ 1753.666013] [<00000000b7d1bf4c>] ? unwind_get_return_address+0xec/0x180 [ 1753.666023] [<000000004f20d044>] ? binder_inc_ref_for_node+0xba0/0xba0 [ 1753.666029] [<000000006a07ae33>] ? kasan_kmalloc.part.0+0x62/0xf0 [ 1753.666038] [<00000000215b0254>] ? __save_stack_trace+0x7a/0xf0 [ 1753.666047] [<000000009d873905>] ? depot_save_stack+0x13c/0x4a0 [ 1753.666056] [<0000000022f1fce0>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1753.666064] [<000000001a94e348>] ? __might_fault+0x114/0x1d0 [ 1753.666071] [<00000000d96e7505>] binder_thread_write+0x583/0x20e0 [ 1753.666078] [<000000003aaf74f7>] ? trace_hardirqs_on+0x10/0x10 [ 1753.666086] [<000000008cc60483>] ? binder_transaction+0x5890/0x5890 [ 1753.666093] [<000000001a94e348>] ? __might_fault+0x114/0x1d0 [ 1753.666100] [<00000000e965cba5>] binder_ioctl+0xecd/0x1720 [ 1753.666106] [<0000000070ae9bbb>] ? binder_poll+0x240/0x240 [ 1753.666113] [<000000000d924f47>] ? __lock_acquire+0x5e0/0x4390 [ 1753.666121] [<00000000f61a7cef>] ? __might_sleep+0x95/0x1a0 [ 1753.666128] [<0000000070ae9bbb>] ? binder_poll+0x240/0x240 [ 1753.666136] [<00000000afbf3bb4>] do_vfs_ioctl+0xb87/0x11d0 [ 1753.666144] [<00000000f08ec04b>] ? selinux_file_ioctl+0x103/0x550 [ 1753.666152] [<000000006850abbb>] ? ioctl_preallocate+0x210/0x210 [ 1753.666161] [<00000000cd6ac34a>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 1753.666168] [<00000000a011c79b>] ? __fget+0x208/0x370 [ 1753.666175] [<0000000002f0508c>] ? __fget+0x22f/0x370 [ 1753.666182] [<00000000af65e6b3>] ? __fget+0x47/0x370 [ 1753.666191] [<00000000785dfdf5>] ? security_file_ioctl+0x8f/0xc0 [ 1753.666198] [<000000009137da0a>] SyS_ioctl+0x8f/0xc0 [ 1753.666206] [<0000000064ca8e0e>] ? do_vfs_ioctl+0x11d0/0x11d0 [ 1753.666214] [<000000006e0a53d4>] do_syscall_64+0x1ad/0x5c0 [ 1753.666224] [<00000000c4468f3a>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1753.666358] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7e 0e ff 4d 39 e6 76 07 e8 05 7e 0e ff <0f> 0b e8 fe 7d 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 1753.666366] RIP [<0000000074c40767>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 1753.666368] RSP [ 1753.666460] ---[ end trace 0309d4f4f20dd78c ]--- [ 1753.666465] Kernel panic - not syncing: Fatal exception [ 1753.667041] Kernel Offset: disabled [ 1754.140201] Rebooting in 86400 seconds..